v1.29.6.1

The Envoy team released v1.29.6: https://github.com/envoyproxy/envoy/releases/tag/v1.29.6
Envoy version history: https://www.envoyproxy.io/docs/envoy/latest/version_history/v1.29/v1.29.6
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#495

What's Changed

• Bump github.com/prometheus/common from 0.44.0 to 0.54.0 in /agent by @dependabot in #83
• Bump github.com/prometheus/common from 0.44.0 to 0.55.0 in /agent by @dependabot in #85
• Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /agent by @dependabot in #84
• Upgrade golang version to 1.22 by @karanvasnani in #86
• Backported feature support for specifying udp_max_queries option in the dns resolver cluster config. See commit here: envoyproxy/envoy@ae8bd25

Full Changelog: v1.29.6.0...v1.29.6.1

v1.29.6.0

The Envoy team released v1.29.6: https://github.com/envoyproxy/envoy/releases/tag/v1.29.6
Envoy version history: https://www.envoyproxy.io/docs/envoy/latest/version_history/v1.29/v1.29.6
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#494

What's Changed

• Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.6 in /agent by @dependabot in #80
• Bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 in /agent by @dependabot in #82

Full Changelog: v1.29.5.0...v1.29.6.0

Release ECS Service Connect Agent v1.29.5.0

The Envoy team released v1.29.5: https://github.com/envoyproxy/envoy/releases/tag/v1.29.5
Envoy version history: https://www.envoyproxy.io/docs/envoy/latest/version_history/v1.29/v1.29.5
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#492

Provides fixes for the following Envoy CVEs:

CVE-2024-34362
CVE-2024-34363
CVE-2024-34364
CVE-2024-32974
CVE-2024-32975
CVE-2024-32976
CVE-2024-23326

Other CVEs:
CVE-2024-32475

Bug fixes:

• #71
• aws/aws-app-mesh-roadmap#489

We update ECS Service Connect Agent to v1.29.5.0 together with the App Mesh Envoy release.

What's Changed

• Bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 in /agent by @dependabot in #55
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.44 to 1.23.0 in /agent by @dependabot in #58
• envoy_reloadable_features_tcp_pool_idle_timeout deprecation from Envoy PR 29113 by @suniltheta in #42
• Bump github.com/tidwall/gjson from 1.14.4 to 1.17.0 in /agent by @dependabot in #59
• Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.14.3 to 1.14.9 in /agent by @dependabot in #63
• disable hot restart capability in Envoy on bootup by @suniltheta in #61
• Remove envoy.reloadable_feature.successful_active_health_check_uneject_host by @suniltheta in #64
• Ability to set use_http_client_to_fetch_aws_credentials by @suniltheta in #65
• Remove envoy.reloadable_features.sanitize_original_path by @suniltheta in #67
• Bump github.com/prometheus/client_model from 0.4.1-0.20230718164431-9a2bf3000d16 to 0.5.0 in /agent by @dependabot in #66
• Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /agent by @dependabot in #72
• Bump github.com/gorilla/mux from 1.8.0 to 1.8.1 in /agent by @dependabot in #69
• setup process open files limit by @axot in #73
• Support all Envoy log levels by @liubnu in #77
• Bump github.com/aws/aws-sdk-go-v2/config from 1.23.0 to 1.27.11 in /agent by @dependabot in #75

New Contributors

• @axot made their first contribution in #73

Full Changelog: v1.27.2.0...v1.29.5.0

Release ECS Service Connect Agent v1.27.3.0

The Envoy team released v1.27.3: https://github.com/envoyproxy/envoy/releases/tag/v1.27.3
Envoy version history: https://www.envoyproxy.io/docs/envoy/latest/version_history/v1.27/v1.27.3
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#486

Provides fixes for the following Envoy CVEs:

• CVE-2024-23324
• CVE-2024-23325
• CVE-2024-23322
• CVE-2024-23323
• CVE-2024-23327

We update ECS Service Connect Agent to v1.27.3.0 together with App Mesh Envoy release.

Release ECS Service Connect Agent v1.27.2.0

The Envoy team released v1.27.2: https://github.com/envoyproxy/envoy/releases/tag/v1.27.2
Envoy version history:https://www.envoyproxy.io/docs/envoy/v1.27.2/version_history/v1.27/v1.27.2
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#481

Provides fixes for the following Envoy CVEs:
CVE-2023-44487

Curl CVE:
CVE-2023-38546

Go CVE:
CVE-2023-39323

We update ECS Service Connect Agent to v1.27.2.0 together with App Mesh Envoy release.

Release ECS Service Connect Agent v1.27.0.0

The Envoy team released v1.27.0: https://github.com/envoyproxy/envoy/releases/tag/v1.27.0.
Envoy version history: https://www.envoyproxy.io/docs/envoy/v1.27.0/version_history/v1.27/v1.27.0
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#479

Provides fixes for the following Envoy CVEs:

CVE-2023-35943
CVE-2023-31130
CVE-2023-31147
CVE-2023-31124
CVE-2023-32067
CVE-2023-30624
CVE-2023-35944
CVE-2023-35941
CVE-2023-35942

We update ECS Service Connect Agent to v1.27.0.0 together with App Mesh Envoy release.

Release ECS Service Connect Agent v1.26.4.0

The Envoy team released v1.26.4: https://github.com/envoyproxy/envoy/releases/tag/v1.26.4.
Envoy version history: https://www.envoyproxy.io/docs/envoy/v1.26.4/version_history/v1.26/v1.26.4
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#477

Provides fixes for the following Envoy CVEs:

CVE-2023-35943
CVE-2023-35944
CVE-2023-35941
CVE-2023-35942
CVE-2023-35945
CVE-2023-31130
CVE-2023-31147
CVE-2023-31124
CVE-2023-32067
CVE-2023-30624

We update ECS Service Connect Agent to v1.26.4.0 together with App Mesh Envoy release.

Release ECS Service Connect Agent v1.25.4.0

The Envoy team released v1.25.4: https://github.com/envoyproxy/envoy/releases/tag/v1.25.4.
Envoy version history: https://www.envoyproxy.io/docs/envoy/v1.25.4/version_history/v1.25/v1.25.4
App Mesh Envoy image release: aws/aws-app-mesh-roadmap#459

Provides fixes for the following Envoy CVEs:

• CVE-2023-27487
• CVE-2023-27491
• CVE-2023-27492
• CVE-2023-27493
• CVE-2023-27488
• CVE-2023-27496

We update ECS Service Connect Agent to v1.25.4.0 together with App Mesh Envoy release.

Release ECS Service Connect Agent v1.25.3.0

The Envoy team released v1.25.3: https://github.com/envoyproxy/envoy/releases/tag/v1.25.3.

Update Wasmtime dependency (->6.0.1) to resolve CVEs:

GHSA-ff4p-7xrq-q5r8
GHSA-xm67-587q-r2vw

Ref: aws/aws-app-mesh-controller-for-k8s#690
Envoy version history: https://www.envoyproxy.io/docs/envoy/v1.25.3/version_history/v1.25/v1.25.3

We update ECS Service Connect Agent to v1.25.3.0 together with Envoy release.