Conversation
Bumps [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) from 1.37.0 to 1.39.0. - [Release notes](https://github.com/envoyproxy/go-control-plane/releases) - [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md) - [Commits](envoyproxy/go-control-plane@envoy/v1.37.0...envoy/v1.39.0) --- updated-dependencies: - dependency-name: github.com/envoyproxy/go-control-plane/envoy dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
huang195
left a comment
huang195
left a comment
There was a problem hiding this comment.
Approving. Low risk, and the reason is stronger than "CI is green".
This is the complementary half of the merged #768, not a duplicate of it. Current spread on main:
| Module | go-control-plane/envoy |
|---|---|
cmd/authbridge-envoy |
v1.39.0 (#768, merged) |
authlib |
v1.37.0 ← this PR |
| all others | dependency unused |
The version is already proven in the build: cmd/authbridge-envoy carries replace … authlib => ../../authlib and directly requires 1.39.0, so Go resolves the whole build to 1.39.0 regardless of what authlib declares. Authlib's extproc/extauthz source has therefore been compiling against 1.39.0 on main since #768 landed. This PR aligns authlib's own declaration with a version that has already been exercised, rather than introducing a new one.
Diff verified against the title: v1.37.0 → v1.39.0, go-control-plane only, no transitive additions. I check this on every Dependabot approval now — #767 silently retargeted from 1.5.1 to 1.6.0 during a rebase while an existing approval carried over, and merged into an unsatisfiable requirements.txt.
CI: all checks pass (Spellcheck skipping only).
Assisted-By: Claude Code
github-project-automation
Bot
moved this from New/ToDo
to Done
in Rossoctl Issue Prioritization
2 participants
Bumps github.com/envoyproxy/go-control-plane/envoy from 1.37.0 to 1.39.0.
Release notes
Sourced from github.com/envoyproxy/go-control-plane/envoy's releases.
Commits
ca8ce17Mirrored from envoyproxy/envoy @ c7c7b0d009e6006844a31715ddeef62ed5c79c0a7c0c2c3Mirrored from envoyproxy/envoy @ 04c2a8607d7c7d46e514e685df67d21f79025c2c3646432Mirrored from envoyproxy/envoy @ b4a3bc04a05d0f6af320a909ed1a00ec700174fd84b538aMirrored from envoyproxy/envoy @ dd2a9b54f6128d27e49a224588778fb9ec77d1302e68dcfbuild(deps): Bump golang.org/x/crypto in /internal/tools (#1518)673be72Mirrored from envoyproxy/envoy @ fa68fb65fd52289ba01cd26363a6c17e382a2bb51b5055aMirrored from envoyproxy/envoy @ 223721f2fce6222ceddb02342c642fe448b2bd827c8f6f1Mirrored from envoyproxy/envoy @ 187301f5233356c05fbc3655ffe64ff23f95b80b375ba04Mirrored from envoyproxy/envoy @ d6d968b3eedd150ab62e2a54906bf1dd0be27eb86747796Mirrored from envoyproxy/envoy @ b5de3aaa3a38d625c49d051f55e64547072be589Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)