diff --git a/.github/workflows/build_and_test.yaml b/.github/workflows/build_and_test.yaml
index abc1b59344..6f068e8f76 100644
--- a/.github/workflows/build_and_test.yaml
+++ b/.github/workflows/build_and_test.yaml
@@ -133,23 +133,23 @@ jobs:
       fail-fast: false
       matrix:
         target:
-        - version: v1.30.13
+        - version: v1.31.12
           ipFamily: ipv4
           profile: default
-        - version: v1.31.9
+        - version: v1.32.8
           ipFamily: ipv4
           profile: default
-        - version: v1.32.5
+        - version: v1.33.4
           ipFamily: ipv6  # only run ipv6 test on this version to save time
           profile: default
         # TODO: this's IPv4 first, need a way to test IPv6 first.
-        - version: v1.33.1
+        - version: v1.34.2
           ipFamily: dual  # only run dual test on latest version to save time
           profile: default
-        - version: v1.33.1
+        - version: v1.34.2
           ipFamily: dual  # only run dual test on latest version to save time
           profile: gateway-namespace-mode
-        - version: v1.33.1
+        - version: v1.34.2
           ipFamily: ipv4
           profile: xds-name-scheme-v2
     steps:
@@ -186,23 +186,23 @@ jobs:
       fail-fast: false
       matrix:
         target:
-        - version: v1.30.13
+        - version: v1.31.12
           ipFamily: ipv4
           profile: default
-        - version: v1.31.9
+        - version: v1.32.8
           ipFamily: ipv4
           profile: default
-        - version: v1.32.5
+        - version: v1.33.4
           ipFamily: ipv6  # only run ipv6 test on this version to save time
           profile: default
         # TODO: this's IPv4 first, need a way to test IPv6 first.
-        - version: v1.33.1
+        - version: v1.34.2
           ipFamily: dual  # only run dual test on latest version to save time
           profile: default
-        - version: v1.33.1
+        - version: v1.34.2
           ipFamily: dual  # only run dual test on latest version to save time
           profile: gateway-namespace-mode
-        - version: v1.33.1
+        - version: v1.34.2
           ipFamily: ipv4
           profile: xds-name-scheme-v2
 
diff --git a/site/content/en/news/releases/matrix.md b/site/content/en/news/releases/matrix.md
index 007a463445..60911cae9a 100644
--- a/site/content/en/news/releases/matrix.md
+++ b/site/content/en/news/releases/matrix.md
@@ -7,7 +7,7 @@ Envoy Gateway relies on the Envoy Proxy and the Gateway API, and runs within a K
 
 | Envoy Gateway version | Envoy Proxy version         | Rate Limit version | Gateway API version | Kubernetes version         | End of Life |
 | --------------------- | --------------------------- | ------------------ | ------------------- | -------------------------- | ----------- |
-| latest                | **dev-latest**              | **master**         | **v1.4.0**          | v1.30, v1.31, v1.32, v1.33 | n/a         |
+| latest                | **dev-latest**              | **master**         | **v1.4.1**          | v1.31, v1.32, v1.33, v1.34 | n/a         |
 | v1.6                  | **distroless-v1.36.2**      | **99d85510**       | **v1.4.0**          | v1.30, v1.31, v1.32, v1.33 | 2026/05/13  |
 | v1.5                  | **distroless-v1.35.0**      | **a90e0e5d**       | **v1.3.0**          | v1.30, v1.31, v1.32, v1.33 | 2026/02/13  |
 | v1.4                  | **distroless-v1.34.1**      | **3e085e5b**       | **v1.3.0**          | v1.30, v1.31, v1.32, v1.33 | 2025/11/13  |
diff --git a/test/cel-validation/backendtrafficpolicy_test.go b/test/cel-validation/backendtrafficpolicy_test.go
index ca95df0bf2..d67e051c2a 100644
--- a/test/cel-validation/backendtrafficpolicy_test.go
+++ b/test/cel-validation/backendtrafficpolicy_test.go
@@ -1176,7 +1176,9 @@ func TestBackendTrafficPolicyTarget(t *testing.T) {
 				}
 			},
 			wantErrors: []string{
-				`[spec.rateLimit.global.rules: Too many: 129: must have at most 128 items, <nil>: Invalid value: "null": some validation rules were not checked because the object was invalid; correct the existing errors to complete validation]`,
+				`[spec.rateLimit.global.rules: Too many: 129: must have at most 128 items, <nil>: Invalid value:`,
+				`null`,
+				`some validation rules were not checked because the object was invalid; correct the existing errors to complete validation]`,
 			},
 		},
 		{
diff --git a/tools/make/kube.mk b/tools/make/kube.mk
index 5a5bab2631..f6e9a26e0e 100644
--- a/tools/make/kube.mk
+++ b/tools/make/kube.mk
@@ -1,10 +1,10 @@
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
 # To know the available versions check:
 # - https://github.com/kubernetes-sigs/controller-tools/blob/main/envtest-releases.yaml
-ENVTEST_K8S_VERSION ?= 1.33.0
+ENVTEST_K8S_VERSION ?= 1.34.1
 # Need run cel validation across multiple versions of k8s
-# TODO: update kubebuilder assets to 1.34.0 when available
-ENVTEST_K8S_VERSIONS ?= 1.30.3 1.31.0 1.32.0 1.33.0
+# TODO: update kubebuilder assets to 1.35.0 when available
+ENVTEST_K8S_VERSIONS ?= 1.31.0 1.32.0 1.33.0 1.34.1
 
 # GATEWAY_API_VERSION refers to the version of Gateway API CRDs.
 # For more details, see https://gateway-api.sigs.k8s.io/guides/getting-started/#installing-gateway-api