Cilium CLI: vanhemmat versiot ja versiohistoria

## What's Changed
• chore(deps)：update docker.io/library/golang:1.27.0 docker digest to 0ecdc2a by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3295
• Update stable release to v0.20.0 by @tklauser in https://github.com/cilium/cilium-cli/pull/3296
• chore(deps)：update softprops/action-gh-release digest to efb3536 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3297
• chore(deps)：update dependency kubernetes-sigs/kind to v0.33.0 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3298
• chore(deps)：update golangci/golangci-lint docker tag to v2.13.2 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3299
• chore(deps)：update helm/kind-action action to v1.15.0 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3300
• chore(deps)：update go to v1.27.1 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3301
• chore(deps)：update go by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3303
• chore(deps)：update gcr.io/distroless/static:latest docker digest to 5813399 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3302
• chore(deps)：update all github action dependencies by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3305
• Prepare for v0.20.1 release by @tklauser in https://github.com/cilium/cilium-cli/pull/3304
• chore(deps)：update cilium/cilium action to v1.20.2 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3306
• chore(deps)：update dependency cilium/cilium to v1.20.2 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3308
• chore(deps)：update docker/setup-buildx-action action to v4.4.1 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3307
• ci：authenticate Image push to quay.io with OIDC by @tklauser in https://github.com/cilium/cilium-cli/pull/3309
• go.mod, vendor：update github.com/cilium/cilium to latest by @tklauser in https://github.com/cilium/cilium-cli/pull/3310

**Full Changelog**：https://github.com/cilium/cilium-cli/compare/v0.20.0...v0.20.1

Summary of Changes
------------------

**Minor Changes:**
• CiliumPodIPPools now support reservedRanges for multi-pool IPAM. (cilium/cilium#46880, @kyounghoonJang)
• envoy：Add support for HTTP CONNECT (cilium/cilium#45051, @nezdolik)

**Bugfixes:**
• Fixed `cilium connectivity perf` always reporting `Cilium version：0.0.0` instead of the actual detected Cilium version. (cilium/cilium#47927, @khaddict)
• sysdump：reject collected file names that resolve outside the sysdump directory (cilium/cilium#46609, @sage-mode-hunter)

**CI Changes:**
• cilium-cli：add connectivity test for toFQDNs on host (cilium/cilium#45026, @atykhyy)
• cilium-cli：bump test-connection-disruption image to v0.0.18 (cilium/cilium#47806, @aanm)
• cilium-cli：disable host-firewall-egress-to-fqdns test on RHEL (cilium/cilium#47970, @atykhyy)
• cilium-cli：don't count pods rejected before running as live (cilium/cilium#47839, @aanm)
• cilium-cli：keep connectivity perf usable without Cilium (cilium/cilium#48128, @aanm)
• cilium-cli：Skip HostToWorld if no external IPv6 (cilium/cilium#47931, @joamaki)

**Misc Changes:**
• [CFP-39876]：Add connectivity test for non-global namespace isolation (cilium/cilium#46604, @jimassa)
• chore(deps)：update all-dependencies (main) (cilium/cilium#47744, @cilium-renovate[bot])
• chore(deps)：update all-dependencies (main) (cilium/cilium#47859, @cilium-renovate[bot])
• chore(deps)：update all-dependencies (main) (cilium/cilium#48145, @cilium-renovate[bot])
• chore(deps)：update base-images (main) (cilium/cilium#47947, @cilium-renovate[bot])
• chore(deps)：update base-images (main) (cilium/cilium#48095, @cilium-renovate[bot])
• chore(deps)：update docker.io/library/golang:1.26.5 docker digest to 2005724 (main) (cilium/cilium#47860, @cilium-renovate[bot])
• cilium-cli/clustermesh：log enable messages via Parameters.Writer (cilium/cilium#47439, @FirePheonix)
• cilium-cli：Replace `reflect.DeepEqual` with `assert.Equal` in tests (cilium/cilium#47533, @HadrienPatte)
• CLI：add toleration for a single etcd container restart (cilium/cilium#48106, @giorio94)
• CLI：add toleration for three more log warnings (cilium/cilium#48091, @giorio94)
• cli：the CLI now considers the ENI IPv6 beta warning log as expected and detects EKS flavor for IPv6 EKS clusters. (cilium/cilium#47524, @41ks)
• Revert "cli：drop restarts exclusion for Cilium v1.16 and earlier" (cilium/cilium#48115, @giorio94)
• Update all-dependencies (main) (cilium/cilium#47654, @cilium-renovate[bot])
• Use k8s API constants instead of string literals (cilium/cilium#47505, @HadrienPatte)
• Update stable release to v0.19.7 by @michi-covalent in https://github.com/cilium/cilium-cli/pull/3280
• chore(deps)：update dependency cilium/cilium to v1.19.6 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3279
• README.md：Update compatible Cilium versions by @michi-covalent in https://github.com/cilium/cilium-cli/pull/3281
• chore(deps)：update docker.io/library/golang docker tag to v1.26.5 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3282
• action：retry Cilium CLI download in case of errors by @giorio94 in https://github.com/cilium/cilium-cli/pull/3286
• chore(deps)：update docker.io/library/golang:1.26.5 docker digest to 2005724 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3285
• build(deps)：bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @dependabot[bot] in https://github.com/cilium/cilium-cli/pull/3272
• chore(deps)：update actions/stale action to v11 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3283
• chore(deps)：update dependency cilium/cilium to v1.20.0 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3284
• chore(deps)：update golangci/golangci-lint docker tag to v2.12.2 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3287
• chore(deps)：update dependency go to v1.26.6 by @renovate[bot] in https://github.com/cilium/cilium-cli/pull/3288
• chore(deps)：update golangci/golangci-lint docker tag to v2.13.1 by @renov

