# kong changelog > 🦍 The API and AI Gateway - Vendor: Kong - Category: AI - Official site: https://konghq.com/install/ - Tracked by: What's New (https://whatsnew.fyi/product/kong) - Harvested from: GitHub (Kong/kong) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### 3.9.3 - Date: 2026-06-17 - Version: 3.9.3 - Original notes: https://github.com/Kong/kong/releases/tag/3.9.3 - Permalink: https://whatsnew.fyi/product/kong/releases/3.9.3 - **security** — Applied upstream nginx security patches for limiting the maximum number of headers (CVE-2026-49975) ###### Kong ###### Fixes ###### Core - Applied upstream nginx security patches for limiting the maximum number of headers (CVE-2026-49975). [#14895](https://github.com/Kong/kong/issues/14895) ### 3.9.2 - Date: 2026-06-04 - Version: 3.9.2 - Original notes: https://github.com/Kong/kong/releases/tag/3.9.2 - Permalink: https://whatsnew.fyi/product/kong/releases/3.9.2 - **security** — Applied upstream nginx security patches for CVE-2026-40701, CVE-2026-40460, CVE-2026-42934, CVE-2026-42946, CVE-2026-42945, and CVE-2026-9256 ###### Kong ###### Dependencies ###### Core - Bumped luarocks from 3.11.1 to 3.12.2. [#14672](https://github.com/Kong/kong/issues/14672) ###### Fixes ###### Core - Applied upstream nginx security patches for CVE-2026-40701, CVE-2026-40460, CVE-2026-42934, CVE-2026-42946, CVE-2026-42945, and CVE-2026-9256. [#14882](https://github.com/Kong/kong/issues/14882) ### 3.9.1 - Date: 2025-06-04 - Version: 3.9.1 - Original notes: https://github.com/Kong/kong/releases/tag/3.9.1 - Permalink: https://whatsnew.fyi/product/kong/releases/3.9.1 - **changed** — Bumped libexpat from 2.6.2 to 2.6.4 to fix a crash in the XML_ResumeParser function caused by XML_StopParser stopping an uninitialized parser - **changed** — Bump lua-kong-nginx-module from 0.13.0 to 0.13.2 - **added** — Added support for boto3 SDKs for the Bedrock provider, and for Google GenAI SDKs for the Gemini provider in ai plugin - **added** — Added support for the new Ollama streaming content type in AI driver - **fixed** — Fixed a bug in the Azure provider where model.options.upstream_path overrides would always return a 404 error - **fixed** — Fixed a bug where Azure streaming responses would be missing individual tokens - **fixed** — Fixed a bug where response streaming in Gemini and Bedrock providers was returning whole chat responses in one chunk - **fixed** — Fixed a bug where multimodal requests in OpenAI format would not transform properly when using the Gemini provider - **fixed** — Fixed Gemini streaming responses getting truncated and/or missing tokens - **fixed** — Fixed an incorrect error thrown when trying to log streaming responses - **fixed** — Fixed an issue where tool calls weren't working in streaming mode for the Bedrock and Gemini providers - **fixed** — Fixed an issue where AI Proxy would use corrupted plugin config - **fixed** — Fixed preserve mode - **fixed** — Fixed AI upstream URL trailing being empty - **fixed** — Fixed an issue where the template wasn't being resolved correctly and supported nested fields ###### Kong ###### Dependencies ###### Core - Bumped libexpat from 2.6.2 to 2.6.4 to fix a crash in the XML_ResumeParser function caused by XML_StopParser stopping an uninitialized parser. [#14208](https://github.com/Kong/kong/issues/14208) - Bump lua-kong-nginx-module from 0.13.0 to 0.13.2 [#14047](https://github.com/Kong/kong/issues/14047) ###### Features ###### Plugin - **ai**: Added support for boto3 SDKs for the Bedrock provider, and for Google GenAI SDKs for the Gemini provider. [#14579](https://github.com/Kong/kong/issues/14579) ###### Fixes ###### Core - Added support for the new Ollama streaming content type in AI driver. [#14579](https://github.com/Kong/kong/issues/14579) ###### Plugin - **ai-proxy**: Fixed a bug in the Azure provider where `model.options.upstream_path` overrides would always return a 404 error. [#14185](https://github.com/Kong/kong/issues/14185) - **ai-proxy**: Fixed a bug where Azure streaming responses would be missing individual tokens. [#14172](https://github.com/Kong/kong/issues/14172) - **ai-proxy**: Fixed a bug where response streaming in Gemini and Bedrock providers was returning whole chat responses in one chunk. [#14579](https://github.com/Kong/kong/issues/14579) - **ai-proxy**: Fixed a bug where multimodal requests (in OpenAI format) would not transform properly, when using the Gemini provider. [#14579](https://github.com/Kong/kong/issues/14579) - **ai-proxy**: Fixed Gemini streaming responses getting truncated and/or missing tokens. [#14579](https://github.com/Kong/kong/issues/14579) - **ai-proxy**: Fixed an incorrect error thrown when trying to log streaming responses. [#14579](https://github.com/Kong/kong/issues/14579) - **ai-proxy**: Fixed a issue where tool calls weren't working in streaming mode for the Bedrock and Gemini providers. [#14579](https://github.com/Kong/kong/issues/14579) - **ai-proxy**: Fixed an issue where AI Proxy would use corrupted plugin config. [#14579](https://github.com/Kong/kong/issues/14579) - **ai-proxy**: Fixed preserve mode. [#14579](https://github.com/Kong/kong/issues/14579) - **AI Plugins**: Fixed AI upstream URL trailing being empty. [#14578](https://github.com/Kong/kong/issues/14578) - **AI Plugins**: Fixed an issue where the template wasn't being resolved correctly and supported nested fields. [#14579](https://github.com/Kong/kong/issues/14579) ### 3.9.0 - Date: 2024-12-13 - Version: 3.9.0 - Original notes: https://github.com/Kong/kong/releases/tag/3.9.0 - Permalink: https://whatsnew.fyi/product/kong/releases/3.9.0 - **deprecated** — node_id in configuration has been deprecated - **changed** — Bumped lua-kong-nginx-module from 0.11.0 to 0.11.1 to fix an issue where the upstream cert chain wasn't properly set - **changed** — Bumped lua-resty-events to 0.3.1 to optimize memory usage - **changed** — Bumped lua-resty-lmdb to 1.6.0 allowing page_size to be 1 - **changed** — Bumped lua-resty-aws to 1.5.4 to fix a bug inside region prefix generation - **changed** — Bumped lua-resty-ljsonschema to 1.2.0 adding support for null as a valid option in enum types and properly calculating utf8 string length instead of byte count - **changed** — Bumped OpenSSL to 3.2.3 to fix unbounded memory growth with session handling in TLSv1.3 and other CVEs - **removed** — Removed the experimental datakit Wasm filter - **added** — Added the kong drain CLI command to make the /status/ready endpoint return a 503 Service Unavailable response - **added** — Added a new feature for Kong Manager that supports multiple domains, enabling dynamic cross-origin access for Admin API requests - **added** — Added an ADA dependency: WHATWG-compliant and fast URL parser - **added** — Added a new LLM driver for interfacing with the Hugging Face inference API supporting both serverless and dedicated LLM instances - **changed** — Increased the priority order of the correlation id to 100001 from 1 so that the plugin can be used with other plugins especially custom auth plugins - **added** — Added a tls.disable_http2_alpn() function patch for disabling HTTP/2 ALPN when performing a TLS handshake - **changed** — Improved the output of the request debugger with field total_time resolution now in microseconds and a new field total_time_without_upstream showing the latency only introduced by Kong - **added** — Added support for Wasm filters to be configured via the /plugins Admin API - **added** — Added kong.service.request.clear_query_arg(name) to PDK - **added** — Array and Map type span attributes are now supported by the tracing PDK - **changed** — Increased the upper limit of KONG_LATENCY_BUCKETS to 6000 in Prometheus plugin to enhance latency tracking