diff --git a/contrib/golang/filters/http/test/test_data/dummy/go.mod b/contrib/golang/filters/http/test/test_data/dummy/go.mod
index 9e0d8fb7fe6b9..3cce57491e38c 100644
--- a/contrib/golang/filters/http/test/test_data/dummy/go.mod
+++ b/contrib/golang/filters/http/test/test_data/dummy/go.mod
@@ -2,7 +2,7 @@ module example.com/dummy
 
 go 1.24.6
 
-require github.com/envoyproxy/envoy v1.24.0
+require github.com/envoyproxy/envoy v1.38.0
 
 require google.golang.org/protobuf v1.36.11 // indirect
 
diff --git a/contrib/golang/filters/http/test/test_data/go.mod b/contrib/golang/filters/http/test/test_data/go.mod
index 8f90996861c06..e7078016a05a1 100644
--- a/contrib/golang/filters/http/test/test_data/go.mod
+++ b/contrib/golang/filters/http/test/test_data/go.mod
@@ -3,16 +3,16 @@ module example.com/test-data
 go 1.24.6
 
 require (
-	github.com/cncf/xds/go v0.0.0-20251110193048-8bfbf64dc13e
-	github.com/envoyproxy/envoy v1.36.2
+	github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5
+	github.com/envoyproxy/envoy v1.36.6
 	google.golang.org/protobuf v1.36.11
 )
 
 require (
 	cel.dev/expr v0.25.1 // indirect
-	github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20250728155136-f173205681a0 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250728155136-f173205681a0 // indirect
+	github.com/envoyproxy/protoc-gen-validate v1.3.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
 )
 
 replace github.com/envoyproxy/envoy => ../../../../../../
diff --git a/contrib/golang/filters/network/test/test_data/go.mod b/contrib/golang/filters/network/test/test_data/go.mod
index 33197f5652810..8ba55347b85bc 100644
--- a/contrib/golang/filters/network/test/test_data/go.mod
+++ b/contrib/golang/filters/network/test/test_data/go.mod
@@ -2,7 +2,7 @@ module github.com/envoyproxy/envoy/contrib/golang/filters/network/test/test_data
 
 go 1.24.6
 
-require github.com/envoyproxy/envoy v1.33.2
+require github.com/envoyproxy/envoy v1.38.0
 
 require google.golang.org/protobuf v1.36.11 // indirect
 
diff --git a/contrib/golang/router/cluster_specifier/test/test_data/simple/go.mod b/contrib/golang/router/cluster_specifier/test/test_data/simple/go.mod
index 21d45eb369785..009f7e0fe8fd0 100644
--- a/contrib/golang/router/cluster_specifier/test/test_data/simple/go.mod
+++ b/contrib/golang/router/cluster_specifier/test/test_data/simple/go.mod
@@ -3,16 +3,16 @@ module example.com/routeconfig
 go 1.24.6
 
 require (
-	github.com/cncf/xds/go v0.0.0-20251110193048-8bfbf64dc13e
-	github.com/envoyproxy/envoy v1.36.2
+	github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5
+	github.com/envoyproxy/envoy v1.36.6
 	google.golang.org/protobuf v1.36.11
 )
 
 require (
 	cel.dev/expr v0.25.1 // indirect
-	github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20251029180050-ab9386a59fda // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20251029180050-ab9386a59fda // indirect
+	github.com/envoyproxy/protoc-gen-validate v1.3.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
 )
 
 replace github.com/envoyproxy/envoy => ../../../../../../../
diff --git a/contrib/golang/upstreams/http/tcp/test/test_data/go.mod b/contrib/golang/upstreams/http/tcp/test/test_data/go.mod
index e76e15bede2ba..c4b941865265c 100644
--- a/contrib/golang/upstreams/http/tcp/test/test_data/go.mod
+++ b/contrib/golang/upstreams/http/tcp/test/test_data/go.mod
@@ -2,7 +2,7 @@ module example.com/test-data
 
 go 1.24.6
 
-require github.com/envoyproxy/envoy v1.33.2
+require github.com/envoyproxy/envoy v1.38.0
 
 require google.golang.org/protobuf v1.36.11