Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 16, 2025

This PR contains the following updates:

Package Update Change
envoyproxy/envoy patch 1.35.3 -> 1.35.6
envoyproxy/envoy patch v1.35.3 -> v1.35.6

Release Notes

envoyproxy/envoy (envoyproxy/envoy)

v1.35.6

Compare Source

Summary of changes:

  • Security update:

    • CVE-2025-62504: A crash that occurs when Lua filters handle a sufficiently large response body

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.6
Docs:
https://www.envoyproxy.io/docs/envoy/v1.35.6/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.35.6/version_history/v1.35/v1.35.6
Full changelog:
envoyproxy/envoy@v1.35.5...v1.35.6

Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Boteng Yao boteng@google.com

v1.35.5

Compare Source

Summary of changes:

  • Security update:

    • CVE-2025-62409: Fix a crash in the TCP connection pool

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.5
Docs:
https://www.envoyproxy.io/docs/envoy/v1.35.5/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.35.5/version_history/v1.35/v1.35.5
Full changelog:
envoyproxy/envoy@v1.35.4...v1.35.5

Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Boteng Yao boteng@google.com

v1.35.4

Compare Source

Summary of changes:

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.4
Docs:
https://www.envoyproxy.io/docs/envoy/v1.35.4/
Release notes:

https://www.envoyproxy.io/docs/envoy/v1.35.4/version_history/v1.35/v1.35.4
Full changelog:
envoyproxy/envoy@v1.35.3...v1.35.4

Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Rohit Agrawal rohit.agrawal@databricks.com


Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner October 16, 2025 11:42
@renovate renovate bot requested a review from jrajahalme October 16, 2025 11:42
@renovate renovate bot force-pushed the renovate/main-envoy-1.35.x branch from 8c87b08 to fc05f60 Compare October 16, 2025 12:49
@renovate renovate bot changed the title chore(deps): update envoy 1.35.x to v1.35.4 (main) chore(deps): update envoy 1.35.x to v1.35.5 (main) Oct 16, 2025
@renovate renovate bot force-pushed the renovate/main-envoy-1.35.x branch 2 times, most recently from c233320 to 5604694 Compare October 17, 2025 18:51
@renovate renovate bot changed the title chore(deps): update envoy 1.35.x to v1.35.5 (main) chore(deps): update envoy 1.35.x to v1.35.6 (main) Oct 17, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Oct 19, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Copy link
Member

@jrajahalme jrajahalme left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remember to remove the temporary testing commit before merging :-)

@sayboras sayboras force-pushed the renovate/main-envoy-1.35.x branch from 52fb5e1 to 590f014 Compare December 12, 2025 03:26
@sayboras sayboras changed the title chore(deps): update envoy 1.35.x to v1.35.6 (main) chore(deps): update envoy 1.35.x to v1.35.8 (main) Dec 12, 2025
@sayboras sayboras force-pushed the renovate/main-envoy-1.35.x branch 2 times, most recently from 077c82e to c19820b Compare December 12, 2025 10:14
@sayboras sayboras marked this pull request as draft December 12, 2025 11:07
@sayboras sayboras force-pushed the renovate/main-envoy-1.35.x branch 2 times, most recently from 37038e2 to 52dd937 Compare December 31, 2025 10:41
@sayboras sayboras marked this pull request as ready for review December 31, 2025 10:41
@sayboras sayboras force-pushed the renovate/main-envoy-1.35.x branch from 52dd937 to 83ddd78 Compare December 31, 2025 11:20
@sayboras
Copy link
Member

Testing is done in cilium/cilium#43292

renovate bot and others added 3 commits December 31, 2025 23:30
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This is to avoid the below issue for arm build

```
5267.3 ld.lld-18: error: undefined symbol: __atomic_compare_exchange
5267.3 >>> referenced by wasm-import-wrapper-cache.cc
5267.3 >>>               bazel-out/aarch64-opt-exec-ST-5dc91bda6aaf/bin/external/v8/_objs/v8_libshared_noicu/wasm-import-wrapper-cache.o:(v8::internal::wasm::WasmImportWrapperHandle::~WasmImportWrapperHandle())
5267.3 >>> referenced by wasm-code-pointer-table.cc
5267.3 >>>               bazel-out/aarch64-opt-exec-ST-5dc91bda6aaf/bin/external/v8/_objs/v8_libshared_noicu/wasm-code-pointer-table.o:(v8::internal::wasm::WasmCodePointerTable::FreeNativeFunctionHandles())
5267.3 >>> referenced by wasm-code-pointer-table.cc
5267.3 >>>               bazel-out/aarch64-opt-exec-ST-5dc91bda6aaf/bin/external/v8/_objs/v8_libshared_noicu/wasm-code-pointer-table.o:(v8::internal::wasm::WasmCodePointerTable::SweepSegments(unsigned long))
5267.3 >>> referenced 5 more times
```
Signed-off-by: Tam Mach <tam.mach@cilium.io>
@sayboras sayboras force-pushed the renovate/main-envoy-1.35.x branch from 83ddd78 to 11ceae0 Compare December 31, 2025 12:30
@sayboras sayboras merged commit 809274e into main Jan 1, 2026
10 of 13 checks passed
@sayboras sayboras deleted the renovate/main-envoy-1.35.x branch January 1, 2026 04:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants