chore(deps): update dependency cilium to v0.19.4

[renovate]

This PR contains the following updates:

Package	Update	Change
CILIUM	minor	v0.18.8 → v0.19.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cilium/cilium-cli (CILIUM)

v0.19.4

Compare Source

Summary of Changes

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#45725, @​cilium-renovate[bot])
• Fix incorrect 'skipping test' reason messages (cilium/cilium#46043, @​atykhyy)
• Fix new golangci-lint findings (cilium/cilium#45894, @​HadrienPatte)
• chore(deps): update gcr.io/distroless/static:latest docker digest to 3592aa8 by @​renovate[bot] in #​3235
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 313faae by @​renovate[bot] in #​3234
• chore(deps): update cilium/cilium digest to 08329ad by @​renovate[bot] in #​3231
• chore(deps): update cilium by @​renovate[bot] in #​3236
• renovate: add dependency cooldown, don't pin digests for cilium/cilium GitHub actions by @​tklauser in #​3238
• chore(deps): update cilium/cilium digest to b72d04b by @​renovate[bot] in #​3237
• ci: add write permissions to release workflow by @​tklauser in #​3233
• ci: pin cilium/cilium actions to v1.19.4, avoid digest updates by @​tklauser in #​3240
• Prepare for v0.19.4 release by @​tklauser in #​3241

Full Changelog: cilium/cilium-cli@v0.19.3...v0.19.4

v0.19.3

Compare Source

[!NOTE]
This release doesn't contain binary artifacts. Please use cilium-cli v0.19.4 instead if you require these binaries.

Summary of Changes

Minor Changes:

• A new parameter, --log-check-only-test-time, has been added to Cilium CLI connectivity tests. When set to true, only the logs written after the point in time where the tests have been started get checked. This aims at avoiding false positive. (cilium/cilium#44988, @​fgiloux)
• Additionally collect Cluster Mesh certificate generation artifacts in sysdumps (cilium/cilium#44773, @​giorio94)
• cilium-cli: add --cleanup flag for connectivity test artifacts (cilium/cilium#44075, @​harshakumar25)
• encryption: remove deprecated enable-encryption-strict-mode encryption-strict-mode-cidr and encryption-strict-mode-allow-remote-node-identities options (cilium/cilium#45452, @​smagnani96)
• Remove deprecated v2alpha1 CiliumNodeConfig API that was promoted to v2 in cilium 1.16. (cilium/cilium#44739, @​HadrienPatte)

Bugfixes:

• envoy: Fix xds server npds listeners accounting (cilium/cilium#44830, @​fristonio)
• Fix cilium-cli crash when using corrupted Helm values for clustermesh (cilium/cilium#45095, @​Aprazor)

CI Changes:

• ci:tcpdump: harden sniffer startup with retries (cilium/cilium#45421, @​smagnani96)
• cilium-cli/connectivity: fix static route setup/teardown (cilium/cilium#45388, @​tklauser)
• cilium-cli/connectivity: require static routes only on kind (cilium/cilium#45824, @​tklauser)
• cilium-cli: Add log-check-extra-exceptions flag for connectivity test (cilium/cilium#45443, @​rastislavs)
• cilium-cli: Deploy FRR daemonset only once per node (cilium/cilium#45523, @​rastislavs)
• cilium-cli: Fix port conflict for echo-external-node (cilium/cilium#45530, @​pchaigno)
• cilium-cli: Ignore gobgp tcp close error in log checks (cilium/cilium#45010, @​ysksuzuki)
• cilium-cli: introduce dedicated connectivity test skip condition helpers (cilium/cilium#45200, @​tklauser)
• connectivity: make conn-disrupt sub-tests independently deployable (cilium/cilium#45382, @​ysksuzuki)
• Fix cilium connectivity test namespace setup so configured namespace labels also apply to CCNP test namespaces. (cilium/cilium#45101, @​Synte-Peng)
• Fix wildcard egress tls sni policy connectivity tests (cilium/cilium#44505, @​fristonio)
• Remove sequential and only use concurrent tests (cilium/cilium#40103, @​aanm)
• Use fake external targets on nodes without Cilium in GKE CI workflows for better stability. (cilium/cilium#41713, @​gentoo-root)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#44565, @​cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44667, @​cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44948, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44566, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44663, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44781, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44923, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45460, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45611, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45726, @​cilium-renovate[bot])

