Merge branch 'main' into ldamata/fix-least-request-LB-not-fair

Signed-off-by: Leonardo da Mata <barroca@gmail.com>

Author: barroca

.bazelrc

@@ -355,7 +355,7 @@ build:compile-time-options --@envoy//source/extensions/filters/http/kill_request
 
 # Docker sandbox
 # NOTE: Update this from https://github.com/envoyproxy/envoy-build-tools/blob/main/toolchains/rbe_toolchains_config.bzl#L8
-build:docker-sandbox --experimental_docker_image=envoyproxy/envoy-build-ubuntu:fdd65c6270a8507a18d5acd6cf19a18cb695e4fa@sha256:3c8a3ce6f90dcfb5d09dc8f79bb01404d3526d420061f9a176e0a8e91e1e573e
+build:docker-sandbox --experimental_docker_image=envoyproxy/envoy-build-ubuntu:7467652575122d8d54e767a68f141598bd855383@sha256:8781bc7e431b754c142edbfc937905fdf343db91f3fe19bbf54c362828db9849
 build:docker-sandbox --spawn_strategy=docker
 build:docker-sandbox --strategy=Javac=docker
 build:docker-sandbox --strategy=Closure=docker
@@ -515,7 +515,7 @@ build:rbe-envoy-engflow --grpc_keepalive_time=30s
 build:rbe-envoy-engflow --remote_timeout=3600s
 build:rbe-envoy-engflow --bes_timeout=3600s
 build:rbe-envoy-engflow --bes_upload_mode=fully_async
-build:rbe-envoy-engflow --remote_default_exec_properties=container-image=docker://docker.io/envoyproxy/envoy-build-ubuntu:fdd65c6270a8507a18d5acd6cf19a18cb695e4fa@sha256:3c8a3ce6f90dcfb5d09dc8f79bb01404d3526d420061f9a176e0a8e91e1e573e
+build:rbe-envoy-engflow --remote_default_exec_properties=container-image=docker://docker.io/envoyproxy/envoy-build-ubuntu:7467652575122d8d54e767a68f141598bd855383@sha256:8781bc7e431b754c142edbfc937905fdf343db91f3fe19bbf54c362828db9849
 
 #############################################################################
 # debug: Various Bazel debugging flags

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-FROM gcr.io/envoy-ci/envoy-build:fdd65c6270a8507a18d5acd6cf19a18cb695e4fa@sha256:2a473cd9808182735d54e03b158975389948b9559b8e8fc624cfafbaf7059e62
+FROM gcr.io/envoy-ci/envoy-build:7467652575122d8d54e767a68f141598bd855383@sha256:af98298b715958527d3c3b42ae968a09223d237c843e129c586b7e76b8c69a0d
 
 ARG USERNAME=vscode
 ARG USER_UID=501

.github/dependabot.yml

@@ -35,6 +35,7 @@ updates:
 
 - package-ecosystem: "pip"
   directory: "/tools/base"
+  open-pull-requests-limit: 20
   schedule:
     interval: "daily"
     time: "06:00"

.github/workflows/_cache_docker.yml

@@ -37,7 +37,7 @@ jobs:
   docker:
     runs-on: ubuntu-22.04
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/docker/cache/prime@actions-v0.0.18
+    - uses: envoyproxy/toolshed/gh-actions/docker/cache/prime@actions-v0.0.27
       name: Prime Docker cache (${{ inputs.image_repo }}:${{ inputs.image_tag }}@sha256:${{ inputs.image_sha }})
       with:
         image_tag: "${{ inputs.image_repo }}:${{ inputs.image_tag }}@sha256:${{ inputs.image_sha }}"

.github/workflows/_ci.yml

@@ -95,7 +95,7 @@ jobs:
     steps:
     - if: ${{ inputs.cache_build_image }}
       name: Restore Docker cache (${{ inputs.cache_build_image }})
-      uses: envoyproxy/toolshed/gh-actions/docker/cache/restore@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/docker/cache/restore@actions-v0.0.27
       with:
         image_tag: ${{ inputs.cache_build_image }}
 
@@ -108,7 +108,7 @@ jobs:
     - if: ${{ steps.context.outputs.use_appauth == 'true' }}
       name: Fetch token for app auth
       id: appauth
-      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.0.27
       with:
         app_id: ${{ secrets.app_id }}
         key: ${{ secrets.app_key }}
@@ -138,15 +138,15 @@ jobs:
       run: git config --global --add safe.directory /__w/envoy/envoy
 
     - if: ${{ inputs.diskspace_hack }}
-      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.0.27
     - run: |
         echo "disk space at beginning of build:"
         df -h
       name: "Check disk space at beginning"
 
     - if: ${{ inputs.run_pre }}
       name: Run pre action ${{ inputs.run_pre && format('({0})', inputs.run_pre) || '' }}
-      uses: envoyproxy/toolshed/gh-actions/using/recurse@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/using/recurse@actions-v0.0.27
       with:
         uses: ${{ inputs.run_pre }}
         with: ${{ inputs.run_pre_with }}
@@ -170,7 +170,7 @@ jobs:
 
     - if: ${{ inputs.run_post }}
       name: Run post action ${{ inputs.run_pre && format('({0})', inputs.run_post) || '' }}
-      uses: envoyproxy/toolshed/gh-actions/using/recurse@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/using/recurse@actions-v0.0.27
       with:
         uses: ${{ inputs.run_post }}
         with: ${{ inputs.run_post_with }}

.github/workflows/_env.yml

@@ -12,17 +12,17 @@ on:
         default: envoyproxy/envoy-build-ubuntu
       build_image_sha:
         type: string
-        default: 3c8a3ce6f90dcfb5d09dc8f79bb01404d3526d420061f9a176e0a8e91e1e573e
+        default: 8781bc7e431b754c142edbfc937905fdf343db91f3fe19bbf54c362828db9849
       build_image_mobile_sha:
         type: string
-        default: f47fb698cfda583769b9d28e8d1c58cfc7774d5da4f31cd8190d8975c3850c7e
+        default: 292273a428ebb093cc69c2f225c7c4218ff2ea84e0cb6ee80e7a6771a09e026f
       # this is authoritative, but is not currently used in github ci
       build_image_gcr_sha:
         type: string
-        default: 2a473cd9808182735d54e03b158975389948b9559b8e8fc624cfafbaf7059e62
+        default: af98298b715958527d3c3b42ae968a09223d237c843e129c586b7e76b8c69a0d
       build_image_tag:
         type: string
-        default: fdd65c6270a8507a18d5acd6cf19a18cb695e4fa
+        default: 7467652575122d8d54e767a68f141598bd855383
 
       check_mobile_run:
         type: boolean

.github/workflows/_stage_publish.yml

@@ -116,7 +116,7 @@ jobs:
     needs:
     - publish
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.0.18
+    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.0.27
       with:
         app_id: ${{ secrets.ENVOY_CI_SYNC_APP_ID }}
         key: "${{ secrets.ENVOY_CI_SYNC_APP_KEY }}"

.github/workflows/_workflow-start.yml

@@ -29,7 +29,7 @@ jobs:
 
     - if: ${{ steps.env.outputs.trusted != 'true' }}
       name: Start status check
-      uses: envoyproxy/toolshed/gh-actions/status@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/status@actions-v0.0.27
       with:
         authToken: ${{ secrets.GITHUB_TOKEN }}
         context: ${{ inputs.workflow_name }}

.github/workflows/codeql-push.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
     - name: Pre-cleanup
-      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.0.18
+      uses: envoyproxy/toolshed/gh-actions/diskspace@actions-v0.0.27
       with:
         to_remove: |
           /usr/local/lib/android

.github/workflows/commands.yml

@@ -24,7 +24,7 @@ jobs:
       actions: write
       checks: read
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/retest@actions-v0.0.18
+    - uses: envoyproxy/toolshed/gh-actions/retest@actions-v0.0.27
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         azp_org: cncf