v1.14.0-rc.4

What's Changed

• [qfix] Use grpcutils.UnwrapCode in setid by @Bolodya1997 in #985
• [qfix] Add timeout for discoverNetworkServiceEndpoint by @Bolodya1997 in #986
• [qfix] Use main branch for update by @Bolodya1997 in #987
• Update from update/networkservicemesh/api by @nsmbot in #990
• Update from update/networkservicemesh/api by @nsmbot in #992
• fix: do not create release base on default branch by @denis-tingaikin in #991
• Fix unstable tests in onidle package by @d-uzlov in #989
• [sdk#740] Rework sandbox by @Bolodya1997 in #811
• [sdk#994] Heal deadline by @Bolodya1997 in #995
• [sdk#993] Fix TestMock_AfterFunc by @Bolodya1997 in #1000
• fix: use max of ctx.deadline and requestDuration for healing by @glazychev-art in #1006
• Update from update/networkservicemesh/api by @nsmbot in #1011
• fix: Add possible for long-living grpc connections to update expired certificates by @denis-tingaikin in #1005
• fix: registry/refresh clients doesn't refresh NSEs registration in case of floating interdomain by @denis-tingaikin in #1004
• Added fallthrough check in matching by @Mixaster995 in #1010
• [sdk#999] Make sandbox entries restartable by @Bolodya1997 in #1002
• [deployments-k8s#2003] Add discover close for expired NSE by @Bolodya1997 in #1013
• Set default kernel interface name by @glazychev-art in #1014
• fix: NSE registrations could have internal IPs in floating registry by @denis-tingaikin in #1016
• [sdk#809] Refresh should not happen after failed request by @Bolodya1997 in #1017
• Limit kernel interface name by @glazychev-art in #1022
• Update from update/networkservicemesh/api by @nsmbot in #1023
• qfix: Stabilize SwapIPNSERegistry tests by @denis-tingaikin in #1019
• [qfix] Fix kernel client by @Bolodya1997 in #1024
• Add WithInterfaceName option to kernelMechanismServer by @glazychev-art in #1025
• qfix: DNSNSEResolve server should correctly translate NSE for floating side and for querying side by @denis-tingaikin in #1027
• [sdk#1028] Fix Timeout, Expire to handle failed Close, Unregister by @Bolodya1997 in #1030
• [qfix] Fix panic on metadata chain elements double Close by @Bolodya1997 in #1036
• [qfix] Increase default dial timeout to 1 second by @Bolodya1997 in #1037
• [qfix] Fix metadata cleanup by @Bolodya1997 in #1038
• Don't directly update sdk-vpp by @edwarnicke in #1049
• Formatting change for NSMBot PR message by @Mixaster995 in #1041
• [deployments-k8s#2412] Fix DNS by @Bolodya1997 in #1054
• qfix: Changed sha retrieving by @Mixaster995 in #1058
• [sdk#1039] Move counter chain element to networkservice/utils by @Bolodya1997 in #1056
• Remove debug.Stack() from logger by @glazychev-art in #1053
• [qfix] Fix Test_ConnectToDeadNSEUsecase by @Bolodya1997 in #1062
• [deployments-k8s#2393] Rework sandbox.DefaultDialOptions to sandbox.DialOptions with options by @Bolodya1997 in #1059
• Quickfix - fixed merge method by @Mixaster995 in #1063
• Update from update/networkservicemesh/api by @nsmbot in #1061
• [sdk#1039] Reorder client chain elements by @Bolodya1997 in #1040
• qfix: Fix dial options in client heal test by @glazychev-art in #1064
• [sdk-vpp#314] Support empty chains by @Bolodya1997 in #1044
• [qfix] Fix client chain order by @Bolodya1997 in #1065
• [sdk#1042] Fix monitor blocking sending events on non-reading client by @Bolodya1997 in #1066
• [sdk#1026] Add closectx by @Bolodya1997 in #1035
• [sdk-vpp#314] Add switch-case chain elements by @Bolodya1997 in #1046
• refactor: Rework OPA policies with go 'embed' by @denis-tingaikin in #1018
• fix: Actualise authorize server with latest main branch changes by @denis-tingaikin in #1071
• [deployments-k8s#2689] Use DNS cache plugin by @Bolodya1997 in #1070
