diff --git a/changelog/3.8.0/3.8.0.md b/changelog/3.8.0/3.8.0.md new file mode 100644 index 000000000000..8e4c8c023085 --- /dev/null +++ b/changelog/3.8.0/3.8.0.md @@ -0,0 +1,517 @@ +## Kong + + +### Performance +#### Performance + +- Fixed an inefficiency issue in the Luajit hashing algorithm + [#13240](https://github.com/Kong/kong/issues/13240) + [KAG-4646](https://konghq.atlassian.net/browse/KAG-4646) +#### Core + +- Removed unnecessary DNS client initialization + [#13479](https://github.com/Kong/kong/issues/13479) + [KAG-5059](https://konghq.atlassian.net/browse/KAG-5059) + +- Improved latency performance when gzipping/gunzipping large data (such as CP/DP config data). + [#13338](https://github.com/Kong/kong/issues/13338) + [KAG-4878](https://konghq.atlassian.net/browse/KAG-4878) + + +### Deprecations +#### Default + +- Debian 10, CentOS 7, and RHEL 7 reached their End of Life (EOL) dates on June 30, 2024. As of version 3.8.0.0 onward, Kong is not building installation packages or Docker images for these operating systems. Kong is no longer providing official support for any Kong version running on these systems. + [#13468](https://github.com/Kong/kong/issues/13468) + [KAG-4847](https://konghq.atlassian.net/browse/KAG-4847) [FTI-6054](https://konghq.atlassian.net/browse/FTI-6054) [KAG-4549](https://konghq.atlassian.net/browse/KAG-4549) [KAG-5122](https://konghq.atlassian.net/browse/KAG-5122) + +### Dependencies +#### Core + +- Bumped lua-resty-acme to 0.15.0 to support username/password auth with redis. + [#12909](https://github.com/Kong/kong/issues/12909) + [KAG-4330](https://konghq.atlassian.net/browse/KAG-4330) + +- Bumped lua-resty-aws to 1.5.3 to fix a bug related to STS regional endpoint. + [#12846](https://github.com/Kong/kong/issues/12846) + [KAG-3424](https://konghq.atlassian.net/browse/KAG-3424) [FTI-5732](https://konghq.atlassian.net/browse/FTI-5732) + +- Bumped lua-resty-events to 0.3.0 + [#13097](https://github.com/Kong/kong/issues/13097) + [KAG-4480](https://konghq.atlassian.net/browse/KAG-4480) [KAG-4586](https://konghq.atlassian.net/browse/KAG-4586) + +- Bumped lua-resty-healthcheck from 3.0.1 to 3.1.0, to reduce active healthcheck timer usage. + [#13038](https://github.com/Kong/kong/issues/13038) + [FTI-5847](https://konghq.atlassian.net/browse/FTI-5847) + +- Bumped lua-resty-lmdb to 1.4.3 (lmdb 0.9.33) + [#12786](https://github.com/Kong/kong/issues/12786) + + +- Bumped lua-resty-openssl to 1.5.1. + [#12665](https://github.com/Kong/kong/issues/12665) + + +- Bumped OpenResty to 1.25.3.2 + [#12327](https://github.com/Kong/kong/issues/12327) + [KAG-3515](https://konghq.atlassian.net/browse/KAG-3515) [KAG-3570](https://konghq.atlassian.net/browse/KAG-3570) [KAG-3571](https://konghq.atlassian.net/browse/KAG-3571) [JIT-2](https://konghq.atlassian.net/browse/JIT-2) + +- Bumped PCRE2 to 10.44 to fix some bugs and tidy-up the release (nothing important) + [#12366](https://github.com/Kong/kong/issues/12366) + [KAG-3571](https://konghq.atlassian.net/browse/KAG-3571) [KAG-3521](https://konghq.atlassian.net/browse/KAG-3521) [KAG-2025](https://konghq.atlassian.net/browse/KAG-2025) + +- Introduced a yieldable JSON library `lua-resty-simdjson`, +which would improve the latency significantly. + [#13421](https://github.com/Kong/kong/issues/13421) + [KAG-3647](https://konghq.atlassian.net/browse/KAG-3647) +#### Default + +- Add Ubuntu 24.04 (Noble Numbat) to build + [#13626](https://github.com/Kong/kong/issues/13626) + [KAG-4672](https://konghq.atlassian.net/browse/KAG-4672) + +- Bumped lua-protobuf 0.5.2 + [#12834](https://github.com/Kong/kong/issues/12834) + + +- Bumped LuaRocks from 3.11.0 to 3.11.1 + [#12662](https://github.com/Kong/kong/issues/12662) + [KAG-3883](https://konghq.atlassian.net/browse/KAG-3883) + +- Bumped `ngx_wasm_module` to `96b4e27e10c63b07ed40ea88a91c22f23981db35` + [#12011](https://github.com/Kong/kong/issues/12011) + + +- Bumped `Wasmtime` version to `23.0.2` + [#12011](https://github.com/Kong/kong/issues/12011) + + +- Made the RPM package relocatable with the default prefix set to `/`. + [#13468](https://github.com/Kong/kong/issues/13468) + [KAG-4847](https://konghq.atlassian.net/browse/KAG-4847) [FTI-6054](https://konghq.atlassian.net/browse/FTI-6054) [KAG-4549](https://konghq.atlassian.net/browse/KAG-4549) [KAG-5122](https://konghq.atlassian.net/browse/KAG-5122) + +### Features +#### Configuration + +- Configure Wasmtime module cache when Wasm is enabled + [#12930](https://github.com/Kong/kong/issues/12930) + [KAG-4372](https://konghq.atlassian.net/browse/KAG-4372) +#### Core + +- **prometheus**: Added `ai_requests_total`, `ai_cost_total` and `ai_tokens_total` metrics in the Prometheus plugin to start counting AI usage. + [#13148](https://github.com/Kong/kong/issues/13148) + + +- **Core**: Added Ada dependency - WHATWG-compliant and fast URL parser. + [#13120](https://github.com/Kong/kong/issues/13120) + [KAG-5106](https://konghq.atlassian.net/browse/KAG-5106) + +- Added the workspace id into the plugin config in the plugins iterator. + [#13602](https://github.com/Kong/kong/issues/13602) + [FTI-6200](https://konghq.atlassian.net/browse/FTI-6200) + +- Added a new configuration `concurrency_limit`(integer, default to 1) for Queue to specify the number of delivery timers. +Note that setting `concurrency_limit` to `-1` means no limit at all, and each HTTP log entry would create an individual timer for sending. + [#13332](https://github.com/Kong/kong/issues/13332) + [FTI-6022](https://konghq.atlassian.net/browse/FTI-6022) + +- Append gateway info to upstream `Via` header like `1.1 kong/3.8.0`, and optionally to +response `Via` header if it is present in the `headers` config of "kong.conf", like `2 kong/3.8.0`, +according to `RFC7230` and `RFC9110`. + [#12733](https://github.com/Kong/kong/issues/12733) + [FTI-5807](https://konghq.atlassian.net/browse/FTI-5807) + +- Starting from this version, a new DNS client library has been implemented and added into Kong, which is disabled by default. The new DNS client library has the following changes - Introduced global caching for DNS records across workers, significantly reducing the query load on DNS servers. - Introduced observable statistics for the new DNS client, and a new Status API `/status/dns` to retrieve them. - Simplified the logic and make it more standardized + [#12305](https://github.com/Kong/kong/issues/12305) + [KAG-3220](https://konghq.atlassian.net/browse/KAG-3220) +#### PDK + +- Added `kong.service.request.clear_query_arg(name)` to PDK. + [#13619](https://github.com/Kong/kong/issues/13619) + [KAG-5238](https://konghq.atlassian.net/browse/KAG-5238) + +- Added `0` to support unlimited body size. When parameter `max_allowed_file_size` is `0`, `get_raw_body` will return the entire body, but the size of this body will still be limited by Nginx's `client_max_body_size`. + [#13431](https://github.com/Kong/kong/issues/13431) + [KAG-4698](https://konghq.atlassian.net/browse/KAG-4698) + +- extend kong.request.get_body and kong.request.get_raw_body to read from buffered file + [#13158](https://github.com/Kong/kong/issues/13158) + + +- Added a new PDK module `kong.telemetry` and function: `kong.telemetry.log` +to generate log entries to be