precision - **added** — Added a new Redirect plugin to redirect requests to another location ###### Kong ###### Deprecations ###### Core - `node_id` in configuration has been deprecated. [#13687](https://github.com/Kong/kong/issues/13687) ###### Dependencies ###### Core - Bumped lua-kong-nginx-module from 0.11.0 to 0.11.1 to fix an issue where the upstream cert chain wasn't properly set. [#12752](https://github.com/Kong/kong/issues/12752) - Bumped lua-resty-events to 0.3.1. Optimized the memory usage. [#13097](https://github.com/Kong/kong/issues/13097) - Bumped lua-resty-lmdb to 1.6.0. Allowing page_size to be 1. [#13908](https://github.com/Kong/kong/issues/13908) - Bumped lua-resty-lmdb to 1.5.0. Added page_size parameter to allow overriding page size from caller side. [#12786](https://github.com/Kong/kong/issues/12786) ###### Default - Kong Gateway now supports Ubuntu 24.04 (Noble Numbat) with both open-source and Enterprise packages. [#13626](https://github.com/Kong/kong/issues/13626) - Bumped rpm dockerfile default base UBI 8 -> 9 [#13574](https://github.com/Kong/kong/issues/13574) - Bumped lua-resty-aws to 1.5.4 to fix a bug inside region prefix generation. [#12846](https://github.com/Kong/kong/issues/12846) - Bumped lua-resty-ljsonschema to 1.2.0, adding support for `null` as a valid option in `enum` types and properly calculation of utf8 string length instead of byte count [#13783](https://github.com/Kong/kong/issues/13783) - Bumped `ngx_wasm_module` to `9136e463a6f1d80755ce66c88c3ddecd0eb5e25d` [#12011](https://github.com/Kong/kong/issues/12011) - Bumped `Wasmtime` version to `26.0.0` [#12011](https://github.com/Kong/kong/issues/12011) - Bumped OpenSSL to 3.2.3 to fix unbounded memory growth with session handling in TLSv1.3 and other CVEs. [#13448](https://github.com/Kong/kong/issues/13448) - **Wasm**: Removed the experimental datakit Wasm filter [#14012](https://github.com/Kong/kong/issues/14012) ###### Features ###### CLI Command - Added the `kong drain` CLI command to make the `/status/ready` endpoint return a `503 Service Unavailable` response. [#13838](https://github.com/Kong/kong/issues/13838) ###### Core - Added a new feature for Kong Manager that supports multiple domains, enabling dynamic cross-origin access for Admin API requests. [#13664](https://github.com/Kong/kong/issues/13664) - Added an ADA dependency: WHATWG-compliant and fast URL parser. [#13120](https://github.com/Kong/kong/issues/13120) - Addded a new LLM driver for interfacing with the Hugging Face inference API. The driver supports both serverless and dedicated LLM instances hosted by Hugging Face for conversational and text generation tasks. [#13484](https://github.com/Kong/kong/issues/13484) - Increased the priority order of the correlation id to 100001 from 1 so that the plugin can be used with other plugins especially custom auth plugins. [#13581](https://github.com/Kong/kong/issues/13581) - Added a `tls.disable_http2_alpn()` function patch for disabling HTTP/2 ALPN when performing a TLS handshake. [#13709](https://github.com/Kong/kong/issues/13709) - Improved the output of the request debugger: - The resolution of field `total_time` is now in microseconds. - A new field, `total_time_without_upstream`, shows the latency only introduced by Kong. [#13460](https://github.com/Kong/kong/issues/13460) - **proxy-wasm**: Added support for Wasm filters to be configured via the `/plugins` Admin API. [#13843](https://github.com/Kong/kong/issues/13843) ###### PDK - Added `kong.service.request.clear_query_arg(name)` to PDK. [#13619](https://github.com/Kong/kong/issues/13619) - Array and Map type span attributes are now supported by the tracing PDK [#13818](https://github.com/Kong/kong/issues/13818) ###### Plugin - **Prometheus**: Increased the upper limit of `KONG_LATENCY_BUCKETS` to 6000 to enhance latency tracking precision. [#13588](https://github.com/Kong/kong/issues/13588) - **ai-proxy**: Disabled HTTP/2 ALPN handshake for connections on routes configured with AI-proxy. [#13735](http _[Truncated at 4000 characters — full notes: https://github.com/Kong/kong/releases/tag/3.9.0]_ ### 3.8.1 - Date: 2024-11-18 - Version: 3.8.1 - Original notes: https://github.com/Kong/kong/releases/tag/3.8.1 - Permalink: https://whatsnew.fyi/product/kong/releases/3.8.1 ### 3.8.0 - Date: 2024-09-11 - Version: 3.8.0 - Original notes: https://github.com/Kong/kong/releases/tag/3.8.0 - Permalink: https://whatsnew.fyi/product/kong/releases/3.8.0 - **fixed** — Fixed an inefficiency issue in the Luajit hashing algorithm - **changed** — Removed unnecessary DNS client initialization - **changed** — Improved latency performance when gzipping/gunzipping large data such as CP/DP config data - **deprecated** — Debian 10, CentOS 7, and RHEL 7 are no longer supported as of version 3.8.0.0 onward - **changed** — Bumped lua-resty-acme to 0.15.0 to support username/password auth with redis - **fixed** — Bumped lua-resty-aws to 1.5.3 to fix a bug related to STS regional endpoint - **fixed** — Bumped lua-resty-healthcheck from 3.0.1 to 3.1.0 to fix an issue that was causing high memory usage - **fixed** — Bumped lua-resty-lmdb to 1.4.3 to get fixes from upstream which resolved numerous race conditions and fixed a cursor issue - **fixed** — Bumped lua-resty-openssl to 1.5.1 to fix some issues including a potential use-after-free issue - **changed** — Bumped OpenResty to 1.25.3.2 to improve the performance of the LuaJIT hash computation - **changed** — Bumped PCRE2 to 10.44 to fix some bugs - **added** — Introduced a yieldable JSON library lua-resty-simdjson to improve latency significantly - **changed** — Made the RPM package relocatable with the default prefix set to / - **added** — Configure Wasmtime module cache when Wasm is enabled - **added** — Added ai_requests_total, ai_cost_total and ai_tokens_total metrics in the Prometheus plugin to start counting AI usage - **added** — Added a new configuration concurrency_limit for Queue to specify the number of delivery timers - **changed** — Append gateway info to upstream Via header and optionally to response Via header according to RFC7230 and RFC9110 - **added** — Implemented a new DNS client library with global caching for DNS records across workers and a new Status API /status/dns - **added** — Added support for unlimited body size when parameter max_allowed_file_size is 0 in get_raw_body - **added** — Extend kong.request.get_body and kong.request.get_raw_body to read from buffered file - **added** — Added a new PDK module kong.telemetry and function kong.telemetry.log to generate log entries for OpenTelemetry plugin ###### Kong ###### Performance ###### Performance - Fixed an inefficiency issue in the Luajit hashing algorithm [#13240](https://github.com/Kong/kong/issues/13240) ###### Core - Removed unnecessary DNS client initialization [#13479](https://github.com/Kong/kong/issues/13479) - Improved latency performance when gzipping/gunzipping large data (such as CP/DP config data). [#13338](https://github.com/Kong/kong/issues/13338) ###### Deprecations ###### Default - Debian 10, CentOS 7, and RHEL 7 reached their End of Life (EOL) dates on June 30, 2024. As of version 3.8.0.0 onward, Kong is not building installation packages or Docker images for these operating systems. Kong is no longer providing official support for any Kong version running on these systems. [#13468](https://github.com/Kong/kong/issues/13468) ###### Dependencies ###### Core - Bumped lua-resty-acme to 0.15.0 to support username/password auth with redis. [#12909](https://github.com/Kong/kong/issues/12909) - Bumped lua-resty-aws to 1.5.3 to fix a bug related to STS regional endpoint. [#12846](https://github.com/Kong/kong/issues/12846) - Bumped lua-resty-healthcheck from 3.0.1 to 3.1.0 to fix an issue that was causing high memory usage [#13038](https://github.com/Kong/kong/issues/13038) - Bumped lua-resty-lmdb to 1.4.3 to get fixes from the upstream (lmdb 0.9.33), which resolved numerous race conditions and fixed a cursor issue. [#12786](https://github.com/Kong/kong/issues/12786) - Bumped lua-resty-openssl to 1.5.1 to fix some issues including a potential use-after-free issue. [#12665](https://github.com/Kong/kong/issues/12665) - Bumped OpenResty to 1.25.3.2 to improve the performance of the LuaJIT hash computation. [#12327](https://github.com/Kong/kong/issues/12327) - Bumped PCRE2 to 10.44 to fix some bugs and tidy-up the release (nothing important) [#12366](https://github.com/Kong/kong/issues/12366) - Introduced a yieldable JSON library `lua-resty-simdjson`, which would improve the latency significantly. [#13421](https://github.com/Kong/kong/issues/13421) ###### Default - Bumped lua-protobuf 0.5.2 [#12834](https://github.com/Kong/kong/issues/12834) - Bumped LuaRocks from 3.11.0 to 3.11.1 [#12662](https://github.com/Kong/kong/issues/12662) - Bumped `ngx_wasm_module` to `96b4e27e10c63b07ed40ea88a91c22f23981db35` [#12011](https://github.com/Kong/kong/issues/12011) - Bumped `Wasmtime` version to `23.0.2` [#13567](https://github.com/Kong/kong/pull/13567) - Made the RPM package relocatable with the default prefix set to `/`. [#13468](https://github.com/Kong/kong/issues/13468) ###### Features ###### Configuration - Configure Wasmtime module cache when Wasm is enabled [#12930](https://github.com/Kong/kong/issues/12930) ###### Core - **prometheus**: Added `ai_requests_total`, `ai_cost_total` and `ai_tokens_total` metrics in the Prometheus plugin to start counting AI usage. [#13148](https://github.com/Kong/kong/issues/13148) - Added a new configuration `concurrency_limit`(integer, default to 1) for Queue to specify the number of delivery timers. Note that setting `concurrency_limit` to `-1` means no limit at all, and each HTTP log entry would create an individual timer for sending. [#13332](https://github.com/Kong/kong/issues/13332) - Append gateway info to upstream `Via` header like `1.1 kong/3.8.0`, and optionally to response `Via` header if it is present in the `headers` config of "kong.conf", like `2 kong/3.8.0`, according to `RFC7230` and `RFC9110`. [#12733](https://github.com/Kong/kong/issues/12733) - Starting from this version, a new DNS client library has been implemented and added into Kong, which is disabled by default. The new DNS client library has the following changes - Introduced global caching for DNS records across workers, significantly reducing the query load on DNS servers. - Introduced observable statistics for the new DNS client, and a new Status API `/status/dns` to retrieve them. - _[Truncated at 4000 characters — full notes: https://github.com/Kong/kong/releases/tag/3.8.0]_ ### 2.8.5 - Date: 2024-06-24 - Version: 2.8.5 - Original notes: https://github.com/Kong/kong/releases/tag/2.8.5 - Permalink: https://whatsnew.fyi/product/kong/releases/2.8.5 Download Kong 2.8.5 and run it now: https://konghq.com/install/ [Docker Image](https://hub.docker.com/_/kong/) Links: [2.8.5 Changelog](https://github.com/Kong/kong/blob/release/2.8.5/changelog/2.8.5/2.8.5.md) ### 3.7.1 - Date: 2024-06-21 - Version: 3.7.1 - Original notes: https://github.com/Kong/kong/releases/tag/3.7.1 - Permalink: https://whatsnew.fyi/product/kong/releases/3.7.1 - **fixed** — Fixed an inefficiency issue in the Luajit hashing algorithm ###### Kong ###### Performance ###### Performance - Fixed an inefficiency issue in the Luajit hashing algorithm [#13240](https://github.com/Kong/kong/issues/13240) ### 3.7.0 - Date: 2024-05-28 - Version: 3.7.0 - Original notes: https://github.com/Kong/kong/releases/tag/3.7.0 - Permalink: https://whatsnew.fyi/product/kong/releases/3.7.0 - **changed** — Improved proxy performance