• [qfix] CVE-2020-26160 by @edwarnicke in #1073
• Introducing the begin chain element by @edwarnicke in #1072
• Update from update/networkservicemesh/api by @nsmbot in #1075
• [sdk-vpp#314] Add endpoint.Combine by @Bolodya1997 in #1077
• [qfix] Add refresh retries on failure by @Bolodya1997 in #1081
• [qfix] Add WithEndpointChange heal option by @Bolodya1997 in #1082
• [deployments-k8s#2393] Rework connect to per-request clients by @Bolodya1997 in #1069
• remove cmd-nse-icmp-responder as dependent repo by @pperiyasamy in #1086
• [qfix] Fix goleak checks in connect tests by @Bolodya1997 in #1087
• [vlan multiplexing] add vlan tag for vlan supported kernel mechanism by @pperiyasamy in #1088
• Manually update used grpcfd version by @Bolodya1997 in #1090
• Make vxlan port configurable by @zolug in #1091
• [qfix] Manually cleanup old mechanism on Close in mechanismtranslation by @Bolodya1997 in #1100
• [qfix] Fix resource leak in begin by @edwarnicke in #1104
• Rework client, connect, to simplify and prepare for simpler healing. by @edwarnicke in #1083
• Readme for logs by @Mixaster995 in #1102
• [sdk#1111] Fix sendfd issue on URL change by @Bolodya1997 in #1112
• Upgrade nats in response to https://github.com/networkservicemesh/sdk/security/dependabot/go.sum/github.com%2Fnats-io%2Fnats-server%2Fv2/open by @edwarnicke in #1114
• [vxlan] store generated vni in metadata by @glazychev-art in #1117
• Changes to logs by @Mixaster995 in #1096
• feat: Add "retry" networkservice.Client wrapper for nscs by @denis-tingaikin in #1129
• Fixes for data races in logs by @Mixaster995 in #1125
• Add cmd-admission-webhook-k8s to dependent repos by @edwarnicke in #1133
• feat: Rework discover: Delete time based wait logic by @denis-tingaikin in #1128
• SDK updates according to new API by @NikitaSkrynnik in #1127
• Update from update/networkservicemesh/api by @nsmbot in #1136
• Update from update/networkservicemesh/api by @nsmbot in #1137
• Update from update/networkservicemesh/api by @nsmbot in #1138
• feat: Add support for point-to-multipoint forwarders in NSM by @denis-tingaikin in #1122
• [qfix] Fix storing forwarder name by @glazychev-art in #1139
• Update from update/networkservicemesh/api by @nsmbot in #1142
• Add singlepointipam by @ljkiraly in #1093
• qfix: memory registry should be used directly in nsmgr on discovering forwarders by @denis-tingaikin in #1143
• fix: Rework filtermechanisms from server to client by @denis-tingaikin in #1146
• Update from update/networkservicemesh/api by @nsmbot in #1150
• feat: Update discoverforwarder to latest api changes by @denis-tingaikin in #1151
• [qfix] Delete from clientconn map if dial fails by @glazychev-art in #1155
• Add registration time chain element by @glazychev-art in #1141
• Add healing feature by @glazychev-art in #1113
• Add cmd-admission-webhook-k8s to release workflow by @edwarnicke in #1134
• Fix registry/nsmgr restarting scenarios by @NikitaSkrynnik in #1130
• Fixed broken tests by @Mixaster995 in #1161
• update golang-jwt to v4.1.0 by @NikitaSkrynnik in #1135
• Fix in level setting for log by @Mixaster995 in #1165
• heal: use path from previous connection by @glazychev-art in #1167
• Made group logger creation public by @Mixaster995 in #1171
• Added more logging for vni chain elements by @Mixaster995 in #1174
• Added logs to metadata by @Mixaster995 in #1175
• [qfix] Delete only generated vxlan vni on error by @glazychev-art in #1177
• Fix memoryNSE Find by @glazychev-art in #1176
• TestTimeoutServer_Request is unstable by @NikitaSkrynnik in #1178
• [qfix] Add registration time for refresh by @glazychev-art in #1184
• removed usage of setlogoption chain element by @Mixaster995 in #1186
• Fixed recvfd leaks by @sol-0 in #1173
