v1.33.5

envoyproxy/envoyv1.33.5Jul 18, 2025by publish-envoy[bot]

AI Summary

This release focuses on fixing RBAC filter stability and observability controller bugs within the 1.33 branch.

Key Highlights

Fixed TLS connection property caching for RBAC filters
Fixed Dynatrace division by zero bug
Updated Ubuntu and distroless container images
Fixed distroless config directory permissions

Full Release Notes

**Summary of changes**:

* TLS:
  - Fixed incorrectly cached connection properties on TLS connections that could cause network RBAC filters to fail.

* Observability:
  - Fixed division by zero bug in Dynatrace sampling controller.

* Release:
  - Fixed permissions for distroless config directory.
  - Updated container images (Ubuntu/distroless).

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.33.5
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.33.5/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.33.5/version_history/v1.33/v1.33.5
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.33.4...v1.33.5

Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>