Envoy / update detail

v1.39.5

Official Envoy changelog summary with source attribution, release tags and upgrade verdicts.

Track this Envoy release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Envoy·Oct 23, 2026, 12:59 AMFeatureSecurity-relevantAI-assisted summary

Summary

Removed compromised eMudhra intermediate CAs from Envoy Docker images, mobile root bundle, and DNS resolver webpki roots to address upstream security issues.
Updated Hickory DNS resolver's webpki crates so DoT/DoH upstreams no longer trust the compromised CAs.
Changed Istio peer metadata conversion to use app and version labels first, ensuring reported app/version matches workload labels.

securityfeatureminorsource healthy

Official source Last checked Oct 27, 2026, 4:00 AM

Loading follow options…

keep exploring

Continue with Envoy

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Oct 27, 2026, 4:00 AM

digest settings

Already following Envoy? Add related tools without starting a new digest.