Skip to content

Envoy, Alpine and dev-tool dependency bumps clear pre-GA CVEs - #2568

Merged
Haven Xia (HavenXia) merged 2 commits into
agent-substrate:mainfrom
annapendleton:pre-ga-cve-bumps
Oct 13, 2026
Merged

Haven Xia (HavenXia) merged 2 commits into
agent-substrate:mainfrom
annapendleton:pre-ga-cve-bumps

Conversation

@annapendleton

@annapendleton Anna Pendleton (annapendleton) commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator

Fixes #2303

  • envoyproxy/envoy v1.39.1 → v1.39.4 (libssl3 …1.29 → …1.30), everywhere it was pinned.

  • alpine 3.24.1 → 3.24.2 for demos/sandbox (OpenSSL 3.5.7 → 3.5.8).

  • hack/tools: golang.org/x/* to latest.

  • Tests pass

  • Appropriate changes to documentation are included in the PR

@destijl Greg Castle (destijl) left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@annapendleton

Copy link
Copy Markdown
Collaborator Author

e2e test was impacted by the known failure internal/e2e/suites/egressmitm - everything else passed, marking tests as passing

@annapendleton Anna Pendleton (annapendleton) added area/security Security related issue/pr dependencies Pull requests that update a dependency file area/dev-infra labels Oct 13, 2026
@HavenXia
Haven Xia (HavenXia) added this pull request to the merge queue Oct 13, 2026
Merged via the queue into agent-substrate:main with commit 890716e Oct 13, 2026
15 of 16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dev-infra area/security Security related issue/pr dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pre-GA container image rebuilds and dependency vulnerability remediation

4 participants