Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
auto-merge envoyproxy/envoy[main] into envoyproxy/envoy-openssl[main]
* upstream/main:
changelog: fix a small typo in rbac deprecation line (#37082)
Add `arch` to APT repository configuration (#37068)
rbac: add support for matching on route metadata (#36957)
tls: add options to validate SANs and send SNI for upstream hostname (#36903)
lua cluster_specifier: fix crash in getCluster() (#37073)
deps: Bump `rules_rust` -> 0.54.1 (#37056)
Enhance ext_proc filter to support MXN streaming (#34942)
[contrib][postgres] Remove <> after constructor in the PG proxy code (#37038)
socket: removing some exceptions (#36991)
ci: Shift (Docker) cache priming to request workflow (#37028)
quic: Don't delay TCP attempt when HTTP/3 status is unknown (#37040)
kafka: split protocol generation into .h and .cc files (#37017)
bazel/ci: Add pre/post repository shas to report (#37062)
ci: Rename request/checks workflow (#37033)
bazel: Make `ci` config common (#37027)
build(deps): bump envoyproxy/toolshed from actions-v0.3.1 to 0.3.2 (#37061)
[contrib][http language filter] Change position of libstdc++ library when linking ICU tools (#37060)
docs/proto: Adding comments to fields/enums that have no comments (#37018)
bazel/ci: Remove old fetch setup (#37014)
router: removing unused files (#37019)
Remove extraneous target source/common/common:xds_manager_lib (#37041)
dns_cache: add more unit tests (#37032)
dns resolver: add options to initialize c-ares with custom timeout an… (#36947)
docs: add and fix license URLs (#37029)
deps: Bump `envoy_examples` -> 0.0.6 (#37023)
build(deps): bump pygithub from 2.4.0 to 2.5.0 in /tools/base (#37022)
ext_proc: refactoring onData() to make it modularized (#36999)
proto: removing some exceptions (#36965)
ip-tagging filter: add support for an optional ip-tag-header field (#36434)
S390x - Fix typo for envoy test (#37015)
boringssl: update to latest chromium stable version (#36899)
lua cluster_specifier: give access to cluster connection/request counts (#36998)
golang: expose add{Decoded,Encoded}Data (#36959)
ci/codeql: Disable "trap" caching (#36985)
ci: Boost mem for integration test (#37009)
build(deps): bump envoyproxy/toolshed from actions-v0.2.38 to 0.3.1 (#37013)
docs/bazel: Fix target visibility (#37008)
ci/coverage: Fix duplicate flag warning (#36987)
Add release note for "Relax recent SNI restrictions" (#37000)
Make CancelWrapper enforce thread constraint (#36993)
stats: add tag extraction rules for google_grpc client (#36673)
attributes: add new attribute upstream.request_attempt_count (#36939)
Relax recent SNI restrictions (#36950)
build(deps): bump envoyproxy/toolshed from actions-v0.2.37 to 0.2.38 (#36994)
flow_control: downstream push back sidestream (#35827)
wasm: remove the shutdown callback in lifetime_notifier (#36688)
tools: Remove `envoy_package` (#36948)
deps: Bump `com_google_cel_cpp` -> 0.10.0 (#36940)
ext_proc: clean up (#36956)
kafka: close connection when rejectable request appears (#36979)
github/ci: Fix workflow concurrency (#36952)
bazel/distribution: Cleanups to fix aquery (#36977)
docs: update envoy build location (#36986)
Update QUICHE from 5621f6366 to aaf48d2e5 (#36976)
mobile: Fix HTTPRequestUsingProxyTest.swift (#36980)
Added envoy test missing options for s390x (#36915)
Add cancelWrapper helper function in /common. (#36938)
router: use template method to avoid unused memory allocations in HeaderData (#36878)
xds: delta-xDS avoid copying resources (#36832)
deps/api: Bump `envoy_toolshed` -> 0.1.15 (#36969)
github/ci: Workaround `macos-12` brownout by boosting images (#36972)
sds: relax backing cluster check to allow dynamic clusters (#36694)
json: reduce exceptions (#36919)
headers/geoip: Fix macro (#36964)
ads-replacement: adding hook and cluster-manager support (#36768)
srds: remove a redundant if block (#36944)
ci: Quieten GCS artifact uploads (#36949)
matchers: remove unneeded ListMatcher data member (#36902)
Partial revert of "mobile: resolving how forcev6 works on mobile plat… (#36922)