Summary of Changes
Minor Changes:
• cilium-cli：bump minimum Cilium version to v1.16 (cilium/cilium#46803, @julianwiedmann)
• cilium-dbg：add table-json format to bgp/peers and bgp/routes (cilium/cilium#45858, @martonra)
• gatewayapi：add listenersets to sysdump (cilium/cilium#46851, @asauber)
CI Changes:
• cilium-cli/connectivity：explain conn-disrupt restart on failure (cilium/cilium#46854, @aanm)
• cilium-cli/connectivity：retry curl in echo-ingress-l7-named-port (cilium/cilium#46855, @aanm)
• cilium-cli/connectivity：wait for realized policy revision per endpoint (cilium/cilium#46877, @aanm)
• cilium-cli/connectivity：write JUnit report atomically (cilium/cilium#46835, @aanm)
• cilium-cli：fix EGW perf node selection, and raise scale-egw masq thresholds (cilium/cilium#46866, @aanm)
• cilium/json-mock is updated to v1.4.1 to resolve ci test flakes. (cilium/cilium#47058, @jrajahalme)
• Improved cilium-cli connectivity test resilience to transient service synchronization delays and pod-exec transport errors. (cilium/cilium#46859, @aanm)
Misc Changes:
• Add support for hybrid routing mode (routing-mode：hybrid), allowing Cilium to dynamically choose between native routing and tunnel encapsulation based on subnet topology. Traffic between pods in directly connected subnets is routed natively for improved throughput, while cross-subnet traffic is tunneled. (cilium/cilium#45001, @vanessachammas)
• chore(deps)：update all-dependencies (main) (cilium/cilium#47033, @cilium-renovate[bot])
• chore(deps)：update all-dependencies (main) (cilium/cilium#47107, @cilium-renovate[bot])
• chore(deps)：update base-images (main) (cilium/cilium#46653, @cilium-renovate[bot])
• chore(deps)：update base-images to v1.26.5 (main) (cilium/cilium#46981, @cilium-renovate[bot])
• chore(deps)：update docker.io/library/golang docker tag to v1.26.4 (main) (cilium/cilium#46903, @cilium-renovate[bot])
• chore(deps)：update docker.io/library/golang:1.26.5 docker digest to 079e598 (main) (cilium/cilium#47108, @cilium-renovate[bot])
• cilium-cli/connectivity：tolerate transient leader-election lock-read timeouts (cilium/cilium#47023, @aanm)
• cilium-cli：Exclude vendored leader election error (cilium/cilium#47090, @jrajahalme)
• cilium-cli：retry cilium features status pod exec on transient API server exec-proxy failures (e.g. 502 Bad Gateway, or a truncated empty response) so CI post-steps are not failed by transient infrastructure blips. (cilium/cilium#46881, @aanm)
• cilium-cli：retry transient exec errors in setup/teardown exec sites (cilium/cilium#47169, @aanm)
• cli/connectivity：always write a JUnit report, including on early failures (cilium/cilium#46990, @aanm)
• gateway-api：update TCPRoute and UDPRoute to v1 (cilium/cilium#46970, @eminaktas)
• chore(deps)：update all github action dependencies by @renovate[bot] in #3259
• chore(deps)：update actions/setup-go action to v6.5.0 by @renovate[bot] in #3262
• chore(deps)：update docker.io/library/golang:1.26.4-alpine3.23 docker digest to 18b460d by @renovate[bot] in #3261
• chore(deps)：update golangci/golangci-lint-action action to v9.3.0 by @renovate[bot] in #3263
• chore(deps)：update docker/build-push-action action to v7.3.0 by @renovate[bot] in #3264
• chore(deps)：update gcr.io/distroless/static:latest docker digest to d5f030c by @renovate[bot] in #3266
• chore(deps)：update docker.io/library/golang docker tag to v1.26.4 by @renovate[bot] in #3267
• chore(deps)：update docker/setup-buildx-action action to v4.2.0 by @renovate[bot] in #3265
• chore(deps)：update gcr.io/distroless/static:latest docker digest to 9197324 by @renovate[bot] in #3268
• chore(deps)：update softprops/action-gh-release digest to 3d0d988 by @renovate[bot] in #3269
• Prepare for v0.19.6 release by @michi-covalent in #3270
Full Changelog：v0.19.5...v0.19.6

Summary of Changes
Minor Changes:
- cilium-cli: bump minimum Cilium version to v1.16 (cilium/cilium#46803, @julianwiedmann)
- cilium-dbg: add table-json format to bgp/peers and bgp/routes (cilium/cilium#45858, @martonra)
- gatewayapi: add listenersets to sysdump (cilium/cilium#46851, @asauber)
CI Changes:
- cilium-cli/connectivity: explain conn-disrupt restart on failure (cilium/cilium#46854, @aanm)
- cilium-cli/connectivity: retry curl in echo-ingress-l7-named-port (cilium/cilium#46855, @aanm)
- cilium-cli/connectivity: wait for realized policy revision per endpoint (cilium/cilium#46877, @aanm)
- cilium-cli/connectivity: write JUnit report atomically (cilium/cilium#46835, @aanm)
- cilium-cli: fix EGW perf node selection, and raise scale-egw masq thresholds (cilium/cilium#46866, @aanm)
- cilium/json-mock is updated to v1.4.1 to resolve ci test flakes. (cilium/cilium#47058, @jrajahalme)
- Improved cilium-cli connectivity test resilience to transient service synchronization delays and pod-exec transport errors. (cilium/cilium#46859, @aanm)
Misc Changes:
- Add support for hybrid routing mode (routing-mode: hybrid), allowing Cilium to dynamically choose between native routing and tunnel encapsulation based on subnet topology. Traffic between pods in directly connected subnets is routed natively for improved throughput, while cross-subnet traffic is tunneled. (cilium/cilium#45001, @vanessachammas)
- chore(deps): update all-dependencies (main) (cilium/cilium#47033, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#47107, @cilium-renovate[bot])
- chore(deps): update base-images (main) (cilium/cilium#46653, @cilium-renovate[bot])
- chore(deps): update base-images to v1.26.5 (main) (cilium/cilium#46981, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang docker tag to v1.26.4 (main) (cilium/cilium#46903, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.26.5 docker digest to 079e598 (main) (cilium/cilium#47108, @cilium-renovate[bot])
- cilium-cli/connectivity: tolerate transient leader-election lock-read timeouts (cilium/cilium#47023, @aanm)
- cilium-cli: Exclude vendored leader election error (cilium/cilium#47090, @jrajahalme)
- cilium-cli: retry cilium features status pod exec on transient API server exec-proxy failures (e.g. 502 Bad Gateway, or a truncated empty response) so CI post-steps are not failed by transient infrastructure blips. (cilium/cilium#46881, @aanm)
- cilium-cli: retry transient exec errors in setup/teardown exec sites (cilium/cilium#47169, @aanm)
- cli/connectivity: always write a JUnit report, including on early failures (cilium/cilium#46990, @aanm)
- gateway-api: update TCPRoute and UDPRoute to v1 (cilium/cilium#46970, @eminaktas)
- chore(deps): update all github action dependencies by @renovate[bot] in #3259
- chore(deps): update actions/setup-go action to v6.5.0 by @renovate[bot] in #3262
- chore(deps): update docker.io/library/golang:1.26.4-alpine3.23 docker digest to 18b460d by @renovate[bot] in #3261
- chore(deps): update golangci/golangci-lint-action action to v9.3.0 by @renovate[bot] in #3263
- chore(deps): update docker/build-push-action action to v7.3.0 by @renovate[bot] in #3264
- chore(deps): update gcr.io/distroless/static:latest docker digest to d5f030c by @renovate[bot] in #3266
- chore(deps): update docker.io/library/golang docker tag to v1.26.4 by @renovate[bot] in #3267
- chore(deps): update docker/setup-buildx-action action to v4.2.0 by @renovate[bot] in #3265
- chore(deps): update gcr.io/distroless/static:latest docker digest to 9197324 by @renovate[bot] in #3268
- chore(deps): update softprops/action-gh-release digest to 3d0d988 by @renovate[bot] in #3269
- Prepare for v0.19.6 release by @michi-covalent in #3270
Full Changelog: v0.19.5...v0.19.6

Summary of Changes
Minor Changes:
- bgp: Bump GoBGP from v3 to v4.5.0 (cilium/cilium#45952, @rastislavs)
- cilium-cli: don't enable nodeinit on AKS (cilium/cilium#46105, @vipul-21)
- Replace boringcrypto with upstream Go crypto libraries (cilium/cilium#46092, @HadrienPatte)
CI Changes:
- cilium-cli connectivity tests now test for policy-based Envoy listener redirects on the wildcard port. (cilium/cilium#46251, @jrajahalme)
- cilium-cli: exclude non-Cilium nodes from perf node selection (cilium/cilium#46651, @aanm)
- cilium-cli: Ignore additional known GoBGPv4 warnings in no-errors-in-logs (cilium/cilium#46200, @ysksuzuki)
- cilium-cli: Remove partial JUnit file on error (cilium/cilium#46101, @rastislavs)
- cilium-cli: support versioned scenarios (cilium/cilium#45570, @rgo3)
- cilium-cli: tolerate config init-container restart and GC'd previous … (cilium/cilium#46648, @aanm)
- cli: add exception for "local key already allocated" warning (cilium/cilium#46216, @giorio94)
Misc Changes:
- chore(deps): update base-images (main) (cilium/cilium#46054, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.26.3 docker digest to 2d6c802 (main) (cilium/cilium#46163, @cilium-renovate[bot])
- cli/sysdump: capture more operator and clustermesh-apiserver troubleshooting information (cilium/cilium#46503, @giorio94)
- clustermesh: endpoint slices watch and kvstoremesh wiring (cilium/cilium#46506, @MrFreezeex)
- ipam: Migrate IPAMSpec.PodCIDRs to ip.Prefix (cilium/cilium#46599, @HadrienPatte)
- ipam: Migrate VirtualNetwork and IPAMCIDR to netip (cilium/cilium#46309, @HadrienPatte)
- sysdump: add CRD CiliumGatewayClassConfig to sysdump (cilium/cilium#46247, @mhofstetter)
- sysdump: add Gateway API BackendTLSPolicy to sysdump (cilium/cilium#46246, @mhofstetter)
- chore(deps): update actions/stale action to v10.3.0 by @renovate[bot] in #3244
- chore(deps): update docker.io/library/golang:1.26.3 docker digest to 6df14f4 by @renovate[bot] in #3243
- chore(deps): update all github action dependencies by @renovate[bot] in #3245
- Update stable release to v0.19.4 by @tklauser in #3242
- chore(deps): update docker.io/library/golang:1.26.3 docker digest to 2d6c802 by @renovate[bot] in #3246
- go.mod, vendor: update replace directives to match cilium's go.mod by @tklauser in #3247
- chore(deps): update all github action dependencies by @renovate[bot] in #3250
- ci: fix unquoted expression in images-dev shell condition by @immanuwell in #3249
- chore(deps): update go to v1.26.4 by @renovate[bot] in #3251
- fix: select released CLI asset by runner platform by @immanuwell in #3252
- chore(deps): update cilium to v1.19.5 by @renovate[bot] in #3257
- chore(deps): update all github action dependencies to 718ea10 by @renovate[bot] in #3256
- Prepare for v0.19.5 release by @michi-covalent in #3260
New Contributors
- @immanuwell made their first contribution in #3249
Full Changelog: v0.19.4...v0.19.5

