cilium-renovate[bot]
commented
1 month ago ℹ Artifact update notice
File name: pkg/k8s/go.mod
In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):
- 2 additional dependencies were updated
Details:
| Package | Change |
|---|---|
golang.org/x/oauth2 |
v0.21.0 -> v0.22.0 |
k8s.io/utils |
v0.0.0-20240711033017-18e509b52bc8 -> v0.0.0-20240921022957-49e7df575cb6 |
This PR contains the following updates:
v1.17.0-pre.0.0.20240909094238-cdf10116cea7->v1.17.0-pre.1Release Notes
cilium/cilium (github.com/cilium/cilium)
### [`v1.17.0-pre.1`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.0-pre.1): 1.17.0-pre.1 [Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.0-pre.0...1.17.0-pre.1) ## Summary of Changes **Major Changes:** - feat: fast and standard queue in CES controller ([#34199](https://redirect.github.com/cilium/cilium/issues/34199), [@Kaczyniec](https://redirect.github.com/Kaczyniec)) **Minor Changes:** - Added Helm Chart value for overriding target namespace. ([#34624](https://redirect.github.com/cilium/cilium/issues/34624), [@thewilli](https://redirect.github.com/thewilli)) - Cilium now handles MTU changes to devices without restarting ([#34314](https://redirect.github.com/cilium/cilium/issues/34314), [@dylandreimerink](https://redirect.github.com/dylandreimerink)) - cilium-cli: Deprecate --disable-check flag ([#34953](https://redirect.github.com/cilium/cilium/issues/34953), [@michi-covalent](https://redirect.github.com/michi-covalent)) - CiliumCIDRGroup now supports large numbers of CIDRs. CiliumCIDRGroup now integrates with Hubble flows. ([#33441](https://redirect.github.com/cilium/cilium/issues/33441), [@squeed](https://redirect.github.com/squeed)) - daemon: bpf: add --bpf-conntrack-accounting-enabled flag ([#34921](https://redirect.github.com/cilium/cilium/issues/34921), [@jibi](https://redirect.github.com/jibi)) - daemon: Make cilium status independent from k8s status ([#32724](https://redirect.github.com/cilium/cilium/issues/32724), [@tkna](https://redirect.github.com/tkna)) - Enables a new metric in the cilium operator to indicate unmanaged pods. ([#34815](https://redirect.github.com/cilium/cilium/issues/34815), [@nimishamehta5](https://redirect.github.com/nimishamehta5)) - envoy: Bump envoy version from v1.30.4 to v1.30.6 ([#34967](https://redirect.github.com/cilium/cilium/issues/34967), [@sayboras](https://redirect.github.com/sayboras)) - feat(cilium-cli-clustermesh): Improve --destination-context option for connecting multiple remote contexts ([#34510](https://redirect.github.com/cilium/cilium/issues/34510), [@littlejo](https://redirect.github.com/littlejo)) - Fix handling of route replace rules in ENI IPAM mode when `ipv4-native-routing-cidr` is set to `0.0.0.0/0`. ([#34436](https://redirect.github.com/cilium/cilium/issues/34436), [@chapsuk](https://redirect.github.com/chapsuk)) - gateway-api: Add support for HTTP Retry ([#34720](https://redirect.github.com/cilium/cilium/issues/34720), [@sayboras](https://redirect.github.com/sayboras)) - gateway-api: Add support for mirror fraction ([#34602](https://redirect.github.com/cilium/cilium/issues/34602), [@sayboras](https://redirect.github.com/sayboras)) - gateway-api: Sync up with the latest upstream v1.2.0-rc1 ([#34807](https://redirect.github.com/cilium/cilium/issues/34807), [@sayboras](https://redirect.github.com/sayboras)) - Implement `cilium-dbg bpf frag list` command to list IPV4 datagram fragments. ([#34751](https://redirect.github.com/cilium/cilium/issues/34751), [@Huweicai](https://redirect.github.com/Huweicai)) - k8s: Add "service.cilium.io/type" ([#34772](https://redirect.github.com/cilium/cilium/issues/34772), [@brb](https://redirect.github.com/brb)) - k8s: Add support for 1.31.0 ([#34463](https://redirect.github.com/cilium/cilium/issues/34463), [@christarazi](https://redirect.github.com/christarazi)) - Low-hanging fruit performance improvements of the hubble consumer module ([#34535](https://redirect.github.com/cilium/cilium/issues/34535), [@giorio94](https://redirect.github.com/giorio94)) - metrics: add structured format for Hubble metrics and options. ([#34849](https://redirect.github.com/cilium/cilium/issues/34849), [@rectified95](https://redirect.github.com/rectified95)) - Multi-Pool IPAM now allows the use of /32 or /128 CIDRs in CiliumPodIPPools ([#34618](https://redirect.github.com/cilium/cilium/issues/34618), [@juliusmh](https://redirect.github.com/juliusmh)) - Remove workaround for Azure CNI bridge mode from nodeinit script. ([#34870](https://redirect.github.com/cilium/cilium/issues/34870), [@wedaly](https://redirect.github.com/wedaly)) - version: Don't create k8s client if --client is specified ([#34914](https://redirect.github.com/cilium/cilium/issues/34914), [@michi-covalent](https://redirect.github.com/michi-covalent)) **Bugfixes:** - bgpv2: Fix service reconciliation logic to update service advertisement metadata only after successful reconciliation ([#34976](https://redirect.github.com/cilium/cilium/issues/34976), [@rastislavs](https://redirect.github.com/rastislavs)) - bpf: nat: recreate a NAT entry if the packet hits the stale entry ([#34913](https://redirect.github.com/cilium/cilium/issues/34913), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - cli: fix a case when connectivity perf command was hanging if LRP was enabled in the cluster ([#35063](https://redirect.github.com/cilium/cilium/issues/35063), [@marseel](https://redirect.github.com/marseel)) - Correctly format `cilium status -o json` CLI output for errors and warnings ([#34654](https://redirect.github.com/cilium/cilium/issues/34654), [@nimishamehta5](https://redirect.github.com/nimishamehta5)) - Fix a low-probability issue where the DNS proxy could occasionally drop DNS queries due to "duplicate request id" errors. ([#34941](https://redirect.github.com/cilium/cilium/issues/34941), [@bimmlerd](https://redirect.github.com/bimmlerd)) - Fix Hubble exporter config uses wrong separator ([#34621](https://redirect.github.com/cilium/cilium/issues/34621), [@chaunceyjiang](https://redirect.github.com/chaunceyjiang)) - Fix issue where bpf packet buffer mark would in some cases set incorrect mark value resulting in incorrectly SNATed traffic. ([#34789](https://redirect.github.com/cilium/cilium/issues/34789), [@tommyp1ckles](https://redirect.github.com/tommyp1ckles)) - Fix missing Helm chart version for status command ([#34748](https://redirect.github.com/cilium/cilium/issues/34748), [@pgils](https://redirect.github.com/pgils)) - Fix parameter check to forbid IPAM ENI with TUNNEL routing, and prevent agent segfault when also IPSec is enabled. ([#34651](https://redirect.github.com/cilium/cilium/issues/34651), [@smagnani96](https://redirect.github.com/smagnani96)) - Fix possible panic occurring in case errors are returned while updating/deleting IPv6 routes ([#34721](https://redirect.github.com/cilium/cilium/issues/34721), [@giorio94](https://redirect.github.com/giorio94)) - Fix runtime panic with L2announcer name generation ([#35031](https://redirect.github.com/cilium/cilium/issues/35031), [@YutaroHayakawa](https://redirect.github.com/YutaroHayakawa)) - Fix services could not be removed in sync-lb-maps-with-k8s-services controller ([#33885](https://redirect.github.com/cilium/cilium/issues/33885), [@haozhangami](https://redirect.github.com/haozhangami)) - Fix the Egress Gateway reconciliation logic to make progress after setting the rp_filter sysctl failed. ([#34775](https://redirect.github.com/cilium/cilium/issues/34775), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - fix(clustermesh): mesh connection mode ([#34932](https://redirect.github.com/cilium/cilium/issues/34932), [@littlejo](https://redirect.github.com/littlejo)) - Fixed bug in LB-IPAM where restarting the operator would unshare previously shared IPs between services ([#34783](https://redirect.github.com/cilium/cilium/issues/34783), [@dylandreimerink](https://redirect.github.com/dylandreimerink)) - Fixed bug where service id allocator would loop infinity when out of service ids ([#35033](https://redirect.github.com/cilium/cilium/issues/35033), [@WeeNews](https://redirect.github.com/WeeNews)) - Fixes deadlock in identity watcher. This fixes an issue where a kvstore disconnect can cause the event receiver to exit and the event sender to get stuck forever. ([#34611](https://redirect.github.com/cilium/cilium/issues/34611), [@dboslee](https://redirect.github.com/dboslee)) - Fixes startup fatal error when updating CiliumNode resource. ([#34862](https://redirect.github.com/cilium/cilium/issues/34862), [@harsimran-pabla](https://redirect.github.com/harsimran-pabla)) - gateway-api: Align GRPCRoute matchers with GEP specification ([#34808](https://redirect.github.com/cilium/cilium/issues/34808), [@cfsnyder](https://redirect.github.com/cfsnyder)) - helm: Render valid image specs when tag is empty ([#34891](https://redirect.github.com/cilium/cilium/issues/34891), [@BenoitKnecht](https://redirect.github.com/BenoitKnecht)) - ipcache: Yet another refcounting fix with mix of APIs ([#34715](https://redirect.github.com/cilium/cilium/issues/34715), [@gandro](https://redirect.github.com/gandro)) - lrp: define ENABLE_LOCAL_REDIRECT_POLICY regardless of socketLB setting ([#34954](https://redirect.github.com/cilium/cilium/issues/34954), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - Make initial nat gc async during Daemon initialization. ([#34070](https://redirect.github.com/cilium/cilium/issues/34070), [@tommyp1ckles](https://redirect.github.com/tommyp1ckles)) - Metrics: Fix the reporting of bootstrap metric "overall" scope as it was not capturing a part of initialization ([#34971](https://redirect.github.com/cilium/cilium/issues/34971), [@marseel](https://redirect.github.com/marseel)) - The cilium dnsproxy now handles EDNS0 large buffersize advertisements better. ([#34852](https://redirect.github.com/cilium/cilium/issues/34852), [@bimmlerd](https://redirect.github.com/bimmlerd)) - wireguard: Fix issue where updates to a WireGuard device's configuration caused connectivity blips. ([#34612](https://redirect.github.com/cilium/cilium/issues/34612), [@jrife](https://redirect.github.com/jrife)) **CI Changes:** - .github/workflows: fix ci image cache cleaner ([#34819](https://redirect.github.com/cilium/cilium/issues/34819), [@aanm](https://redirect.github.com/aanm)) - .github: add missing export in variable ([#34818](https://redirect.github.com/cilium/cilium/issues/34818), [@aanm](https://redirect.github.com/aanm)) - .github: change nick-invision/retry -> nick-fields/retry. ([#34718](https://redirect.github.com/cilium/cilium/issues/34718), [@tommyp1ckles](https://redirect.github.com/tommyp1ckles)) - .github: create cache directories on cache miss ([#35088](https://redirect.github.com/cilium/cilium/issues/35088), [@aanm](https://redirect.github.com/aanm)) - .github: install golang action after checkout ([#34843](https://redirect.github.com/cilium/cilium/issues/34843), [@aanm](https://redirect.github.com/aanm)) - .github: prevent failure when deleting GitHub Actions cache ([#34844](https://redirect.github.com/cilium/cilium/issues/34844), [@aanm](https://redirect.github.com/aanm)) - .github: re-enable configurations in e2e-upgrade ([#34800](https://redirect.github.com/cilium/cilium/issues/34800), [@aanm](https://redirect.github.com/aanm)) - .github: remove CI tests from PR runs if not required ([#34726](https://redirect.github.com/cilium/cilium/issues/34726), [@aanm](https://redirect.github.com/aanm)) - .github: specify cache-dependency-path in lint-workflows ([#34845](https://redirect.github.com/cilium/cilium/issues/34845), [@aanm](https://redirect.github.com/aanm)) - ariane: don't run full test suite for BPF test changes ([#34931](https://redirect.github.com/cilium/cilium/issues/34931), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - ariane: manage workflow exclusions for changes to CODEOWNERS and USERS.md ([#34894](https://redirect.github.com/cilium/cilium/issues/34894), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - bpf/complexity-tests: Add ENABLE_LOCAL_REDIRECT_POLICY ([#35016](https://redirect.github.com/cilium/cilium/issues/35016), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - bpf/complexity-tests: fix ENABLE_LOCAL_REDIRECT_POLICY ([#35099](https://redirect.github.com/cilium/cilium/issues/35099), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - ci: 100 node scale - alert on bootstrap/cpu/memory regressions ([#34897](https://redirect.github.com/cilium/cilium/issues/34897), [@marseel](https://redirect.github.com/marseel)) - ci: clean disk only on ubuntu-latest runners ([#34711](https://redirect.github.com/cilium/cilium/issues/34711), [@marseel](https://redirect.github.com/marseel)) - ci: conformance-\[gateway-api|ginkgo|ingress] wait for images before matrix generation ([#34820](https://redirect.github.com/cilium/cilium/issues/34820), [@aanm](https://redirect.github.com/aanm)) - ci: Confromance E2E wait for images before matrix generation ([#34707](https://redirect.github.com/cilium/cilium/issues/34707), [@marseel](https://redirect.github.com/marseel)) - CI: Fix syntax error in Image Cache Cleaner ([#35104](https://redirect.github.com/cilium/cilium/issues/35104), [@brlbil](https://redirect.github.com/brlbil)) - CI: l4lb allow extra opts ([#34813](https://redirect.github.com/cilium/cilium/issues/34813), [@tommyp1ckles](https://redirect.github.com/tommyp1ckles)) - ci: Move CiliumEndpointSlice migration to schedule ([#34828](https://redirect.github.com/cilium/cilium/issues/34828), [@marseel](https://redirect.github.com/marseel)) - ci: Wait for images before generating test matrix ([#34727](https://redirect.github.com/cilium/cilium/issues/34727), [@marseel](https://redirect.github.com/marseel)) - cilium-cli: connectivity: fix the local-redirect-policy flow validation ([#34919](https://redirect.github.com/cilium/cilium/issues/34919), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - cilium-cli: Define CLI_MAIN_DIR Make variable ([#34910](https://redirect.github.com/cilium/cilium/issues/34910), [@michi-covalent](https://redirect.github.com/michi-covalent)) - fix: repository nil value handled on workflow_dispatch context for renovate