• qfix: Add support for empty routes with metadata by @denis-tingaikin in #1194
• Add logs to healClient by @glazychev-art in #1195
• Modified refresh client to calculate the shortest token expiry by @sol-0 in #1190
• Add new depending repository (networkservicemesh/cmd-nse-remote-vlan) by @ljkiraly in #1200
• Add cidr chain element by @glazychev-art in #1193
• Added chain element that excludes already used prefixes by @sol-0 in #1197
• Remove forwarder name from discoverforwarder metadata by @glazychev-art in #1204
• fixed updates of excluded prefixes by @Mixaster995 in #1180
• Added retry 'registry' chain element by @sol-0 in #1202
• [qfix] Use cloned nse in retry registry by @glazychev-art in #1207
• Updated golangci-lint version, fixed linter errors by @sol-0 in #1208
• Add opentelemetry support by @NikitaSkrynnik in #1205
• Open Telemetry minor fix by @NikitaSkrynnik in #1212
• Update from update/networkservicemesh/api by @nsmbot in #1215
• Add policyroute chain element by @glazychev-art in #1216
• Initial rework pkg/registry to use begin pattern by @denis-tingaikin in #1213
• qfix: sendfd registry cases are not working by @denis-tingaikin in #1217
• Refactor: nsmgr WithrRgistry option has useless registry dial options by @denis-tingaikin in #1218
• qfix: Localbypass is not working properly in integration-tests scenarious by @denis-tingaikin in #1219
• fix: Issue when register endpoints with same name by @denis-tingaikin in #1221
• Add nse-remote-vlan to the repo pipeline for release #1222 by @ljkiraly in #1223
• Change nse URL in localbypass if nse was restarted by @glazychev-art in #1225
• fix: remove leaking of client connections on find queries by @denis-tingaikin in #1226
• bump: update grcpfd to latest version by @denis-tingaikin in #1227
• fix: stop resource leaking in client connections on find queries by @denis-tingaikin in #1228
• Bump github.com/nats-io/nats-streaming-server from 0.22.1 to 0.24.1 by @dependabot in #1229
• Improve merge of ConnectionContext with external requests by @edwarnicke in #1238
• Bump github.com/nats-io/nats-streaming-server from 0.24.1 to 0.24.3 by @dependabot in #1236
• Add forwarder reuse by @NikitaSkrynnik in #1232
• [qfix] Fix registry retry error value by @glazychev-art in #1240
• Fix policy route tests by @LionelJouin in #1242
• Mutually Aware NSEs by @NikitaSkrynnik in #1235
• Update from update/networkservicemesh/api by @nsmbot in #1243
• Delete label matching by @NikitaSkrynnik in #1244
• Add cleanup chain element by @glazychev-art in #1246
• feat: add vl3 chain elements and IPAM service by @denis-tingaikin in #1247
• qfix: subscribe new apps on updates from sdk by @denis-tingaikin in #1250
• fix Test_ForwarderShouldBeSelectedCorrectlyOnNSMgrRestart by @NikitaSkrynnik in #1249
• qfix: Don't spawn logs if context has cancelled gracefully by @denis-tingaikin in #1256
• Update from update/networkservicemesh/api by @nsmbot in #1257
• [qfix] Add default dial timeout for dialNSEClient by @glazychev-art in #1258
• qfix: nsc can't refresh connection in interdomain scenarios by @denis-tingaikin in #1261
• Update spiffe version by @glazychev-art in #1262
• Update configuration to be consistent with spire v1.2.2 by @glazychev-art in #1263
• fix Test_RefreshNSEClient_SetsCorrectExpireTime by @NikitaSkrynnik in #1254
• bump: update go to v1.18.1 by @denis-tingaikin in #1268
• fix: default registry dial timeout could be not enough for some clusters by @denis-tingaikin in #1270
• fix: enable trace logging only if logrus.LogLevel() is TRACE by @denis-tingaikin in #1273
• call livenessCheck periodically by @NikitaSkrynnik in #1271
• [qfix] Fix deadlineCtx in eventloop by @NikitaSkrynnik in #1277
• Make local spire more configurable by @glazychev-art in #1274