reported via the OpenTelemetry plugin. + [#13329](https://github.com/Kong/kong/issues/13329) + [KAG-4848](https://konghq.atlassian.net/browse/KAG-4848) +#### Plugin + +- **acl:** Added a new config `always_use_authenticated_groups` to support using authenticated groups even when an authenticated consumer already exists. + [#13184](https://github.com/Kong/kong/issues/13184) + [FTI-5945](https://konghq.atlassian.net/browse/FTI-5945) + +- AI plugins: retrieved latency data and pushed it to logs and metrics. + [#13428](https://github.com/Kong/kong/issues/13428) + + +- allow AI plugin to read request from buffered file + [#13158](https://github.com/Kong/kong/issues/13158) + + +- **AI-proxy-plugin**: Add `allow_override` option to allow overriding the upstream model auth parameter or header from the caller's request. + [#13493](https://github.com/Kong/kong/issues/13493) + + +- **AI-proxy-plugin**: Replace the lib and use cycle_aware_deep_copy for the `request_table` object. + [#13566](https://github.com/Kong/kong/issues/13566) + + +- Kong AI Gateway (AI Proxy and associated plugin family) now supports +all AWS Bedrock "Converse API" models. + [#12948](https://github.com/Kong/kong/issues/12948) + + +- Kong AI Gateway (AI Proxy and associated plugin family) now supports +the Google Gemini "chat" (generateContent) interface. + [#12948](https://github.com/Kong/kong/issues/12948) + + +- **ai-proxy**: Allowed mistral provider to use mistral.ai managed service by omitting upstream_url + [#13481](https://github.com/Kong/kong/issues/13481) + + +- **ai-proxy**: Added a new response header X-Kong-LLM-Model that displays the name of the language model used in the AI-Proxy plugin. + [#13472](https://github.com/Kong/kong/issues/13472) + + +- **AI-Prompt-Guard**: add `match_all_roles` option to allow match all roles in addition to `user`. + [#13183](https://github.com/Kong/kong/issues/13183) + + +- "**AWS-Lambda**: Added support for a configurable STS endpoint with the new configuration field `aws_sts_endpoint_url`. + [#13388](https://github.com/Kong/kong/issues/13388) + [KAG-4599](https://konghq.atlassian.net/browse/KAG-4599) + +- **AWS-Lambda**: A new configuration field `empty_arrays_mode` is now added to control whether Kong should send `[]` empty arrays (returned by Lambda function) as `[]` empty arrays or `{}` empty objects in JSON responses.` + [#13084](https://github.com/Kong/kong/issues/13084) + [FTI-5937](https://konghq.atlassian.net/browse/FTI-5937) [KAG-4622](https://konghq.atlassian.net/browse/KAG-4622) [KAG-4615](https://konghq.atlassian.net/browse/KAG-4615) + +- Added support for json_body rename in response-transformer plugin + [#13131](https://github.com/Kong/kong/issues/13131) + [KAG-4664](https://konghq.atlassian.net/browse/KAG-4664) + +- **OpenTelemetry:** Added support for OpenTelemetry formatted logs. + [#13291](https://github.com/Kong/kong/issues/13291) + [KAG-4712](https://konghq.atlassian.net/browse/KAG-4712) + +- Add standard webhooks plugin + [#12757](https://github.com/Kong/kong/issues/12757) + + +- **Request-Transformer**: Fixed an issue where renamed query parameters, url-encoded body parameters, and json body parameters were not handled properly when target name is the same as the source name in the request. + [#13358](https://github.com/Kong/kong/issues/13358) + [KAG-4915](https://konghq.atlassian.net/browse/KAG-4915) +#### Admin API + +- Added support for brackets syntax for map fields configuration via the Admin API + [#13313](https://github.com/Kong/kong/issues/13313) + [KAG-4827](https://konghq.atlassian.net/browse/KAG-4827) + +### Fixes +#### CLI Command + +- Fixed an issue where some debug level error logs were not being displayed by the CLI. + [#13143](https://github.com/Kong/kong/issues/13143) + [FTI-5995](https://konghq.atlassian.net/browse/FTI-5995) +#### Configuration + +- Re-enabled the Lua DNS resolver from proxy-wasm by default. + [#13424](https://github.com/Kong/kong/issues/13424) + [KAG-4671](https://konghq.atlassian.net/browse/KAG-4671) +#### Core + +- Fixed an issue where luarocks-admin was not available in /usr/local/bin. + [#13372](https://github.com/Kong/kong/issues/13372) + [KAG-911](https://konghq.atlassian.net/browse/KAG-911) + +- Fixed an issue where 'read' was not always passed to Postgres read-only database operations. + [#13519](https://github.com/Kong/kong/issues/13519) + [KAG-5196](https://konghq.atlassian.net/browse/KAG-5196) + +- Deprecated shorthand fields don't take precedence over replacement fields when both are specified. + [#13486](https://github.com/Kong/kong/issues/13486) + [KAG-5134](https://konghq.atlassian.net/browse/KAG-5134) + +- Fixed an issue where `lua-nginx-module` context was cleared when `ngx.send_header()` triggered `filter_finalize` [openresty/lua-nginx-module#2323](https://github.com/openresty/lua-nginx-module/pull/2323). + [#13316](https://github.com/Kong/kong/issues/13316) + [FTI-6005](https://konghq.atlassian.net/browse/FTI-6005) + +- Changed the way deprecated shorthand fields are used with new fields. +If the new field contains null it allows for deprecated field to overwrite it if both are present in the request. + [#13589](https://github.com/Kong/kong/issues/13589) + [KAG-5287](https://konghq.atlassian.net/browse/KAG-5287) + +- Fixed an issue where unnecessary uninitialized variable error log is reported when 400 bad requests were received. + [#13201](https://github.com/Kong/kong/issues/13201) + [FTI-6025](https://konghq.atlassian.net/browse/FTI-6025) + +- Fixed an issue where the URI captures are unavailable when the first capture group is absent. + [#13024](https://github.com/Kong/kong/issues/13024) + [KAG-4474](https://konghq.atlassian.net/browse/KAG-4474) + +- Fixed an issue where the priority field can be set in a traditional mode route +When 'router_flavor' is configured as 'expressions'. + [#13142](https://github.com/Kong/kong/issues/13142) + [KAG-4411](https://konghq.atlassian.net/browse/KAG-4411) + +- Fixed an issue where setting `tls_verify` to `false` didn't override the global level `proxy_ssl_verify`. + [#13470](https://github.com/Kong/kong/issues/13470) + [FTI-6095](https://konghq.atlassian.net/browse/FTI-6095) + +- Fixed an issue where the sni cache isn't invalidated when a sni is updated. + [#13165](https://github.com/Kong/kong/issues/13165) + [FTI-6009](https://konghq.atlassian.net/browse/FTI-6009) + +- The kong.logrotate configuration file will no longer be overwritten during upgrade. +When upgrading, set the environment variable `DEBIAN_FRONTEND=noninteractive` on Debian/Ubuntu to avoid any interactive prompts and enable fully automatic upgrades. + [#13348](https://github.com/Kong/kong/issues/13348) + [FTI-6079](https://konghq.atlassian.net/browse/FTI-6079) + +- **Vault**: Fixed an issue where updating a vault entity in a non-default workspace will not take effect. + [#13610](https://github.com/Kong/kong/issues/13610) + [FTI-6152](https://konghq.atlassian.net/browse/FTI-6152) + +- Fixed an issue where the Vault secret cache got refreshed during `resurrect_ttl` time and could not be fetched by other workers. + [#13471](https://github.com/Kong/kong/issues/13471) + [FTI-6137](https://konghq.atlassian.net/browse/FTI-6137) + +- Error logs during Vault secret rotation are now logged at the `notice` level instead of `warn`. + [#13537](https://github.com/Kong/kong/issues/13537) + [FTI-5775](https://konghq.atlassian.net/browse/FTI-5775) + +- fix a bug that the `host_header` attribute of upstream entity can not be set correctly in requests to upstream as Host header when retries to upstream happen. + [#13135](https://github.com/Kong/kong/issues/13135) + [FTI-5987](https://konghq.atlassian.net/browse/FTI-5987) + +- Moved internal Unix sockets to a subdirectory (`sockets`) of the Kong prefix. + [#13409](https://github.com/Kong/kong/issues/13409) + [KAG-4947](https://konghq.atlassian.net/browse/KAG-4947) + +- Changed the behaviour of shorthand fields that are used to describe deprecated fields. If +both fields are sent in the request and their values mismatch - the request will be rejected. + [#13565](https://github.com/Kong/kong/issues/13565) + [KAG-5262](https://konghq.atlassian.net/browse/KAG-5262) + +- Reverted DNS client to original behaviour of ignoring ADDITIONAL SECTION in DNS responses. + [#13278](https://github.com/Kong/kong/issues/13278) + [FTI-6039](https://konghq.atlassian.net/browse/FTI-6039) + +- Shorten names of internal Unix sockets to avoid exceeding the socket name limit. + [#13557](https://github.com/Kong/kong/issues/13557) + [KAG-5136](https://konghq.atlassian.net/browse/KAG-5136) +#### PDK + +- **PDK**: Fixed a bug that log serializer will log `upstream_status` as nil in the requests that contains subrequest + [#12953](https://github.com/Kong/kong/issues/12953) + [FTI-5844](https://konghq.atlassian.net/browse/FTI-5844) + +- Line up the `kong.log.inspect` function to log at `notice` level as documented +in the PDK documentation (used to be `debug`). + [#13642](https://github.com/Kong/kong/issues/13642) + [FTI-6215](https://konghq.atlassian.net/browse/FTI-6215) + +- **Vault**: Reference ending with slash when parsed should not return a key. + [#13504](https://github.com/Kong/kong/issues/13504) + [KAG-5181](https://konghq.atlassian.net/browse/KAG-5181) + +- Fixed an issue that pdk.log.serialize() will throw an error when JSON entity set by serialize_value contains json.null + [#13376](https://github.com/Kong/kong/issues/13376) + [FTI-6096](https://konghq.atlassian.net/browse/FTI-6096) +#### Plugin + +- **AI-proxy-plugin**: Fixed a bug where certain Azure models would return partial tokens/words +when in response-streaming mode. + [#13000](https://github.com/Kong/kong/issues/13000) + [KAG-4596](https://konghq.atlassian.net/browse/KAG-4596) + +- **AI-Transformer-Plugins**: Fixed a bug where cloud identity authentication +was not used in `ai-request-transformer` and `ai-response-transformer` plugins. + [#13487](https://github.com/Kong/kong/issues/13487) + + +- **AI-proxy-plugin**: Fixed a bug where Cohere and Anthropic providers don't read the `model` parameter properly +from the caller's request body. + [#13000](https://github.com/Kong/kong/issues/13000) + [KAG-4596](https://konghq.atlassian.net/browse/KAG-4596) + +- **AI-proxy-plugin**: Fixed a bug where using "OpenAI Function" inference requests would log a +request error, and then hang until timeout. + [#13000](https://github.com/Kong/kong/issues/13000) + [KAG-4596](https://konghq.atlassian.net/browse/KAG-4596) + +- **AI-proxy-plugin**: Fixed a bug where AI Proxy would still allow callers to specify their own model, +ignoring the plugin-configured model name. + [#13000](https://github.com/Kong/kong/issues/13000) + [KAG-4596](https://konghq.atlassian.net/browse/KAG-4596) + +- **AI-proxy-plugin**: Fixed a bug where AI Proxy would not take precedence of the +plugin's configured model tuning options, over those in the user's LLM request. + [#13000](https://github.com/Kong/kong/issues/13000) + [KAG-4596](https://konghq.atlassian.net/browse/KAG-4596) + +- **AI-proxy-plugin**: Fixed a bug where setting OpenAI SDK model parameter "null" caused analytics +to not be written to the logging plugin(s). + [#13000](https://github.com/Kong/kong/issues/13000) + [KAG-4596](https://konghq.atlassian.net/browse/KAG-4596) + +- **ACME**: Fixed an issue of DP reporting that deprecated config fields are used when configuration from CP is pushed + [#13069](https://github.com/Kong/kong/issues/13069) + [KAG-4515](https://konghq.atlassian.net/browse/KAG-4515) + +- **ACME**: Fixed an issue where username and password were not accepted as valid authentication methods. + [#13496](https://github.com/Kong/kong/issues/13496) + [FTI-6143](https://konghq.atlassian.net/browse/FTI-6143) + +- **AI-Proxy**: Fixed issue when response is gzipped even if client doesn't accept. + [#13155](https://github.com/Kong/kong/issues/13155) + + +- "**Prometheus**: Fixed an issue where CP/DP compatibility check was missing for the new configuration field `ai_metrics`. + [#13417](https://github.com/Kong/kong/issues/13417) + [KAG-4934](https://konghq.atlassian.net/browse/KAG-4934) + +- Fixed certain AI plugins cannot be applied per consumer or per service. + [#13209](https://github.com/Kong/kong/issues/13209) + + +- **AI-Prompt-Guard**: Fixed an issue when `allow_all_conversation_history` is set to false, the first user request is selected instead of the last one. + [#13183](https://github.com/Kong/kong/issues/13183) + + +- **AI-Proxy**: Resolved a bug where the object constructor would set data on the class instead of the instance + [#13028](https://github.com/Kong/kong/issues/13028) + + +- Fixed an bug that AI semantic cache can't use request provided models + [#13627](https://github.com/Kong/kong/issues/13627) + + +- **AWS-Lambda**: Fixed an issue that the plugin does not work with multiValueHeaders defined in proxy integration and legacy empty_arrays_mode. + [#13381](https://github.com/Kong/kong/issues/13381) + [FTI-6100](https://konghq.atlassian.net/browse/FTI-6100) + +- **AWS-Lambda**: Fixed an issue that the `version` field is not set in the request payload when `awsgateway_compatible` is enabled. + [#13018](https://github.com/Kong/kong/issues/13018) + [FTI-5949](https://konghq.atlassian.net/browse/FTI-5949) + +- **AWS-Lambda**: Fixed an issue in proxy integration mode that caused internal server error when the `multiValueHeaders` is null. + [#13533](https://github.com/Kong/kong/issues/13533) + [FTI-6168](https://konghq.atlassian.net/browse/FTI-6168) + +- **correlation-id**: Fixed an issue where the plugin would not work if we explicitly set the `generator` to `null`. + [#13439](https://github.com/Kong/kong/issues/13439) + [FTI-6134](https://konghq.atlassian.net/browse/FTI-6134) + +- **CORS**: Fixed an issue where the `Access-Control-Allow-Origin` header was not sent when `conf.origins` has multiple entries but includes `*`. + [#13334](https://github.com/Kong/kong/issues/13334) + [FTI-6062](https://konghq.atlassian.net/browse/FTI-6062) + +- **grpc-gateway**: When there is a JSON decoding error, respond with status 400 and error information in the body instead of status 500. + [#12971](https://github.com/Kong/kong/issues/12971) + + +- **HTTP-Log**: Fix an issue where the plugin doesn't include port information in the HTTP host header when sending requests to the log server. + [#13116](https://github.com/Kong/kong/issues/13116) + + +- **key-auth**: Fixed to retain order of query arguments when hiding the credentials. + [#13619](https://github.com/Kong/kong/issues/13619) + [KAG-5238](https://konghq.atlassian.net/browse/KAG-5238) + +- "**AI Plugins**: Fixed an issue for multi-modal inputs are not properly validated and calculated. + [#13445](https://github.com/Kong/kong/issues/13445) + + +- **OpenTelemetry:** Fixed an issue where migration fails when upgrading from below version 3.3 to 3.7. + [#13391](https://github.com/Kong/kong/issues/13391) + [FTI-6109](https://konghq.atlassian.net/browse/FTI-6109) + +- **OpenTelemetry / Zipkin**: remove redundant deprecation warnings + [#13220](https://github.com/Kong/kong/issues/13220) + [KAG-4744](https://konghq.atlassian.net/browse/KAG-4744) + +- **Basic-Auth**: Fix an issue of realm field not recognized for older kong versions (before 3.6) + [#13042](https://github.com/Kong/kong/issues/13042) + [KAG-4516](https://konghq.atlassian.net/browse/KAG-4516) + +- **Key-Auth**: Fix an issue of realm field not recognized for older kong versions (before 3.7) + [#13042](https://github.com/Kong/kong/issues/13042) + [KAG-4516](https://konghq.atlassian.net/browse/KAG-4516) + +- **Request Size Limiting**: Fixed an issue where the body size doesn't get checked when the request body is buffered to a temporary file. + [#13303](https://github.com/Kong/kong/issues/13303) + [FTI-6034](https://konghq.atlassian.net/browse/FTI-6034) + +- **Response-RateLimiting**: Fixed an issue of DP reporting that deprecated config fields are used when configuration from CP is pushed + [#13069](https://github.com/Kong/kong/issues/13069) + [KAG-4515](https://konghq.atlassian.net/browse/KAG-4515) + +- **Rate-limiting-Plugin**: Fix a bug where the return values from `get_redis_connection()` are mistaken. + [#13613](https://github.com/Kong/kong/issues/13613) + + +- **Rate-Limiting**: Fixed an issue of DP reporting that deprecated config fields are used when configuration from CP is pushed + [#13069](https://github.com/Kong/kong/issues/13069) + [KAG-4515](https://konghq.atlassian.net/browse/KAG-4515) + +- **OpenTelemetry:** Improved accuracy of sampling decisions. + [#13275](https://github.com/Kong/kong/issues/13275) + [KAG-4785](https://konghq.atlassian.net/browse/KAG-4785) + +- **hmac-auth**: Add WWW-Authenticate headers to 401 responses. + [#11791](https://github.com/Kong/kong/issues/11791) + [KAG-321](https://konghq.atlassian.net/browse/KAG-321) + +- **Prometheus**: Improved error logging when having inconsistent labels count. + [#13020](https://github.com/Kong/kong/issues/13020) + + +- **jwt**: Add WWW-Authenticate headers to 401 responses. + [#11792](https://github.com/Kong/kong/issues/11792) + [KAG-321](https://konghq.atlassian.net/browse/KAG-321) + +- **ldap-auth**: Add WWW-Authenticate headers to all 401 responses. + [#11820](https://github.com/Kong/kong/issues/11820) + [KAG-321](https://konghq.atlassian.net/browse/KAG-321) + +- **OAuth2**: Add WWW-Authenticate headers to all 401 responses and realm option. + [#11833](https://github.com/Kong/kong/issues/11833) + [KAG-321](https://konghq.atlassian.net/browse/KAG-321) + +- **proxy-cache**: Fixed an issue where the Age header was not being updated correctly when serving cached responses. + [#13387](https://github.com/Kong/kong/issues/13387) + +#### Admin API + +- Fixed an issue where validation of the certificate schema failed if the `snis` field was present in the request body. + [#13357](https://github.com/Kong/kong/issues/13357) + +#### Clustering + +- Fixed an issue where hybrid mode not working if the forward proxy password contains special character(#). Note that the `proxy_server` configuration parameter still needs to be url-encoded. + [#13457](https://github.com/Kong/kong/issues/13457) + [FTI-6145](https://konghq.atlassian.net/browse/FTI-6145) +#### Default + +- **AI-proxy**: A configuration validation is added to prevent from enabling `log_statistics` upon +providers not supporting statistics. Accordingly, the default of `log_statistics` is changed from +`true` to `false`, and a database migration is added as well for disabling `log_statistics` if it +has already been enabled upon unsupported providers. + [#12860](https://github.com/Kong/kong/issues/12860) + +## Kong-Manager + + + + + + + diff --git a/changelog/3.8.0/kong-manager/.gitkeep b/changelog/3.8.0/kong-manager/.gitkeep new file mode 100644 index 000000000000..e69de29bb2d1 diff --git a/changelog/3.8.0/kong/.gitkeep b/changelog/3.8.0/kong/.gitkeep new file mode 100644 index 000000000000..e69de29bb2d1 diff --git a/changelog/unreleased/kong/acl-always-use-authenticated-groups.yml b/changelog/3.8.0/kong/acl-always-use-authenticated-groups.yml similarity index 100% rename from changelog/unreleased/kong/acl-always-use-authenticated-groups.yml rename to changelog/3.8.0/kong/acl-always-use-authenticated-groups.yml diff --git a/changelog/unreleased/kong/add-ai-data-latency.yml b/changelog/3.8.0/kong/add-ai-data-latency.yml similarity index 100% rename from changelog/unreleased/kong/add-ai-data-latency.yml rename to changelog/3.8.0/kong/add-ai-data-latency.yml diff --git a/changelog/unreleased/kong/add-ai-data-prometheus.yml b/changelog/3.8.0/kong/add-ai-data-prometheus.yml similarity index 100% rename from changelog/unreleased/kong/add-ai-data-prometheus.yml rename to changelog/3.8.0/kong/add-ai-data-prometheus.yml diff --git a/changelog/unreleased/kong/add-noble-numbat.yml b/changelog/3.8.0/kong/add-noble-numbat.yml similarity index 100% rename from changelog/unreleased/kong/add-noble-numbat.yml rename to changelog/3.8.0/kong/add-noble-numbat.yml diff --git a/changelog/unreleased/kong/admin-api-map-brackets-syntax.yml b/changelog/3.8.0/kong/admin-api-map-brackets-syntax.yml similarity index 100% rename from changelog/unreleased/kong/admin-api-map-brackets-syntax.yml rename to changelog/3.8.0/kong/admin-api-map-brackets-syntax.yml diff --git a/changelog/unreleased/kong/ai-plugin-read-file.yml b/changelog/3.8.0/kong/ai-plugin-read-file.yml similarity index 100% rename from changelog/unreleased/kong/ai-plugin-read-file.yml rename to changelog/3.8.0/kong/ai-plugin-read-file.yml diff --git a/changelog/unreleased/kong/ai-proxy-add-allow-override-opt.yml b/changelog/3.8.0/kong/ai-proxy-add-allow-override-opt.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-add-allow-override-opt.yml rename to changelog/3.8.0/kong/ai-proxy-add-allow-override-opt.yml diff --git a/changelog/unreleased/kong/ai-proxy-add-deep-copy-lib.yml b/changelog/3.8.0/kong/ai-proxy-add-deep-copy-lib.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-add-deep-copy-lib.yml rename to changelog/3.8.0/kong/ai-proxy-add-deep-copy-lib.yml diff --git a/changelog/unreleased/kong/ai-proxy-aws-bedrock.yml b/changelog/3.8.0/kong/ai-proxy-aws-bedrock.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-aws-bedrock.yml rename to changelog/3.8.0/kong/ai-proxy-aws-bedrock.yml diff --git a/changelog/unreleased/kong/ai-proxy-azure-streaming.yml b/changelog/3.8.0/kong/ai-proxy-azure-streaming.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-azure-streaming.yml rename to changelog/3.8.0/kong/ai-proxy-azure-streaming.yml diff --git a/changelog/unreleased/kong/ai-proxy-cloud-identity-transformer-plugins.yml b/changelog/3.8.0/kong/ai-proxy-cloud-identity-transformer-plugins.