Startup/update time for instances with many clusters can be significantly reduced by setting the runtime flag envoy.restart_features.use_fast_protobuf_hash to true. This is somewhat experimental, so is default-off for this release.
An rbac stat now has its name right instead of an accidentally concatenated string.
host header will now be discarded if :authority header is present; compliant with RFC9113, but if it's not compliant with your upstream usage be wary of this update. Setting runtime flag envoy.reloadable_features.http2_discard_host_header to false will revert it.