• qfix: remove extra registry lookup for the inter-domain network service resolve by @denis-tingaikin in #1279
• Update from update/networkservicemesh/api by @nsmbot in #1280
• Update from update/networkservicemesh/api by @nsmbot in #1282
• Add dnsresolve client chain elements by @glazychev-art in #1275
• Update from update/networkservicemesh/api by @nsmbot in #1284
• Reusable workflows by @NikitaSkrynnik in #1278
• fix: revert "Fix DNS (#1054)" by @denis-tingaikin in #1285
• [qfix] Use cloned request in heal registry by @glazychev-art in #1287
• [qfix] Fix update-gomod and release workflows by @NikitaSkrynnik in #1286
• qfix: restore default resolv.conf file on application restarting/stopping by @denis-tingaikin in #1288
• Update from update/networkservicemesh/api by @nsmbot in #1289
• fix: remove go-routine that restore resolv.conf file to prevent resolv.conf… by @denis-tingaikin in #1291
• Update from update/networkservicemesh/api by @nsmbot in #1294
• feat: add externaldnscontext networkservice chain element by @denis-tingaikin in #1295
• fix: nscs cant properly restore resolv.conf file on packet+kind setup by @denis-tingaikin in #1296
• Add clientinfo chain element by @NikitaSkrynnik in #1293
• Fix for IPv6 cluster by @ljkiraly in #1281
• TestNSMGR_HealRegistry is unstable by @NikitaSkrynnik in #1301
• Revert externaldnscontext networkservice chain element by @denis-tingaikin in #1303
• feat: Add distributed vl3 dns chain element and dns chain elements by @denis-tingaikin in #1306
• Data path healing should be disabled by @ljkiraly in #1304
• [WIP] Vl3 next-hop fix by @glazychev-art in #1309
• Improve release workflow by @NikitaSkrynnik in #1310
• Fix metrics concurrency by @glazychev-art in #1312
• Fix TestHealClient_FindTest by @NikitaSkrynnik in #1305
• Split swapIP into client and server by @glazychev-art in #1314
• Always add initial client DNS config to request by @NikitaSkrynnik in #1316
• Update from update/networkservicemesh/api by @nsmbot in #1319
• Update from update/networkservicemesh/api by @nsmbot in #1323
• fix: apply changes for distributed vl3 dns after manual testing by @denis-tingaikin in #1315
• Remove duplicate dns configs in response connection in DNSContextClient by @NikitaSkrynnik in #1318
• Set os.ModePerm permission for unix sockets by @NikitaSkrynnik in #1320
• Add upstreamrefresh chain element by @glazychev-art in #1324
• Add vl3mtu chain element by @glazychev-art in #1325
• feat: add cluster-info chain elements by @denis-tingaikin in #1326
• Get rid of coredns sidecar for nscs by @NikitaSkrynnik in #1313
• Fix upstream notifier by @glazychev-art in #1327
• Add replaceNSEName chain element by @glazychev-art in #1328
• Add cmd-cluster-info-k8s repo to dependency list by @NikitaSkrynnik in #1329
• dns: fix dnsutils by @glazychev-art in #1330
• Fixes for vl3_dns by @glazychev-art in #1332
• Add authorize Monitor connection elements. by @anastasia-malysheva in #1333
• Remove metadata from dnsContextClient by @glazychev-art in #1340
• Update OPA version with other dependecies by @anastasia-malysheva in #1335
• Add tracing and logs to dns handlers by @anastasia-malysheva in #1343
• Handle empty dns answer by @glazychev-art in #1344
• fanout: allow empty answer by @glazychev-art in #1347
• Increase DNS timeout by @glazychev-art in #1346
• fix linter issues after update golangci-lint version by @denis-tingaikin in #1351
• fix: resolve issue with CVE-2021-44716 by @denis-tingaikin in #1349
• Add cidr groups support by @glazychev-art in #1341
• Add OPA policies for NSM registries by @NikitaSkrynnik in #1334
• Don't trace gRPC "Canceled" errors by @caboteria in #1353
• Add OPA to registry-memory server by @NikitaSkrynnik in #1352