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-cloud-identity-transformer-plugins.yml rename to changelog/3.8.0/kong/ai-proxy-cloud-identity-transformer-plugins.yml diff --git a/changelog/unreleased/kong/ai-proxy-fix-model-parameter.yml b/changelog/3.8.0/kong/ai-proxy-fix-model-parameter.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-fix-model-parameter.yml rename to changelog/3.8.0/kong/ai-proxy-fix-model-parameter.yml diff --git a/changelog/unreleased/kong/ai-proxy-fix-nil-response-token-count.yml b/changelog/3.8.0/kong/ai-proxy-fix-nil-response-token-count.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-fix-nil-response-token-count.yml rename to changelog/3.8.0/kong/ai-proxy-fix-nil-response-token-count.yml diff --git a/changelog/unreleased/kong/ai-proxy-fix-sending-own-model.yml b/changelog/3.8.0/kong/ai-proxy-fix-sending-own-model.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-fix-sending-own-model.yml rename to changelog/3.8.0/kong/ai-proxy-fix-sending-own-model.yml diff --git a/changelog/unreleased/kong/ai-proxy-fix-tuning-parameter-precedence.yml b/changelog/3.8.0/kong/ai-proxy-fix-tuning-parameter-precedence.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-fix-tuning-parameter-precedence.yml rename to changelog/3.8.0/kong/ai-proxy-fix-tuning-parameter-precedence.yml diff --git a/changelog/unreleased/kong/ai-proxy-google-gemini.yml b/changelog/3.8.0/kong/ai-proxy-google-gemini.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-google-gemini.yml rename to changelog/3.8.0/kong/ai-proxy-google-gemini.yml diff --git a/changelog/unreleased/kong/ai-proxy-mistral-ai.yml b/changelog/3.8.0/kong/ai-proxy-mistral-ai.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-mistral-ai.yml rename to changelog/3.8.0/kong/ai-proxy-mistral-ai.yml diff --git a/changelog/unreleased/kong/ai-proxy-model-header.yml b/changelog/3.8.0/kong/ai-proxy-model-header.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-model-header.yml rename to changelog/3.8.0/kong/ai-proxy-model-header.yml diff --git a/changelog/unreleased/kong/ai-proxy-proper-model-assignment.yml b/changelog/3.8.0/kong/ai-proxy-proper-model-assignment.yml similarity index 100% rename from changelog/unreleased/kong/ai-proxy-proper-model-assignment.yml rename to changelog/3.8.0/kong/ai-proxy-proper-model-assignment.yml diff --git a/changelog/unreleased/kong/bump-lua-protobuf.yml b/changelog/3.8.0/kong/bump-lua-protobuf.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-protobuf.yml rename to changelog/3.8.0/kong/bump-lua-protobuf.yml diff --git a/changelog/unreleased/kong/bump-lua-resty-acme.yml b/changelog/3.8.0/kong/bump-lua-resty-acme.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-resty-acme.yml rename to changelog/3.8.0/kong/bump-lua-resty-acme.yml diff --git a/changelog/unreleased/kong/bump-lua-resty-aws.yml b/changelog/3.8.0/kong/bump-lua-resty-aws.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-resty-aws.yml rename to changelog/3.8.0/kong/bump-lua-resty-aws.yml diff --git a/changelog/unreleased/kong/bump-lua-resty-events.yml b/changelog/3.8.0/kong/bump-lua-resty-events.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-resty-events.yml rename to changelog/3.8.0/kong/bump-lua-resty-events.yml diff --git a/changelog/unreleased/kong/bump-lua-resty-healthcheck.yml b/changelog/3.8.0/kong/bump-lua-resty-healthcheck.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-resty-healthcheck.yml rename to changelog/3.8.0/kong/bump-lua-resty-healthcheck.yml diff --git a/changelog/unreleased/kong/bump-lua-resty-lmdb.yml b/changelog/3.8.0/kong/bump-lua-resty-lmdb.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-resty-lmdb.yml rename to changelog/3.8.0/kong/bump-lua-resty-lmdb.yml diff --git a/changelog/unreleased/kong/bump-lua-resty-openssl.yml b/changelog/3.8.0/kong/bump-lua-resty-openssl.yml similarity index 100% rename from changelog/unreleased/kong/bump-lua-resty-openssl.yml rename to changelog/3.8.0/kong/bump-lua-resty-openssl.yml diff --git a/changelog/unreleased/kong/bump-luarocks.yml b/changelog/3.8.0/kong/bump-luarocks.yml similarity index 100% rename from changelog/unreleased/kong/bump-luarocks.yml rename to changelog/3.8.0/kong/bump-luarocks.yml diff --git a/changelog/unreleased/kong/bump-ngx-wasm-module.yml b/changelog/3.8.0/kong/bump-ngx-wasm-module.yml similarity index 100% rename from changelog/unreleased/kong/bump-ngx-wasm-module.yml rename to changelog/3.8.0/kong/bump-ngx-wasm-module.yml diff --git a/changelog/unreleased/kong/bump-openresty.yml b/changelog/3.8.0/kong/bump-openresty.yml similarity index 100% rename from changelog/unreleased/kong/bump-openresty.yml rename to changelog/3.8.0/kong/bump-openresty.yml diff --git a/changelog/unreleased/kong/bump-pcre.yml b/changelog/3.8.0/kong/bump-pcre.yml similarity index 100% rename from changelog/unreleased/kong/bump-pcre.yml rename to changelog/3.8.0/kong/bump-pcre.yml diff --git a/changelog/unreleased/kong/bump-wasmtime.yml b/changelog/3.8.0/kong/bump-wasmtime.yml similarity index 100% rename from changelog/unreleased/kong/bump-wasmtime.yml rename to changelog/3.8.0/kong/bump-wasmtime.yml diff --git a/changelog/unreleased/kong/certificates_schema_validate.yml b/changelog/3.8.0/kong/certificates_schema_validate.yml similarity index 100% rename from changelog/unreleased/kong/certificates_schema_validate.yml rename to changelog/3.8.0/kong/certificates_schema_validate.yml diff --git a/changelog/unreleased/kong/cp-luarocks-admin-to-bin.yml b/changelog/3.8.0/kong/cp-luarocks-admin-to-bin.yml similarity index 100% rename from changelog/unreleased/kong/cp-luarocks-admin-to-bin.yml rename to changelog/3.8.0/kong/cp-luarocks-admin-to-bin.yml diff --git a/changelog/unreleased/kong/feat-add-ada.yml b/changelog/3.8.0/kong/feat-add-ada.yml similarity index 100% rename from changelog/unreleased/kong/feat-add-ada.yml rename to changelog/3.8.0/kong/feat-add-ada.yml diff --git a/changelog/unreleased/kong/feat-ai-prompt-guard-all-roles.yml b/changelog/3.8.0/kong/feat-ai-prompt-guard-all-roles.yml similarity index 100% rename from changelog/unreleased/kong/feat-ai-prompt-guard-all-roles.yml rename to changelog/3.8.0/kong/feat-ai-prompt-guard-all-roles.yml diff --git a/changelog/unreleased/kong/feat-aws-lambda-configurable-sts-endpoint.yml b/changelog/3.8.0/kong/feat-aws-lambda-configurable-sts-endpoint.yml similarity index 100% rename from changelog/unreleased/kong/feat-aws-lambda-configurable-sts-endpoint.yml rename to changelog/3.8.0/kong/feat-aws-lambda-configurable-sts-endpoint.yml diff --git a/changelog/unreleased/kong/feat-aws-lambda-decode-empty-array.yml b/changelog/3.8.0/kong/feat-aws-lambda-decode-empty-array.yml similarity index 100% rename from changelog/unreleased/kong/feat-aws-lambda-decode-empty-array.yml rename to changelog/3.8.0/kong/feat-aws-lambda-decode-empty-array.yml diff --git a/changelog/unreleased/kong/feat-pdk-clear-query-arg.yml b/changelog/3.8.0/kong/feat-pdk-clear-query-arg.yml similarity index 100% rename from changelog/unreleased/kong/feat-pdk-clear-query-arg.yml rename to changelog/3.8.0/kong/feat-pdk-clear-query-arg.yml diff --git