Automator: update envoy@ in istio/proxy@master (#6702)

Author: istio-testing

WORKSPACE

@@ -22,10 +22,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 # 1. Determine SHA256 `wget https://github.com/envoyproxy/envoy/archive/$COMMIT.tar.gz && sha256sum $COMMIT.tar.gz`
 # 2. Update .bazelversion, envoy.bazelrc and .bazelrc if needed.
 #
-# Commit date: 2025-11-22
-ENVOY_SHA = "2f17c73b8ab4176d19627cc154a33b34bc6667a2"
+# Commit date: 2025-11-23
+ENVOY_SHA = "ef11621707f1118596051f267b9539ebc67feb38"
 
-ENVOY_SHA256 = "27c7d28cfac049854394f092c84b62be7fdb3ed2b292b9d552c05ade922ac29b"
+ENVOY_SHA256 = "30e6861ac94c8dc93657b534217f252a9e2e3c5ea290ce39296e9cb2b581645c"
 
 ENVOY_ORG = "envoyproxy"
 

envoy.bazelrc

@@ -117,7 +117,6 @@ common:clang-common --action_env=BAZEL_COMPILER=clang
 common:clang-common --linkopt=-fuse-ld=lld
 common:clang-common --action_env=CC=clang --host_action_env=CC=clang
 common:clang-common --action_env=CXX=clang++ --host_action_env=CXX=clang++
-common:clang-common --incompatible_enable_cc_toolchain_resolution=false
 
 # Clang with libc++ (default)
 common:clang --config=clang-common
@@ -141,7 +140,6 @@ build:gcc --copt=-Wno-error=uninitialized
 build:gcc --cxxopt=-Wno-missing-requires
 build:gcc --cxxopt=-Wno-dangling-reference
 build:gcc --cxxopt=-Wno-nonnull-compare
-build:gcc --incompatible_enable_cc_toolchain_resolution=false
 build:gcc --linkopt=-fuse-ld=gold --host_linkopt=-fuse-ld=gold
 
 # libc++ default for clang
@@ -387,7 +385,6 @@ build:sizeopt -c opt --copt -Os
 
 # Remote execution: https://docs.bazel.build/versions/master/remote-execution.html
 build:rbe-toolchain --action_env=BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
-build:rbe-toolchain --incompatible_enable_cc_toolchain_resolution=false
 
 build:rbe-toolchain-clang --config=rbe-toolchain
 build:rbe-toolchain-clang --config=clang