• Revert SupplyRegistryFunc signature in sandbox.Builder by @NikitaSkrynnik in #1354
• Add options with OPA policies to nsmgr-proxy by @NikitaSkrynnik in #1355
• DNS: dnscontext doesn't restore resolv.conf by @NikitaSkrynnik in #1342
• Don't restore eventFactory after Close/Unregister by @glazychev-art in #1356
• heal: fix dataplane healing by @glazychev-art in #1362
• p2pipam: Add the ability to recover IP addresses by @glazychev-art in #1360
• Fix begin on refresh by @glazychev-art in #1365
• qfix: Dont exclude subnets from routes by @denis-tingaikin in #1368
• begin: update context after a successful request by @glazychev-art in #1370
• ipv6 urls in #1369
• Settable global logger by @uablrek in #1348
• Add token to automerge workflow input by @NikitaSkrynnik in #1377
• Update from update/networkservicemesh/api by @nsmbot in #1380
• Fix ipv6 dns entries by @glazychev-art in #1371
• Update from update/networkservicemesh/api by @nsmbot in #1385
• Fix empty map panic in networkservice authorize.Close by @NikitaSkrynnik in #1386
• Transfer registry path via gRPC metadata by @NikitaSkrynnik in #1366
• refactor: Simplify registry/updatepath chain elements by @NikitaSkrynnik in #1387
• Add priorityMechanisms chain element by @glazychev-art in #1384
• Update from update/networkservicemesh/api by @nsmbot in #1388
• [qfix] add json:"token" tag for PathSegment.Token by @NikitaSkrynnik in #1389
• Rename prioritymechanisms to mechanismpriority by @glazychev-art in #1391
• [qfix] Swap begin and updatepath chain elements in all registries by @NikitaSkrynnik in #1390
• Separate UDP and TCP queries for DNS Server by @NikitaSkrynnik in #1381
• begin: update eventFactory context based on the initial one by @glazychev-art in #1375
• dns fanout: wrap IPv6 address by @glazychev-art in #1374
• Allow custom policies by @NikitaSkrynnik in #1394
• fix: Return backward compatibility by @denis-tingaikin in #1399
• Update golang.org/x/net to fix CVE-2022-41717 by @LionelJouin in #1396
• [qfix] Return empty spiffeID if path is empty by @NikitaSkrynnik in #1400
• [qfix] Add return statement in getSpiffeIDFromPath func by @NikitaSkrynnik in #1402
• [qfix] Fix empty path panic in Registry Authorize chain elements by @NikitaSkrynnik in #1403
• Fix timeout/expire chain elements by @glazychev-art in #1404
• Add default expiration option for registry by @glazychev-art in #1406
• feat: add groupipam networkservice server chain element by @denis-tingaikin in #1407
• feat: add code coverage job by @denis-tingaikin in #1408
• qfix: code-cov matrix strategy is incorrect by @denis-tingaikin in #1410
• Fix deprecated Github Action set-output by @wazsone in #1411
• Update from update/networkservicemesh/api by @nsmbot in #1412
• Fix typo by @wazsone in #1415
• [vl3-dns]: send REFRESH_REQUESTED event if dnsServerAddress was changed by @glazychev-art in #1416
• Fix searches dns chain element by @glazychev-art in #1417
• Adding stack to errors by @wazsone in #1413
• Moved to using a generic map instead of generated maps by @denis-tingaikin in #1419
• Moved to using a generic map instead of generated maps by @wazsone in #1421
• Add logs to vl3-ipam server by @glazychev-art in #1422
• Return an error if there is no DNS address. by @glazychev-art in #1424
• Fix quotes by @wazsone in #1427
• Fix vl3 dns by @wazsone in #1429
• Add interdomain funcs to vl3-dns template by @glazychev-art in #1418
• remote-vlan-nse fix; Singlepoint IPAM should not allocate broadcast address by @ljkiraly in #1431
• Bump golang.org/x/net from 0.5.0 to 0.7.0 by @dependabot in #1423
• [dns]: handle PTR type by @glazychev-art in #1436
• Rework request handling in memory handler by @NikitaSkrynnik in #1443