by refactoring internal hooking mechanism - **changed** — Sped up the router matching when the router_flavor is traditional_compatible or expressions - **changed** — Increased Opentelemetry queue max batch size to 200 - **changed** — AI Proxy upstream path for Anthropic llm/v1/chat route type changed from /v1/complete to /v1/messages - **changed** — Bumped atc-router from v1.6.0 to v1.6.2 - **changed** — Bumped libexpat to 2.6.2 - **changed** — Bumped lua-kong-nginx-module from 0.8.0 to 0.11.0 - **changed** — Bumped lua-protobuf to 0.5.1 - **changed** — Bumped lua-resty-acme to 0.13.0 - **changed** — Bumped lua-resty-aws from 1.3.6 to 1.4.1 - **changed** — Bumped lua-resty-lmdb from 1.4.1 to 1.4.2 - **changed** — Bumped lua-resty-openssl from 1.2.0 to 1.3.1 - **changed** — Bumped lua-resty-timer-ng to 0.2.7 - **changed** — Bumped PCRE from libpcre 8.45 to libpcre2 10.43 - **changed** — Bumped penlight to 1.14.0 - **added** — Added package tzdata to DEB Docker image for convenient timezone setting - **changed** — Bumped lua-resty-http to 0.17.2 - **changed** — Bumped LuaRocks from 3.9.2 to 3.11.0 - **changed** — Bumped ngx_wasm_module to 91d447ffd0e9bb08f11cc69d1aa9128ec36b4526 - **changed** — Bumped V8 version to 12.0.267.17 - **changed** — Bumped Wasmtime version to 19.0.0 ###### Kong ###### Performance ###### Performance - Improved proxy performance by refactoring internal hooking mechanism. [#12784](https://github.com/Kong/kong/issues/12784) - Sped up the router matching when the `router_flavor` is `traditional_compatible` or `expressions`. [#12467](https://github.com/Kong/kong/issues/12467) ###### Plugin - **Opentelemetry**: Increased queue max batch size to 200. [#12488](https://github.com/Kong/kong/issues/12488) ###### Breaking Changes ###### Plugin - **AI Proxy**: To support the new messages API of `Anthropic`, the upstream path of the `Anthropic` for `llm/v1/chat` route type has changed from `/v1/complete` to `/v1/messages`. [#12699](https://github.com/Kong/kong/issues/12699) ###### Dependencies ###### Core - Bumped atc-router from v1.6.0 to v1.6.2 [#12231](https://github.com/Kong/kong/issues/12231) - Bumped libexpat to 2.6.2 [#12910](https://github.com/Kong/kong/issues/12910) - Bumped lua-kong-nginx-module from 0.8.0 to 0.11.0 [#12752](https://github.com/Kong/kong/issues/12752) - Bumped lua-protobuf to 0.5.1 [#12834](https://github.com/Kong/kong/issues/12834) - Bumped lua-resty-acme to 0.13.0 [#12909](https://github.com/Kong/kong/issues/12909) - Bumped lua-resty-aws from 1.3.6 to 1.4.1 [#12846](https://github.com/Kong/kong/issues/12846) - Bumped lua-resty-lmdb from 1.4.1 to 1.4.2 [#12786](https://github.com/Kong/kong/issues/12786) - Bumped lua-resty-openssl from 1.2.0 to 1.3.1 [#12665](https://github.com/Kong/kong/issues/12665) - Bumped lua-resty-timer-ng to 0.2.7 [#12756](https://github.com/Kong/kong/issues/12756) - Bumped PCRE from the legacy libpcre 8.45 to libpcre2 10.43 [#12366](https://github.com/Kong/kong/issues/12366) - Bumped penlight to 1.14.0 [#12862](https://github.com/Kong/kong/issues/12862) ###### Default - Added package `tzdata` to DEB Docker image for convenient timezone setting. [#12609](https://github.com/Kong/kong/issues/12609) - Bumped lua-resty-http to 0.17.2. [#12908](https://github.com/Kong/kong/issues/12908) - Bumped LuaRocks from 3.9.2 to 3.11.0 [#12662](https://github.com/Kong/kong/issues/12662) - Bumped `ngx_wasm_module` to `91d447ffd0e9bb08f11cc69d1aa9128ec36b4526` [#12011](https://github.com/Kong/kong/issues/12011) - Bumped `V8` version to `12.0.267.17` [#12704](https://github.com/Kong/kong/issues/12704) - Bumped `Wasmtime` version to `19.0.0` [#12011](https://github.com/Kong/kong/issues/12011) - Improved the robustness of lua-cjson when handling unexpected input. [#12904](https://github.com/Kong/kong/issues/12904) ###### Features ###### Configuration - TLSv1.1 and lower