From 47f3f0c23cba9f157faf1813dc613ca98ddbb2ce Mon Sep 17 00:00:00 2001
From: Nathan Fudenberg <nathan.fudenberg@solo.io>
Date: Wed, 10 Apr 2024 14:11:03 -0400
Subject: [PATCH] 1.26 | bazel: Update to a newer version of envoy-fork with
 http2 continuation cve (#320)

* bazel: Update to a newer version of envoy-fork which bumps upstream envoy for HTTP2 continuation flood cve

* changelog: add issuelink:
---
 bazel/repository_locations.bzl           | 4 ++--
 changelog/v1.26.8-patch1/envoy-bump.yaml | 9 +++++++++
 2 files changed, 11 insertions(+), 2 deletions(-)
 create mode 100644 changelog/v1.26.8-patch1/envoy-bump.yaml

diff --git a/bazel/repository_locations.bzl b/bazel/repository_locations.bzl
index 2bbdc0f3a..83e1bb49e 100644
--- a/bazel/repository_locations.bzl
+++ b/bazel/repository_locations.bzl
@@ -1,8 +1,8 @@
 REPOSITORY_LOCATIONS = dict(
     envoy = dict(
         # envoy 1.26.7 forked with extproc changes
-        # sourced from release v1.26.7-fork1
-        commit = "37f7ac716a3253001640ccb4a548d8dba0d6cf4f",
+        # sourced from release v1.26.8-fork1
+        commit = "f87a6143de75426bff63d0da4e9d4ed400b74a40",
         remote = "https://github.com/solo-io/envoy-fork",
     ),
     inja = dict(
diff --git a/changelog/v1.26.8-patch1/envoy-bump.yaml b/changelog/v1.26.8-patch1/envoy-bump.yaml
new file mode 100644
index 000000000..c9deb5361
--- /dev/null
+++ b/changelog/v1.26.8-patch1/envoy-bump.yaml
@@ -0,0 +1,9 @@
+changelog:
+  - type: DEPENDENCY_BUMP
+    dependencyRepo: envoy
+    dependencyOwner: envoyproxy
+    dependencyTag: v1.26.8
+    issueLink: https://github.com/solo-io/solo-projects/issues/6008
+    description: >
+      Bump Envoy to v1.26.8 for our fork.
+      Tackles the http2 crazy cve CVE-2024-30255