envoyproxy/envoy v1.40.0
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Envoy v1.40.0 moves its build from WORKSPACE to bzlmod, so downstreams must migrate to MODULE.bazel and add Envoy's own registry. It also raises the hermetic Clang toolchain from 18 to 22 and removes AWS-LC as a selectable TLS library. The release declares HTTP/3 and QUIC stable (a claim not independently verified) and adds X25519MLKEM768 hybrid key exchange to the default TLS curves. mcp_router no longer forwards the authorization header to backends by default, and container-aware CPU detection now applies whenever --concurrency is unset.