versions are disabled by default in OpenSSL 3.x. [#12420](https://github.com/Kong/kong/issues/12420) - Introduced `nginx_wasm_main_shm_kv` configuration parameter, which enables Wasm filters to use the Proxy-Wasm operations `get_shared_data` and `set_shared_data` without namespaced keys. [#12663](https://github.com/Kong/kong/issues/12663) - **Schema**: Added a deprecation field attribute to identify deprecated fields [#12686](https://github.com/Kong/kong/issues/12686) - Added the `wasm_filters` configuration parameter for enabling individual filters [#12843](https://github.com/Kong/kong/issues/12843) ###### Core - Added `events:ai:response_tokens`, `events:ai:prompt_tokens` and `events:ai:requests` to the anonymous report to start counting AI usage [#12924](https://github.com/Kong/kong/issues/12924) - Improved config handling when the CP runs with the router set to the `expressions` flavor: - If mixed config is detected and a lower DP is attached to the CP, no config will be sent at all - If the expression is invalid on the CP, no config will be sent at all - If the expression is invalid on a lower DP, it will be sent to the DP and DP validation will catch this and communicate back to the CP (this could result in partial config application) [#12967](https://github.com/Kong/kong/issues/12967) - The route entity now _[Truncated at 4000 characters — full notes: https://github.com/Kong/kong/releases/tag/3.7.0]_ ### 3.6.1 - Date: 2024-03-04 - Version: 3.6.1 - Original notes: https://github.com/Kong/kong/releases/tag/3.6.1 - Permalink: https://whatsnew.fyi/product/kong/releases/3.6.1 - **changed** — increase Opentelemetry queue max batch size to 200 - **changed** — bump lua-resty-openssl to 1.2.1 - **changed** — TLSv1.1 and lower is by default disabled in OpenSSL 3.x - **fixed** — fix default value in kong.conf.default documentation from 1000 to 10000 for upstream_keepalive_max_requests option - **fixed** — set security level of gRPC's TLS to 0 when ssl_cipher_suite is set to old - **fixed** — fix missing router section for the output of the request-debugging - **fixed** — revert the hard-coded limitation of the ngx.read_body() API in OpenResty upstreams' new versions when downstream connections are in HTTP/2 or HTTP/3 stream modes - **fixed** — fix bug where low ulimit setting causes Kong to fail to start by decreasing lua-resty-timer-ng concurrency range from [512, 2048] to [256, 1024] ###### Kong ###### Performance ###### Plugin - **Opentelemetry**: increase queue max batch size to 200 [#12542](https://github.com/Kong/kong/issues/12542) ###### Dependencies ###### Core - Bumped lua-resty-openssl to 1.2.1 [#12669](https://github.com/Kong/kong/issues/12669) ###### Features ###### Configuration - now TLSv1.1 and lower is by default disabled in OpenSSL 3.x [#12556](https://github.com/Kong/kong/issues/12556) ###### Fixes ###### Configuration - Fixed default value in kong.conf.default documentation from 1000 to 10000 for upstream_keepalive_max_requests option. [#12648](https://github.com/Kong/kong/issues/12648) - Set security level of gRPC's TLS to 0 when ssl_cipher_suite is set to old [#12616](https://github.com/Kong/kong/issues/12616) ###### Core - Fix the missing router section for the output of the request-debugging [#12649](https://github.com/Kong/kong/issues/12649) - revert the hard-coded limitation of the ngx.read_body() API in OpenResty upstreams' new versions when downstream connections are in HTTP/2 or HTTP/3 stream modes. [#12666](https://github.com/Kong/kong/issues/12666) ###### Default - Fix a bug where the ulimit setting (open files) is low Kong will fail to start as the lua-resty-timer-ng exhausts the available worker_connections. Decrease the concurrency range of the lua-resty-timer-ng library from [512, 2048] to [256, 1024] to fix this bug. [#12608](https://github.com/Kong/kong/issues/12608) ###### Kong-Manager