v8.0.0

What's Changed

• Edition and licensing. Plus ships as a bundle (Plus, plus the Xds and GeoIp satellites) under the PolyForm Noncommercial license. Response cache, active health, xDS, and GeoIP are Plus-gated. The MIT CLI zip does not include those satellites.
• Kubernetes and containers. Three container images: the proxy, the Gateway controller, and Fleet Manager. Helm charts are 1.0.0 (app 8.0.0), published as OCI charts and as .tgz files on this release. The glibc image includes Lua and Wasmtime. The image does not include HTTP/3.
• Gateway API and Ingress. The controller watches GatewayClass, HTTP and HTTPS Gateways (TLS Terminate), and HTTPRoute, and installs the standard-channel CRD bundle v1.7.0. L4 and gRPC route kinds ship in that bundle and are not watched. Ingress uses titanium.io/ annotations.
• Fleet Manager. SQLite fleets, staged rollouts, and last-known-good, with its own Helm chart and image.
• Scripting. Lua and WASM, reported by titanium scripting-deps. Natives ship in the RID zips and the glibc image. They are not NuGet packages. win-arm64 is unsupported.
• Plus operations. OIDC for the dashboard and route policy, fleet Redis rate limits, managed versus advisory mode, and WAF.
• Data plane. HTTP/3 WebSocket bridges, compression including zstd, GeoIP, DNS SRV, zone-aware load balancing, TCP TLS, UDP, OTLP, and the documented hot-restart limits.
• Packaging. A release cut requires the nightly readiness set, an image scan, and a hard-fail scripting smoke so a zip cannot ship without its natives.
• Migration. See the website guide and docs/migration-7-to-8.md. The Plus ABI is 8.0.0. Managed mode is separate from the Gateway controller.

Full Changelog: v7.0.27...v8.0.0