chore(1.4.1): CHANGELOG and version updates (#4317)

* chore(CHANGELOG): 1.4.1 (and, honestly, final 1.4.0) CHANGELOG

Signed-off-by: Flynn <emissary@flynn.kodachi.com>

* chore(v1.4.1): bump version numbers for 1.4.1

Signed-off-by: Flynn <emissary@flynn.kodachi.com>

---------

Signed-off-by: Flynn <emissary@flynn.kodachi.com>

Author: kflynn

CHANGELOG/1.4-CHANGELOG.md

@@ -2,9 +2,60 @@
 
 ## Table of Contents
 
+- [v1.4.1](#v141)
+- [v1.4.0](#v140)
 - [v1.4.0-rc.2](#v140-rc2)
 - [v1.4.0-rc.1](#v140-rc1)
 
+# v1.4.1
+
+## Changes Since v1.4.0
+
+### BackendTLSPolicy
+
+- BackendTLSPolicy supports only a single `targetRef` per policy while Gateway API works through edge cases around representing the status of multiple `targetRefs` in a single policy. This restriction is expected to be lifted in a future release. ([#4316], [#4298])
+- SAN validation in BackendTLSPolicy is correctly marked as standard. ([#4194])
+- BackendTLSPolicy `status` is correctly marked as a subresource. ([#4245])
+
+### Conformance
+
+- Conformance tests for mesh routing with weights have been made faster. ([#4315])
+- BackendTLSPolicy conformance tests are included in the GATEWAY-HTTP profile. ([#4223])
+
+### Thanks to
+
+[Ciara Stacke], [Lior Lieberman], [Nick Young], [Norwin Schnyder], [Ricardo Pchevuzinske Katz], and [zirain]
+
+[Ciara Stacke]:https://github.com/ciarams87
+[Lior Lieberman]:https://github.com/LiorLieberman
+[Nick Young]:https://github.com/youngnick
+[Norwin Schnyder]:https://github.com/snorwin
+[Ricardo Pchevuzinske Katz]:https://github.com/rikatz
+[zirain]:https://github.com/zirain
+
+[#4194]: https://github.com/kubernetes-sigs/gateway-api/pull/4194
+[#4223]: https://github.com/kubernetes-sigs/gateway-api/pull/4223
+[#4245]: https://github.com/kubernetes-sigs/gateway-api/pull/4245
+[#4298]: https://github.com/kubernetes-sigs/gateway-api/pull/4298
+[#4315]: https://github.com/kubernetes-sigs/gateway-api/pull/4315
+[#4316]: https://github.com/kubernetes-sigs/gateway-api/pull/4316
+
+## Full Changelog
+
+**Full Changelog**: https://github.com/kubernetes-sigs/gateway-api/compare/v1.4.0...v1.4.1
+
+# v1.4.0
+
+## Changes Since v1.4.0-rc.2
+
+* conformance: make backend TLS tests IPv6-safe by @howardjohn in https://github.com/kubernetes-sigs/gateway-api/pull/4120
+
+## Full Changelog
+
+**Full Changelog**: https://github.com/kubernetes-sigs/gateway-api/compare/v1.4.0-rc.2...v1.4.0
+
+# v1.4.0-rc.2
+
 ## Changes Since v1.4.0-rc.1
 
 * Allow preprepared CoreDNS image to be used  by @aaronjwood in https://github.com/kubernetes-sigs/gateway-api/pull/3906
@@ -21,7 +72,6 @@
 * Removing experimental annotation from SupportedFeatures in GWC Status. by @bexxmodd in https://github.com/kubernetes-sigs/gateway-api/pull/4115
 * conformance: fix invalid BackendTLSPolicy conformance test by @howardjohn in https://github.com/kubernetes-sigs/gateway-api/pull/4105
 * fix: use inferred supported features to set extendedSupportedFeatures by @snorwin in https://github.com/kubernetes-sigs/gateway-api/pull/4113
-* conformance: make backend TLS tests IPv6-safe by @howardjohn in https://github.com/kubernetes-sigs/gateway-api/pull/4120
 * concepts/tooling.md: Add Headlamp tool by @illume in https://github.com/kubernetes-sigs/gateway-api/pull/4083
 * docs: update implements page by @zirain in https://github.com/kubernetes-sigs/gateway-api/pull/3996
 * Fix broken link in TLS Configuration page by @4n86rakam1 in https://github.com/kubernetes-sigs/gateway-api/pull/4091