Update Helm release cilium to v1.18.3 #1479

Merged

tom merged 1 commit from renovate/cilium-1.x into main

2025-10-29 13:57:48 +01:00

renovate commented

2025-10-23 21:02:11 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
cilium (source)	patch	`1.18.2` -> `1.18.3`

Release Notes

cilium/cilium (cilium)

`v1.18.3`: 1.18.3

Compare Source

Summary of Changes

ℹ️ The images in this release were signed with cosign v3. Please use cosign v3 tooling to validate signatures with the following command syntax:

cosign verify --certificate-github-workflow-repository cilium/cilium --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-github-workflow-name 'Image Release Build' --certificate-github-workflow-ref refs/tags/v1.18.3 --certificate-identity https://github.com/cilium/cilium/.github/workflows/build-images-releases.yaml@refs/tags/v1.18.3 quay.io/cilium/operator-aws:v1.18.3 | jq -r '.[].critical.image'

Minor Changes:

Fix a complexity issue for the bpf_xdp program (Backport PR #42198, Upstream PR #42193, @aspsk)
hubble: mark kafka l7 visibility as deprecated (Backport PR #41968, Upstream PR #41072, @kaworu)

Bugfixes:

add the port name for address based LRP so frontend can pick the right backend (Backport PR #41828, Upstream PR #41602, @liyihuang)
Avoid scenario where ENI device configuration can be skipped. (Backport PR #41968, Upstream PR #41760, @jasonaliyetti)
Cilium now configures Envoy to allow websocket connections to be passed through with HTTP policies. (Backport PR #41828, Upstream PR #41729, @jrajahalme)
Fix a bug that was preventing Cilium to delete stale pod CIDRs routes when changing routing mode to native (Backport PR #41968, Upstream PR #41819, @pippolo84)
Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (Backport PR #42151, Upstream PR #42080, @tklauser)
Fix BGP auto discovery not sending community info (Backport PR #41968, Upstream PR #41920, @jiashengz)
Fix bug in ENI routing where Cilium would chose the wrong subnet for routing traffic on secondary interfaces (Backport PR #41828, Upstream PR #40860, @liyihuang)
Fix bug that could cause ICMP error packets to have an incorrect inner IP checksum when KPR is enabled. (Backport PR #41828, Upstream PR #41551, @yushoyamaguchi)
Fix bug with delegated IPAM where IPv6 traffic was routed via the wrong interface (Backport PR #41968, Upstream PR #41598, @NihaNallappagari)
Fix failing node health check on dual stack cluster if NodeInternalIPs are not configured for both families. (Backport PR #42055, Upstream PR #41633, @Dennor)
Fix increase in memory usage when service names are looked up at high rate during Hubble flow creation (Backport PR #42151, Upstream PR #41965, @joamaki)
Fix panic at startup in IPsec subsystem with Multi-Pool IPAM mode (#41725, @pippolo84)
Fix race condition preventing the skiplbmap BPF map from sometimes being pruned after restart. (Backport PR #41828, Upstream PR #41529, @joamaki)
Fixes a rare bug where endpoints may have incomplete policies in large clusters. (Backport PR #42151, Upstream PR #42049, @squeed)
hostfw: also exclude non-transparent proxy traffic when BPF masq is enabled (Backport PR #41989, Upstream PR #41915, @julianwiedmann)
Ignore expected error in neighbor reconciliation (Backport PR #41968, Upstream PR #41815, @dylandreimerink)
loadbalancer: allow HostPort for multiple protos on same port (Backport PR #41913, Upstream PR #41521, @bersoare)
operator/pkg/lbipam: fix LoadBalancerIPPool conditions update logic (Backport PR #41828, Upstream PR #41322, @alimehrabikoshki)

CI Changes:

.actions/cilium-config: add missing extraEnv in GH action (Backport PR #41828, Upstream PR #41420, @aanm)
.github/workflows: add variable for renovate bot username (Backport PR #41843, Upstream PR #41818, @aanm)
.github/workflows: automatically add /test for renovate PRs (Backport PR #41843, Upstream PR #41770, @aanm)
.github/workflows: do not wait on linters form forks (Backport PR #41828, Upstream PR #41822, @aanm)
.github/workflows: remove reviewers requested by auto-committer[bot] (Backport PR #41828, Upstream PR #41759, @aanm)
cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (Backport PR #42200, Upstream PR #42146, @fristonio)
gha: Correct k8s version for f12-datapath-service-ns-misc (Backport PR #41756, Upstream PR #41753, @sayboras)
ginkgo: add test ownership for ginkgo tests (Backport PR #42055, Upstream PR #41950, @aanm)
Streamline ci-multi-pool workflow (Backport PR #41631, Upstream PR #40658, @pippolo84)
workflows: fix GCP OIDC authentication's project ID (#42173, @nbusseneau)

