* fix: return err if direct response size exceeds limit (#5710)

* fix: return err if direct response size exceeds limit

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* lint

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* add another check

Signed-off-by: Arko Dasgupta <arko@tetrate.io>

---------

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
(cherry picked from commit 3ebf245)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix:  httproute precedence by considering header/query match type (#5740)

*  fix precedence to use number of exact matches

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>
(cherry picked from commit b295b09)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: SecurityPolicy reference grant (#5792)

* fix: SecurityPolicy reference grant

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* add: release note

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* update: func name

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* revert func name

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* update: use processBackendRef to handle route backends

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* fix: use not pointer type for extAuth backendRef

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* Add: testcase for ExtAuth

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

* fix: add jwt backendref to backendSecurityPolicyIndexFunc

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

---------

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>
(cherry picked from commit ef50718)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: add validation for header values (#5933)

Signed-off-by: Gavin Lam <gavin.oss@tutamail.com>
(cherry picked from commit 5e7df65)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: Fixed typo in error message. (#5945)

Signed-off-by: Mathias Westby Skoglund <mail@mathiaswskoglund.com>
Co-authored-by: Mathias Westby Skoglund <mail@mathiaswskoglund.com>
(cherry picked from commit 2bbbdf8)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix gen

Signed-off-by: Guy Daich <guy.daich@sap.com>

* merge fixes

Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: process remaining gatewayClasses after encountering an err (#5953)

fix: process all gatewayClasses after encountering an err

* instead of returning from Reconcile after encountering an err
which processing a `GatewayClass`, `continue` instead
to process all GatewayClasses

Fixes: #5618

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
(cherry picked from commit 64845fe)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* fix: do not add tls inspector filter to quic listener (#5671)

* fix: enable http3 but panic

Signed-off-by: bitliu <bitliu@tencent.com>
(cherry picked from commit 46e053b)
Signed-off-by: Guy Daich <guy.daich@sap.com>

* notes

Signed-off-by: Guy Daich <guy.daich@sap.com>

---------

Signed-off-by: Arko Dasgupta <arko@tetrate.io>
Signed-off-by: Guy Daich <guy.daich@sap.com>
Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>
Signed-off-by: Gavin Lam <gavin.oss@tutamail.com>
Signed-off-by: Mathias Westby Skoglund <mail@mathiaswskoglund.com>
Signed-off-by: bitliu <bitliu@tencent.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: Kota Kimura <86363983+kkk777-7@users.noreply.github.com>
Co-authored-by: Gavin Lam <gavin.oss@tutamail.com>
Co-authored-by: Mathias Westby Skoglund <71329699+mathias-ws@users.noreply.github.com>
Co-authored-by: Mathias Westby Skoglund <mail@mathiaswskoglund.com>
Co-authored-by: Xunzhuo <bitliu@tencent.com>

* pin envoy and ratelimit

Signed-off-by: Guy Daich <guy.daich@sap.com>

* notes

Signed-off-by: Guy Daich <guy.daich@sap.com>

* notes

Signed-off-by: Guy Daich <guy.daich@sap.com>

---------

Signed-off-by: Guy Daich <guy.daich@sap.com>

[release/v1.3] release v1.3.3 notes (#5969)

release v1.3.3 notes


(cherry picked from commit dc2b9ca)

Signed-off-by: Guy Daich <guy.daich@sap.com>

build(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 (#5773)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.4.0 to 5.4.2.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@0565863...ad3126e)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...



(cherry picked from commit c3a8751)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Guy Daich <guy.daich@sap.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>