Summary of Changes
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#45725, @cilium-renovate[bot])
- Fix incorrect 'skipping test' reason messages (cilium/cilium#46043, @atykhyy)
- Fix new golangci-lint findings (cilium/cilium#45894, @HadrienPatte)
- chore(deps): update gcr.io/distroless/static:latest docker digest to 3592aa8 by @renovate[bot] in #3235
- chore(deps): update docker.io/library/golang:1.26.3 docker digest to 313faae by @renovate[bot] in #3234
- chore(deps): update cilium/cilium digest to 08329ad by @renovate[bot] in #3231
- chore(deps): update cilium by @renovate[bot] in #3236
- renovate: add dependency cooldown, don't pin digests for cilium/cilium GitHub actions by @tklauser in #3238
- chore(deps): update cilium/cilium digest to b72d04b by @renovate[bot] in #3237
- ci: add write permissions to release workflow by @tklauser in #3233
- ci: pin cilium/cilium actions to v1.19.4, avoid digest updates by @tklauser in #3240
- Prepare for v0.19.4 release by @tklauser in #3241
Full Changelog: v0.19.3...v0.19.4

Summary of Changes
CI Changes:
- cilium-cli/connectivity: remove allowlist entry for deleting no longer present service (cilium/cilium#44423, @tklauser)
- cilium-cli: add gke specific configmaps to cilium sysdump (cilium/cilium#44422, @kamilWyszynski1)
- Connectivity tests for service loopback to catch regressions (cilium/cilium#42590, @saiaunghlyanhtet)
- tests: Ignore identity manager related error in versions < 1.18 (cilium/cilium#44327, @christarazi)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#44353, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#44465, @cilium-renovate[bot])
- chore(deps): update base-images to v1.26.0 (main) (cilium/cilium#44360, @cilium-renovate[bot])
- cli: Add failed to retrieve cluster cfg to exclusion list (cilium/cilium#44332, @brb)
- deps: update helm to v4.1.1 (cilium/cilium#44390, @aanm)
- modernize: Enable rangeint analyzer (cilium/cilium#44457, @HadrienPatte)
- Fix multiple tag error on main and release builds by @ferozsalam in #3186
- chore(deps): update gcr.io/distroless/static:latest docker digest to d90359c by @renovate[bot] in #3185
- chore(deps): update actions/stale action to v10.2.0 by @renovate[bot] in #3187
- chore(deps): update dependency cilium/cilium to v1.19.0 by @renovate[bot] in #3177
- chore(deps): update golangci/golangci-lint docker tag to v2.10.1 by @renovate[bot] in #3189
- chore(deps): update dependency cilium/cilium to v1.19.1 by @renovate[bot] in #3188
- chore(deps): update helm/kind-action action to v1.14.0 by @renovate[bot] in #3190
- Prepare for v0.19.2 release by @tklauser in #3191
Full Changelog: v0.19.1...v0.19.2

