27 Apr 2021

#### Bug fixes

 - Fix that calico/node would fail to set NetworkUnavailable to false for etcd clusters with mismatched nodenames [node #946](https://github.com/projectcalico/node/pull/946) (@caseydavenport)
 - Fixes a bug where IPv6 networks were not handled properly by the failsafe rules [felix #2785](https://github.com/projectcalico/felix/pull/2785) (@mgleung)
 - In BPF mode: Fix that changing the type of a service or having multiple services with overlapping external IPs would result in incorrect load balancing, even after the overlap was resolved. [felix #2778](https://github.com/projectcalico/felix/pull/2778) (@fasaxc)
 - Properly report not found when WorkloadEndpoint doesn't exist. Fixes https://github.com/projectcalico/calico/issues/4235 @tommasopozzetti [libcalico-go #1401](https://github.com/projectcalico/libcalico-go/pull/1401) (@caseydavenport)

#### Other changes

 - FailsafeInboundHostPorts & FailsafeOutboundHostPorts now support restricting to specific cidrs. New format <protocol>:<net>:<port> [felix #2716](https://github.com/projectcalico/felix/pull/2716) (@mgleung)
