This stable release improves compatibility with ArgoCD by changing the Linkerd control plane to create Lease resources at runtime rather than including them in the Helm chart. It also addresses a CVE by upgrading an underlying dependency. * Upgraded the policy controller's `h2` dependency to address CVE-2023-26964 * Fixed an issue where the `server_port_subscribers` metric exposed by the Destination controller was sometimes absent * Removed the `policy-controller-write` Lease from the control plane Helm chart in favor of creating it at runtime * Updated the proxy-injector to pass opaque port lists to the proxy as ranges rather than individually, greatly reducing the size of proxy manifests when large opaque port ranges are set * Fixed an issue where the proxy was performing protocol detection on ports marked as opaque * Improved backwards compatibility between 2.13 proxies and 2.12 control planes -----BEGIN SSH SIGNATURE----- U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgt3Ta+V2SVnHriElBV8n9haD2oa hx/mHQJEDfFNKClWoAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5 AAAAQIh41vJ6w7OCC7vbQ9YZRlDA/fkD1b9WfzPsgcwJvSJQM88FR29UbqFuko8j7Im1Gn LZjJVz0wOhlrpOg1CLVA4= -----END SSH SIGNATURE-----