a/changelog/unreleased/kong/feat-pdk-unlimited-body-size.yml b/changelog/3.8.0/kong/feat-pdk-unlimited-body-size.yml similarity index 100% rename from changelog/unreleased/kong/feat-pdk-unlimited-body-size.yml rename to changelog/3.8.0/kong/feat-pdk-unlimited-body-size.yml diff --git a/changelog/unreleased/kong/feat-plugin-conf-ws-id.yml b/changelog/3.8.0/kong/feat-plugin-conf-ws-id.yml similarity index 100% rename from changelog/unreleased/kong/feat-plugin-conf-ws-id.yml rename to changelog/3.8.0/kong/feat-plugin-conf-ws-id.yml diff --git a/changelog/unreleased/kong/feat-queue-concurrency-limit.yml b/changelog/3.8.0/kong/feat-queue-concurrency-limit.yml similarity index 100% rename from changelog/unreleased/kong/feat-queue-concurrency-limit.yml rename to changelog/3.8.0/kong/feat-queue-concurrency-limit.yml diff --git a/changelog/unreleased/kong/feat-response-transformer-json-rename.yml b/changelog/3.8.0/kong/feat-response-transformer-json-rename.yml similarity index 100% rename from changelog/unreleased/kong/feat-response-transformer-json-rename.yml rename to changelog/3.8.0/kong/feat-response-transformer-json-rename.yml diff --git a/changelog/unreleased/kong/feat-via.yml b/changelog/3.8.0/kong/feat-via.yml similarity index 100% rename from changelog/unreleased/kong/feat-via.yml rename to changelog/3.8.0/kong/feat-via.yml diff --git a/changelog/unreleased/kong/fix-acme-misleading-deprecation-logs.yml b/changelog/3.8.0/kong/fix-acme-misleading-deprecation-logs.yml similarity index 100% rename from changelog/unreleased/kong/fix-acme-misleading-deprecation-logs.yml rename to changelog/3.8.0/kong/fix-acme-misleading-deprecation-logs.yml diff --git a/changelog/unreleased/kong/fix-acme-username-password-auth.yml b/changelog/3.8.0/kong/fix-acme-username-password-auth.yml similarity index 100% rename from changelog/unreleased/kong/fix-acme-username-password-auth.yml rename to changelog/3.8.0/kong/fix-acme-username-password-auth.yml diff --git a/changelog/unreleased/kong/fix-ai-gzip-content.yml b/changelog/3.8.0/kong/fix-ai-gzip-content.yml similarity index 100% rename from changelog/unreleased/kong/fix-ai-gzip-content.yml rename to changelog/3.8.0/kong/fix-ai-gzip-content.yml diff --git a/changelog/unreleased/kong/fix-ai-metrics-prometheus-compat.yml b/changelog/3.8.0/kong/fix-ai-metrics-prometheus-compat.yml similarity index 100% rename from changelog/unreleased/kong/fix-ai-metrics-prometheus-compat.yml rename to changelog/3.8.0/kong/fix-ai-metrics-prometheus-compat.yml diff --git a/changelog/unreleased/kong/fix-ai-plugin-no-consumer.yml b/changelog/3.8.0/kong/fix-ai-plugin-no-consumer.yml similarity index 100% rename from changelog/unreleased/kong/fix-ai-plugin-no-consumer.yml rename to changelog/3.8.0/kong/fix-ai-plugin-no-consumer.yml diff --git a/changelog/unreleased/kong/fix-ai-prompt-guard-order.yml b/changelog/3.8.0/kong/fix-ai-prompt-guard-order.yml similarity index 100% rename from changelog/unreleased/kong/fix-ai-prompt-guard-order.yml rename to changelog/3.8.0/kong/fix-ai-prompt-guard-order.yml diff --git a/changelog/unreleased/kong/fix-ai-proxy-shared-state.yml b/changelog/3.8.0/kong/fix-ai-proxy-shared-state.yml similarity index 100% rename from changelog/unreleased/kong/fix-ai-proxy-shared-state.yml rename to changelog/3.8.0/kong/fix-ai-proxy-shared-state.yml diff --git a/changelog/unreleased/kong/fix-ai-semantic-cache-model.yml b/changelog/3.8.0/kong/fix-ai-semantic-cache-model.yml similarity index 100% rename from changelog/unreleased/kong/fix-ai-semantic-cache-model.yml rename to changelog/3.8.0/kong/fix-ai-semantic-cache-model.yml diff --git a/changelog/unreleased/kong/fix-aws-lambda-empty-array-mutli-value.yml b/changelog/3.8.0/kong/fix-aws-lambda-empty-array-mutli-value.yml similarity index 100% rename from changelog/unreleased/kong/fix-aws-lambda-empty-array-mutli-value.yml rename to changelog/3.8.0/kong/fix-aws-lambda-empty-array-mutli-value.yml diff --git a/changelog/unreleased/kong/fix-aws-lambda-gateway-compat-version-field.yml b/changelog/3.8.0/kong/fix-aws-lambda-gateway-compat-version-field.yml similarity index 100% rename from changelog/unreleased/kong/fix-aws-lambda-gateway-compat-version-field.yml rename to changelog/3.8.0/kong/fix-aws-lambda-gateway-compat-version-field.yml diff --git a/changelog/unreleased/kong/fix-aws-lambda-multi-value-header-null.yml b/changelog/3.8.0/kong/fix-aws-lambda-multi-value-header-null.yml similarity index 100% rename from changelog/unreleased/kong/fix-aws-lambda-multi-value-header-null.yml rename to changelog/3.8.0/kong/fix-aws-lambda-multi-value-header-null.yml diff --git a/changelog/unreleased/kong/fix-clustering-forward-proxy-authentication.yml b/changelog/3.8.0/kong/fix-clustering-forward-proxy-authentication.yml similarity index 100% rename from changelog/unreleased/kong/fix-clustering-forward-proxy-authentication.yml rename to changelog/3.8.0/kong/fix-clustering-forward-proxy-authentication.yml diff --git a/changelog/unreleased/kong/fix-cmd-error-log.yml b/changelog/3.8.0/kong/fix-cmd-error-log.yml similarity index 100% rename from changelog/unreleased/kong/fix-cmd-error-log.yml rename to changelog/3.8.0/kong/fix-cmd-error-log.yml diff --git a/changelog/unreleased/kong/fix-correlation-id-config-generator.yml b/changelog/3.8.0/kong/fix-correlation-id-config-generator.yml similarity index 100% rename from changelog/unreleased/kong/fix-correlation-id-config-generator.yml rename to changelog/3.8.0/kong/fix-correlation-id-config-generator.yml diff --git a/changelog/unreleased/kong/fix-cors-wildcard.yml b/changelog/3.8.0/kong/fix-cors-wildcard.yml similarity index 100% rename from changelog/unreleased/kong/fix-cors-wildcard.yml rename to changelog/3.8.0/kong/fix-cors-wildcard.yml diff --git a/changelog/unreleased/kong/fix-db-read-only.yml b/changelog/3.8.0/kong/fix-db-read-only.yml similarity index 100% rename from changelog/unreleased/kong/fix-db-read-only.yml rename to changelog/3.8.0/kong/fix-db-read-only.yml diff --git a/changelog/unreleased/kong/fix-deprecate-shorthands-precedence.yml b/changelog/3.8.0/kong/fix-deprecate-shorthands-precedence.yml similarity index 100% rename from changelog/unreleased/kong/fix-deprecate-shorthands-precedence.yml rename to changelog/3.8.0/kong/fix-deprecate-shorthands-precedence.yml diff --git a/changelog/unreleased/kong/fix-dns-initialization.yml b/changelog/3.8.0/kong/fix-dns-initialization.yml similarity index 100% rename from changelog/unreleased/kong/fix-dns-initialization.yml rename to changelog/3.8.0/kong/fix-dns-initialization.yml diff --git a/changelog/unreleased/kong/fix-filter-finalize-in-send-header-clear-context.yml b/changelog/3.8.0/kong/fix-filter-finalize-in-send-header-clear-context.yml similarity index 100% rename from changelog/unreleased/kong/fix-filter-finalize-in-send-header-clear-context.yml rename to changelog/3.8.0/kong/fix-filter-finalize-in-send-header-clear-context.yml diff --git a/changelog/unreleased/kong/fix-for-null-aware-shorthand.yml b/changelog/3.8.0/kong/fix-for-null-aware-shorthand.yml similarity index 100% rename from changelog/unreleased/kong/fix-for-null-aware-shorthand.yml rename to changelog/3.8.0/kong/fix-for-null-aware-shorthand.yml diff --git a/changelog/unreleased/kong/fix-grpc-gateway-json-decode-bug.yml