chore(deps): update envoy 1.38.x to v1.38.6 (v1.38)

[renovate]

This PR contains the following updates:

Package	Update	Change
envoyproxy/envoy	patch	1.38.5 → 1.38.6
envoyproxy/envoy	patch	v1.38.5 → v1.38.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

envoyproxy/envoy (envoyproxy/envoy)

v1.38.6

Compare Source

Summary of changes:

• Security fixes:
  • GHSA-8vc2-jrm4-835w:
    oauth2: crash on requests without a :path header (i.e. CONNECT). The filter now rejects such requests with 400.
  • GHSA-47vj-9r25-wv5j:
    api_key_auth: crash when hide_credentials is enabled with a query key source and a request without a :path header (i.e. CONNECT) is authenticated via another key source.

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.38.6
Docs:
https://www.envoyproxy.io/docs/envoy/v1.38.6/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.38.6/version_history/v1.38/v1.38.6
Full changelog:
envoyproxy/envoy@v1.38.5...v1.38.6

Signed-off-by: wbpcode wbphub@gmail.com
Signed-off-by: Ryan Northey ryan@synca.io
Signed-off-by: Kateryna Nezdolii kateryna.nezdolii@gmail.com

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.