Update release notes for 5.3.0

Author: javorszky

content/nic/changelog/_index.md

@@ -25,6 +25,115 @@ For older releases, check the changelogs for previous years: [2024]({{< ref "/ni
 {{< /details >}}
 
 
+
+## 5.3.0
+
+08 Dec 2025
+
+### {{% icon rocket %}} Features
+- [8292](https://github.com/nginx/kubernetes-ingress/pull/8292) Add sslverify for jwksuri
+- [8447](https://github.com/nginx/kubernetes-ingress/pull/8447) Add support for ssl ciphers related annotations
+- [8340](https://github.com/nginx/kubernetes-ingress/pull/8340) Implement oidc front channel logout nginx directives
+- [8495](https://github.com/nginx/kubernetes-ingress/pull/8495) Add oidc timeout customization to configmap
+- [8453](https://github.com/nginx/kubernetes-ingress/pull/8453) Support namespaced upstream service reference in virtualserver
+- [8508](https://github.com/nginx/kubernetes-ingress/pull/8508) Add rewrite-target annotation
+- [8548](https://github.com/nginx/kubernetes-ingress/pull/8548) Add `client-body-buffer-size` directive to ingress annotations & configmap
+- [8557](https://github.com/nginx/kubernetes-ingress/pull/8557) Add client-body-buffer-size directive to virtualserver
+- [8556](https://github.com/nginx/kubernetes-ingress/pull/8556) Add oidc policy idp tls validation
+- [8533](https://github.com/nginx/kubernetes-ingress/pull/8533) Extend cache policy for more configurable parameters
+
+### {{% icon bug %}} Fixes
+- [8299](https://github.com/nginx/kubernetes-ingress/pull/8299) Remove type field for objects with schema ref
+- [8455](https://github.com/nginx/kubernetes-ingress/pull/8455) Cleanup stale socket files on startup
+- [8460](https://github.com/nginx/kubernetes-ingress/pull/8460) Wrap oidc fclo initiated test in a while loop
+
+### {{% icon arrow-up %}} Dependencies
+- [8553](https://github.com/nginx/kubernetes-ingress/pull/8553) Bump Go dependencies
+- [8244](https://github.com/nginx/kubernetes-ingress/pull/8244), [8279](https://github.com/nginx/kubernetes-ingress/pull/8279), [8284](https://github.com/nginx/kubernetes-ingress/pull/8284), [8315](https://github.com/nginx/kubernetes-ingress/pull/8315), [8324](https://github.com/nginx/kubernetes-ingress/pull/8324), [8334](https://github.com/nginx/kubernetes-ingress/pull/8334) & [8384](https://github.com/nginx/kubernetes-ingress/pull/8384) Bump Docker dependencies
+- [8581](https://github.com/nginx/kubernetes-ingress/pull/8581) Update python:3.14-trixie docker digest to d88b120 (main)
+- [8577](https://github.com/nginx/kubernetes-ingress/pull/8577) Update module golang.org/x/tools to v0.39.0 (main)
+- [8578](https://github.com/nginx/kubernetes-ingress/pull/8578) Update module mvdan.cc/gofumpt to v0.9.2 (main)
+- [8569](https://github.com/nginx/kubernetes-ingress/pull/8569) Update aws-sdk-go-v2 monorepo (main)
+- [8560](https://github.com/nginx/kubernetes-ingress/pull/8560) Update pre-commit hook rhysd/actionlint to v1.7.9 (main)
+- [8552](https://github.com/nginx/kubernetes-ingress/pull/8552) Update kubernetes packages to v0.34.2 (main)
+- [8544](https://github.com/nginx/kubernetes-ingress/pull/8544) Update aws-sdk-go-v2 monorepo (main)
+- [8524](https://github.com/nginx/kubernetes-ingress/pull/8524) Update module github.com/aws/aws-sdk-go-v2/config to v1.31.18 (main)
+- [8526](https://github.com/nginx/kubernetes-ingress/pull/8526) Update pre-commit hook psf/black-pre-commit-mirror to v25.11.0 (main)
+- [8511](https://github.com/nginx/kubernetes-ingress/pull/8511) Update docker-registry.nginx.com/nap-dos/app_protect_dos_arb docker tag to v1.2.0 (main)
+- [8514](https://github.com/nginx/kubernetes-ingress/pull/8514) Update test containers to v0.2.6