build(deps): bump orjson from 3.10.10 to 3.10.11 in /tools/base (#36960)
address: removing some exceptions (#36754)
api: HTTP APIKey Auth Filter (#36709)
golang: provide method to refresh route cache (#36863)
wasm: remove unused public interfaces (#36941)
tools: updating oncall test triage location (#36937)
ci/rbe: Boost cpus for more flakey tests (#36942)
wasm: prevent stuck connections in case of multiple local replies (#36809)
udp_proxy: Support dynamic cluster selection per session (#36868)
srds: permit dynamic SRDS resources to contain inline RDS configuration (#36703)
http: removing the default trusted address list (#36643)
proto: reducing exceptions (#36872)
ci/rbe: Boost cpus for some more integration tests (#36930)
build(deps): bump envoy-base-utils from 0.5.6 to 0.5.7 in /tools/base (#36935)
deps/api: Bump `com_github_bufbuild_buf` -> 1.46.0 (#36933)
deps: Bump `build_bazel_rules_apple` -> 3.11.2 (#36932)
build(deps): bump setuptools from 75.2.0 to 75.3.0 in /tools/base (#36906)
build(deps): bump slack-sdk from 3.33.2 to 3.33.3 in /tools/base (#36905)
tests: add integration test to quic_stats for long certificate chain (#36926)
add OLM scaling for max_connection_duration (#36816)
config: removing unpackToOrThrow in favor of unpackTo (#36821)
srds: remove scope from scope_name_by_hash_ in case the scope key changes (#36702)
test: fix os_sys_calls_test in some less common environments (#36923)
tools/python: Fix macro format issue (#36916)
router: converting internal_only_headers from list to vector (#36898)
Remove unused listener FilterChain on_demand_configuration field (#36786)
tools/python: Fix namespacing in entry_point macros (#36914)
route: remove redundant loader reference in weighted cluster entries (#36836)
wasm: removed automatical route refreshment and add a foreign function to clear the route cache (#36671)
deps/api: Bump `envoy_toolshed` -> 0.1.13 (#36892)
ci/rbe: Boost cpu for another integration test (#36901)
tls: Expose well-known certificate subject fields in Lua filter (#35994)
bazel/deps: Fix `rules_license` setup (#36900)
[mobile]fix jni parameter type (#36896)
quic: add debug visitor to export various quic stats from quiche (#36813)
context: use server factory context as lb context (#36874)
runtime: removed defer processing flag and legacy codepaths. (#36731)
http2: protects client against stream not found (#36573)
ci/rbe: Boost cpu for another integration test (#36885)
build(deps): bump actions/dependency-review-action from 4.3.5 to 4.4.0 (#36883)
fix typo in the code comment (#36875)
Update QUICHE from 0d1ce7087 to 5621f6366 (#36869)
mobile: Fix a PAC proxy error check bug (#36876)
runtime: Enable UDP GRO by default (#36811)
Deprecating and removing envoy.reloadable_features.edf_lb_locality_scheduler_init_fix (#36835)
ci: Use repo settings for upload buckets (#36870)
flow_control: Refactor setWatermark (#36738)
bazel/ci: Add repo customizations (#36831)
deps: Bump `bazel_features` -> 1.20.0 (#36855)
deps: Bump `rules_python` -> 0.37.2 (#36854)
dependabot: add missing contrib-golang group to some gomod (#36849)
build(deps): bump distroless/base-nossl-debian12 from `e130c09` to `aa91f01` in /ci (#36847)
ci/coverage: Fix accidental ws (#36839)
oauth2: enable `use_refresh_token` by default (#36065)
Update QUICHE from 408e786de to 0d1ce7087 (#36822)
ci/rbe: Boost cpus for more integration tests (#36837)
ci/coverage: Fix coverage flake in `source/extensions/common` (#36838)
route: Downgrade advisory log message (#36797)
runtime: deprecate validate_grpc_header (#36757)
rbe/ci: Bump cpus for kv/store integration test (#36834)
deps: Bump `build_bazel_rules_apple` -> 3.10.0 (#36833)
protobuf.patch: a bunch of updates, mostly backports (#36823)
coverage: loosen (#36830)
ci/rbe: Boost cpu/mem for more integration tests (#36825)
deps: Bump `com_github_awslabs_aws_c_auth` -> 0.8.0 (#36827)
deps: Bump `aspect_bazel_lib` -> 2.9.3 (#36726)
deps/api: Bump `dev_cel` -> 0.18.0 (#36826)
build(deps): bump slack-sdk from 3.33.1 to 3.33.2 in /tools/base (#36824)
