 release.</p></a><a class=entry href=https://github.com/istio/istio/compare/1.0.7...1.0.8><h5>SOURCE CHANGES</h5><p>Inspect the full set of source code changes.</p></a></div><h2 id=bug-fixes>Bug fixes</h2><ul><li>Fix issue where Citadel could generate a new root CA if it cannot contact the Kubernetes API server, causing mutual TLS verification to incorrectly fail (<a href=https://github.com/istio/istio/issues/14512>Issue 14512</a>).</li></ul><h2 id=small-enhancements>Small enhancements</h2><ul><li>Update Ci