• chore(deps): update base-images to v1.26.2 (main) (cilium/cilium#45297, @​cilium-renovate[bot])

• cilium-cli/connectivity: add --exit-zero-on-failure flag (cilium/cilium#44433, @​darox)

• cilium-cli/connectivity: use WithCiliumVersion to skip tests per Cilium version (cilium/cilium#44765, @​tklauser)

• cilium-cli/sysdump: collect Cilium L2 Announcement Policies (cilium/cilium#45353, @​tklauser)

• cilium-cli: Disable Helm Server Side Apply (cilium/cilium#44546, @​YutaroHayakawa)

• cilium-cli: Fix panic parsing IPv6 URL in connectivity tests (cilium/cilium#45337, @​HadrienPatte)

• modernize: Enable waitgroup analyzer (cilium/cilium#44660, @​HadrienPatte)

• renovate: Add support to manage echo-advanced image (cilium/cilium#44623, @​HadrienPatte)

• Update release instructions by @​tklauser in #​3192

• Update stable release to v0.19.2 by @​tklauser in #​3193

• chore(deps): update actions/setup-go action to v6.3.0 by @​renovate[bot] in #​3194

• chore(deps): update gcr.io/distroless/static:latest docker digest to eca24e6 by @​renovate[bot] in #​3195

• chore(deps): update docker.io/library/golang:1.26.0 docker digest to 9edf713 by @​renovate[bot] in #​3196

• RELEASE: confirm that CLI release works for optional Cloud environments by @​julianwiedmann in #​3200

• chore(deps): update gcr.io/distroless/static:latest docker digest to 28efbe9 by @​renovate[bot] in #​3198

• chore(deps): update go by @​renovate[bot] in #​3201

• chore(deps): update all github action dependencies by @​renovate[bot] in #​3199

• chore(deps): update docker.io/library/golang docker tag to v1.26.1 by @​renovate[bot] in #​3202

• chore(deps): update all github action dependencies by @​renovate[bot] in #​3203

• chore(deps): update golangci-lint by @​renovate[bot] in #​3204

• chore(deps): update golangci/golangci-lint docker tag to v2.11.2 by @​renovate[bot] in #​3205

• chore(deps): update golangci/golangci-lint docker tag to v2.11.3 by @​renovate[bot] in #​3206

• chore(deps): update actions/download-artifact action to v8.0.1 by @​renovate[bot] in #​3207

• chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72 by @​renovate[bot] in #​3211

• chore(deps): update softprops/action-gh-release action to v2.5.1 by @​renovate[bot] in #​3210

• chore(deps): update docker.io/library/golang:1.26.1 docker digest to c7e98cc by @​renovate[bot] in #​3208

• chore(deps): update softprops/action-gh-release action to v2.6.1 by @​renovate[bot] in #​3212

• chore(deps): update golangci/golangci-lint docker tag to v2.11.4 by @​renovate[bot] in #​3214

• chore(deps): update docker.io/library/golang:1.26.1 docker digest to 595c784 by @​renovate[bot] in #​3213

• chore(deps): update dependency cilium/cilium to v1.19.2 by @​renovate[bot] in #​3215

• chore(deps): update actions/setup-go action to v6.4.0 by @​renovate[bot] in #​3217

• chore(deps): pin cilium/cilium action to 0f7ddbf by @​renovate[bot] in #​3216

• chore(deps): update go to v1.26.2 by @​renovate[bot] in #​3218

• chore(deps): update cilium/cilium digest to 143928b by @​renovate[bot] in #​3219

• chore(deps): update docker/build-push-action action to v7.1.0 by @​renovate[bot] in #​3220

• chore(deps): update all github action dependencies by @​renovate[bot] in #​3223

• chore(deps): update cilium by @​renovate[bot] in #​3222

• chore(deps): update cilium/cilium digest to 41774fc by @​renovate[bot] in #​3224

