Skip to content

chore(deps): update envoy 1.39.x to v1.39.2 (main) - #2066

Merged
sayboras merged 1 commit into
mainfrom
renovate/main-envoy-1.39.x
Oct 3, 2026
Merged

sayboras merged 1 commit into
mainfrom
renovate/main-envoy-1.39.x

Conversation

@renovate

@renovate renovate Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
envoyproxy/envoy patch 1.39.1 → 1.39.2
envoyproxy/envoy patch v1.39.1 → v1.39.2

Release Notes

envoyproxy/envoy (envoyproxy/envoy)

v1.39.2

Compare Source

Summary of changes:

  • Security fixes:

    • CVE-2026-35189: tls: updated BoringSSL to fix excessive memory allocation when parsing certificates with nameRelativeToCRLIssuer CRL Distribution Points, which could be exploited for remote denial of service during TLS handshakes.
  • Build/packaging:

    • Removed Debian bullseye (11) packaging, as bullseye is end-of-life and its repositories are no longer available on the main Debian mirrors.
    • Moved Debian .changes and release checksum signing into the Bazel release assembly, with an audit of signing actions.
    • Refreshed the Ubuntu build and distroless Docker base images.

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.39.2
Docs:
https://www.envoyproxy.io/docs/envoy/v1.39.2/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.39.2/version_history/v1.39/v1.39.2
Full changelog:
envoyproxy/envoy@v1.39.1...v1.39.2

Signed-off-by: Greg Greenway ggreenway@apple.com
Signed-off-by: Kateryna Nezdolii kateryna.nezdolii@gmail.com
Signed-off-by: Ryan Northey ryan@synca.io


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@sayboras
sayboras merged commit e03296b into main Oct 3, 2026
10 checks passed
@sayboras
sayboras deleted the renovate/main-envoy-1.39.x branch October 3, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant