diff --git a/envoy/envoy b/envoy/envoy
index b46236685..384e5aab4 160000
--- a/envoy/envoy
+++ b/envoy/envoy
@@ -1 +1 @@
-Subproject commit b46236685e2c3152c6c2e7d989fdfc9720b73cc8
+Subproject commit 384e5aab433967d85d40bd0bd1a248e5af7cf1fa
diff --git a/envoy/go-control-plane b/envoy/go-control-plane
index af656ebdd..0ab56e249 160000
--- a/envoy/go-control-plane
+++ b/envoy/go-control-plane
@@ -1 +1 @@
-Subproject commit af656ebdd1c2cb95992d62453325240704096804
+Subproject commit 0ab56e249a3446c6fbdc39be9d45b9e3fd3a2e3e
diff --git a/istio/api b/istio/api
index 5b9a222e7..d54f2e0f4 160000
--- a/istio/api
+++ b/istio/api
@@ -1 +1 @@
-Subproject commit 5b9a222e72f34fc5f87a3b7344cd4f90c7c6f238
+Subproject commit d54f2e0f423d136b51fa4aeddccdb98c09c41ab2
diff --git a/istio/client-go b/istio/client-go
index 09ed8dc4e..9b3841d7d 160000
--- a/istio/client-go
+++ b/istio/client-go
@@ -1 +1 @@
-Subproject commit 09ed8dc4e7484d303c931fa42df7f7c728296923
+Subproject commit 9b3841d7dec61c18b474c3d3f2349cf81187e52d
diff --git a/istio/istio b/istio/istio
index 77149ea56..1a18c6d5b 160000
--- a/istio/istio
+++ b/istio/istio
@@ -1 +1 @@
-Subproject commit 77149ea5606492cbef75cc22216e84cd4612a469
+Subproject commit 1a18c6d5b63b845d6b8b8f03cf0108afcdd55fc1
diff --git a/istio/proxy b/istio/proxy
index 4735dd6b8..ced6d8167 160000
--- a/istio/proxy
+++ b/istio/proxy
@@ -1 +1 @@
-Subproject commit 4735dd6b874700fc2bc9a218ce80ba0be759e53f
+Subproject commit ced6d8167a01fe1c1630b3df0ac39e1b563f05dc
diff --git a/plugins/wasm-go/extensions/ai-proxy/provider/provider.go b/plugins/wasm-go/extensions/ai-proxy/provider/provider.go
index 2518da321..5ca5a6585 100644
--- a/plugins/wasm-go/extensions/ai-proxy/provider/provider.go
+++ b/plugins/wasm-go/extensions/ai-proxy/provider/provider.go
@@ -198,8 +198,7 @@ var (
 
 	// Providers that support the "developer" role. Other providers will have "developer" roles converted to "system".
 	developerRoleSupportedProviders = map[string]bool{
-		providerTypeOpenAI: true,
-		providerTypeAzure:  true,
+		providerTypeAzure: true,
 	}
 
 	providerInitializers = map[string]providerInitializer{