docs: Release 3.36.0 (#1478)

Author: TheThingsBot

doc/config/_default/config.toml

@@ -23,7 +23,7 @@ pygmentsUseClasses = true
   github_repository = "https://github.com/TheThingsIndustries/lorawan-stack-docs"
   github_repository_edit = "https://github.com/TheThingsIndustries/lorawan-stack-docs/blob/master/doc/content"
   tts_github_repository = "https://github.com/TheThingsNetwork/lorawan-stack"
-  version = "3.35.2"
+  version = "3.36.0"
 
 [markup]
   [markup.goldmark]

doc/content/enterprise/aws/ecs/changelog/index.md

@@ -8,6 +8,27 @@ All meaningful changes to templates are documented in this file.
 
 ## Unreleased
 
+### `5-6-ecs-proxy`
+
+- Increase the allowed number of concurrent streams (downstream) per HTTP/2 connection for the Identity Server proxy.
+- Increase the allowed number of concurrent streams (downstream) per HTTP/2 connection for the main proxy.
+- Increase the per-connection buffer limit for the main proxy listeners and Identity Server clusters.
+- Add max-concurrent-streams to IS proxy upstream connections
+
+### `1-1-vpc`
+
+- Add optional CloudWatch Logs support for NLB access logs.
+
+### AMI/BYOL template
+
+- Add `TTGCTLSCertificateSecretARN`, `TTGCTLSCertificate` and `TTGCTLSCertificateKey` parameters for specifying a separate TTGC client TLS certificate.
+
+### Proxy
+
+- Upgrade to Envoy `1.31.10`.
+
+## 3.35.2
+
 ### `4-2a-configuration`
 
 - Add `DownlinkQueueCapacity` parameter.

doc/content/whats-new/3.36.0.md

@@ -0,0 +1,34 @@
+---
+date: 2026-03-27T18:01:53Z
+title: "3.36.0"
+featured: {
+  added: [],
+  changed: [],
+  fixed: []
+}
+---
+
+### Added
+
+- Trust cache TTL and size for Basics Station CUPS server with defaults set to 5 mins and 1024 entries.
+
+### Changed
+
+- Network Operations Center now uses combined materialized views for application statistics queries, improving performance by eliminating JOINs and using tiered aggregation (hourly for <=7 days, daily for >7 days).
+  - This requires a Network Operations Center database migration (`ttn-lw-stack noc-db migrate`).
+- Network Operations Center now uses existing continuous aggregates for ActiveMetrics queries (`QueryApplicationsActiveMetrics`, `QueryGatewaysActiveMetrics`), improving performance by using pre-aggregated data with tiered aggregation (hourly for <=3 days, daily for >3 days).
+- Network Operations Center now uses daily continuous aggregates for DataRatesPacketCount queries, improving performance by using tiered aggregation (hourly for <=7 days, daily for >7 days).
+  - This requires a Network Operations Center database migration (`ttn-lw-stack noc-db migrate`).
+- Network Operations Center now uses tiered continuous aggregates for Channel queries (`QueryEndDeviceChannelsPacketCount`, `QueryGatewayChannelsPacketCount`, `QueryGatewayChannelsUtilization`), improving performance by using hourly/daily aggregation and removing `time_bucket_gapfill()`.
+  - This requires a Network Operations Center database migration (`ttn-lw-stack noc-db migrate`).
+  - Note: `QueryGatewayChannelsUtilization` no longer fills gaps with zeros.
+- Improve certificate selection logic to use the last CA in the chain.
+
+### Fixed
+
+- `TenantRegistry.ReleaseGatewayEUI` now correctly releases the gateway EUI. This only impacts operations performed by tenant administrators.
+- The timestamp of the udp packet is now always correct when the 'Schedule downlink late' is enabled for the gateway and downlink scheduling hits the duty cycle limit.
+
+### Security
+
+- HTML-escape gRPC error messages and error detail attributes to prevent reflected XSS in API error responses.