• chore(deps): update golangci/golangci-lint docker tag to v2.12.0 by @​renovate[bot] in #​3225

• chore(deps): update docker.io/library/golang:1.26.2 docker digest to 5f3787b by @​renovate[bot] in #​3221

• chore(deps): update cilium/cilium digest to 71eacde by @​renovate[bot] in #​3226

• chore(deps): update golangci/golangci-lint docker tag to v2.12.1 by @​renovate[bot] in #​3227

• chore(deps): update dependency golangci/golangci-lint to v2.12.2 by @​renovate[bot] in #​3229

• chore(deps): update go to v1.26.3 by @​renovate[bot] in #​3230

• chore(deps): update cilium/cilium digest to 3188dcd by @​renovate[bot] in #​3228

• Prepare for v0.19.3 release by @​tklauser in #​3232

Full Changelog: cilium/cilium-cli@v0.19.2...v0.19.3

v0.19.2

Compare Source

Summary of Changes

CI Changes:

• cilium-cli/connectivity: remove allowlist entry for deleting no longer present service (cilium/cilium#44423, @​tklauser)
• cilium-cli: add gke specific configmaps to cilium sysdump (cilium/cilium#44422, @​kamilWyszynski1)
• Connectivity tests for service loopback to catch regressions (cilium/cilium#42590, @​saiaunghlyanhtet)
• tests: Ignore identity manager related error in versions < 1.18 (cilium/cilium#44327, @​christarazi)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#44353, @​cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44465, @​cilium-renovate[bot])

• chore(deps): update base-images to v1.26.0 (main) (cilium/cilium#44360, @​cilium-renovate[bot])

• cli: Add failed to retrieve cluster cfg to exclusion list (cilium/cilium#44332, @​brb)

• deps: update helm to v4.1.1 (cilium/cilium#44390, @​aanm)

• modernize: Enable rangeint analyzer (cilium/cilium#44457, @​HadrienPatte)

• Fix multiple tag error on main and release builds by @​ferozsalam in #​3186

• chore(deps): update gcr.io/distroless/static:latest docker digest to d90359c by @​renovate[bot] in #​3185

• chore(deps): update actions/stale action to v10.2.0 by @​renovate[bot] in #​3187

• chore(deps): update dependency cilium/cilium to v1.19.0 by @​renovate[bot] in #​3177

• chore(deps): update golangci/golangci-lint docker tag to v2.10.1 by @​renovate[bot] in #​3189

• chore(deps): update dependency cilium/cilium to v1.19.1 by @​renovate[bot] in #​3188

• chore(deps): update helm/kind-action action to v1.14.0 by @​renovate[bot] in #​3190

• Prepare for v0.19.2 release by @​tklauser in #​3191

Full Changelog: cilium/cilium-cli@v0.19.1...v0.19.2

v0.19.1

Compare Source

Summary of Changes

Minor Changes:

• cli: clustermesh: use ca bundle to connect clusters (cilium/cilium#42833, @​MrFreezeex)

Bugfixes:

• cilium-cli: Fix NodePort deployment check in dual-stack clusters (cilium/cilium#43888, @​gandro)
• Fix GKE conformance test NodePort timeouts by skipping unreachable external IP validation on GKE (cilium/cilium#44014, @​pillai-ashwin)

CI Changes:

• cli: Relax warning exclusion for "unable to find key in local cache" (cilium/cilium#44149, @​brb)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43700, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43824, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43965, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#44090, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#44235, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43827, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43969, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#44239, @​cilium-renovate[bot])
• cilium-cli: Fix container name in connectivity test logs (cilium/cilium#44076, @​HadrienPatte)
• docs: fix typos in comments (cilium/cilium#43821, @​NAM-MAN)
• feat(cilium-cli): Add -r(estart) parameter to cilium upgrade (cilium/cilium#43722, @​alagoutte)
• Introduce end-to-end tests for Cilium's ZTunnel integration. (cilium/cilium#43166, @​ldelossa)
• Replace Index{,Byte} with Cut,Contains (cilium/cilium#43708, @​joestringer)
• sysdump: Use label selectors for Hubble UI/Relay deployment collection (cilium/cilium#44227, @​darox)
• chore(deps): update dependency cilium/cilium to v1.18.6 by @​renovate[bot] in #​3168
• Update stable release to v0.19.0 by @​tklauser in #​3169
• chore(deps): update go to v1.25.6 by @​renovate[bot] in #​3170
• chore(deps): update docker.io/library/golang:1.25.6 docker digest to ce63a16 by @​renovate[bot] in #​3172
• chore(deps): update actions/checkout action to v6.0.2 by @​renovate[bot] in #​3171
• ci: Harden the image build process by @​ferozsalam in #​3174
• chore(deps): update gcr.io/distroless/static:latest docker digest to 972618c by @​renovate[bot] in #​3176
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3175
• chore(deps): update go to v1.25.7 by @​renovate[bot] in #​3178
• chore(deps): update golangci/golangci-lint docker tag to v2.9.0 by @​renovate[bot] in #​3179
• chore(deps): update go to v1.26.0 by @​renovate[bot] in #​3181
• chore(deps): update docker/build-push-action action to v6.19.0 by @​renovate[bot] in #​3180
• chore(deps): update docker/build-push-action action to v6.19.2 by @​renovate[bot] in #​3183
• Prepare for v0.19.1 release by @​tklauser in #​3184

New Contributors

• @​ferozsalam made their first contribution in #​3174

Full Changelog: cilium/cilium-cli@v0.19.0...v0.19.1

v0.19.0

Compare Source

Summary of Changes

CI Changes:

• Add L7 policy traffic disruption tests (cilium/cilium#42150, @​fristonio)
• Cilium-cli SNI connectivity tests now retry expected successful operations to recover from failures due to external upstream issues. (cilium/cilium#42980, @​jrajahalme)
• cli: connectivity: fix typo in L7 LB tests (cilium/cilium#43610, @​julianwiedmann)
• Fix intermittent NodePort connectivity test timeouts in dual-stack clusters by validating NodePort readiness on all node IP addresses during test setup. (cilium/cilium#40812, @​pillai-ashwin)
• tests: remove identity manager from ignored error messages (cilium/cilium#42982, @​odinuge)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43169, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43456, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43508, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43457, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43538, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 (main) (cilium/cilium#43303, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.5 (main) (cilium/cilium#43173, @​cilium-renovate[bot])
• cilium-cli/connectivity: remove matcher for bpf/init.sh errors (cilium/cilium#43109, @​tklauser)
• cilium-cli: convert net.IP to netip.Addr (cilium/cilium#42371, @​phuhung273)
• cli: Update network-perf image ref (cilium/cilium#43297, @​HadrienPatte)
• chore(deps): update golangci/golangci-lint-action action to v9.2.0 by @​renovate[bot] in #​3148
• Update stable release to v0.18.9 by @​michi-covalent in #​3149
• chore(deps): update golangci/golangci-lint docker tag to v2.7.0 by @​renovate[bot] in #​3151
• chore(deps): update go to v1.25.5 by @​renovate[bot] in #​3153
• ci: clean up disk space in release workflow by @​tklauser in #​3154
• chore(deps): update actions/stale action to v10.1.1 by @​renovate[bot] in #​3150
• chore(deps): update gcr.io/distroless/static:latest docker digest to 4b2a093 by @​renovate[bot] in #​3152
• chore(deps): update golangci/golangci-lint docker tag to v2.7.2 by @​renovate[bot] in #​3155
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 by @​renovate[bot] in #​3156
• chore(deps): update actions/upload-artifact action to v6 by @​renovate[bot] in #​3157
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 36b4f45 by @​renovate[bot] in #​3160
• chore(deps): update dependency cilium/cilium to v1.18.5 by @​renovate[bot] in #​3159
• chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 by @​renovate[bot] in #​3158
• chore(deps): update docker/setup-buildx-action action to v3.12.0 by @​renovate[bot] in #​3162
• chore(deps): update golangci/golangci-lint docker tag to v2.8.0 by @​renovate[bot] in #​3163
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 by @​renovate[bot] in #​3164
• chore(deps): update gcr.io/distroless/static:latest docker digest to cd64bec by @​renovate[bot] in #​3165
• chore(deps): update actions/setup-go action to v6.2.0 by @​renovate[bot] in #​3166
• Prepare for v0.19.0 release by @​tklauser in #​3167