+- [8596](https://github.com/nginx/kubernetes-ingress/pull/8513, https://github.com/nginx/kubernetes-ingress/pull/8596) Update registry.k8s.io/external-dns/external-dns docker tag to v0.20.0 (main)
+- [8492](https://github.com/nginx/kubernetes-ingress/pull/8492) Update dependency clusterrole to rbac.authorization.k8s.io/v1 (main)
+- [8499](https://github.com/nginx/kubernetes-ingress/pull/8499) Update quay.io/jetstack/cert-manager-webhook docker tag to v1.19.1 (main)
+- [8498](https://github.com/nginx/kubernetes-ingress/pull/8498) Update quay.io/jetstack/cert-manager-controller docker tag to v1.19.1 (main)
+- [8497](https://github.com/nginx/kubernetes-ingress/pull/8497) Update quay.io/jetstack/cert-manager-cainjector docker tag to v1.19.1 (main)
+- [8503](https://github.com/nginx/kubernetes-ingress/pull/8493, https://github.com/nginx/kubernetes-ingress/pull/8503) Update dependency go to v1.25.4 (main)
+- [8475](https://github.com/nginx/kubernetes-ingress/pull/8475) Update kindest/node docker tag to v1.34.0 (main)
+- [8484](https://github.com/nginx/kubernetes-ingress/pull/8484) Update coredns/coredns docker tag to v1.13.1 (main)
+- [8483](https://github.com/nginx/kubernetes-ingress/pull/8483) Update aws-sdk-go-v2 monorepo (main)
+- [8486](https://github.com/nginx/kubernetes-ingress/pull/8486) Update renovate to bump minor go versions
+- [8465](https://github.com/nginx/kubernetes-ingress/pull/8465) Update module github.com/nginx/nginx-prometheus-exporter to v1.5.1 (main)
+- [8551](https://github.com/nginx/kubernetes-ingress/pull/8474, https://github.com/nginx/kubernetes-ingress/pull/8551) Update golangci/golangci-lint docker tag to v2.6.2 (main)
+- [8464](https://github.com/nginx/kubernetes-ingress/pull/8464) Update aws-sdk-go-v2 monorepo (main)
+- [8599](https://github.com/nginx/kubernetes-ingress/pull/8436, https://github.com/nginx/kubernetes-ingress/pull/8490, https://github.com/nginx/kubernetes-ingress/pull/8549, https://github.com/nginx/kubernetes-ingress/pull/8562, https://github.com/nginx/kubernetes-ingress/pull/8579, https://github.com/nginx/kubernetes-ingress/pull/8587, https://github.com/nginx/kubernetes-ingress/pull/8599) Update ghcr.io/nginx/dependencies/nginx-ubi:ubi8 docker digest to fa931e9 (main)
+- [8445](https://github.com/nginx/kubernetes-ingress/pull/8445) Use renovate to monitor test data yaml files
+- [8543](https://github.com/nginx/kubernetes-ingress/pull/8450, https://github.com/nginx/kubernetes-ingress/pull/8462, https://github.com/nginx/kubernetes-ingress/pull/8482, https://github.com/nginx/kubernetes-ingress/pull/8543) Update python:3.14-bookworm docker digest to 407cd1c (main)
+- [8542](https://github.com/nginx/kubernetes-ingress/pull/8448, https://github.com/nginx/kubernetes-ingress/pull/8471, https://github.com/nginx/kubernetes-ingress/pull/8542) Update debian:12-slim docker digest to 936abff (main)
+- [8428](https://github.com/nginx/kubernetes-ingress/pull/8428) Update module github.com/cert-manager/cert-manager to v1.19.1 (main)
+- [8575](https://github.com/nginx/kubernetes-ingress/pull/8439, https://github.com/nginx/kubernetes-ingress/pull/8451, https://github.com/nginx/kubernetes-ingress/pull/8558, https://github.com/nginx/kubernetes-ingress/pull/8575) Update redhat/ubi8 docker digest to a444712 (main)
+- [8440](https://github.com/nginx/kubernetes-ingress/pull/8440) Update aws-sdk-go-v2 monorepo (main)
+- [8401](https://github.com/nginx/kubernetes-ingress/pull/8401) Upgrade github.com/nginx/nginx-plus-go-client/v3 to v3.0.1