b/changelog/3.8.0/kong/fix-grpc-gateway-json-decode-bug.yml similarity index 100% rename from changelog/unreleased/kong/fix-grpc-gateway-json-decode-bug.yml rename to changelog/3.8.0/kong/fix-grpc-gateway-json-decode-bug.yml diff --git a/changelog/unreleased/kong/fix-http-log-host-header.yml b/changelog/3.8.0/kong/fix-http-log-host-header.yml similarity index 100% rename from changelog/unreleased/kong/fix-http-log-host-header.yml rename to changelog/3.8.0/kong/fix-http-log-host-header.yml diff --git a/changelog/unreleased/kong/fix-key-auth-retain-query-order.yml b/changelog/3.8.0/kong/fix-key-auth-retain-query-order.yml similarity index 100% rename from changelog/unreleased/kong/fix-key-auth-retain-query-order.yml rename to changelog/3.8.0/kong/fix-key-auth-retain-query-order.yml diff --git a/changelog/unreleased/kong/fix-log-upstream-status-nil-subrequest.yml b/changelog/3.8.0/kong/fix-log-upstream-status-nil-subrequest.yml similarity index 100% rename from changelog/unreleased/kong/fix-log-upstream-status-nil-subrequest.yml rename to changelog/3.8.0/kong/fix-log-upstream-status-nil-subrequest.yml diff --git a/changelog/unreleased/kong/fix-multi-modal.yml b/changelog/3.8.0/kong/fix-multi-modal.yml similarity index 100% rename from changelog/unreleased/kong/fix-multi-modal.yml rename to changelog/3.8.0/kong/fix-multi-modal.yml diff --git a/changelog/unreleased/kong/fix-otel-migrations-exception.yml b/changelog/3.8.0/kong/fix-otel-migrations-exception.yml similarity index 100% rename from changelog/unreleased/kong/fix-otel-migrations-exception.yml rename to changelog/3.8.0/kong/fix-otel-migrations-exception.yml diff --git a/changelog/unreleased/kong/fix-pdk-inspect-notice.yml b/changelog/3.8.0/kong/fix-pdk-inspect-notice.yml similarity index 100% rename from changelog/unreleased/kong/fix-pdk-inspect-notice.yml rename to changelog/3.8.0/kong/fix-pdk-inspect-notice.yml diff --git a/changelog/unreleased/kong/fix-propagation-remove-redundant-warnings.yml b/changelog/3.8.0/kong/fix-propagation-remove-redundant-warnings.yml similarity index 100% rename from changelog/unreleased/kong/fix-propagation-remove-redundant-warnings.yml rename to changelog/3.8.0/kong/fix-propagation-remove-redundant-warnings.yml diff --git a/changelog/unreleased/kong/fix-realm-compat-changes-basic-auth.yml b/changelog/3.8.0/kong/fix-realm-compat-changes-basic-auth.yml similarity index 100% rename from changelog/unreleased/kong/fix-realm-compat-changes-basic-auth.yml rename to changelog/3.8.0/kong/fix-realm-compat-changes-basic-auth.yml diff --git a/changelog/unreleased/kong/fix-realm-compat-changes-key-auth.yml b/changelog/3.8.0/kong/fix-realm-compat-changes-key-auth.yml similarity index 100% rename from changelog/unreleased/kong/fix-realm-compat-changes-key-auth.yml rename to changelog/3.8.0/kong/fix-realm-compat-changes-key-auth.yml diff --git a/changelog/unreleased/kong/fix-reports-uninitialized-variable-in-400.yml b/changelog/3.8.0/kong/fix-reports-uninitialized-variable-in-400.yml similarity index 100% rename from changelog/unreleased/kong/fix-reports-uninitialized-variable-in-400.yml rename to changelog/3.8.0/kong/fix-reports-uninitialized-variable-in-400.yml diff --git a/changelog/unreleased/kong/fix-request-size-limiting-with-chunked-transfer-encoding-and-no-content-length.yml b/changelog/3.8.0/kong/fix-request-size-limiting-with-chunked-transfer-encoding-and-no-content-length.yml similarity index 100% rename from changelog/unreleased/kong/fix-request-size-limiting-with-chunked-transfer-encoding-and-no-content-length.yml rename to changelog/3.8.0/kong/fix-request-size-limiting-with-chunked-transfer-encoding-and-no-content-length.yml diff --git a/changelog/unreleased/kong/fix-request-transformer-uri-replace.yml b/changelog/3.8.0/kong/fix-request-transformer-uri-replace.yml similarity index 100% rename from changelog/unreleased/kong/fix-request-transformer-uri-replace.yml rename to changelog/3.8.0/kong/fix-request-transformer-uri-replace.yml diff --git a/changelog/unreleased/kong/fix-response-rl-misleading-deprecation-logs.yml b/changelog/3.8.0/kong/fix-response-rl-misleading-deprecation-logs.yml similarity index 100% rename from changelog/unreleased/kong/fix-response-rl-misleading-deprecation-logs.yml rename to changelog/3.8.0/kong/fix-response-rl-misleading-deprecation-logs.yml diff --git a/changelog/unreleased/kong/fix-return-values-mistaken-in-rate-limiting-plugin.yml b/changelog/3.8.0/kong/fix-return-values-mistaken-in-rate-limiting-plugin.yml similarity index 100% rename from changelog/unreleased/kong/fix-return-values-mistaken-in-rate-limiting-plugin.yml rename to changelog/3.8.0/kong/fix-return-values-mistaken-in-rate-limiting-plugin.yml diff --git a/changelog/unreleased/kong/fix-rl-misleading-deprecation-logs.yml b/changelog/3.8.0/kong/fix-rl-misleading-deprecation-logs.yml similarity index 100% rename from changelog/unreleased/kong/fix-rl-misleading-deprecation-logs.yml rename to changelog/3.8.0/kong/fix-rl-misleading-deprecation-logs.yml diff --git a/changelog/unreleased/kong/fix-route-set-priority-with-others.yml b/changelog/3.8.0/kong/fix-route-set-priority-with-others.yml similarity index 100% rename from changelog/unreleased/kong/fix-route-set-priority-with-others.yml rename to changelog/3.8.0/kong/fix-route-set-priority-with-others.yml diff --git a/changelog/unreleased/kong/fix-service-tls-verify.yml b/changelog/3.8.0/kong/fix-service-tls-verify.yml similarity index 100% rename from changelog/unreleased/kong/fix-service-tls-verify.yml rename to changelog/3.8.0/kong/fix-service-tls-verify.yml diff --git a/changelog/unreleased/kong/fix-sni-cache-invalidate.yml b/changelog/3.8.0/kong/fix-sni-cache-invalidate.yml similarity index 100% rename from changelog/unreleased/kong/fix-sni-cache-invalidate.yml rename to changelog/3.8.0/kong/fix-sni-cache-invalidate.yml diff --git a/changelog/unreleased/kong/fix-tracing-sampling-rate.yml b/changelog/3.8.0/kong/fix-tracing-sampling-rate.yml similarity index 100% rename from changelog/unreleased/kong/fix-tracing-sampling-rate.yml rename to changelog/3.8.0/kong/fix-tracing-sampling-rate.yml diff --git a/changelog/unreleased/kong/fix-type-of-logrotate.yml b/changelog/3.8.0/kong/fix-type-of-logrotate.yml similarity index 100% rename from changelog/unreleased/kong/fix-type-of-logrotate.yml rename to changelog/3.8.0/kong/fix-type-of-logrotate.yml diff --git a/changelog/unreleased/kong/fix-vault-cache-workspace-id.yml b/changelog/3.8.0/kong/fix-vault-cache-workspace-id.yml similarity index 100% rename from changelog/unreleased/kong/fix-vault-cache-workspace-id.yml rename to changelog/3.8.0/kong/fix-vault-cache-workspace-id.yml diff --git a/changelog/unreleased/kong/fix-vault-reference-parsing-endslash.yml b/changelog/3.8.0/kong/fix-vault-reference-parsing-endslash.yml similarity index 100% rename from changelog/unreleased/kong/fix-vault-reference-parsing-endslash.yml rename to changelog/3.8.0/kong/fix-vault-reference-parsing-endslash.yml diff --git a/changelog/unreleased/kong/fix-vault-resurrect-ttl-multi-worker.yml b/changelog/3.8.0/kong/fix-vault-resurrect-ttl-multi-worker.yml similarity index 100% rename from changelog/unreleased/kong/fix-vault-resurrect-ttl-multi-worker.yml rename to