Update Envoy to Commit 1be4901

.azure-pipelines/pipelines.yml

@@ -44,22 +44,23 @@ stages:
       parameters:
         ciTarget: $(CI_TARGET)
 
-- stage: test_gcc
-  dependsOn: ["check"]
-  pool: "envoy-x64-large"
-  jobs:
-  - job: test_gcc
-    displayName: "do_ci.sh"
-    strategy:
-      maxParallel: 1
-      matrix:
-        test_gcc:
-          CI_TARGET: "test_gcc"
-    timeoutInMinutes: 120
-    steps:
-    - template: bazel.yml
-      parameters:
-        ciTarget: $(CI_TARGET)
+# TODO(feid-deng): Re-enable test_gcc
+#- stage: test_gcc
+#  dependsOn: ["check"]
+#  pool: "envoy-x64-large"
+#  jobs:
+#  - job: test_gcc
+#    displayName: "do_ci.sh"
+#    strategy:
+#      maxParallel: 1
+#      matrix:
+#        test_gcc:
+#          CI_TARGET: "test_gcc"
+#    timeoutInMinutes: 120
+#    steps:
+#    - template: bazel.yml
+#      parameters:
+#        ciTarget: $(CI_TARGET)
 
 - stage: sanitizers
   dependsOn: ["test"]

.bazelrc

@@ -124,11 +124,8 @@ build:gcc --copt=-fno-debug-types-section
 build:gcc --copt=-Wno-error=restrict
 build:gcc --copt=-Wno-error=uninitialized
 build:gcc --cxxopt=-Wno-missing-requires
-# We need this because -Wno-missing-requires options is rather new
-# in GCC, so flags -Wno-missing-requires exists in GCC 12, but does
-# not in GCC 11 and GCC 11 is what is used in docker-gcc
-# configuration currently
-build:gcc --cxxopt=-Wno-unknown-warning
+build:gcc --cxxopt=-Wno-dangling-reference
+build:gcc --cxxopt=-Wno-nonnull-compare
 build:gcc --incompatible_enable_cc_toolchain_resolution=false
 
 # Clang-tidy
@@ -287,6 +284,10 @@ build:fuzz-coverage --config=plain-fuzzer
 build:fuzz-coverage --run_under=@envoy//bazel/coverage:fuzz_coverage_wrapper.sh
 build:fuzz-coverage --test_tag_filters=-nocoverage
 build:fuzz-coverage --define=dynamic_link_tests=true
+# Existing fuzz tests don't need a full WASM runtime and in generally we don't really want to
+# fuzz dependencies anyways. On the other hand, disabling WASM reduces the build time and
+# resources required to build and run the tests.
+build:fuzz-coverage --define=wasm=disabled
 
 build:cache-local --remote_cache=grpc://localhost:9092
 
@@ -413,7 +414,7 @@ build:compile-time-options --@envoy//source/extensions/filters/http/kill_request
 
 # Docker sandbox
 # NOTE: Update this from https://github.com/envoyproxy/envoy-build-tools/blob/main/toolchains/rbe_toolchains_config.bzl#L8
-build:docker-sandbox --experimental_docker_image=envoyproxy/envoy-build-ubuntu:cb86d91cf406995012e330ab58830e6ee10240cb@sha256:d38457962937370aa867620a5cc7d01c568621fc0d1a57e044847599372a8571
+build:docker-sandbox --experimental_docker_image=envoyproxy/envoy-build-ubuntu:da50dd3bef0bb014d82d6ecf24292ac28b24fae3@sha256:5b835302abaf21133c6081f4af00d311a359048a45f0f5aedcc99d64b1586f66
 build:docker-sandbox --spawn_strategy=docker
 build:docker-sandbox --strategy=Javac=docker
 build:docker-sandbox --strategy=Closure=docker
@@ -584,7 +585,7 @@ common:bes-envoy-engflow --bes_timeout=3600s
 common:bes-envoy-engflow --bes_upload_mode=fully_async
 common:bes-envoy-engflow --nolegacy_important_outputs
 common:rbe-envoy-engflow --remote_executor=grpcs://mordenite.cluster.engflow.com
-common:rbe-envoy-engflow --remote_default_exec_properties=container-image=docker://gcr.io/envoy-ci/envoy-build@sha256:56b66cc84065c88a141963cedbbe4198850ffae0dacad769f516d0e9081439da
+common:rbe-envoy-engflow --remote_default_exec_properties=container-image=docker://gcr.io/envoy-ci/envoy-build@sha256:d52027bb1d50056bff403762e417191f3baae5bc1e540a80188596ce308790e7
 common:rbe-envoy-engflow --jobs=200
 common:rbe-envoy-engflow --define=engflow_rbe=true
 

bazel/repositories.bzl

@@ -1,7 +1,7 @@
 load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
-ENVOY_COMMIT = "77a90692c20f31eec32fc15771287ee2eea63f7f"
-ENVOY_SHA = "a3e263febb0a182aa106e229c9af2b61eb10a1301da0eecefa86d3b3d9ae00b4"
+ENVOY_COMMIT = "1be4901329b805d2b2ea551148654d0708e26432"
+ENVOY_SHA = "04e31707efaf35a6be8a12199754acbf8b7e9e59bca9f993d1b0b0dc90940994"
 
 HDR_HISTOGRAM_C_VERSION = "0.11.2"  # October 12th, 2020
 HDR_HISTOGRAM_C_SHA = "637f28b5f64de2e268131e4e34e6eef0b91cf5ff99167db447d9b2825eae6bad"
@@ -13,7 +13,7 @@ def nighthawk_dependencies():
         strip_prefix = "envoy-%s" % ENVOY_COMMIT,
         # // clang-format off: Envoy's format check: Only repository_locations.bzl may contains URL references
         url = "https://github.com/envoyproxy/envoy/archive/%s.tar.gz" % ENVOY_COMMIT,
-        # // clang-format on
+        # // clang-format on.
     )
     http_archive(
         name = "dep_hdrhistogram_c",

tools/base/requirements.in

@@ -1,4 +1,4 @@
-# Last updated 2025-04-18
+# Last updated 2025-05-28
 apipkg
 attrs
 certifi