repo: Release v1.31.5

**Summary of changes**:

- [CVE-2024-53269](GHSA-mfqp-7mmj-rm53): Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting.
- [CVE-2024-53270](GHSA-q9qv-8j52-77p3):  HTTP/1: sending overload crashes when the request is reset beforehand
- [CVE-2024-53271](GHSA-rmm5-h2wv-mg4f):  HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.31.5
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.31.5/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.31.5/version_history/v1.31/v1.31.5
**Full changelog**:
    v1.31.4...v1.31.5

Signed-off-by: Ryan Northey <[email protected]>
Signed-off-by: Boteng Yao <[email protected]>

VERSION.txt

@@ -1 +1 @@
-1.31.5-dev
+1.31.5

changelogs/1.29.12.yaml

@@ -0,0 +1,6 @@
+date: December 18, 2024
+
+bug_fixes:
+- area: http/1
+  change: |
+    Fixes sending overload crashes when HTTP/1 request is reset.

changelogs/1.30.9.yaml

@@ -0,0 +1,9 @@
+date: December 18, 2024
+
+bug_fixes:
+- area: http/1
+  change: |
+    Fixes sending overload crashes when HTTP/1 request is reset.
+- area: happy_eyeballs
+  change: |
+    Validate that ``additional_address`` are IP addresses instead of crashing when sorting.

changelogs/current.yaml

@@ -1,13 +1,6 @@
-date: Pending
-
-behavior_changes:
-# *Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required*
-
-minor_behavior_changes:
-# *Changes that may cause incompatibilities for some users, but should not for most*
+date: December 18, 2024
 
 bug_fixes:
-# *Changes expected to improve the state of the world and are unlikely to have negative effects*
 - area: http/1
   change: |
     Fixes sending overload crashes when HTTP/1 request is reset.
@@ -18,10 +11,3 @@ bug_fixes:
   change: |
     Fix incorrect handling of non-101 1xx responses. This fix can be temporarily reverted by setting runtime guard
     ``envoy.reloadable_features.wait_for_first_byte_before_balsa_msg_done`` to false.
-
-removed_config_or_runtime:
-# *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
-
-new_features:
-
-deprecated:

docs/versions.yaml

@@ -22,6 +22,6 @@
 "1.26": 1.26.8
 "1.27": 1.27.7
 "1.28": 1.28.7
-"1.29": 1.29.11
-"1.30": 1.30.8
-"1.31": 1.31.3
+"1.29": 1.29.12
+"1.30": 1.30.9
+"1.31": 1.31.4