changelog/3.8.0/kong/fix-vault-resurrect-ttl-multi-worker.yml diff --git a/changelog/unreleased/kong/fix-vault-secret-rotation-log-level.yml b/changelog/3.8.0/kong/fix-vault-secret-rotation-log-level.yml similarity index 100% rename from changelog/unreleased/kong/fix-vault-secret-rotation-log-level.yml rename to changelog/3.8.0/kong/fix-vault-secret-rotation-log-level.yml diff --git a/changelog/unreleased/kong/fix-wasm-enable-pwm-lua-resolver.yml b/changelog/3.8.0/kong/fix-wasm-enable-pwm-lua-resolver.yml similarity index 100% rename from changelog/unreleased/kong/fix-wasm-enable-pwm-lua-resolver.yml rename to changelog/3.8.0/kong/fix-wasm-enable-pwm-lua-resolver.yml diff --git a/changelog/unreleased/kong/fix_hash.yml b/changelog/3.8.0/kong/fix_hash.yml similarity index 100% rename from changelog/unreleased/kong/fix_hash.yml rename to changelog/3.8.0/kong/fix_hash.yml diff --git a/changelog/unreleased/kong/hmac_www_authenticate.yml b/changelog/3.8.0/kong/hmac_www_authenticate.yml similarity index 100% rename from changelog/unreleased/kong/hmac_www_authenticate.yml rename to changelog/3.8.0/kong/hmac_www_authenticate.yml diff --git a/changelog/unreleased/kong/host_header.yml b/changelog/3.8.0/kong/host_header.yml similarity index 100% rename from changelog/unreleased/kong/host_header.yml rename to changelog/3.8.0/kong/host_header.yml diff --git a/changelog/unreleased/kong/improve-prometheus-error-logging.yml b/changelog/3.8.0/kong/improve-prometheus-error-logging.yml similarity index 100% rename from changelog/unreleased/kong/improve-prometheus-error-logging.yml rename to changelog/3.8.0/kong/improve-prometheus-error-logging.yml diff --git a/changelog/unreleased/kong/jwt_www_authenticate.yml b/changelog/3.8.0/kong/jwt_www_authenticate.yml similarity index 100% rename from changelog/unreleased/kong/jwt_www_authenticate.yml rename to changelog/3.8.0/kong/jwt_www_authenticate.yml diff --git a/changelog/unreleased/kong/ldap_www_authenticate.yml b/changelog/3.8.0/kong/ldap_www_authenticate.yml similarity index 100% rename from changelog/unreleased/kong/ldap_www_authenticate.yml rename to changelog/3.8.0/kong/ldap_www_authenticate.yml diff --git a/changelog/unreleased/kong/make_rpm_relocatable.yml b/changelog/3.8.0/kong/make_rpm_relocatable.yml similarity index 100% rename from changelog/unreleased/kong/make_rpm_relocatable.yml rename to changelog/3.8.0/kong/make_rpm_relocatable.yml diff --git a/changelog/unreleased/kong/migration_of_ai_proxy_plugin.yml b/changelog/3.8.0/kong/migration_of_ai_proxy_plugin.yml similarity index 100% rename from changelog/unreleased/kong/migration_of_ai_proxy_plugin.yml rename to changelog/3.8.0/kong/migration_of_ai_proxy_plugin.yml diff --git a/changelog/unreleased/kong/move-sockets-to-subdir.yml b/changelog/3.8.0/kong/move-sockets-to-subdir.yml similarity index 100% rename from changelog/unreleased/kong/move-sockets-to-subdir.yml rename to changelog/3.8.0/kong/move-sockets-to-subdir.yml diff --git a/changelog/unreleased/kong/oauth2_www_authenticate.yml b/changelog/3.8.0/kong/oauth2_www_authenticate.yml similarity index 100% rename from changelog/unreleased/kong/oauth2_www_authenticate.yml rename to changelog/3.8.0/kong/oauth2_www_authenticate.yml diff --git a/changelog/unreleased/kong/otel-formatted-logs.yml b/changelog/3.8.0/kong/otel-formatted-logs.yml similarity index 100% rename from changelog/unreleased/kong/otel-formatted-logs.yml rename to changelog/3.8.0/kong/otel-formatted-logs.yml diff --git a/changelog/unreleased/kong/pdk-log-error.yml b/changelog/3.8.0/kong/pdk-log-error.yml similarity index 100% rename from changelog/unreleased/kong/pdk-log-error.yml rename to changelog/3.8.0/kong/pdk-log-error.yml diff --git a/changelog/unreleased/kong/pdk-read-file.yml b/changelog/3.8.0/kong/pdk-read-file.yml similarity index 100% rename from changelog/unreleased/kong/pdk-read-file.yml rename to changelog/3.8.0/kong/pdk-read-file.yml diff --git a/changelog/unreleased/kong/pdk-telemetry-log.yml b/changelog/3.8.0/kong/pdk-telemetry-log.yml similarity index 100% rename from changelog/unreleased/kong/pdk-telemetry-log.yml rename to changelog/3.8.0/kong/pdk-telemetry-log.yml diff --git a/changelog/unreleased/kong/plugins-add-standard-webhooks.yml b/changelog/3.8.0/kong/plugins-add-standard-webhooks.yml similarity index 100% rename from changelog/unreleased/kong/plugins-add-standard-webhooks.yml rename to changelog/3.8.0/kong/plugins-add-standard-webhooks.yml diff --git a/changelog/unreleased/kong/proxy-cache-fix-age-header.yml b/changelog/3.8.0/kong/proxy-cache-fix-age-header.yml similarity index 100% rename from changelog/unreleased/kong/proxy-cache-fix-age-header.yml rename to changelog/3.8.0/kong/proxy-cache-fix-age-header.yml diff --git a/changelog/unreleased/kong/refactor_dns_client.yml b/changelog/3.8.0/kong/refactor_dns_client.yml similarity index 100% rename from changelog/unreleased/kong/refactor_dns_client.yml rename to changelog/3.8.0/kong/refactor_dns_client.yml diff --git a/changelog/unreleased/kong/reject-config-on-deprecated-fields-mismatch.yml b/changelog/3.8.0/kong/reject-config-on-deprecated-fields-mismatch.yml similarity index 100% rename from changelog/unreleased/kong/reject-config-on-deprecated-fields-mismatch.yml rename to changelog/3.8.0/kong/reject-config-on-deprecated-fields-mismatch.yml diff --git a/changelog/unreleased/kong/remove_eol_debian_rhel.yml b/changelog/3.8.0/kong/remove_eol_debian_rhel.yml similarity index 100% rename from changelog/unreleased/kong/remove_eol_debian_rhel.yml rename to changelog/3.8.0/kong/remove_eol_debian_rhel.yml diff --git a/changelog/unreleased/kong/req-trans-rename.yml b/changelog/3.8.0/kong/req-trans-rename.yml similarity index 100% rename from changelog/unreleased/kong/req-trans-rename.yml rename to changelog/3.8.0/kong/req-trans-rename.yml diff --git a/changelog/unreleased/kong/resty-simdjson.yml b/changelog/3.8.0/kong/resty-simdjson.yml similarity index 100% rename from changelog/unreleased/kong/resty-simdjson.yml rename to changelog/3.8.0/kong/resty-simdjson.yml diff --git a/changelog/unreleased/kong/revert-dns-behavior.yml b/changelog/3.8.0/kong/revert-dns-behavior.yml similarity index 100% rename from changelog/unreleased/kong/revert-dns-behavior.yml rename to changelog/3.8.0/kong/revert-dns-behavior.yml diff --git a/changelog/unreleased/kong/shorten-socket-names.yml b/changelog/3.8.0/kong/shorten-socket-names.yml similarity index 100% rename from changelog/unreleased/kong/shorten-socket-names.yml rename to changelog/3.8.0/kong/shorten-socket-names.yml diff --git a/changelog/unreleased/kong/wasm-module-cache.yml b/changelog/3.8.0/kong/wasm-module-cache.yml similarity index 100% rename from changelog/unreleased/kong/wasm-module-cache.yml rename to changelog/3.8.0/kong/wasm-module-cache.yml diff --git a/changelog/unreleased/kong/yield-in-gzip.yml b/changelog/3.8.0/kong/yield-in-gzip.yml similarity index 100% rename from changelog/unreleased/kong/yield-in-gzip.yml rename to changelog/3.8.0/kong/yield-in-gzip.yml diff --git a/changelog/changelog-v1.0.1-linux-amd64.tar.gz b/changelog/changelog-v1.0.1-linux-amd64.tar.gz new file mode 100644 index 000000000000..14c993e4d58b Binary files /dev/null and b/changelog/changelog-v1.0.1-linux-amd64.tar.gz differ