diff --git a/base/comps/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.comp.toml b/base/comps/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.comp.toml
index a6f3cdab279..eb2907312e7 100644
--- a/base/comps/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.comp.toml
+++ b/base/comps/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.comp.toml
@@ -1 +1,7 @@
 [components.golang-github-envoyproxy-control-plane]
+
+[[components.golang-github-envoyproxy-control-plane.source-files]]
+filename = "go-control-plane-0.13.4.tar.gz"
+hash = "c42791b0322bff372707b45ec140df2767e81c89a25e254622e088e6dcda86a4d6bf8384714c88e0deab34dd17f1f9a36ffa8c663a596885b02d8a24da2ec531"
+hash-type = "SHA512"
+origin = { type = "download", uri = "https://github.com/envoyproxy/go-control-plane/archive/v0.13.4/go-control-plane-0.13.4.tar.gz" }
diff --git a/base/comps/golang-github-envoyproxy-control-plane/overlays/0002-update-to-upstream-0.13.4.overlay.toml b/base/comps/golang-github-envoyproxy-control-plane/overlays/0002-update-to-upstream-0.13.4.overlay.toml
new file mode 100644
index 00000000000..bb6a1f035e7
--- /dev/null
+++ b/base/comps/golang-github-envoyproxy-control-plane/overlays/0002-update-to-upstream-0.13.4.overlay.toml
@@ -0,0 +1,13 @@
+# Fedora retired this package at 0.11.1, while upstream 0.13.4 removes the
+# deprecated OpenCensus APIs and their dependency without downstream pruning.
+
+[metadata]
+category = "azl-pruning"
+upstream-status = "upstreamed"
+commits = [{ url = "https://github.com/envoyproxy/go-control-plane/commit/046fb88fc5941116f55023e92c652ac3b657727d" }]
+
+[[overlays]]
+description = "Update to upstream release without deprecated OpenCensus APIs"
+type = "spec-update-tag"
+tag = "Version"
+value = "0.13.4"
\ No newline at end of file
diff --git a/locks/golang-github-envoyproxy-control-plane.lock b/locks/golang-github-envoyproxy-control-plane.lock
index 10093e81c55..bc44069e194 100644
--- a/locks/golang-github-envoyproxy-control-plane.lock
+++ b/locks/golang-github-envoyproxy-control-plane.lock
@@ -3,5 +3,5 @@ version = 1
 import-commit = '9e78810d5e9913423ab0b4e85e5632eac0a10d8a'
 upstream-commit = '9e78810d5e9913423ab0b4e85e5632eac0a10d8a'
 manual-bump = 2
-input-fingerprint = 'sha256:2b696b52cee5398565e5a4dcac6c2f1f14482ceee1a4124ea890742beae92503'
+input-fingerprint = 'sha256:6f5072c428500b35e9006c3cc0df4bc76940d73df24ea67f1d562ba6c075bf9b'
 resolution-input-hash = 'sha256:466421704711c4fd3c71f0b2ed715a0e61d49e3e26f3a2637fee755795849c8e'
diff --git a/specs/g/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.spec b/specs/g/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.spec
index b439359163a..9c4410a616b 100644
--- a/specs/g/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.spec
+++ b/specs/g/golang-github-envoyproxy-control-plane/golang-github-envoyproxy-control-plane.spec
@@ -2,7 +2,7 @@
 ## (rpmautospec version 0.8.3)
 ## RPMAUTOSPEC: autorelease, autochangelog
 %define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
-    release_number = 9;
+    release_number = 1;
     base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
     print(release_number + base_release_number - 1);
 }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
@@ -18,7 +18,7 @@
 
 # https://github.com/envoyproxy/go-control-plane
 %global goipath         github.com/envoyproxy/go-control-plane
-Version:                0.11.1
+Version: 0.13.4
 
 %gometa
 
@@ -60,6 +60,9 @@ Source:         %{gosource}
 
 %changelog
 ## START: Generated by rpmautospec
+* Tue Aug 18 2026 Mitch Zhu <mitchzhu@microsoft.com> - 0.13.4-1
+- fix(go-control-plane): update to 0.13.4
+
 * Wed Aug 19 2026 reuben olinsky <reubeno@users.noreply.github.com> - 0.11.1-9
 - build: mass rebuild auto-bumpable components
 
diff --git a/specs/g/golang-github-envoyproxy-control-plane/sources b/specs/g/golang-github-envoyproxy-control-plane/sources
index d5d6b0c5ebb..fadc01c94ea 100644
--- a/specs/g/golang-github-envoyproxy-control-plane/sources
+++ b/specs/g/golang-github-envoyproxy-control-plane/sources
@@ -1 +1,2 @@
 SHA512 (go-control-plane-0.11.1.tar.gz) = 9eeeedba45a9c9be966e4c8f7ad8c3667f9b4bf49f8c39725f291404fb88f8442b5b939e790926263b63ad8be50ba36cb202d6dbb371357bfe82878a8b47a40c
+SHA512 (go-control-plane-0.13.4.tar.gz) = c42791b0322bff372707b45ec140df2767e81c89a25e254622e088e6dcda86a4d6bf8384714c88e0deab34dd17f1f9a36ffa8c663a596885b02d8a24da2ec531