router: clean up unnecessary field (#36814)
request id: minor optimization or fix to the request id logic (#36773)
deps: Bump `com_github_nghttp2_nghttp2` -> 1.64.0 (#36743)
Set resource `telemetry.sdk.*` and scope `otel.scope.name|version` attributes for the OpenTelemetry tracer (#36787)
Backport grpc change to fix some protoc warnings (#36795)
wasm: restart wasm vm if it's failed because runtime error (#36456)
deps: Bump `rules_python` -> 0.37.1 (#36817)
proxy_protocol: use no-throw addresses to remove exception handling (#36815)
tools/python: Remove unused loading of old py macro (#36820)
tools/python: Use newer `entry_point` rule (#36803)
ci/codeql: Only run on main branch (#36806)
ci/rbe: Adjust keepalives for cache (envoy and mobile) (#36810)
ci/rbe: Boost cpus for a couple more integration tests (#36807)
tls: support IP SANs for IP versions not supported by host OS (#36770)
dynamic_modules: scaffolds config API & HTTP Filter (#36448)
Refactor UDP proxy to support deferred cluster selection (#36700)
coverage: ratcheting (#36762)
quic: remove runtime guard and code for legacy cert handling (#36772)
Deprecating and removing envoy.reloadable_features.edf_lb_host_scheduler_init_fix (#36794)
build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#36798)
[balsa] Add runtime flag for http_inspector parser (#36672)
tls: reduce memory use per connection by 712 bytes (#36767)
ci/tests: Boost more worker cores for flakey integration tests (#36793)
bump cel-cpp (#36661)
ci/tests: Revert some integration tests to `2core` (#36784)
mobile: resolving how forcev6 works on mobile platforms (#36732)
build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 (#36774)
build(deps): bump protobuf from 5.28.2 to 5.28.3 in /tools/base (#36775)
build(deps): bump orjson from 3.10.9 to 3.10.10 in /tools/base (#36776)
ci/macos: Increase timeout to 120m (#36719)
ci/coverage: Remove more cruft in diskspace hack (#36720)
aws: async bugfix for multiple credential handlers in upstream mode (#36707)
Allow empty resolver list for cares dns (#36735)
runtime: removing dns_reresolve_on_eai_again (#36656)
mobile: Adds proxy.pac to test PAC file URL (#36765)
ci/rbe: Switch rbe pools `2core` -> `6gig` (#36761)
ocsp/formatting: Fix format issue in generated cert (#36763)
deps: Switch hosting server for kafka server binary download (#36748)
test/ocsp: Renew certificates (#36755)
upstream: removing exceptions from hostimpl (#36582)
deps: Bump `rules_rust` -> 0.53.0 (#36727)
deps: Bump `rules_jvm_external` -> 6.4 (#36721)
build(deps): bump actions/dependency-review-action from 4.3.4 to 4.3.5 (#36740)
Add support for OtherName, Email SAN substitution formatters (#36502)
wasm: remove redundant xds attributes (#36619)
apple_dns: Add DNS query trace (#36678)
mobile: Fixes for the Apple PAC proxy resolver (#36698)
mobile: change to being more aggressive about HTTP/3 retries (#36734)
ci/rbe: Switch backend RBE cluster (#36730)
deps/release: Bump Ubuntu -> 0e5e4a5 (#36723)
Fix documentation for TcpProxy.metadata_match (#36683)
build: fix compile commands generation (#36693)
add test suites for classes in hash_policy.cc file (#36708)
router: remove send_local_reply_when_no_buffer_and_upstream_request guard (#36620)
mobile: add knob for h3 keepalive (#36646)
test: Add a knob to disable admin server in IntegrationTestServer (#36684)
build(deps): bump orjson from 3.10.7 to 3.10.9 in /tools/base (#36714)
build(deps): bump envoy-base-utils from 0.5.5 to 0.5.6 in /tools/base (#36690)
build(deps): bump cryptography from 43.0.1 to 43.0.3 in /tools/base (#36715)
aws_signing: support for dynamically configurable credential (#36217)
http: initializes a field of ConnectionManagerImpl::ActiveStream::State. (#36642)
test: deflake an integration test (#36674)
ci/rbe: Use engflow for non-coverage checks (#36687)
xds-failover: fixing runtime feature flag in tests (#36659)
security-release: update the q3 release record (#36689)
Signed-off-by: tedjpoole <[email protected]>- Loading branch information
