[release/v1.7] update docs and add release notes (#8947)

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

Author: cnvergence

release-notes/v1.7.3.yaml

@@ -0,0 +1,31 @@
+date: May 9, 2026
+
+# Changes that are expected to cause an incompatibility with previous versions, such as deletions or modifications to existing APIs.
+breaking changes: |
+
+# Updates addressing vulnerabilities, security flaws, or compliance requirements.
+security updates: |
+  Bumped golang to `1.25.10` for including latest security fixes.
+  Bumped `google.golang.org/grpc` to v1.79.3 to address CVE-2026-33186 (Critical, gRPC-Go authorization bypass via non-canonical HTTP/2 `:path` header).
+  Bumped `go.opentelemetry.io/otel/sdk` to v1.40.0 to address CVE-2026-24051 (High, OpenTelemetry Go SDK path hijacking on macOS/Darwin).
+
+# New features or capabilities added in this release.
+new features: |
+
+
+bug fixes: |
+  Fixed a control plane panic caused by concurrent Status mutation racing with the watchable Map coalesce goroutine.
+  Fixed `ws` and `wss` Backend appProtocols to force HTTP/1.1 upstream connections instead of negotiating HTTP/2, avoiding compatibility issues with WebSocket backends that do not support RFC 8441 extended CONNECT.
+  Fixed status conditions not being updated when a route is rejected due to multiple errors.
+  Fixed benchmark JSON report emitting `0` for p99 and p999 percentiles by using the nearest Nighthawk histogram percentiles.
+  Fixed active HTTP health checks to use Backend endpoint hostnames before falling back to the effective Route hostname.
+
+# Enhancements that improve performance.
+performance improvements: |
+
+
+# Deprecated features or APIs.
+deprecations: |
+
+# Other notable changes not covered by the above sections.
+Other changes: |

site/content/en/news/releases/notes/v1.7.3.md

@@ -0,0 +1,31 @@
+---
+title: "v1.7.3"
+publishdate: 2026-05-09
+---
+
+Date: May 9, 2026
+
+## Breaking changes
+-
+
+## Security updates
+- Bumped golang to `1.25.10` for including latest security fixes.
+- Bumped `google.golang.org/grpc` to v1.79.3 to address CVE-2026-33186 (Critical, gRPC-Go authorization bypass via non-canonical HTTP/2 `:path` header).
+- Bumped `go.opentelemetry.io/otel/sdk` to v1.40.0 to address CVE-2026-24051 (High, OpenTelemetry Go SDK path hijacking on macOS/Darwin).
+
+## New features
+-
+
+## Bug fixes
+- Fixed a control plane panic caused by concurrent Status mutation racing with the watchable Map coalesce goroutine.
+- Fixed `ws` and `wss` Backend appProtocols to force HTTP/1.1 upstream connections instead of negotiating HTTP/2, avoiding compatibility issues with WebSocket backends that do not support RFC 8441 extended CONNECT.
+- Fixed status conditions not being updated when a route is rejected due to multiple errors.
+- Fixed benchmark JSON report emitting `0` for p99 and p999 percentiles by using the nearest Nighthawk histogram percentiles.
+- Fixed active HTTP health checks to use Backend endpoint hostnames before falling back to the effective Route hostname.
+
+## Performance improvements
+
+-
+
+## Other changes
+-

site/layouts/shortcodes/helm-version.html

@@ -21,8 +21,8 @@
 {{- "v1.6.7" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "v1.7") -}}
-{{- "v1.7.2" -}}
+{{- "v1.7.3" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "docs") -}}
-{{- "v1.7.2" -}}
+{{- "v1.7.3" -}}
 {{- end -}}

site/layouts/shortcodes/yaml-version.html

@@ -21,8 +21,8 @@
 {{- "v1.6.7" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "v1.7") -}}
-{{- "v1.7.2" -}}
+{{- "v1.7.3" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "docs") -}}
-{{- "v1.7.2" -}}
+{{- "v1.7.3" -}}
 {{- end -}}