Full Changelog: cilium/cilium-cli@v0.18.9...v0.19.0

v0.18.9

Compare Source

Summary of Changes

Major Changes:

• Operator prometheus support TLS/mTLS using existing secret (cilium/cilium#42077, @​phuhung273)

Minor Changes:

• CLI: Allow users to set the default Cilium namespace via the CILIUM_NAMESPACE environment variable (cilium/cilium#41557, @​td0ne)
• Removed deprecated CiliumBGPPeeringPolicy CRD and its agent implementation. Use cilium.io/v2 CRDs (CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfigOverride) for configuring BGP. (cilium/cilium#42278, @​rastislavs)

CI Changes:

• Add CCNP cilium connectivity tests (cilium/cilium#42051, @​karina-ranadive)
• Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity (cilium/cilium#42984, @​rptaylor)

Misc Changes:

• bgp: Correct misleading error message in GetPeeringState (cilium/cilium#42945, @​hargrovee)
• bgp: Remove versions from bgp package names (cilium/cilium#42503, @​rastislavs)
• cilium-cli: add own type for root command parameters (cilium/cilium#42609, @​tklauser)
• cli: cleanups for pre-v1.15 removal (cilium/cilium#42757, @​julianwiedmann)
• cli: require Cilium v1.15 (cilium/cilium#41538, @​julianwiedmann)
• go.mod, vendor: bump github.com/google/go-github to v79 (cilium/cilium#42857, @​tklauser)
• Update lrp frontend IP address to avoid IMDS conflict in the cloud environment in cilium-cli (cilium/cilium#42737, @​liyihuang)
• Use modern Go constructs (cilium/cilium#42525, @​HadrienPatte)
• Update stable release to v0.18.8 by @​michi-covalent in #​3121
• chore(deps): update actions/upload-artifact action to v5 by @​renovate[bot] in #​3124
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 8c945d3 by @​renovate[bot] in #​3122
• chore(deps): update dependency cilium/cilium to v1.18.3 by @​renovate[bot] in #​3123
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6bac879 by @​renovate[bot] in #​3125
• renovate: try to group dependency updates by @​tklauser in #​3126
• chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by @​renovate[bot] in #​3127
• chore(deps): update helm/kind-action action to v1.13.0 by @​renovate[bot] in #​3128
• chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by @​renovate[bot] in #​3129
• chore(deps): update golang docker tag to v1.25.4 by @​renovate[bot] in #​3130
• chore(deps): update go to v1.25.4 by @​renovate[bot] in #​3131
• chore(deps): update golang:1.25.4-alpine3.21 docker digest to 3289aac by @​renovate[bot] in #​3132
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to e68f6a0 by @​renovate[bot] in #​3135
• chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by @​renovate[bot] in #​3136
• chore(deps): update golangci/golangci-lint-action action to v9 by @​renovate[bot] in #​3133
• chore(deps): update dependency cilium/cilium to v1.18.4 by @​renovate[bot] in #​3134
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3137
• chore(deps): update actions/setup-go action to v6.1.0 by @​renovate[bot] in #​3138
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​3139
• chore(deps): update golangci/golangci-lint-action action to v9.1.0 by @​renovate[bot] in #​3141
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to f60eaa8 by @​renovate[bot] in #​3140
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to 6981837 by @​renovate[bot] in #​3143
• chore(deps): update softprops/action-gh-release action to v2.5.0 by @​renovate[bot] in #​3144
• chore(deps): update golang docker tag to v1.25.5 by @​renovate[bot] in #​3147
• chore(deps): update actions/checkout action to v6.0.1 by @​renovate[bot] in #​3146
• Prepare for v0.18.9 release by @​michi-covalent in #​3145

Full Changelog: cilium/cilium-cli@v0.18.8...v0.18.9

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.