Summary of Changes
Minor Changes:
- cli: clustermesh: use ca bundle to connect clusters (cilium/cilium#42833, @MrFreezeex)
Bugfixes:
- cilium-cli: Fix NodePort deployment check in dual-stack clusters (cilium/cilium#43888, @gandro)
- Fix GKE conformance test NodePort timeouts by skipping unreachable external IP validation on GKE (cilium/cilium#44014, @pillai-ashwin)
CI Changes:
- cli: Relax warning exclusion for "unable to find key in local cache" (cilium/cilium#44149, @brb)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#43700, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#43824, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#43965, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#44090, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#44235, @cilium-renovate[bot])
- chore(deps): update base-images (main) (cilium/cilium#43827, @cilium-renovate[bot])
- chore(deps): update base-images (main) (cilium/cilium#43969, @cilium-renovate[bot])
- chore(deps): update base-images (main) (cilium/cilium#44239, @cilium-renovate[bot])
- cilium-cli: Fix container name in connectivity test logs (cilium/cilium#44076, @HadrienPatte)
- docs: fix typos in comments (cilium/cilium#43821, @NAM-MAN)
- feat(cilium-cli): Add -r(estart) parameter to cilium upgrade (cilium/cilium#43722, @alagoutte)
- Introduce end-to-end tests for Cilium's ZTunnel integration. (cilium/cilium#43166, @ldelossa)
- Replace Index{,Byte} with Cut,Contains (cilium/cilium#43708, @joestringer)
- sysdump: Use label selectors for Hubble UI/Relay deployment collection (cilium/cilium#44227, @darox)
- chore(deps): update dependency cilium/cilium to v1.18.6 by @renovate[bot] in #3168
- Update stable release to v0.19.0 by @tklauser in #3169
- chore(deps): update go to v1.25.6 by @renovate[bot] in #3170
- chore(deps): update docker.io/library/golang:1.25.6 docker digest to ce63a16 by @renovate[bot] in #3172
- chore(deps): update actions/checkout action to v6.0.2 by @renovate[bot] in #3171
- ci: Harden the image build process by @ferozsalam in #3174
- chore(deps): update gcr.io/distroless/static:latest docker digest to 972618c by @renovate[bot] in #3176
- chore(deps): update all github action dependencies by @renovate[bot] in #3175
- chore(deps): update go to v1.25.7 by @renovate[bot] in #3178
- chore(deps): update golangci/golangci-lint docker tag to v2.9.0 by @renovate[bot] in #3179
- chore(deps): update go to v1.26.0 by @renovate[bot] in #3181
- chore(deps): update docker/build-push-action action to v6.19.0 by @renovate[bot] in #3180
- chore(deps): update docker/build-push-action action to v6.19.2 by @renovate[bot] in #3183
- Prepare for v0.19.1 release by @tklauser in #3184
New Contributors
- @ferozsalam made their first contribution in #3174
Full Changelog: v0.19.0...v0.19.1

Summary of Changes
CI Changes:
- Add L7 policy traffic disruption tests (cilium/cilium#42150, @fristonio)
- Cilium-cli SNI connectivity tests now retry expected successful operations to recover from failures due to external upstream issues. (cilium/cilium#42980, @jrajahalme)
- cli: connectivity: fix typo in L7 LB tests (cilium/cilium#43610, @julianwiedmann)
- Fix intermittent NodePort connectivity test timeouts in dual-stack clusters by validating NodePort readiness on all node IP addresses during test setup. (cilium/cilium#40812, @pillai-ashwin)
- tests: remove identity manager from ignored error messages (cilium/cilium#42982, @odinuge)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#43169, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#43456, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#43508, @cilium-renovate[bot])
- chore(deps): update base-images (main) (cilium/cilium#43457, @cilium-renovate[bot])
- chore(deps): update base-images (main) (cilium/cilium#43538, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 (main) (cilium/cilium#43303, @cilium-renovate[bot])
- chore(deps): update go to v1.25.5 (main) (cilium/cilium#43173, @cilium-renovate[bot])
- cilium-cli/connectivity: remove matcher for bpf/init.sh errors (cilium/cilium#43109, @tklauser)
- cilium-cli: convert net.IP to netip.Addr (cilium/cilium#42371, @phuhung273)
- cli: Update network-perf image ref (cilium/cilium#43297, @HadrienPatte)
- chore(deps): update golangci/golangci-lint-action action to v9.2.0 by @renovate[bot] in #3148
- Update stable release to v0.18.9 by @michi-covalent in #3149
- chore(deps): update golangci/golangci-lint docker tag to v2.7.0 by @renovate[bot] in #3151
- chore(deps): update go to v1.25.5 by @renovate[bot] in #3153
- ci: clean up disk space in release workflow by @tklauser in #3154
- chore(deps): update actions/stale action to v10.1.1 by @renovate[bot] in #3150
- chore(deps): update gcr.io/distroless/static:latest docker digest to 4b2a093 by @renovate[bot] in #3152
- chore(deps): update golangci/golangci-lint docker tag to v2.7.2 by @renovate[bot] in #3155
- chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 by @renovate[bot] in #3156
- chore(deps): update actions/upload-artifact action to v6 by @renovate[bot] in #3157
- chore(deps): update docker.io/library/golang:1.25.5 docker digest to 36b4f45 by @renovate[bot] in #3160
- chore(deps): update dependency cilium/cilium to v1.18.5 by @renovate[bot] in #3159
- chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 by @renovate[bot] in #3158
- chore(deps): update docker/setup-buildx-action action to v3.12.0 by @renovate[bot] in #3162
- chore(deps): update golangci/golangci-lint docker tag to v2.8.0 by @renovate[bot] in #3163
- chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 by @renovate[bot] in #3164
- chore(deps): update gcr.io/distroless/static:latest docker digest to cd64bec by @renovate[bot] in #3165
- chore(deps): update actions/setup-go action to v6.2.0 by @renovate[bot] in #3166
- Prepare for v0.19.0 release by @tklauser in #3167
Full Changelog: v0.18.9...v0.19.0

