v2.5.2-stable Release

Version 2.5.2 of Sidecar includes security dependency updates and support for multi-architecture container images.

Changed

Component	Update
Container images	As of this version, Sidecar supports multi-architecture images.
Go standard library	Upgraded from 1.25.13 to 1.26.6
x/net	Upgraded from 0.55.0 to 0.56.0
fasthttp	Upgraded from 1.53.0 to 1.70.0.

Component	Severity	Affected Version	Fixed Version	Description
stdlib	High	`pkg:golang/[email protected]`; affected range `<1.26.6`	1.26.6	Fixed a panic when parsing an invalid SVCB or HTTPS RR where the size of a parameter value overflows the message buffer. EPSS score: 0.339% (27th percentile).
x/net	High	`pkg:golang/golang.org/x/[email protected]`; affected range `<0.56.0`	0.56.0	Fixed a panic when parsing an invalid SVCB or HTTPS RR where the size of a parameter value overflows the message buffer. EPSS score: 0.339% (27th percentile).
fasthttp	High	1.53.0	1.70.0	Fixed authorization bypass through user-controlled key in `pkg:golang/github.com/valyala/[email protected]` .