Misc Changes:

.github/workflows: stop build CI images until base images are built (Backport PR #41828, Upstream PR #41681, @aanm)
agent: Add Cilium health config cell (Backport PR #42055, Upstream PR #41627, @aditighag)
bpf/nat: Move ipv6_nat_entry to map (Backport PR #41968, Upstream PR #41902, @pchaigno)
bpf: hostfw: have from-host always pass the ipcache-based src identity (Backport PR #42113, Upstream PR #42093, @julianwiedmann)
bpf: Only send fillup signal to agent on ENOMEM error (Backport PR #41968, Upstream PR #41864, @borkmann)
chore(deps): update all github action dependencies (v1.18) (#41795, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.18) (#41931, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.18) (#42028, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.18) (#42136, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.18) (#42264, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.18) (#41716, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.18) (#41793, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.18) (#42035, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.18) (#42116, @cilium-renovate[bot])
chore(deps): update dependency cilium/little-vm-helper to v0.0.27 (v1.18) (#42263, @cilium-renovate[bot])
chore(deps): update dependency protocolbuffers/protobuf to v33 (v1.18) (#42265, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.7 docker digest to 2c5f7a0 (v1.18) (#42026, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.7 docker digest to 87916ac (v1.18) (#41792, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.9 docker digest to 02ce1d7 (v1.18) (#42253, @cilium-renovate[bot])
chore(deps): update go to v1.24.8 (v1.18) (#42062, @cilium-renovate[bot])
chore(deps): update go to v1.24.9 (v1.18) (#42166, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.7-1759058812-49b096a457d6e7f6d650229cbf95c63d59759331 (v1.18) (#41933, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.18) (patch) (#41730, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.18) (patch) (#41794, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.18) (patch) (#41930, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.18) (patch) (#42027, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.18) (patch) (#42135, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.18) (patch) (#42300, @cilium-renovate[bot])
doc: add note on hostfw and ipsec interaction (Backport PR #41968, Upstream PR #41810, @darox)
docs/dsr: Remove IPIP example configuration (Backport PR #41828, Upstream PR #41701, @pchaigno)
docs: Clarify list of capabilities in threat model (Backport PR #41828, Upstream PR #41682, @joestringer)
docs: fix broken Chainguard SBOM link (Backport PR #41828, Upstream PR #41719, @yashisrani)
docs: remove stale kernel requirements (Backport PR #42151, Upstream PR #42081, @julianwiedmann)
docs: Update iproute2 compile steps in reference guide. (Backport PR #41828, Upstream PR #41638, @dkanaliev)
endpoint: reduce missed-policy-update log severity for restoring eps (Backport PR #42055, Upstream PR #41095, @fristonio)
endpointsynchronizer: suppress warning log when endpoint is terminating (Backport PR #41828, Upstream PR #41755, @giorio94)
gateway-api: Fix incorrect Owns call in refactor (Backport PR #41968, Upstream PR #41807, @youngnick)
hubble: allow overrrides if building from outside the tree (Backport PR #41828, Upstream PR #41726, @tklauser)
ipsec: add support for using remote PodCIDR entries (Backport PR #42073, Upstream PR #41519, @julianwiedmann)
Make kubeProxyReplacement available in the reference and documentation (Backport PR #41968, Upstream PR #41535, @liyihuang)
redirectpolicy: Always OpenOrCreate SkipLB map to avoid loader race (Backport PR #41968, Upstream PR #41707, @joamaki)
redirectpolicy: Fix comparison of BackendParams (Backport PR #41848, Upstream PR #41705, @joamaki)
Remove kiam documentation from Local Redirect Policy (Backport PR #41968, Upstream PR #41644, @liyihuang)
Update checkpatch and startup-script image digest (Backport PR #41828, Upstream PR #41710, @HadrienPatte)

Other Changes:

[v1.18] gateway-api: Refactor Gateway API reconciler (#41720, @youngnick)
[v1.18] workflows/release: add secrets for step 4 and 5 (#41733, @jrajahalme)
install: Update image digests for v1.18.2 (#41722, @cilium-release-bot[bot])
proxy: Bump cilium-envoy to 1.34.10 (#42251, @sayboras)

