Sourced from github.com/hashicorp/consul/api's changelog.

1.15.1 (March 7, 2023)

IMPROVEMENTS:

• cli: added -append-policy-id, -append-policy-name, -append-role-name, and -append-role-id flags to the consul token update command. These flags allow updates to a token's policies/roles without having to override them completely. [GH-16288]
• cli: added -append-service-identity and -append-node-identity flags to the consul token update command. These flags allow updates to a token's node identities/service identities without having to override them. [GH-16506]
• connect: Bump Envoy 1.22.5 to 1.22.7, 1.23.2 to 1.23.4, 1.24.0 to 1.24.2, add 1.25.1, remove 1.21.5 [GH-16274]
• mesh: Add ServiceResolver RequestTimeout for route timeouts to make request timeouts configurable [GH-16495]
• ui: support filtering API gateways in the ui and displaying their documentation links [GH-16508]

DEPRECATIONS:

• cli: Deprecate the -merge-node-identites and -merge-service-identities flags from the consul token update command in favor of: -append-node-identity and -append-service-identity. [GH-16506]
• cli: Deprecate the -merge-policies and -merge-roles flags from the consul token update command in favor of: -append-policy-id, -append-policy-name, -append-role-name, and -append-role-id. [GH-16288]

BUG FIXES:

• cli: Fixes an issue with consul connect envoy where a log to STDOUT could malform JSON when used with -bootstrap. [GH-16530]
• cli: Fixes an issue with consul connect envoy where grpc-disabled agents were not error-handled correctly. [GH-16530]
• cli: ensure acl token read -self works [GH-16445]
• cli: fix panic read non-existent acl policy [GH-16485]
• gateways: fix HTTPRoute bug where service weights could be less than or equal to 0 and result in a downstream envoy protocol error [GH-16512]
• gateways: fix HTTPRoute bug where services with a weight not divisible by 10000 are never registered properly [GH-16531]
• mesh: Fix resolution of service resolvers with subsets for external upstreams [GH-16499]
• proxycfg: ensure that an irrecoverable error in proxycfg closes the xds session and triggers a replacement proxycfg watcher [GH-16497]
• proxycfg: fix a bug where terminating gateways were not cleaning up deleted service resolvers for their referenced services [GH-16498]
• ui: Fix issue with lists and filters not rendering properly [GH-16444]

1.14.5 (March 7, 2023)

SECURITY:

• Upgrade to use Go 1.20.1. This resolves vulnerabilities CVE-2022-41724 in crypto/tls and CVE-2022-41723 in net/http. [GH-16263]

IMPROVEMENTS:

• container: Upgrade container image to use to Alpine 3.17. [GH-16358]
• mesh: Add ServiceResolver RequestTimeout for route timeouts to make request timeouts configurable [GH-16495]

BUG FIXES:

• mesh: Fix resolution of service resolvers with subsets for external upstreams [GH-16499]
• peering: Fix bug where services were incorrectly imported as connect-enabled. [GH-16339]
• peering: Fix issue where mesh gateways would use the wrong address when contacting a remote peer with the same datacenter name. [GH-16257]
• peering: Fix issue where secondary wan-federated datacenters could not be used as peering acceptors. [GH-16230]
• proxycfg: fix a bug where terminating gateways were not cleaning up deleted service resolvers for their referenced services [GH-16498]

... (truncated)

• 4697059 Bump consul/sdk to v0.13.1
• caf85ac Backport of Update docs to reflect functionality into release/1.15.x (#16555)
• dd740f0 Backport of Fix flakey tests related to ACL token updates into release/1.15.x...
• e66f26b Backport of Update the consul-k8s cli docs for the new proxy log subcommand...
• 494fba2 Backport of Follow-up fixes to consul connect envoy command into release/1.15...
• 583466b Backport of Improve ux around ACL token to help users avoid overwriting node/...
• 88496d7 NET-2904 Fixes API Gateway Route Service Weight Division Error (#16540)
• a95d028 backport of commit 5dca39b8137daf740f18b6d86f1d48081c317815 (#16536)
• e69ed7a Backport of Add some basic UI improvements for api-gateway services into rele...
• 2f8de3c Backport of NET-2903 Normalize weight for http routes into release/1.15.x (#1...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)