diff --git a/bazel/repository_locations.bzl b/bazel/repository_locations.bzl
index 36de6ab60..603c842a0 100644
--- a/bazel/repository_locations.bzl
+++ b/bazel/repository_locations.bzl
@@ -1,7 +1,7 @@
 REPOSITORY_LOCATIONS = dict(
     envoy = dict(
-        # envoy 1.25.10
-        commit = "e208fc2a0e104141100b001613a8932c52e4cee7",
+        # envoy 1.25.11+ a bit
+        commit = "85bd7e2c06f713ad60449c234025df1f5181ed18",
         remote = "https://github.com/envoyproxy/envoy",
     ),
     inja = dict(
diff --git a/changelog/v1.25.11-patch1/upgrade-envoy.yaml b/changelog/v1.25.11-patch1/upgrade-envoy.yaml
new file mode 100644
index 000000000..57d15556b
--- /dev/null
+++ b/changelog/v1.25.11-patch1/upgrade-envoy.yaml
@@ -0,0 +1,7 @@
+changelog:
+- type: DEPENDENCY_BUMP
+  dependencyOwner: envoyproxy
+  dependencyRepo: envoy
+  dependencyTag: v1.25.11ish
+  description: > 
+    Bump envoy to v1.25.11 and a bit
\ No newline at end of file