repo: Dev v1.33.6 (envoyproxy#40318)

Signed-off-by: Ryan Northey <[email protected]>

Author: phlax

VERSION.txt

@@ -1 +1 @@
-1.33.5
+1.33.6-dev

changelogs/1.33.5.yaml

@@ -0,0 +1,17 @@
+date: July 18, 2025
+
+bug_fixes:
+- area: tls
+  change: |
+    Fixed an issue with incorrectly cached connection properties on TLS connections.
+    If TLS connection data was queried before it was available, an empty value was being incorrectly cached, preventing later calls from
+    getting the correct value. This could be triggered with a ``tcp_proxy`` access log configured to emit a log upon connection
+    establishment if the log contains fields of the the TLS peer certificate. Then a later use of the data, such as the network RBAC
+    filter validating a peer certificate SAN, may incorrectly fail due to the empty cached value.
+- area: release
+  change: |
+    Container (Ubuntu/distroless) updates, and fixed permissions for distroless config directory.
+- area: dynatrace
+  change: |
+    Fixed a division by zero bug in the Dynatrace sampling controller that occurred when ``total_wanted`` was less than
+    ``top_k_size``. The calculation was refactored to avoid the intermediate division that could result in zero.

changelogs/current.yaml

@@ -1,17 +1,17 @@
-date: July 18, 2025
+date: Pending
+
+behavior_changes:
+# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*
+
+minor_behavior_changes:
+# *Changes that may cause incompatibilities for some users, but should not for most*
 
 bug_fixes:
-- area: tls
-  change: |
-    Fixed an issue with incorrectly cached connection properties on TLS connections.
-    If TLS connection data was queried before it was available, an empty value was being incorrectly cached, preventing later calls from
-    getting the correct value. This could be triggered with a ``tcp_proxy`` access log configured to emit a log upon connection
-    establishment if the log contains fields of the the TLS peer certificate. Then a later use of the data, such as the network RBAC
-    filter validating a peer certificate SAN, may incorrectly fail due to the empty cached value.
-- area: release
-  change: |
-    Container (Ubuntu/distroless) updates, and fixed permissions for distroless config directory.
-- area: dynatrace
-  change: |
-    Fixed a division by zero bug in the Dynatrace sampling controller that occurred when ``total_wanted`` was less than
-    ``top_k_size``. The calculation was refactored to avoid the intermediate division that could result in zero.
+# *Changes expected to improve the state of the world and are unlikely to have negative effects*
+
+removed_config_or_runtime:
+# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
+
+new_features:
+
+deprecated: