Skip to content

build(deps): bump github.com/envoyproxy/envoy from 1.39.2 to 1.39.3 in /golang-http/simple in the examples-golang-http group across 1 directory - #1481

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-http/simple/examples-golang-http-17787fc378
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-http/simple/examples-golang-http-17787fc378

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the examples-golang-http group with 1 update in the /golang-http/simple directory: github.com/envoyproxy/envoy.

Updates github.com/envoyproxy/envoy from 1.39.2 to 1.39.3

Release notes

Sourced from github.com/envoyproxy/envoy's releases.

v1.39.3

Summary of changes:

  • Security fixes:
    • GHSA-8vc2-jrm4-835w: oauth2: crash on requests without a :path header (i.e. CONNECT). The filter now rejects such requests with 400.
    • GHSA-47vj-9r25-wv5j: api_key_auth: crash when hide_credentials is enabled with a query key source and a request without a :path header (i.e. CONNECT) is authenticated via another key source.

Docker images: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.39.3 Docs: https://www.envoyproxy.io/docs/envoy/v1.39.3/ Release notes: https://www.envoyproxy.io/docs/envoy/v1.39.3/version_history/v1.39/v1.39.3 Full changelog: envoyproxy/envoy@v1.39.2...v1.39.3

Signed-off-by: wbpcode wbphub@gmail.com Signed-off-by: Ryan Northey ryan@synca.io Signed-off-by: Kateryna Nezdolii kateryna.nezdolii@gmail.com

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 5, 2026
@phlax phlax added the pick-me label Oct 12, 2026
Copilot AI added a commit that referenced this pull request Oct 12, 2026
…n /golang-http/simple (#1481)

Co-authored-by: phlax <454682+phlax@users.noreply.github.com>
phlax added a commit that referenced this pull request Oct 12, 2026
…n /golang-http/simple (#1481)

Co-authored-by: phlax <454682+phlax@users.noreply.github.com>
Bumps the examples-golang-http group with 1 update in the /golang-http/simple directory: [github.com/envoyproxy/envoy](https://github.com/envoyproxy/envoy).


Updates `github.com/envoyproxy/envoy` from 1.39.2 to 1.39.3
- [Release notes](https://github.com/envoyproxy/envoy/releases)
- [Changelog](https://github.com/envoyproxy/envoy/blob/main/RELEASES.md)
- [Commits](envoyproxy/envoy@v1.39.2...v1.39.3)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/envoy
  dependency-version: 1.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: examples-golang-http
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump github.com/envoyproxy/envoy from 1.39.1 to 1.39.2 in /golang-http/simple in the examples-golang-http group build(deps): bump github.com/envoyproxy/envoy from 1.39.2 to 1.39.3 in /golang-http/simple in the examples-golang-http group across 1 directory Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/golang-http/simple/examples-golang-http-17787fc378 branch from eae85a7 to 2a727ab Compare October 12, 2026 10:30
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like github.com/envoyproxy/envoy is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/golang-http/simple/examples-golang-http-17787fc378 branch October 12, 2026 11:49
@phlax phlax removed the pick-me label Oct 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant