3>Issue #28003</a>)</p></li><li><p><strong>Fixed</strong> remove endpoints when the new labels in <code>WorkloadEntry</code> do not match the <code>workloadSelector</code> in <code>ServiceEntry</code>.
(<a href=https://github.com/istio/istio/issues/25678>Issue #25678</a>)</p></li><li><p><strong>Fixed</strong> when a node has multiple IP addresses (e.g., a VM in the mesh expansion scenario),
Istio Proxy will now bind <code>inbound</code> listeners to the first applicable address in the list
(new behavior) ra