2.11.19

Changelog

• chore(deps): bump coredns to v1.14.7 #18317 @lukidzi
• chore(deps): bump distroless base images #18121 @bartsmykla
• chore(deps): bump envoy from 1.35.13 to 1.36.10 #18222 @lukidzi
• chore(deps): bump github.com/cilium/ebpf from 0.18.0 to 0.22.0 #18105 @renovate
• chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 #18357 @renovate
• chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 #18310 #18591 @renovate
• chore(deps): security update #18063 #18135 @kumahq
• chore(helm): control plane, hook, ingress and egress containers now drop all Linux capabilities and disallow privilege escalation #18131 @bartsmykla
• feat(labels): compute kuma.io/display-name for all resources (backport of #17162) #18160 @kumahq
• feat(labels): compute kuma.io/origin on global and zone control planes (backport of #17176) (backport of #18279) #18369 @kumahq
• fix(k8s): enforce control-plane-owned labels on read (backport of #18271) #18398 @kumahq
• fix(k8s): scope gateway mapper logger per call #18217 @lukidzi
• fix(labels): make Compute authoritative for zone, env, namespace and service-account (backport of #18410) #18576 @kumahq
• fix(meshmetric): honor includeUnused sidecar flag #18484 @kumahq
• fix(meshtls): apply tls params without inbounds (backport of #18444) #18446 @kumahq
• perf(rules): cut allocations in rule building (backport of #17954) #18045 @kumahq