+- [8598](https://github.com/nginx/kubernetes-ingress/pull/8437, https://github.com/nginx/kubernetes-ingress/pull/8449, https://github.com/nginx/kubernetes-ingress/pull/8461, https://github.com/nginx/kubernetes-ingress/pull/8491, https://github.com/nginx/kubernetes-ingress/pull/8501, https://github.com/nginx/kubernetes-ingress/pull/8550, https://github.com/nginx/kubernetes-ingress/pull/8563, https://github.com/nginx/kubernetes-ingress/pull/8580, https://github.com/nginx/kubernetes-ingress/pull/8598) Update ghcr.io/nginx/dependencies/nginx-ubi:ubi9 docker digest to aa99558 (main)
+- [8589](https://github.com/nginx/kubernetes-ingress/pull/8432, https://github.com/nginx/kubernetes-ingress/pull/8589) Update redhat/ubi9-minimal docker tag to v9.7-1764578379 (main)
+- [8572](https://github.com/nginx/kubernetes-ingress/pull/8396, https://github.com/nginx/kubernetes-ingress/pull/8476, https://github.com/nginx/kubernetes-ingress/pull/8572) Update module github.com/gruntwork-io/terratest to v0.54.0 (main)
+- [8588](https://github.com/nginx/kubernetes-ingress/pull/8431, https://github.com/nginx/kubernetes-ingress/pull/8588) Update redhat/ubi9 docker tag to v9.7-1764578509 (main)
+- [8429](https://github.com/nginx/kubernetes-ingress/pull/8429) Update module github.com/cert-manager/cert-manager to v1.19.0 (main)
+- [8427](https://github.com/nginx/kubernetes-ingress/pull/8427) Update renovate pr&#39;s in github workflow
+- [8424](https://github.com/nginx/kubernetes-ingress/pull/8424) Allow renovate to run postupgradetasks
+- [8397](https://github.com/nginx/kubernetes-ingress/pull/8397) Correct space in github actions, update renovate syntax
+- [8406](https://github.com/nginx/kubernetes-ingress/pull/8406) Update python docker tag to v3.14 (main)
+- [8559](https://github.com/nginx/kubernetes-ingress/pull/8405, https://github.com/nginx/kubernetes-ingress/pull/8525, https://github.com/nginx/kubernetes-ingress/pull/8559) Update pre-commit hook asottile/pyupgrade to v3.21.2 (main)
+- [8502](https://github.com/nginx/kubernetes-ingress/pull/8389, https://github.com/nginx/kubernetes-ingress/pull/8438, https://github.com/nginx/kubernetes-ingress/pull/8502) Update golang:1.25-alpine docker digest to 182059d (main)
+- [8387](https://github.com/nginx/kubernetes-ingress/pull/8387) Update dependency pyyaml to v6.0.3 (main)
+- [8388](https://github.com/nginx/kubernetes-ingress/pull/8388) Update dependency wrapt to v1.17.3 (main)
+- [8381](https://github.com/nginx/kubernetes-ingress/pull/8381) Update renovate configuration
+- [8375](https://github.com/nginx/kubernetes-ingress/pull/8375) Update docker/login-action action to v3.6.0
+- [8466](https://github.com/nginx/kubernetes-ingress/pull/8366, https://github.com/nginx/kubernetes-ingress/pull/8443, https://github.com/nginx/kubernetes-ingress/pull/8466) Update balabit/syslog-ng docker tag to v4.10.2 (main)
+- [8362](https://github.com/nginx/kubernetes-ingress/pull/8362) Update examples with keycloak 26.x
+- [8350](https://github.com/nginx/kubernetes-ingress/pull/8350) Update dependency cffi to v2
+- [8356](https://github.com/nginx/kubernetes-ingress/pull/8356) Update peter-evans/dockerhub-description action to v5
+- [8355](https://github.com/nginx/kubernetes-ingress/pull/8355) Update dependency grpcio to v1.75.1
+- [8349](https://github.com/nginx/kubernetes-ingress/pull/8349) Update k8s.io/utils digest to bc988d5
+- [8337](https://github.com/nginx/kubernetes-ingress/pull/8337) Update module github.com/golang-jwt/jwt/v4 to v5
+- [8343](https://github.com/nginx/kubernetes-ingress/pull/8343) Update actions/cache action to v4.3.0
+- [8344](https://github.com/nginx/kubernetes-ingress/pull/8344) Update dependency certifi to v2025.8.3
+- [8332](https://github.com/nginx/kubernetes-ingress/pull/8332) Update ossf/scorecard-action action to v2.4.3
+- [8333](https://github.com/nginx/kubernetes-ingress/pull/8333) Update dependency pycparser to v2.23
+- [8582](https://github.com/nginx/kubernetes-ingress/pull/8326, https://github.com/nginx/kubernetes-ingress/pull/8564, https://github.com/nginx/kubernetes-ingress/pull/8582) Update module github.com/gkampitakis/go-snaps to v0.5.17 (main)
+- [8323](https://github.com/nginx/kubernetes-ingress/pull/8323) Update dependency cryptography to v46.0.2
+- [8309](https://github.com/nginx/kubernetes-ingress/pull/8309) Update aws-sdk-go-v2 monorepo
+- [8312](https://github.com/nginx/kubernetes-ingress/pull/8312) Update dependency requests to v2.32.5
+- [8584](https://github.com/nginx/kubernetes-ingress/pull/8307, https://github.com/nginx/kubernetes-ingress/pull/8374, https://github.com/nginx/kubernetes-ingress/pull/8570, https://github.com/nginx/kubernetes-ingress/pull/8584) Update docker/dockerfile docker tag to v1.20 (main)
+- [8595](https://github.com/nginx/kubernetes-ingress/pull/8308, https://github.com/nginx/kubernetes-ingress/pull/8459, https://github.com/nginx/kubernetes-ingress/pull/8510, https://github.com/nginx/kubernetes-ingress/pull/8565, https://github.com/nginx/kubernetes-ingress/pull/8576, https://github.com/nginx/kubernetes-ingress/pull/8595) Update quay.io/keycloak/keycloak docker tag to v26.4.7 (main)
+- [8300](https://github.com/nginx/kubernetes-ingress/pull/8300) Chore(deps): bump the actions group across 1 directory with 5 updates
+- [8298](https://github.com/nginx/kubernetes-ingress/pull/8298) Chore: configure renovate
+- [8566](https://github.com/nginx/kubernetes-ingress/pull/8286, https://github.com/nginx/kubernetes-ingress/pull/8369, https://github.com/nginx/kubernetes-ingress/pull/8423, https://github.com/nginx/kubernetes-ingress/pull/8539, https://github.com/nginx/kubernetes-ingress/pull/8566) [pre-commit.ci] pre-commit autoupdate
+- [8287](https://github.com/nginx/kubernetes-ingress/pull/8287) Chore(deps): bump the python group with 5 updates
+- [8275](https://github.com/nginx/kubernetes-ingress/pull/8275) Chore(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6 in the actions group
+- [8270](https://github.com/nginx/kubernetes-ingress/pull/8270) Chore(deps): bump the python group with 5 updates
+- [8269](https://github.com/nginx/kubernetes-ingress/pull/8269) Chore(deps): bump the actions group with 2 updates
+- [8252](https://github.com/nginx/kubernetes-ingress/pull/8252) Bump preflight version to v1.14.1
+- [8254](https://github.com/nginx/kubernetes-ingress/pull/8248, https://github.com/nginx/kubernetes-ingress/pull/8254) Chore(deps): bump python from `d99178e` to `a805109` in /tests
+- [8263](https://github.com/nginx/kubernetes-ingress/pull/8249, https://github.com/nginx/kubernetes-ingress/pull/8263) Chore(deps): bump github/codeql-action from 3.30.1 to 3.30.3 in the actions group
+- [8243](https://github.com/nginx/kubernetes-ingress/pull/8243) Chore(deps): bump the python group with 2 updates
+
+### {{% icon download %}} Upgrade
+- For NGINX, use the 5.3.0 images from our [DockerHub](https://hub.docker.com/r/nginx/nginx-ingress/tags?page=1&ordering=last_updated&name=5.3.0), [GitHub Container](https://github.com/nginx/kubernetes-ingress/pkgs/container/kubernetes-ingress), [Amazon ECR Public Gallery](https://gallery.ecr.aws/nginx/nginx-ingress) or [Quay.io](https://quay.io/repository/nginx/nginx-ingress).
+- For NGINX Plus, use the 5.3.0 images from the F5 Container registry or build your own image using the 5.3.0 source code.
+- For Helm, use version 2.4.0 of the chart.
+
+### {{% icon life-buoy %}} Supported Platforms
+We will provide technical support for NGINX Ingress Controller on any Kubernetes platform that is currently supported by its provider and that passes the Kubernetes conformance tests. This release was fully tested on the following Kubernetes versions: 1.27-1.34.
+
 ## 5.3.0
 
 08 Dec 2025