><h2 id=security>Security</h2><ul><li><p><strong>Added</strong> option to allow users to enable token exchange for their XDS flows, which exchanges a k8s token for a token that can be authenticated by their XDS servers.
(<a href=https://github.com/istio/istio/issues/29943>Issue #29943</a>)</p></li><li><p><strong>Added</strong> OIDC JWT authenticator that supports both JWKS-URI and OIDC discovery. The OIDC JWT authenticator will be used when configured through the JWT_RULE env variable. (<a href=https://gith