Merge branch 'main' of https://github.com/envoyproxy/envoy into strea…

…med_more_chunks

Signed-off-by: Yanjun Xiang <yanjunxiang@google.com>

bazel/repository_locations.bzl

@@ -443,17 +443,17 @@ REPOSITORY_LOCATIONS_SPEC = dict(
     com_github_intel_ipp_crypto_crypto_mb = dict(
         project_name = "libipp-crypto",
         project_desc = "Intel® Integrated Performance Primitives Cryptography",
-        project_url = "https://github.com/intel/ipp-crypto",
+        project_url = "https://github.com/intel/cryptography-primitives",
         version = "2021.11.1",
-        sha256 = "d785fd8d5245ada79068588e5cc4d721d35c50e7d26fc268306f4aaae28ec6d6",
-        strip_prefix = "ipp-crypto-ippcp_{version}",
-        urls = ["https://github.com/intel/ipp-crypto/archive/ippcp_{version}.tar.gz"],
+        sha256 = "76779724378fb3ec8b59047be02f6ca609c1ee70372b0205d937d451987bdb6c",
+        strip_prefix = "cryptography-primitives-ippcp_{version}",
+        urls = ["https://github.com/intel/cryptography-primitives/archive/ippcp_{version}.tar.gz"],
         release_date = "2024-02-28",
         use_category = ["dataplane_ext"],
         extensions = ["envoy.tls.key_providers.cryptomb"],
         cpe = "cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*",
         license = "Apache-2.0",
-        license_url = "https://github.com/intel/ipp-crypto/blob/ippcp_{version}/LICENSE",
+        license_url = "https://github.com/intel/cryptography-primitives/blob/ippcp_{version}/LICENSE",
     ),
     com_github_intel_qatlib = dict(
         project_name = "qatlib",

mobile/library/common/network/apple_system_proxy_settings_monitor.cc

@@ -10,7 +10,7 @@ namespace Envoy {
 namespace Network {
 
 // The interval at which system proxy settings should be polled at.
-CFTimeInterval kProxySettingsRefreshRateSeconds = 7;
+CFTimeInterval kProxySettingsRefreshRateSeconds = 10;
 
 AppleSystemProxySettingsMonitor::AppleSystemProxySettingsMonitor(
     SystemProxySettingsReadCallback proxy_settings_read_callback)

test/per_file_coverage.sh

@@ -5,41 +5,39 @@
 declare -a KNOWN_LOW_COVERAGE=(
 "source/common:96.2"
 "source/common/common/posix:96.2" # flaky due to posix: be careful adjusting
-"source/common/config:96.1"
+"source/common/config:96.3"
 "source/common/crypto:95.5"
-"source/common/event:95.2" # Emulated edge events guards don't report LCOV
+"source/common/event:95.6" # Emulated edge events guards don't report LCOV
 "source/common/filesystem/posix:96.3" # FileReadToEndNotReadable fails in some env; createPath can't test all failure branches.
 "source/common/http/http2:96.0"
-"source/common/json:94.4"
+"source/common/json:95.2"
 "source/common/matcher:94.4"
 "source/common/memory:74.5" # tcmalloc code path is not enabled in coverage build, only gperf tcmalloc, see PR#32589
 "source/common/network:94.4" # Flaky, `activateFileEvents`, `startSecureTransport` and `ioctl`, listener_socket do not always report LCOV
 "source/common/network/dns_resolver:91.4"  # A few lines of MacOS code not tested in linux scripts. Tested in MacOS scripts
-"source/common/quic:93.5"
+"source/common/quic:93.6"
 "source/common/secret:95.4"
 "source/common/signal:87.2" # Death tests don't report LCOV
 "source/common/thread:0.0" # Death tests don't report LCOV
-"source/common/tls:94.8"
+"source/common/tls:95.3"
 "source/common/tls/cert_validator:94.4"
 "source/common/tls/private_key:88.9"
 "source/common/watchdog:58.6" # Death tests don't report LCOV
 "source/exe:94.2" # increased by #32346, need coverage for terminate_handler and hot restart failures
-"source/extensions/common:93.0" #flaky: be careful adjusting
 "source/extensions/common/proxy_protocol:93.8" # Adjusted for security patch
 "source/extensions/common/tap:94.6"
-"source/extensions/common/wasm:88.0" # flaky: be careful adjusting
+"source/extensions/common/wasm:95.0" # flaky: be careful adjusting
 "source/extensions/common/wasm/ext:92.0"
 "source/extensions/filters/common/fault:94.5"
 "source/extensions/filters/common/rbac:90.8"
-"source/extensions/filters/http/cache:95.3"
+"source/extensions/filters/http/cache:95.4"
 "source/extensions/filters/http/grpc_json_transcoder:94.2" # TODO(#28232)
 "source/extensions/filters/http/ip_tagging:88.2"
 "source/extensions/filters/http/kill_request:91.7" # Death tests don't report LCOV
 "source/extensions/filters/listener/original_src:92.1"
 "source/extensions/filters/network/mongo_proxy:96.1"
 "source/extensions/filters/network/sni_cluster:88.9"
-"source/extensions/filters/network/wasm:77.8"
-"source/extensions/http/cache/simple_http_cache:95.9"
+"source/extensions/http/cache/simple_http_cache:96.5"
 "source/extensions/rate_limit_descriptors:95.0"
 "source/extensions/rate_limit_descriptors/expr:95.0"
 "source/extensions/stat_sinks/graphite_statsd:82.8" # Death tests don't report LCOV