Docker Manifests

cilium

quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15
quay.io/cilium/cilium:stable@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.18.3@sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d
quay.io/cilium/clustermesh-apiserver:stable@sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d

docker-plugin

quay.io/cilium/docker-plugin:v1.18.3@sha256:996d9fa5747175b1806ce01dd90dc586a5f52a32b7da409937a1f42714827d67
quay.io/cilium/docker-plugin:stable@sha256:996d9fa5747175b1806ce01dd90dc586a5f52a32b7da409937a1f42714827d67

hubble-relay

quay.io/cilium/hubble-relay:v1.18.3@sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3
quay.io/cilium/hubble-relay:stable@sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.18.3@sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef
quay.io/cilium/operator-alibabacloud:stable@sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef

operator-aws

quay.io/cilium/operator-aws:v1.18.3@sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24
quay.io/cilium/operator-aws:stable@sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24

operator-azure

quay.io/cilium/operator-azure:v1.18.3@sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143
quay.io/cilium/operator-azure:stable@sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143

operator-generic

quay.io/cilium/operator-generic:v1.18.3@sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797
quay.io/cilium/operator-generic:stable@sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797

operator

quay.io/cilium/operator:v1.18.3@sha256:e350cea751afeae2f226a1bc275649c77a04a1e1ff50e61d782a371eae6fb2ff
quay.io/cilium/operator:stable@sha256:e350cea751afeae2f226a1bc275649c77a04a1e1ff50e61d782a371eae6fb2ff

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.18.2` -> `1.18.3` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.18.3`](https://github.com/cilium/cilium/releases/tag/v1.18.3): 1.18.3 [Compare Source](https://github.com/cilium/cilium/compare/1.18.2...1.18.3) ## Summary of Changes :information\_source: The images in this release were signed with cosign v3. Please use cosign v3 tooling to validate signatures with the following command syntax: ``` cosign verify --certificate-github-workflow-repository cilium/cilium --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-github-workflow-name 'Image Release Build' --certificate-github-workflow-ref refs/tags/v1.18.3 --certificate-identity https://github.com/cilium/cilium/.github/workflows/build-images-releases.yaml@refs/tags/v1.18.3 quay.io/cilium/operator-aws:v1.18.3 | jq -r '.[].critical.image' ``` **Minor Changes:** - Fix a complexity issue for the bpf\_xdp program (Backport PR [#42198](https://github.com/cilium/cilium/issues/42198), Upstream PR [#42193](https://github.com/cilium/cilium/issues/42193), [@aspsk](https://github.com/aspsk)) - hubble: mark kafka l7 visibility as deprecated (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41072](https://github.com/cilium/cilium/issues/41072), [@kaworu](https://github.com/kaworu)) **Bugfixes:** - add the port name for address based LRP so frontend can pick the right backend (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41602](https://github.com/cilium/cilium/issues/41602), [@liyihuang](https://github.com/liyihuang)) - Avoid scenario where ENI device configuration can be skipped. (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41760](https://github.com/cilium/cilium/issues/41760), [@jasonaliyetti](https://github.com/jasonaliyetti)) - Cilium now configures Envoy to allow websocket connections to be passed through with HTTP policies. (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41729](https://github.com/cilium/cilium/issues/41729), [@jrajahalme](https://github.com/jrajahalme)) - Fix a bug that was preventing Cilium to delete stale pod CIDRs routes when changing routing mode to native (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41819](https://github.com/cilium/cilium/issues/41819), [@pippolo84](https://github.com/pippolo84)) - Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (Backport PR [#42151](https://github.com/cilium/cilium/issues/42151), Upstream PR [#42080](https://github.com/cilium/cilium/issues/42080), [@tklauser](https://github.com/tklauser)) - Fix BGP auto discovery not sending community info (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41920](https://github.com/cilium/cilium/issues/41920), [@jiashengz](https://github.com/jiashengz)) - Fix bug in ENI routing where Cilium would chose the wrong subnet for routing traffic on secondary interfaces (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#40860](https://github.com/cilium/cilium/issues/40860), [@liyihuang](https://github.com/liyihuang)) - Fix bug that could cause ICMP error packets to have an incorrect inner IP checksum when KPR is enabled. (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41551](https://github.com/cilium/cilium/issues/41551), [@yushoyamaguchi](https://github.com/yushoyamaguchi)) - Fix bug with delegated IPAM where IPv6 traffic was routed via the wrong interface (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41598](https://github.com/cilium/cilium/issues/41598), [@NihaNallappagari](https://github.com/NihaNallappagari)) - Fix failing node health check on dual stack cluster if NodeInternalIPs are not configured for both families. (Backport PR [#42055](https://github.com/cilium/cilium/issues/42055), Upstream PR [#41633](https://github.com/cilium/cilium/issues/41633), [@Dennor](https://github.com/Dennor)) - Fix increase in memory usage when service names are looked up at high rate during Hubble flow creation (Backport PR [#42151](https://github.com/cilium/cilium/issues/42151), Upstream PR [#41965](https://github.com/cilium/cilium/issues/41965), [@joamaki](https://github.com/joamaki)) - Fix panic at startup in IPsec subsystem with Multi-Pool IPAM mode ([#41725](https://github.com/cilium/cilium/issues/41725), [@pippolo84](https://github.com/pippolo84)) - Fix race condition preventing the skiplbmap BPF map from sometimes being pruned after restart. (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41529](https://github.com/cilium/cilium/issues/41529), [@joamaki](https://github.com/joamaki)) - Fixes a rare bug where endpoints may have incomplete policies in large clusters. (Backport PR [#42151](https://github.com/cilium/cilium/issues/42151), Upstream PR [#42049](https://github.com/cilium/cilium/issues/42049), [@squeed](https://github.com/squeed)) - hostfw: also exclude non-transparent proxy traffic when BPF masq is enabled (Backport PR [#41989](https://github.com/cilium/cilium/issues/41989), Upstream PR [#41915](https://github.com/cilium/cilium/issues/41915), [@julianwiedmann](https://github.com/julianwiedmann)) - Ignore expected error in neighbor reconciliation (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41815](https://github.com/cilium/cilium/issues/41815), [@dylandreimerink](https://github.com/dylandreimerink)) - loadbalancer: allow HostPort for multiple protos on same port (Backport PR [#41913](https://github.com/cilium/cilium/issues/41913), Upstream PR [#41521](https://github.com/cilium/cilium/issues/41521), [@bersoare](https://github.com/bersoare)) - operator/pkg/lbipam: fix LoadBalancerIPPool conditions update logic (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41322](https://github.com/cilium/cilium/issues/41322), [@alimehrabikoshki](https://github.com/alimehrabikoshki)) **CI Changes:** - .actions/cilium-config: add missing extraEnv in GH action (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41420](https://github.com/cilium/cilium/issues/41420), [@aanm](https://github.com/aanm)) - .github/workflows: add variable for renovate bot username (Backport PR [#41843](https://github.com/cilium/cilium/issues/41843), Upstream PR [#41818](https://github.com/cilium/cilium/issues/41818), [@aanm](https://github.com/aanm)) - .github/workflows: automatically add /test for renovate PRs (Backport PR [#41843](https://github.com/cilium/cilium/issues/41843), Upstream PR [#41770](https://github.com/cilium/cilium/issues/41770), [@aanm](https://github.com/aanm)) - .github/workflows: do not wait on linters form forks (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41822](https://github.com/cilium/cilium/issues/41822), [@aanm](https://github.com/aanm)) - .github/workflows: remove reviewers requested by auto-committer\[bot] (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41759](https://github.com/cilium/cilium/issues/41759), [@aanm](https://github.com/aanm)) - cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc\*: Link not found" (Backport PR [#42200](https://github.com/cilium/cilium/issues/42200), Upstream PR [#42146](https://github.com/cilium/cilium/issues/42146), [@fristonio](https://github.com/fristonio)) - gha: Correct k8s version for f12-datapath-service-ns-misc (Backport PR [#41756](https://github.com/cilium/cilium/issues/41756), Upstream PR [#41753](https://github.com/cilium/cilium/issues/41753), [@sayboras](https://github.com/sayboras)) - ginkgo: add test ownership for ginkgo tests (Backport PR [#42055](https://github.com/cilium/cilium/issues/42055), Upstream PR [#41950](https://github.com/cilium/cilium/issues/41950), [@aanm](https://github.com/aanm)) - Streamline ci-multi-pool workflow (Backport PR [#41631](https://github.com/cilium/cilium/issues/41631), Upstream PR [#40658](https://github.com/cilium/cilium/issues/40658), [@pippolo84](https://github.com/pippolo84)) - workflows: fix GCP OIDC authentication's project ID ([#42173](https://github.com/cilium/cilium/issues/42173), [@nbusseneau](https://github.com/nbusseneau)) **Misc Changes:** - .github/workflows: stop build CI images until base images are built (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41681](https://github.com/cilium/cilium/issues/41681), [@aanm](https://github.com/aanm)) - agent: Add Cilium health config cell (Backport PR [#42055](https://github.com/cilium/cilium/issues/42055), Upstream PR [#41627](https://github.com/cilium/cilium/issues/41627), [@aditighag](https://github.com/aditighag)) - bpf/nat: Move `ipv6_nat_entry` to map (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41902](https://github.com/cilium/cilium/issues/41902), [@pchaigno](https://github.com/pchaigno)) - bpf: hostfw: have from-host always pass the ipcache-based src identity (Backport PR [#42113](https://github.com/cilium/cilium/issues/42113), Upstream PR [#42093](https://github.com/cilium/cilium/issues/42093), [@julianwiedmann](https://github.com/julianwiedmann)) - bpf: Only send fillup signal to agent on ENOMEM error (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41864](https://github.com/cilium/cilium/issues/41864), [@borkmann](https://github.com/borkmann)) - chore(deps): update all github action dependencies (v1.18) ([#41795](https://github.com/cilium/cilium/issues/41795), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.18) ([#41931](https://github.com/cilium/cilium/issues/41931), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.18) ([#42028](https://github.com/cilium/cilium/issues/42028), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.18) ([#42136](https://github.com/cilium/cilium/issues/42136), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.18) ([#42264](https://github.com/cilium/cilium/issues/42264), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.18) ([#41716](https://github.com/cilium/cilium/issues/41716), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.18) ([#41793](https://github.com/cilium/cilium/issues/41793), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.18) ([#42035](https://github.com/cilium/cilium/issues/42035), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.18) ([#42116](https://github.com/cilium/cilium/issues/42116), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/little-vm-helper to v0.0.27 (v1.18) ([#42263](https://github.com/cilium/cilium/issues/42263), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update dependency protocolbuffers/protobuf to v33 (v1.18) ([#42265](https://github.com/cilium/cilium/issues/42265), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.24.7 docker digest to [`2c5f7a0`](https://github.com/cilium/cilium/commit/2c5f7a0) (v1.18) ([#42026](https://github.com/cilium/cilium/issues/42026), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.24.7 docker digest to [`87916ac`](https://github.com/cilium/cilium/commit/87916ac) (v1.18) ([#41792](https://github.com/cilium/cilium/issues/41792), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.24.9 docker digest to [`02ce1d7`](https://github.com/cilium/cilium/commit/02ce1d7) (v1.18) ([#42253](https://github.com/cilium/cilium/issues/42253), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.24.8 (v1.18) ([#42062](https://github.com/cilium/cilium/issues/42062), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.24.9 (v1.18) ([#42166](https://github.com/cilium/cilium/issues/42166), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.7-1759058812-49b096a457d6e7f6d650229cbf95c63d59759331 (v1.18) ([#41933](https://github.com/cilium/cilium/issues/41933), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.18) (patch) ([#41730](https://github.com/cilium/cilium/issues/41730), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.18) (patch) ([#41794](https://github.com/cilium/cilium/issues/41794), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.18) (patch) ([#41930](https://github.com/cilium/cilium/issues/41930), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.18) (patch) ([#42027](https://github.com/cilium/cilium/issues/42027), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.18) (patch) ([#42135](https://github.com/cilium/cilium/issues/42135), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.18) (patch) ([#42300](https://github.com/cilium/cilium/issues/42300), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - doc: add note on hostfw and ipsec interaction (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41810](https://github.com/cilium/cilium/issues/41810), [@darox](https://github.com/darox)) - docs/dsr: Remove IPIP example configuration (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41701](https://github.com/cilium/cilium/issues/41701), [@pchaigno](https://github.com/pchaigno)) - docs: Clarify list of capabilities in threat model (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41682](https://github.com/cilium/cilium/issues/41682), [@joestringer](https://github.com/joestringer)) - docs: fix broken Chainguard SBOM link (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41719](https://github.com/cilium/cilium/issues/41719), [@yashisrani](https://github.com/yashisrani)) - docs: remove stale kernel requirements (Backport PR [#42151](https://github.com/cilium/cilium/issues/42151), Upstream PR [#42081](https://github.com/cilium/cilium/issues/42081), [@julianwiedmann](https://github.com/julianwiedmann)) - docs: Update iproute2 compile steps in reference guide. (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41638](https://github.com/cilium/cilium/issues/41638), [@dkanaliev](https://github.com/dkanaliev)) - endpoint: reduce missed-policy-update log severity for restoring eps (Backport PR [#42055](https://github.com/cilium/cilium/issues/42055), Upstream PR [#41095](https://github.com/cilium/cilium/issues/41095), [@fristonio](https://github.com/fristonio)) - endpointsynchronizer: suppress warning log when endpoint is terminating (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41755](https://github.com/cilium/cilium/issues/41755), [@giorio94](https://github.com/giorio94)) - gateway-api: Fix incorrect `Owns` call in refactor (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41807](https://github.com/cilium/cilium/issues/41807), [@youngnick](https://github.com/youngnick)) - hubble: allow overrrides if building from outside the tree (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41726](https://github.com/cilium/cilium/issues/41726), [@tklauser](https://github.com/tklauser)) - ipsec: add support for using remote PodCIDR entries (Backport PR [#42073](https://github.com/cilium/cilium/issues/42073), Upstream PR [#41519](https://github.com/cilium/cilium/issues/41519), [@julianwiedmann](https://github.com/julianwiedmann)) - Make kubeProxyReplacement available in the reference and documentation (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41535](https://github.com/cilium/cilium/issues/41535), [@liyihuang](https://github.com/liyihuang)) - redirectpolicy: Always OpenOrCreate SkipLB map to avoid loader race (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41707](https://github.com/cilium/cilium/issues/41707), [@joamaki](https://github.com/joamaki)) - redirectpolicy: Fix comparison of BackendParams (Backport PR [#41848](https://github.com/cilium/cilium/issues/41848), Upstream PR [#41705](https://github.com/cilium/cilium/issues/41705), [@joamaki](https://github.com/joamaki)) - Remove kiam documentation from Local Redirect Policy (Backport PR [#41968](https://github.com/cilium/cilium/issues/41968), Upstream PR [#41644](https://github.com/cilium/cilium/issues/41644), [@liyihuang](https://github.com/liyihuang)) - Update `checkpatch` and `startup-script` image digest (Backport PR [#41828](https://github.com/cilium/cilium/issues/41828), Upstream PR [#41710](https://github.com/cilium/cilium/issues/41710), [@HadrienPatte](https://github.com/HadrienPatte)) **Other Changes:** - \[v1.18] gateway-api: Refactor Gateway API reconciler ([#41720](https://github.com/cilium/cilium/issues/41720), [@youngnick](https://github.com/youngnick)) - \[v1.18] workflows/release: add secrets for step 4 and 5 ([#41733](https://github.com/cilium/cilium/issues/41733), [@jrajahalme](https://github.com/jrajahalme)) - install: Update image digests for v1.18.2 ([#41722](https://github.com/cilium/cilium/issues/41722), [@cilium-release-bot](https://github.com/cilium-release-bot)\[bot]) - proxy: Bump cilium-envoy to 1.34.10 ([#42251](https://github.com/cilium/cilium/issues/42251), [@sayboras](https://github.com/sayboras)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.18.3@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15` `quay.io/cilium/cilium:stable@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.18.3@sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d` `quay.io/cilium/clustermesh-apiserver:stable@sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.18.3@sha256:996d9fa5747175b1806ce01dd90dc586a5f52a32b7da409937a1f42714827d67` `quay.io/cilium/docker-plugin:stable@sha256:996d9fa5747175b1806ce01dd90dc586a5f52a32b7da409937a1f42714827d67` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.18.3@sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3` `quay.io/cilium/hubble-relay:stable@sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.18.3@sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef` `quay.io/cilium/operator-alibabacloud:stable@sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef` ##### operator-aws `quay.io/cilium/operator-aws:v1.18.3@sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24` `quay.io/cilium/operator-aws:stable@sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24` ##### operator-azure `quay.io/cilium/operator-azure:v1.18.3@sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143` `quay.io/cilium/operator-azure:stable@sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143` ##### operator-generic `quay.io/cilium/operator-generic:v1.18.3@sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797` `quay.io/cilium/operator-generic:stable@sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797` ##### operator `quay.io/cilium/operator:v1.18.3@sha256:e350cea751afeae2f226a1bc275649c77a04a1e1ff50e61d782a371eae6fb2ff` `quay.io/cilium/operator:stable@sha256:e350cea751afeae2f226a1bc275649c77a04a1e1ff50e61d782a371eae6fb2ff` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate added 1 commit

2025-10-23 21:02:11 +02:00