Summary of Changes
Major Changes:
- Operator prometheus support TLS/mTLS using existing secret (cilium/cilium#42077, @phuhung273)
Minor Changes:
- CLI: Allow users to set the default Cilium namespace via the CILIUM_NAMESPACE environment variable (cilium/cilium#41557, @td0ne)
- Removed deprecated CiliumBGPPeeringPolicy CRD and its agent implementation. Use cilium.io/v2 CRDs (CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfigOverride) for configuring BGP. (cilium/cilium#42278, @rastislavs)
CI Changes:
- Add CCNP cilium connectivity tests (cilium/cilium#42051, @karina-ranadive)
- Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity (cilium/cilium#42984, @rptaylor)
Misc Changes:
- bgp: Correct misleading error message in GetPeeringState (cilium/cilium#42945, @hargrovee)
- bgp: Remove versions from bgp package names (cilium/cilium#42503, @rastislavs)
- cilium-cli: add own type for root command parameters (cilium/cilium#42609, @tklauser)
- cli: cleanups for pre-v1.15 removal (cilium/cilium#42757, @julianwiedmann)
- cli: require Cilium v1.15 (cilium/cilium#41538, @julianwiedmann)
- go.mod, vendor: bump github.com/google/go-github to v79 (cilium/cilium#42857, @tklauser)
- Update lrp frontend IP address to avoid IMDS conflict in the cloud environment in cilium-cli (cilium/cilium#42737, @liyihuang)
- Use modern Go constructs (cilium/cilium#42525, @HadrienPatte)
- Update stable release to v0.18.8 by @michi-covalent in #3121
- chore(deps): update actions/upload-artifact action to v5 by @renovate[bot] in #3124
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to 8c945d3 by @renovate[bot] in #3122
- chore(deps): update dependency cilium/cilium to v1.18.3 by @renovate[bot] in #3123
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6bac879 by @renovate[bot] in #3125
- renovate: try to group dependency updates by @tklauser in #3126
- chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by @renovate[bot] in #3127
- chore(deps): update helm/kind-action action to v1.13.0 by @renovate[bot] in #3128
- chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by @renovate[bot] in #3129
- chore(deps): update golang docker tag to v1.25.4 by @renovate[bot] in #3130
- chore(deps): update go to v1.25.4 by @renovate[bot] in #3131
- chore(deps): update golang:1.25.4-alpine3.21 docker digest to 3289aac by @renovate[bot] in #3132
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to e68f6a0 by @renovate[bot] in #3135
- chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by @renovate[bot] in #3136
- chore(deps): update golangci/golangci-lint-action action to v9 by @renovate[bot] in #3133
- chore(deps): update dependency cilium/cilium to v1.18.4 by @renovate[bot] in #3134
- chore(deps): update all github action dependencies by @renovate[bot] in #3137
- chore(deps): update actions/setup-go action to v6.1.0 by @renovate[bot] in #3138
- chore(deps): update actions/checkout action to v6 by @renovate[bot] in #3139
- chore(deps): update golangci/golangci-lint-action action to v9.1.0 by @renovate[bot] in #3141
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to f60eaa8 by @renovate[bot] in #3140
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to 6981837 by @renovate[bot] in #3143
- chore(deps): update softprops/action-gh-release action to v2.5.0 by @renovate[bot] in #3144
- chore(deps): update golang docker tag to v1.25.5 by @renovate[bot] in #3147
- chore(deps): update actions/checkout action to v6.0.1 by @renovate[bot] in #3146
- Prepare for v0.18.9 release by @michi-covalent in #3145
Full Changelog: v0.18.8...v0.18.9

Summary of Changes
Minor Changes:
- clustermesh: add endpoints metrics and change global service (and MCS ServiceExport) metrics to report per cluster metrics instead of a global count (cilium/cilium#41323, @MrFreezeex)
Bugfixes:
- cilium-cli: Fix CNI config file collection in sysdump (cilium/cilium#42111, @pillai-ashwin)
- cilium-cli: Prevent panic in node-to-node-encryption connectivity test (cilium/cilium#41600, @HadrienPatte)
- connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 (cilium/cilium#42148, @julianwiedmann)
- Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (cilium/cilium#42080, @tklauser)
CI Changes:
- Add integration test to validate IPsec key derivation consistency across nodes, ensuring tunnel keys are properly derived and identical between Cilium pods. (cilium/cilium#40808, @pillai-ashwin)
- ci: enable copyloopvar linter (cilium/cilium#41893, @tklauser)
- cilium-cli, netns: fix golangci-lint 2.5.0 errors (cilium/cilium#41856, @tklauser)
- cilium-cli: Bring back NodePort Acceleration feature detection (cilium/cilium#41812, @brb)
- cilium-cli: Reenable L7 IPv6 tests (cilium/cilium#39662, @gentoo-root)
- cilium-cli: Specify TARGET for building release binaries (cilium/cilium#42177, @michi-covalent)
- cilium_cli: Override GO_BUILD Make variable (cilium/cilium#42162, @michi-covalent)
- cli, ipsec: Fix bidirectional IPsec tunnel check (cilium/cilium#42047, @pchaigno)
- cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (cilium/cilium#42146, @fristonio)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#41611, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#42018, @cilium-renovate[bot])
- chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to 0ce60b5 (main) (cilium/cilium#41558, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f (main) (cilium/cilium#41649, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to d709837 (main) (cilium/cilium#42019, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 (main) (cilium/cilium#42252, @cilium-renovate[bot])
- chore(deps): update go to v1.25.1 (main) (cilium/cilium#41560, @cilium-renovate[bot])
- chore(deps): update go to v1.25.3 (main) (cilium/cilium#42061, @cilium-renovate[bot])
- cilium-cli/features: use common cmd metric list command (cilium/cilium#41630, @aanm)
- cilium-cli: drop disabled IP cache check from connectivity tests (cilium/cilium#42240, @tklauser)
- cli/clustermesh: remove leftover global services status info (cilium/cilium#41727, @giorio94)
- Refactor policy engine to use PolicyEntry as the internal representation of policies, as described in CFP-39646. (cilium/cilium#40213, @TheBeeZee)
- sysdump: add resource usage of nodes and pods (cilium/cilium#41415, @darox)
- chore(deps): update go to v1.25.1 (patch) by @renovate[bot] in #3097
- chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #3094
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to d6bdb04 by @renovate[bot] in #3096
- chore(deps): update gcr.io/distroless/static:latest docker digest to 87bce11 by @renovate[bot] in #3099
- chore(deps): update softprops/action-gh-release action to v2.3.3 by @renovate[bot] in #3098
- chore(deps): update golang docker tag to v1.25.1 by @renovate[bot] in #3093
- chore(deps): update actions/stale action to v10 by @renovate[bot] in #3095
- chore(deps): update golang:1.25.1-alpine3.21 docker digest to 331bde4 by @renovate[bot] in #3100
- chore(deps): update dependency cilium/cilium to v1.18.2 by @renovate[bot] in #3102
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f by @renovate[bot] in #3103
- chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by @renovate[bot] in #3104
- chore(deps): upda