• [qfix] Add more logs to policies checking by @glazychev-art in #1447
• fix: handle discover forwarder corner cases by @denis-tingaikin in #1449
• Opentelemetry fixes by @glazychev-art in #1450
• qfix: Simplify forwarder selection by @denis-tingaikin in #1452
• Fix vl3 dns configurations by @glazychev-art in #1460
• default_svid_ttl config removed by @szvincze in #1458
• Fix InitialRegistrationTime in case of reregistration by @glazychev-art in #1456
• Fix healing after failed refresh by @d-uzlov in #1465
• optl: Histogram to Counter by @LionelJouin in #1467
• Update from update/networkservicemesh/api by @nsmbot in #1474
• Update from update/networkservicemesh/api by @nsmbot in #1477
• qfix: add cluster info k8s to release workflow by @denis-tingaikin in #1432
• Add cmd-csi-driver to dependent repositories by @glazychev-art in #1476
• [qfix] Remove duplicate cmd-cluster-info-k8s repository by @glazychev-art in #1478
• Add cleanup when connection state is RESELECT_REQUESTED (using begin server) by @d-uzlov in #1471
• Close with eventFactory from begin.Server in case of RESELECT_REQUESTED by @glazychev-art in #1480
• fix: nsmgr should keep fowarder while conn is fine by @denis-tingaikin in #1479
• begin: use the eventFactory context to close eventFactory connection by @glazychev-art in #1487
• (continuation) Enable logs from chain elements regardless of EnableTracing by @glazychev-art in #1489
• qfix: stabilze unstable discover forwarder test by @denis-tingaikin in #1488
• [qfix] Enable depguard linter by @NikitaSkrynnik in #1490
• [qfix]: Fix monitorFilter by @glazychev-art in #1498
• Fix release workflow by @NikitaSkrynnik in #1461
• Update from update/networkservicemesh/api by @nsmbot in #1505
• [qfix] vl3mtu: store cloned conn by @glazychev-art in #1511
• feat: add netsvcmonitor chain element by @denis-tingaikin in #1510
• Add prometheus as metric exporter by @LionelJouin in #1509
• Add concise tracing by @glazychev-art in #1513
• fix: do not choose endpoints that doesn't match the network service by @denis-tingaikin in #1516
• fix: Skip similar networkservices in netsvcmonitor element by @NikitaSkrynnik in #1524
• [begin]: event_factory should cancel Close context in case of reselect by @glazychev-art in #1519
• qfix: Use strict name comparison for nse/ns servers by @denis-tingaikin in #1530
• Update from update/networkservicemesh/api by @nsmbot in #1546
• Allow begin to process Unregisters without Registers by @NikitaSkrynnik in #1542
• Extend expireContext in expire chain element with values from request context by @NikitaSkrynnik in #1533
• Broken "cloud.google.com/go/compute/metadata" dependency by @dualBreath in #1555
• Broken "golang.org/x/sys" v0.14.0 dependency by @dualBreath in #1557
• fix: Do not use settings from the previous connection if the connection was reselected by @denis-tingaikin in #1531
• monitor: handle initial state transfer by @glazychev-art in #1483
• Test_TCPDNSServerTimeout is unstable by @dualBreath in #1543
• Task:1537 Test_DNSUsecase is unstable by @dualBreath in #1556
• Fix authorizeClient on failed refresh by @glazychev-art in #1558
• fix: Correctly handle RESELECT_REQUESTED state and clearing point2pointipam by @denis-tingaikin in #1562
• Fix heal after failed refresh by @glazychev-art in #1563
• [qfix] Some minor fixes for NSE Unregister scenario by @NikitaSkrynnik in #1568
• Handle INITIAL_STATE_TRANSFER only if connection state was changed by @glazychev-art in #1570
• [qfix] Use clearer function name in extend package by @NikitaSkrynnik in #1554
• Fix TestRecvfdClosesSingleFile by @NikitaSkrynnik in #1559
• Fix CVE-2023-48795 by @LionelJouin in #1576
• Add interface names into NSM metrics by @NikitaSkrynnik in #1572
