[v1.13.x] Bump envoy-gloo to v1.23.11-patch1 (#8464)

* bump envoy gloo, update changelog entry

* relocate changelog entry

* add fix to changelog entry

* Update bump-envoy-gloo.yaml

Makefile

@@ -81,7 +81,7 @@ else
   endif
 endif
 
-ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.23.9-patch1
+ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.23.11-patch1
 
 # The full SHA of the currently checked out commit
 CHECKED_OUT_SHA := $(shell git rev-parse HEAD)

changelog/v1.13.22/bump-envoy-gloo.yaml

@@ -0,0 +1,11 @@
+changelog:
+- type: DEPENDENCY_BUMP
+  description: Bump envoy gloo to latest v1.23.11-patch1
+  dependencyOwner: solo-io
+  dependencyRepo: envoy-gloo
+  dependencyTag: v1.23.11-patch1
+- type: FIX
+  issueLink: https://github.com/solo-io/solo-projects/issues/5138
+  resolvesIssue: false
+  description: >
+    Pulls in upstream Envoy v1.23.11, which includes a fix for CVE-2023-35945