Cloud Service Mesh 1.31.1-asm.16 released, plus 1.30.5-asm.8 and 1.29.8-asm.8 fixes

1.31.1-asm.16 is now available for in-cluster Cloud Service Mesh.

You can now download 1.31.1-asm.16 for in-cluster Cloud Service Mesh. It includes the features of Istio 1.31.1 subject to the list of supported features.

The following are not supported:

• PILOT_NODE_UNTAINT_CONTROLLERS_TAINT_NAME
• prefix_rewrite field in HTTPRedirect
• ALLOW_ANY_DYNAMIC_DNS in outboundTrafficPolicy
• connectionSettings in ProxyConfig
• defaultTrafficPolicy in MeshConfig
• zoneAwareLbSetting in DestinationRule and MeshConfig
• trustDomains and notTrustDomains fields in source field of AuthorizationPolicy
• fips-140-3 for the COMPLIANCE_POLICY
• PILOT_ENABLE_REMOTE_CREDENTIALS_CONTROLLER
• External SDS provider for gateways
• PILOT_AGENT_MERGE_ENVOY_STATS
• prometheus.istio.io/scrape-targets
• ENVOY_SECURE_METRICS_PORT and ENVOY_SECURE_MERGED_METRICS_PORT
• istioctl manifest generate with -o/--output

For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh version 1.31.1-asm.16 uses Envoy v1.39.3.

1.30.5-asm.8 is now available for in-cluster Cloud Service Mesh.

For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh 1.30.5-asm.8 uses Envoy v1.38.7-dev.

This release resolves the security vulnerability listed in Security Bulletin GCP-2026-067.

1.29.8-asm.8 is now available for in-cluster Cloud Service Mesh.

For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh 1.29.8-asm.8 uses Envoy v1.37.9-dev.

This release resolves the security vulnerability listed in Security Bulletin GCP-2026-067.

1.28.10-asm.49 is now available for in-cluster Cloud Service Mesh.

For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh 1.28.10-asm.49 uses Envoy v1.36.10-dev.