What's Changed
Summary of Changes
Minor Changes:
- clustermesh: cli: accept more than one service IPs (excluding when connecting to NodePort Services) when connecting to remote clustermesh-apiserver (cilium/cilium#41253, @MrFreezeex)
- clustermesh: cli: add support for dict for helm values clustermesh.config.clusters (cilium/cilium#40879, @MrFreezeex)
- clustermesh: cli: support outputting clustermesh.config.clusters to the new dict format if the cluster is running Cilium >= 1.20 (cilium/cilium#40959, @MrFreezeex)
Bugfixes:
- Add l7 proxy check to policy-local-cluster-egress connectivity test (cilium/cilium#40797, @camrynl)
- cilium-cli: also restart cilium-operator pods on config changes (cilium/cilium#41067, @aanm)
CI Changes:
- Allow Egress Gateway connectivity tests to run concurrently (cilium/cilium#40980, @tommyp1ckles)
- cilium-cli: connectivity tests: Ignore some logs in error log check (cilium/cilium#40690, @jrife)
- cilium-cli: IPv6 connectivity tests for PodToIngress (cilium/cilium#39667, @gentoo-root)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#40893, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#41046, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#41340, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#41433, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.0 docker digest to 5502b0e (main) (cilium/cilium#41343, @cilium-renovate[bot])
- chore(deps): update go to v1.24.6 (main) (cilium/cilium#40992, @cilium-renovate[bot])
- cilium-cli: Optimized feature detection by running cluster-wide checks once (cilium/cilium#40715, @HadrienPatte)
- Include bgp remote peer capabilities in the sysdump (cilium/cilium#40719, @liyihuang)
- Update all-dependencies (main) (cilium/cilium#41175, @cilium-renovate[bot])
- Update docker.io/alpine/socat:1.8.0.3 Docker digest to 29d0f24 (main) (cilium/cilium#41204, @cilium-renovate[bot])
- Update Go to v1.25.0 (main) (cilium/cilium#41209, @cilium-renovate[bot])
- Update stable release to v0.18.6 by @tklauser in #3075
- chore(deps): update golangci/golangci-lint docker tag to v2.3.1 by @renovate[bot] in #3076
- chore(deps): update golang docker tag to v1.24.6 by @renovate[bot] in #3079
- chore(deps): update gcr.io/distroless/static:latest docker digest to 2e114d2 by @renovate[bot] in #3077
- chore(deps): update docker/login-action action to v3.5.0 by @renovate[bot] in #3078
- chore(deps): update go to v1.24.6 (patch) by @renovate[bot] in #3080
- chore(deps): update actions/checkout action to v5 by @renovate[bot] in #3082
- chore(deps): update golangci/golangci-lint docker tag to v2.4.0 by @renovate[bot] in #3086
- chore(deps): update golang docker tag to v1.25.0 by @renovate[bot] in #3085
- chore(deps): update go to v1.25.0 (minor) by @renovate[bot] in #3088
- chore(deps): update dependency cilium/cilium to v1.18.1 by @renovate[bot] in #3089
- chore(deps): update dependency kubernetes-sigs/kind to v0.30.0 by @renovate[bot] in #3091
- chore(deps): update golang-images - autoclosed by @renovate[bot] in #3090
- Prepare for v0.18.7 release by @michi-covalent in #3092
Full Changelog: v0.18.6...v0.18.7

What's Changed
- Update stable release to v0.18.5 by @tklauser in #3060
- chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e by @renovate[bot] in #3061
- Update RELEASE.md by @michi-covalent in #3062
- chore(deps): update golang docker tag to v1.24.5 by @renovate[bot] in #3063
- chore(deps): update go to v1.24.5 (patch) by @renovate[bot] in #3065
- chore(deps): update golangci/golangci-lint docker tag to v2.2.2 by @renovate[bot] in #3066
- chore(deps): update dependency cilium/cilium to v1.17.6 by @renovate[bot] in #3068
- chore(deps): update golang:1.24.5-alpine3.21 docker digest to 3ebc008 by @renovate[bot] in #3067
- chore(deps): update golang:1.24.5-alpine3.21 docker digest to 72ff633 by @renovate[bot] in #3069
- chore(deps): update golang:1.24.5-alpine3.21 docker digest to 6edc205 by @renovate[bot] in #3070
- chore(deps): update golangci/golangci-lint docker tag to v2.3.0 - autoclosed by @renovate[bot] in #3071
- chore(deps): update dependency cilium/cilium to v1.18.0 by @renovate[bot] in #3073
- chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be by @renovate[bot] in #3072
- Prepare for v0.18.6 release by @tklauser in #3074
Full Changelog: v0.18.5...v0.18.6

