22 Jan 2026

#### Bug fixes

- OpenStack bugfix: request etcd compaction periodically regardless of how long resync takes, or if periodic resync is disabled. 

#### Other changes

- Updated tigera-operator RBAC: create mutatingwebhooks, and update mutatingwebhooks. update restricted to specific resourceNames: envoy-gateway-topology-injector.tigera-gateway [calico 11688](https://github.com/projectcalico/calico/pull/11688) (@nelljerram)
- Upgrade Envoy Gateway 1.3.2 -> 1.5.7 [calico 11673](https://github.com/projectcalico/calico/pull/11673) (@skoryk-oleksandr)
- Add configurable field `resync_max_interval_secs` that defines the max time allowed between successful periodic resyncs. Log an error message if the interval exceeds the threshold. [calico 11647](https://github.com/projectcalico/calico/pull/11647) (@nelljerram)
- OpenStack: make periodic compaction loop independent of resync [calico 11574](https://github.com/projectcalico/calico/pull/11574) (@nelljerram)
- Pick IPSet changes [calico 11472](https://github.com/projectcalico/calico/pull/11472) (@mazdakn)