updates ([#34902](https://redirect.github.com/cilium/cilium/issues/34902), [@Artyop](https://redirect.github.com/Artyop)) - gha: Enable Ingress Controller test in upgrade ([#34185](https://redirect.github.com/cilium/cilium/issues/34185), [@sayboras](https://redirect.github.com/sayboras)) - gha: fix permissions of update label backport PR workflow ([#35117](https://redirect.github.com/cilium/cilium/issues/35117), [@giorio94](https://redirect.github.com/giorio94)) - metrics: Add metrics config test for Hubble. ([#34325](https://redirect.github.com/cilium/cilium/issues/34325), [@rectified95](https://redirect.github.com/rectified95)) - Miscellaneus improvements to the clustermesh scale test ([#34704](https://redirect.github.com/cilium/cilium/issues/34704), [@giorio94](https://redirect.github.com/giorio94)) - Revert "ci: increase verbosity of print-downgrade-script.sh" ([#34863](https://redirect.github.com/cilium/cilium/issues/34863), [@marseel](https://redirect.github.com/marseel)) - Run scheduled workflows every 8h instead of 6h ([#34898](https://redirect.github.com/cilium/cilium/issues/34898), [@auriaave](https://redirect.github.com/auriaave)) - test: add dual-stack to delegated IPAM E2E test ([#34937](https://redirect.github.com/cilium/cilium/issues/34937), [@wedaly](https://redirect.github.com/wedaly)) - test: Add unit tests for directory policy watcher ([#33920](https://redirect.github.com/cilium/cilium/issues/33920), [@tamilmani1989](https://redirect.github.com/tamilmani1989)) - test: Cilium Identity management tests ([#34743](https://redirect.github.com/cilium/cilium/issues/34743), [@dlapcevic](https://redirect.github.com/dlapcevic)) - test: e2e tests for delegated IPAM ([#34839](https://redirect.github.com/cilium/cilium/issues/34839), [@wedaly](https://redirect.github.com/wedaly)) **Misc Changes:** - .github/labeler: add exclusive cilium-cli label ([#34771](https://redirect.github.com/cilium/cilium/issues/34771), [@aanm](https://redirect.github.com/aanm)) - .github: add cache to cilium-cli and hubble-cli build workflows ([#34847](https://redirect.github.com/cilium/cilium/issues/34847), [@aanm](https://redirect.github.com/aanm)) - .github: do not update github runners for bpf workflows ([#35105](https://redirect.github.com/cilium/cilium/issues/35105), [@aanm](https://redirect.github.com/aanm)) - .github: fix lvh-kind warnings ([#34811](https://redirect.github.com/cilium/cilium/issues/34811), [@aanm](https://redirect.github.com/aanm)) - .github: fix runtime image digests ([#35107](https://redirect.github.com/cilium/cilium/issues/35107), [@aanm](https://redirect.github.com/aanm)) - .mailmap: Add entry for Quentin's email ([#34708](https://redirect.github.com/cilium/cilium/issues/34708), [@qmonnet](https://redirect.github.com/qmonnet)) - Add flag enabling LB IPAM ([#34945](https://redirect.github.com/cilium/cilium/issues/34945), [@nebril](https://redirect.github.com/nebril)) - Add Jar to the users.md ([#34952](https://redirect.github.com/cilium/cilium/issues/34952), [@rohan-changejar](https://redirect.github.com/rohan-changejar)) - Add Nutanix user ([#34752](https://redirect.github.com/cilium/cilium/issues/34752), [@tuxtof](https://redirect.github.com/tuxtof)) - agent: add flag to enable internal traffic policy ([#34858](https://redirect.github.com/cilium/cilium/issues/34858), [@nebril](https://redirect.github.com/nebril)) - agent: drop leftover logstash constant/field ([#34722](https://redirect.github.com/cilium/cilium/issues/34722), [@giorio94](https://redirect.github.com/giorio94)) - AUTHORS: fix duplicate entries ([#34714](https://redirect.github.com/cilium/cilium/issues/34714), [@aanm](https://redirect.github.com/aanm)) - bgpv1: Add MatchFamilies option in RoutePolicyConditions ([#34674](https://redirect.github.com/cilium/cilium/issues/34674), [@rastislavs](https://redirect.github.com/rastislavs)) - bgpv1: Cleanup BGP reconcilers setup to ensure that no BGP CP jobs are started when BGP CP is disabled ([#34836](https://redirect.github.com/cilium/cilium/issues/34836), [@rastislavs](https://redirect.github.com/rastislavs)) - bgpv2/docs: add ebgp multihop documentation ([#34951](https://redirect.github.com/cilium/cilium/issues/34951), [@harsimran-pabla](https://redirect.github.com/harsimran-pabla)) - bgpv2: cleanup service reconciliation logic ([#34959](https://redirect.github.com/cilium/cilium/issues/34959), [@rastislavs](https://redirect.github.com/rastislavs)) - Bitlpm fixes and improvements ([#34781](https://redirect.github.com/cilium/cilium/issues/34781), [@jrajahalme](https://redirect.github.com/jrajahalme)) - bpf/lib/icmpv6.h: cleanup hardcoded ICMPv6 types ([#34942](https://redirect.github.com/cilium/cilium/issues/34942), [@msune](https://redirect.github.com/msune)) - bpf: compile-test ENABLE_IP_MASQ_AGENT_IPV\* ([#34701](https://redirect.github.com/cilium/cilium/issues/34701), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - bpf: tests: don't specify ETH_HLEN for L2 devices ([#34906](https://redirect.github.com/cilium/cilium/issues/34906), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - bpf: vxlan helper improvements ([#34755](https://redirect.github.com/cilium/cilium/issues/34755), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - bugtool: collect `cilium-dbg bpf frag list` output ([#34868](https://redirect.github.com/cilium/cilium/issues/34868), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - build-images-ci: skip SBOM for cilium-cli ([#35116](https://redirect.github.com/cilium/cilium/issues/35116), [@aanm](https://redirect.github.com/aanm)) - Bump k8s version to 1.31 in some missing files ([#34778](https://redirect.github.com/cilium/cilium/issues/34778), [@aanm](https://redirect.github.com/aanm)) - Bump StateDB to v0.3 with range-funcs ([#34729](https://redirect.github.com/cilium/cilium/issues/34729), [@joamaki](https://redirect.github.com/joamaki)) - chore(deps): update all github action dependencies (main) ([#34759](https://redirect.github.com/cilium/cilium/issues/34759), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (main) ([#34877](https://redirect.github.com/cilium/cilium/issues/34877), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (main) ([#35004](https://redirect.github.com/cilium/cilium/issues/35004), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (main) ([#35078](https://redirect.github.com/cilium/cilium/issues/35078), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (main) ([#34757](https://redirect.github.com/cilium/cilium/issues/34757), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (main) ([#34872](https://redirect.github.com/cilium/cilium/issues/34872), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (main) ([#34969](https://redirect.github.com/cilium/cilium/issues/34969), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.16.17 (main) ([#34875](https://redirect.github.com/cilium/cilium/issues/34875), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.16.18 (main) ([#34998](https://redirect.github.com/cilium/cilium/issues/34998), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency renovatebot/renovate to v38.80.0 (main) ([#34882](https://redirect.github.com/cilium/cilium/issues/34882), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.23.1 docker digest to [`2fe82a3`](https://redirect.github.com/cilium/cilium/commit/2fe82a3) (main) ([#34873](https://redirect.github.com/cilium/cilium/issues/34873), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.23.1 docker digest to [`4f063a2`](https://redirect.github.com/cilium/cilium/commit/4f063a2) (main) ([#35075](https://redirect.github.com/cilium/cilium/issues/35075), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.23.1 (main) ([#34732](https://redirect.github.com/cilium/cilium/issues/34732), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update golangci/golangci-lint docker tag to v1.61.0 (main) ([#34826](https://redirect.github.com/cilium/cilium/issues/34826), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update https://github.com/cilium/scaffolding digest to [`a97aaf1`](https://redirect.github.com/cilium/cilium/commit/a97aaf1) (main) ([#35100](https://redirect.github.com/cilium/cilium/issues/35100), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(plugins): replace deprecated CNI function ([#34561](https://redirect.github.com/cilium/cilium/issues/34561), [@SkalaNetworks](https://redirect.github.com/SkalaNetworks)) - chore: Add constants for cloud APIs ([#34438](https://redirect.github.com/cilium/cilium/issues/34438), [@jaffcheng](https://redirect.github.com/jaffcheng)) - ci: fix ginkgo by replace k8s v1.27 with v1.31 ([#34773](https://redirect.github.com/cilium/cilium/issues/34773), [@mhofstetter](https://redirect.github.com/mhofstetter)) - cilium-cli/status: sort status lines ([#34927](https://redirect.github.com/cilium/cilium/issues/34927), [@tklauser](https://redirect.github.com/tklauser)) - cilium-cli/sysdump: export SubmitMetricsSubtask ([#34864](https://redirect.github.com/cilium/cilium/issues/34864), [@tklauser](https://redirect.github.com/tklauser)) - cilium-cli: collect BGPv2 CRD resources in sysdump ([#34684](https://redirect.github.com/cilium/cilium/issues/34684), [@rastislavs](https://redirect.github.com/rastislavs)) - cilium-cli: remove copying of loop variables ([#34944](https://redirect.github.com/cilium/cilium/issues/34944), [@tklauser](https://redirect.github.com/tklauser)) - cilium-dbg: Show deleted objects when watching StateDB tables ([#34635](https://redirect.github.com/cilium/cilium/issues/34635), [@joamaki](https://redirect.github.com/joamaki)) - cilium: add minor annotation mode follow-ups ([#35102](https://redirect.github.com/cilium/cilium/issues/35102), [@borkmann](https://redirect.github.com/borkmann)) - cilium: add option to configure service annotation-based dispatch ([#35064](https://redirect.github.com/cilium/cilium/issues/35064), [@borkmann](https://redirect.github.com/borkmann)) - cilium: Enable health datapath also in annotation mode ([#35124](https://redirect.github.com/cilium/cilium/issues/35124), [@borkmann](https://redirect.github.com/borkmann)) - cli/connectivity: improvements for echo-ingress-l7-via-hostport test ([#34502](https://redirect.github.com/cilium/cilium/issues/34502), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - clustermesh/endpointslicesync: fix panic on failure in Test_meshEndpointSlice_Reconcile ([#34699](https://redirect.github.com/cilium/cilium/issues/34699), [@tklauser](https://redirect.github.com/tklauser)) - datapath: clarify comment for EncryptNode ([#34924](https://redirect.github.com/cilium/cilium/issues/34924), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - docs(users): add SDV Services ([#34746](https://redirect.github.com/cilium/cilium/issues/34746), [@sjoukedv](https://redirect.github.com/sjoukedv)) - docs, LRP: add note regarding the KPR configuration ([#35030](https://redirect.github.com/cilium/cilium/issues/35030), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - docs: Clarify instructions for bumping K8s to avoid forks ([#34791](https://redirect.github.com/cilium/cilium/issues/34791), [@christarazi](https://redirect.github.com/christarazi)) - docs: fix EKS Kubernetes compatibility link ([#34922](https://redirect.github.com/cilium/cilium/issues/34922), [@fjvela](https://redirect.github.com/fjvela)) - docs: Improve warning on insecure global IPsec keys ([#34846](https://redirect.github.com/cilium/cilium/issues/34846), [@pchaigno](https://redirect.github.com/pchaigno)) - docs: move sig-policy to second Tuesday of the month ([#35040](https://redirect.github.com/cilium/cilium/issues/35040), [@squeed](https://redirect.github.com/squeed)) - Document about multicast sub-command of cilium-cli ([#34987](https://redirect.github.com/cilium/cilium/issues/34987), [@yushoyamaguchi](https://redirect.github.com/yushoyamaguchi)) - driftchecker: Allow agent to monitor configuration drifts ([#34712](https://redirect.github.com/cilium/cilium/issues/34712), [@ovidiutirla](https://redirect.github.com/ovidiutirla)) - egressgw: skip gateway config update on endpoint change events ([#34795](https://redirect.github.com/cilium/cilium/issues/34795), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - endpoint: Use nanoseconds in policy logs ([#34679](https://redirect.github.com/cilium/cilium/issues/34679), [@jrajahalme](https://redirect.github.com/jrajahalme)) - envoy: Add configuration for OverloadManager ([#34682](https://redirect.github.com/cilium/cilium/issues/34682), [@sayboras](https://redirect.github.com/sayboras)) - envoy: possibility to configure separate default log level for Envoy ([#34728](https://redirect.github.com/cilium/cilium/issues/34728), [@mhofstetter](https://redirect.github.com/mhofstetter)) - envoy: update cilium/proxy to latest version ([#34769](https://redirect.github.com/cilium/cilium/issues/34769), [@mhofstetter](https://redirect.github.com/mhofstetter)) - experimental: Benchmark reconciling tables and BPF ([#34487](https://redirect.github.com/cilium/cilium/issues/34487), [@DamianSawicki](https://redirect.github.com/DamianSawicki)) - feat(helm): allow setting resources for spire agent and server workloads ([#34822](https://redirect.github.com/cilium/cilium/issues/34822), [@sjoukedv](https://redirect.github.com/sjoukedv)) - fix add spi=0 to ipSecKeysRemovalTime ([#34652](https://redirect.github.com/cilium/cilium/issues/34652), [@smagnani96](https://redirect.github.com/smagnani96)) - fix(deps): update all go dependencies main (main) ([#34548](https://redirect.github.com/cilium/cilium/issues/34548), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update all go dependencies main (main) ([#34920](https://redirect.github.com/cilium/cilium/issues/34920), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update all go dependencies main (main) ([#35024](https://redirect.github.com/cilium/cilium/issues/35024), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update aws-sdk-go-v2 monorepo (main) ([#34758](https://redirect.github.com/cilium/cilium/issues/34758), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update aws-sdk-go-v2 monorepo (main) ([#35003](https://redirect.github.com/cilium/cilium/issues/35003), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update aws-sdk-go-v2 monorepo (main) ([#35077](https://redirect.github.com/cilium/cilium/issues/35077), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update kubernetes packages to v0.31.1 (main) ([#34853](https://redirect.github.com/cilium/cilium/issues/34853), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - fix(deps): update opentelemetry-go monorepo to v1.30.0 (main) ([#34876](https://redirect.github.com/cilium/cilium/issues/34876), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - Fixed TestWatchAllKeys UT ([#35009](https://redirect.github.com/cilium/cilium/issues/35009), [@chaunceyjiang](https://redirect.github.com/chaunceyjiang)) - gateway-api: Enable GatewayStaticAddresses test in CI ([#34695](https://redirect.github.com/cilium/cilium/issues/34695), [@sayboras](https://redirect.github.com/sayboras)) - gateway-api: Sync up with latest version upstream ([#35047](https://redirect.github.com/cilium/cilium/issues/35047), [@sayboras](https://redirect.github.com/sayboras)) - generic-veth will ignore the automatically generated link-local IPv6 addresses on the link. ([#33959](https://redirect.github.com/cilium/cilium/issues/33959), [@BSWANG](https://redirect.github.com/BSWANG)) - go: Replace x/maps package by respective standard libraries ([#34649](https://redirect.github.com/cilium/cilium/issues/34649), [@sayboras](https://redirect.github.com/sayboras)) - helm: add client auth to hubble server certificate ([#34934](https://redirect.github.com/cilium/cilium/issues/34934), [@kaworu](https://redirect.github.com/kaworu)) - helm: set key usages for hubble certificates with cert-manager ([#34946](https://redirect.github.com/cilium/cilium/issues/34946), [@kaworu](https://redirect.github.com/kaworu)) - hive/k8s: Add OnDemand\[T] and the OnDemandTable ([#34799](https://redirect.github.com/cilium/cilium/issues/34799), [@joamaki](https://redirect.github.com/joamaki)) - hubble/filters: use netip types ([#34803](https://redirect.github.com/cilium/cilium/issues/34803), [@tklauser](https://redirect.github.com/tklauser)) - hubble: add file name and line number info to dropped flows ([#34616](https://redirect.github.com/cilium/cilium/issues/34616), [@kaworu](https://redirect.github.com/kaworu)) - images: fix path script ([#34764](https://redirect.github.com/cilium/cilium/issues/34764), [@aanm](https://redirect.github.com/aanm)) - Improve speed on lint commits GH workflow ([#34848](https://redirect.github.com/cilium/cilium/issues/34848), [@aanm](https://redirect.github.com/aanm)) - ingress: export Config\[T] type. ([#34812](https://redirect.github.com/cilium/cilium/issues/34812), [@tommyp1ckles](https://redirect.github.com/tommyp1ckles)) - job: Prepare job names for hive bump ([#34838](https://redirect.github.com/cilium/cilium/issues/34838), [@ovidiutirla](https://redirect.github.com/ovidiutirla)) - k8s: Convert service.cilium.io/node to annotation ([#34739](https://redirect.github.com/cilium/cilium/issues/34739), [@brb](https://redirect.github.com/brb)) - kvstore: remove obsolete key encoding/decoding methods ([#34925](https://redirect.github.com/cilium/cilium/issues/34925), [@tklauser](https://redirect.github.com/tklauser)) - kvstore: Remove SessionID from kvstore Value ([#34895](https://redirect.github.com/cilium/cilium/issues/34895), [@odinuge](https://redirect.github.com/odinuge)) - lbipam: Remove init done callback hooks ([#34785](https://redirect.github.com/cilium/cilium/issues/34785), [@dylandreimerink](https://redirect.github.com/dylandreimerink)) - Link ariane triggers in testing/CI documentation. ([#34869](https://redirect.github.com/cilium/cilium/issues/34869), [@sypakine](https://redirect.github.com/sypakine)) - loader: de-dup LinkByName() calls for overlay / wireguard setup ([#34705](https://redirect.github.com/cilium/cilium/issues/34705), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - Make flag that instructs LB-IPAM to only allocate IPs for services with .Spec.LoadBalancerClass specified functional ([#34985](https://redirect.github.com/cilium/cilium/issues/34985), [@simu](https://redirect.github.com/simu)) - Makefile: retry on kind load docker-image errors ([#34907](https://redirect.github.com/cilium/cilium/issues/34907), [@jibi](https://redirect.github.com/jibi)) - operator: remove helper function `model.AddressOf` ([#34765](https://redirect.github.com/cilium/cilium/issues/34765), [@mhofstetter](https://redirect.github.com/mhofstetter)) - pkg/ciliumidentity: Prevent updateCID from modifying the resource store ([#34805](https://redirect.github.com/cilium/cilium/issues/34805), [@ovidiutirla](https://redirect.github.com/ovidiutirla)) - pkg/ciliumidentity: Use hive cell context ([#34565](https://redirect.github.com/cilium/cilium/issues/34565), [@ovidiutirla](https://redirect.github.com/ovidiutirla)) - pkg/dynamicconfig: Add support for multiple sources ([#34581](https://redirect.github.com/cilium/cilium/issues/34581), [@ovidiutirla](https://redirect.github.com/ovidiutirla)) - policy: add flag enabling non-default-deny policy ([#34940](https://redirect.github.com/cilium/cilium/issues/34940), [@nebril](https://redirect.github.com/nebril)) - policy: Fix Key stringer port range output ([#34842](https://redirect.github.com/cilium/cilium/issues/34842), [@jrajahalme](https://redirect.github.com/jrajahalme)) - Prepare for release v1.17.0-pre.0 ([#34694](https://redirect.github.com/cilium/cilium/issues/34694), [@cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot]) - Re-write GitHub cache usages across workflows ([#34866](https://redirect.github.com/cilium/cilium/issues/34866), [@aanm](https://redirect.github.com/aanm)) - README: Update releases ([#34710](https://redirect.github.com/cilium/cilium/issues/34710), [@aanm](https://redirect.github.com/aanm)) - README: Update releases ([#35054](https://redirect.github.com/cilium/cilium/issues/35054), [@nebril](https://redirect.github.com/nebril)) - Refactor the CiliumEndpointSlice subscriber public methods and increase test coverage ([#34671](https://redirect.github.com/cilium/cilium/issues/34671), [@sypakine](https://redirect.github.com/sypakine)) - Remove conformance-e2e tests ([#34742](https://redirect.github.com/cilium/cilium/issues/34742), [@aanm](https://redirect.github.com/aanm)) - Remove note about TLSRoute being required by Cilium ([#34817](https://redirect.github.com/cilium/cilium/issues/34817), [@youngnick](https://redirect.github.com/youngnick)) - renovate: Correct the regex for cilium-envoy image ([#34886](https://redirect.github.com/cilium/cilium/issues/34886), [@sayboras](https://redirect.github.com/sayboras)) - renovate: Update allowedVersion for cilium-envoy ([#34978](https://redirect.github.com/cilium/cilium/issues/34978), [@sayboras](https://redirect.github.com/sayboras)) - Reuse deny CIDR benchmark in allow CIDR benchmark ([#34996](https://redirect.github.com/cilium/cilium/issues/34996), [@christarazi](https://redirect.github.com/christarazi)) - Services protocol differentiation: minor follow ups ([#34955](https://redirect.github.com/cilium/cilium/issues/34955), [@jibi](https://redirect.github.com/jibi)) - Set go version to v1.23 in go.mod and fix codegen issue ([#34725](https://redirect.github.com/cilium/cilium/issues/34725), [@joamaki](https://redirect.github.com/joamaki)) - Show exact error message for "Error reading config file" ([#34617](https://redirect.github.com/cilium/cilium/issues/34617), [@jingyuanliang](https://redirect.github.com/jingyuanliang)) - Transactional selector cache ([#34205](https://redirect.github.com/cilium/cilium/issues/34205), [@jrajahalme](https://redirect.github.com/jrajahalme)) - Use Go standard library slices package more extensively ([#34796](https://redirect.github.com/cilium/cilium/issues/34796), [@tklauser](https://redirect.github.com/tklauser)) - vendor: Bump StateDB to v0.2.6 and fix usage ([#34669](https://redirect.github.com/cilium/cilium/issues/34669), [@joamaki](https://redirect.github.com/joamaki)) - wireguard: Move private key generation to start ([#34860](https://redirect.github.com/cilium/cilium/issues/34860), [@joamaki](https://redirect.github.com/joamaki)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.17.0-pre.1@sha256:fa532628872a3b086d8658d93ff55e94035cb2a7d7f5f2411539eb51cceee617` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.17.0-pre.1@sha256:b019822aa0d968b4d4275fa0da7b77c9e05ad76bc5b93aeb89f67ce5278d3cce` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.17.0-pre.1@sha256:0a2e7aa1135e9c9ec9f72cf015bb5a39d4c0d651165a11195110b7e7cac657d3` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.17.0-pre.1@sha256:0f6450f567e998768f042894602a7a44f7146133c34cc2cbd5f5850effcef44a` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.17.0-pre.1@sha256:a1d68e285c88a8190003c45265d0f5269bf8984a9d8000611998131862ebc0e2` ##### operator-aws `quay.io/cilium/operator-aws:v1.17.0-pre.1@sha256:54be54e2562e4c5ef7baf7e936fe7d7ecbd6fc2c35681ecdb688cd850966d84a` ##### operator-azure `quay.io/cilium/operator-azure:v1.17.0-pre.1@sha256:05f362b927ad91e7fa4ff050444bd075e2b61d5b1108549b860a3357cb592891` ##### operator-generic `quay.io/cilium/operator-generic:v1.17.0-pre.1@sha256:5b8e56c73c292285370296d5b71266bbe11ee02c4977c1d299c313a09cb72d42` ##### operator `quay.io/cilium/operator:v1.17.0-pre.1@sha256:c099d3a5490f842f7b0ba0f9792631aa5c755fce04c82a6ce3c6c765dcc43c52`Configuration
📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.