• fix goheader issues in the main branch by @denis-tingaikin in #1577
• Add dashboard backend to dependent repositories. by @VitalyGushin in #1578
• qfix: Do not reset IPContext configuration on the reselect by @denis-tingaikin in #1582
• Add retry attempts to refresh by @glazychev-art in #1583
• vl3 chain element that resets IPContext configuration depending on dst and src addresses by @NikitaSkrynnik in #1588
• Disable log coloring by @bszirtes in #1595
• Fix cves by @NikitaSkrynnik in #1596
• Generate random kernel interface names by @NikitaSkrynnik in #1590
• Pass dial timeout as option by @glazychev-art in #1599
• Add a constructor for vl3.IPAM by @NikitaSkrynnik in #1597
• Update from update/networkservicemesh/api by @nsmbot in #1600
• Fix vl3 ipam refresh by @glazychev-art in #1601
• Fix kernel interface name generation by @glazychev-art in #1603
• Move registry expiration handling from updatepath to expire by @glazychev-art in #1606
• Make the kernel generateInterfaceName function public by @glazychev-art in #1607
• Run release workflow only when CI passes on release branches by @NikitaSkrynnik in #1604
• Refactor nanoid package by @denis-tingaikin in #1608
• Remove automerge is completed trigger from Update dependent repositories workflow by @NikitaSkrynnik in #1610
• [qfix] Cleanup release workflow by @NikitaSkrynnik in #1609
• Update from update/networkservicemesh/api by @nsmbot in #1611
• Add dual stack support. by @VitalyGushin in #1584
• Update from update/networkservicemesh/api by @nsmbot in #1614
• Fix fd mem leaks in nsmgr and forwarder by @denis-tingaikin in #1616
• Fix some leaks in opa policies by @NikitaSkrynnik in #1624
• Fix some leaks in authorize chain elements by @NikitaSkrynnik in #1623
• Fix memory leak in metrics chain element by @Ex4amp1e in #1626
• Add peer cleanup on Requests and Closes from begin by @NikitaSkrynnik in #1636
• fix authorize by @NikitaSkrynnik in #1637
• Update grpcfd to latest by @denis-tingaikin in #1640
• Revert authorize changes by @denis-tingaikin in #1645
• Use network service for generating iface name on nse side by @denis-tingaikin in #1644
• fix 'Segmentation violation in nsmgr' by @denis-tingaikin in #1642
• Fix potential leaks of nse/ns streams in case of lost close by @denis-tingaikin in #1641
• Revert "Revert authorize changes (#1645)" by @NikitaSkrynnik in #1646
• Leak fixes by @NikitaSkrynnik in #1643
• Add a timeout for Closes in begin.Server by @NikitaSkrynnik in #1650
• Add sdk/pkg/tools/pprof by @Ex4amp1e in #1654
• Update sdk/pkg/tools/pprofutils by @Ex4amp1e in #1657
• Update from update/networkservicemesh/api by @nsmbot in #1630
• Update from update/networkservicemesh/api by @nsmbot in #1658
• Add an option to expose Prometheus metrics via http/s server by @bszirtes in #1653
• Use a context with exteded timeout on Requests in begin by @NikitaSkrynnik in #1656

New Contributors

• @zolug made their first contribution in #1091
• @NikitaSkrynnik made their first contribution in #1127
• @ljkiraly made their first contribution in #1093
• @sol-0 made their first contribution in #1173
• @dependabot made their first contribution in #1229
• @LionelJouin made their first contribution in #1242
• @anastasia-malysheva made their first contribution in #1333
• @caboteria made their first contribution in #1353
• @uablrek made their first contribution in #1348
• @wazsone made their first contribution in #1411
• @szvincze made their first contribution in #1458
• @dualBreath made their first contribution in #1555
• @VitalyGushin made their first contribution in #1578
• @bszirtes made their first contribution in #1595
• @Ex4amp1e made their first contribution in #1626

Full Changelog: v0.5.0...v1.14.0-rc.4