diff --git a/envoy/envoy b/envoy/envoy
index 384e5aab4..b46236685 160000
--- a/envoy/envoy
+++ b/envoy/envoy
@@ -1 +1 @@
-Subproject commit 384e5aab433967d85d40bd0bd1a248e5af7cf1fa
+Subproject commit b46236685e2c3152c6c2e7d989fdfc9720b73cc8
diff --git a/envoy/go-control-plane b/envoy/go-control-plane
index 0ab56e249..af656ebdd 160000
--- a/envoy/go-control-plane
+++ b/envoy/go-control-plane
@@ -1 +1 @@
-Subproject commit 0ab56e249a3446c6fbdc39be9d45b9e3fd3a2e3e
+Subproject commit af656ebdd1c2cb95992d62453325240704096804
diff --git a/istio/api b/istio/api
index d54f2e0f4..5b9a222e7 160000
--- a/istio/api
+++ b/istio/api
@@ -1 +1 @@
-Subproject commit d54f2e0f423d136b51fa4aeddccdb98c09c41ab2
+Subproject commit 5b9a222e72f34fc5f87a3b7344cd4f90c7c6f238
diff --git a/istio/client-go b/istio/client-go
index 9b3841d7d..09ed8dc4e 160000
--- a/istio/client-go
+++ b/istio/client-go
@@ -1 +1 @@
-Subproject commit 9b3841d7dec61c18b474c3d3f2349cf81187e52d
+Subproject commit 09ed8dc4e7484d303c931fa42df7f7c728296923
diff --git a/istio/istio b/istio/istio
index 1a18c6d5b..77149ea56 160000
--- a/istio/istio
+++ b/istio/istio
@@ -1 +1 @@
-Subproject commit 1a18c6d5b63b845d6b8b8f03cf0108afcdd55fc1
+Subproject commit 77149ea5606492cbef75cc22216e84cd4612a469
diff --git a/istio/proxy b/istio/proxy
index ced6d8167..4735dd6b8 160000
--- a/istio/proxy
+++ b/istio/proxy
@@ -1 +1 @@
-Subproject commit ced6d8167a01fe1c1630b3df0ac39e1b563f05dc
+Subproject commit 4735dd6b874700fc2bc9a218ce80ba0be759e53f
diff --git a/plugins/wasm-go/extensions/ai-proxy/provider/provider.go b/plugins/wasm-go/extensions/ai-proxy/provider/provider.go
index 5ca5a6585..2518da321 100644
--- a/plugins/wasm-go/extensions/ai-proxy/provider/provider.go
+++ b/plugins/wasm-go/extensions/ai-proxy/provider/provider.go
@@ -198,7 +198,8 @@ var (
 
 	// Providers that support the "developer" role. Other providers will have "developer" roles converted to "system".
 	developerRoleSupportedProviders = map[string]bool{
-		providerTypeAzure: true,
+		providerTypeOpenAI: true,
+		providerTypeAzure:  true,
 	}
 
 	providerInitializers = map[string]providerInitializer{