Skip to content

envoy: Bump envoy version v1.40.x - #2037

Open
sayboras wants to merge 4 commits into
mainfrom
pr/tammach/tip-envoy
Open

sayboras wants to merge 4 commits into
mainfrom
pr/tammach/tip-envoy

Conversation

@sayboras

@sayboras sayboras commented Sep 4, 2026 •

Copy link
Copy Markdown
Member

Few highlights for your review:

  • Build with hermetic clang like upstream
    • Simplify our build images, we don't really need the builder image anymore
  • Remove proxylib as v1.18 will be EOL soon

@sayboras
sayboras force-pushed the pr/tammach/tip-envoy branch from e9c84ca to 9fa0f2a Compare September 4, 2026 02:45
@sayboras sayboras added the dont-merge/preview-only DON'T MERGE label Sep 4, 2026
@sayboras
sayboras force-pushed the pr/tammach/tip-envoy branch from 9fa0f2a to a80310d Compare September 4, 2026 05:27
@sayboras
sayboras force-pushed the pr/tammach/tip-envoy branch 2 times, most recently from 2733c49 to a3a1b32 Compare October 1, 2026 10:02
@sayboras sayboras changed the title Pr/tammach/tip envoy envoy: Bump envoy version tip Oct 1, 2026
@sayboras
sayboras force-pushed the pr/tammach/tip-envoy branch 3 times, most recently from 819651f to 9e87887 Compare October 7, 2026 13:33
@sayboras sayboras changed the title envoy: Bump envoy version tip envoy: Bump envoy version v1.39.x Oct 8, 2026
@sayboras sayboras changed the title envoy: Bump envoy version v1.39.x envoy: Bump envoy version v1.40.x Oct 8, 2026
Signed-off-by: Tam Mach <tam.mach@cilium.io>
Signed-off-by: Tam Mach <tam.mach@cilium.io>
Bazel now downloads the LLVM toolchain, the sysroots, Python and Go, so
the build only needs Bazelisk, git and make from the host. The
downloaded lld also links against the host libxml2, and the clang-tidy
helper scripts run python3. That no longer justifies a separately built
and published builder image.

Replace Dockerfile.builder with a builder-base stage at the top of
Dockerfile and Dockerfile.tests that installs only those packages, and
drop the BUILDER_BASE build argument. Remove the builder image build and
push steps from the CI and release workflows, the wait-for-image action
that only waited for that image, and the docker-image-builder make
target. The Bazel cache archive images keep their names.

Renovate keeps its Dockerfile.builder rules because the release branches
still have that file, and now also pins the ubuntu digest in
Dockerfile.tests.

Signed-off-by: Tam Mach <tam.mach@cilium.io>
Signed-off-by: Tam Mach <tam.mach@cilium.io>
@sayboras
sayboras force-pushed the pr/tammach/tip-envoy branch from 9e87887 to 46933bc Compare October 11, 2026 09:45
@sayboras
sayboras marked this pull request as ready for review October 12, 2026 08:10
@sayboras
sayboras requested a review from a team as a code owner October 12, 2026 08:10
@sayboras
sayboras requested a review from nezdolik October 12, 2026 08:10

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant