chore(deps): bump github.com/zalando/skipper from 0.22.104 to 0.27.26 in /plugins/skipper

[dependabot]

Bumps github.com/zalando/skipper from 0.22.104 to 0.27.26.

Release notes

Sourced from github.com/zalando/skipper's releases.

v0.27.26

Changes

security advisory: GHSA-8qqm-fp2q-v734

Our fix is to document the Rego policy for max body exceeding mitigation.

Reference: https://opensource.zalando.com/skipper/reference/filters/#opaauthorizerequestwithbody

doc: Rego policy for max body exceeding (#4126)

reporter: @​sec-reex

Multiarch Docker image

Multiarch Docker image is available in GitHub's docker registry:

docker run -it ghcr.io/zalando/skipper:v0.27.26 skipper --help

v0.27.25

Changes

zone aware routing: latency by zone + rps by zone (#4111)

This PR introduces two changes:

1. When I operate skipper-ingress controller across multiple availability zones, I want backend request latency labeled by the destination endpoint's zone, So that I can plot per-zone latency and RPS by zone

RPS by zone:

Latency by zone:

2. When I run skipper-ingress that consume routes from RouteSRV, I want each backend endpoint's availability zone to survive the eskip wire format, So that per-zone backend latency can be plotted when RouteSRV is used, the same as in the in-process kubernetes dataclient mode - ref: zalando/skipper#4103

Result: In the test cluster, there were 2 instances of skipper-ingress

... (truncated)

Commits

• 1be950c doc: Rego policy for max body exceeding (#4126)
• 2d2524f zone aware routing: latency by zone + rps by zone (#4111)
• 2948b38 Fix ForwardBackend filters initialization in routegroup (#4122)
• c26883b maintainer: propose to add @​MustafaSaber to the maintainers (#4123)
• 82d5831 cleanup: go-report badge retired (#4121)
• 239c40e feat: add opt-in support for Prometheus native histograms (#4108)
• d6668f8 build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#4114)
• a01fa1e build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 (#4...
• 03440cb build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 (#4116)
• a7aaf07 build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#4118)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[netlify]

✅ Deploy Preview for teal-sprinkles-4c7f14 canceled.

Name	Link
🔨 Latest commit	940cdea
🔍 Latest deploy log	https://app.netlify.com/projects/teal-sprinkles-4c7f14/deploys/6a5aa3d991e9260008ebf397