What's Changed
Minor Changes:
- cilium-cli: add clustermesh inspect-policy-default-local-cluster command (cilium/cilium#39828, @MrFreezeex)
- cli: add suport for policy-default-local-cluster in connectivity tests (cilium/cilium#39786, @MrFreezeex)
- cli: Enable tolerations flag for all connectivity tests (cilium/cilium#40072, @HadrienPatte)
- Improve EKS cluster name auto-detection by supporting both ARN and eksctl FQDN formats to avoid validation errors caused by overly long names. (cilium/cilium#39500, @zzuckerfrei)
CI Changes:
- cli,ci,ipsec: create key command and CI integration (cilium/cilium#37722, @viktor-kurchenko)
- connectivity: Include detailed failure messages in test report (cilium/cilium#39866, @aanm)
- fix(summary): arbitrary file access during archive extraction zipslip (cilium/cilium#39896, @odaysec)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#40081, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#40214, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.4 docker digest to 10c1318 (main) (cilium/cilium#40036, @cilium-renovate[bot])
- chore(deps): update go to v1.24.4 (main) (cilium/cilium#39943, @cilium-renovate[bot])
- cilium-cli: clean up log messages (cilium/cilium#40101, @tklauser)
- cilium-cli: Standardize build args in dockerfile (cilium/cilium#40126, @HadrienPatte)
- cli: Add OpenShift cluster Kind (cilium/cilium#40012, @nebril)
- cli: Do not directly depend on DaemonConfig (cilium/cilium#39907, @brb)
- deps: Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (cilium/cilium#40224, @HadrienPatte)
- docs: Add cmdref for cilium-cli (cilium/cilium#40017, @HadrienPatte)
- go.mod, vendor: bump github.com/google/go-github to v72 (cilium/cilium#40104, @tklauser)
- lint: Update staticcheck config in golangci-lint (cilium/cilium#40201, @sayboras)
- Test failure message included in Junit report of the connectivity tests. (cilium/cilium#40035, @mathpl)
- tools: Move codeowners library from cilium-cli dir (cilium/cilium#40253, @joestringer)
- chore(deps): update docker.io/library/golang:1.24.3 docker digest to 81bf592 by @renovate in #3044
- chore(deps): update golang docker tag to v1.24.4 by @renovate in #3046
- chore(deps): update softprops/action-gh-release action to v2.3.0 by @renovate in #3047
- chore(deps): update go to v1.24.4 (patch) by @renovate in #3045
- chore(deps): update softprops/action-gh-release action to v2.3.2 by @renovate in #3048
- chore(deps): update gcr.io/distroless/static:latest docker digest to b7b9a69 by @renovate in #3049
- chore(deps): update docker/setup-buildx-action action to v3.11.0 by @renovate in #3050
- RELEASE.md: drop reference to v0.10 branch by @tklauser in #3051
- Update stable release to v0.18.4 by @michi-covalent in #3052
- chore(deps): update docker/setup-buildx-action action to v3.11.1 by @renovate in #3053
- chore(deps): update golangci/golangci-lint docker tag to v2.2.0 by @renovate in #3057
- chore(deps): update dependency cilium/cilium to v1.17.5 by @renovate in #3054
- chore(deps): update docker.io/library/golang:1.24.4 docker digest to 10c1318 by @renovate in #3055
- chore(deps): update golangci/golangci-lint docker tag to v2.2.1 by @renovate in #3058
- Prepare for v0.18.5 release by @tklauser in #3059
Full Changelog: v0.18.4...v0.18.5

What's Changed
Major Changes:
- Add support for VXLAN in IPsec (VinE) (cilium/cilium#37723, @ldelossa)
- Promote CiliumLoadBalancerIPPool CRD to v2 API version (cilium/cilium#39090, @pippolo84)
- Support IPv6 as a tunneling underlay. (cilium/cilium#38296, @pchaigno)
Minor Changes:
- Add support for IPv6 egress gateway policies (cilium/cilium#38452, @rgo3)
- cilium-cli: Fix ipv6 ping regex (cilium/cilium#38814, @yrsuthari)
- policy: Add validation and docs for TLS SNI ServerNames (cilium/cilium#38615, @sayboras)
- Since pod CIDRs are now stored into the ipcache map, tunnel map is not needed anymore. Any reference to the tunnel map have been removed from cilium-dbg, cilium status and bugtool. (cilium/cilium#38839, @pippolo84)
Bugfixes:
- cli: default to SPDY connection for exec (cilium/cilium#38988, @asauber)
- gateway-api: Fix parentRefMatched to check Group and Kind (cilium/cilium#39275, @syedazeez337)
CI Changes:
- Assign codeowners for no-errors-in-logs testcase (cilium/cilium#38812, @marseel)
- cilium-cli: IPv6 connectivity tests for PodToHostPort (cilium/cilium#39666, @gentoo-root)
- cilium-cli: Use v2alpha1 version of CCG for Cilium versions below v1.18 (cilium/cilium#39776, @christarazi)
- cilium-cli:fix: account for current TunnelPort when building tcpdump overlay filters (cilium/cilium#38680, @smagnani96)
- CLI: bump ConnectivityTestConnDisruptImage (cilium/cilium#39200, @darox)
- cli: encryption: improve ICMPv6 NA detection (cilium/cilium#39160, @julianwiedmann)
- cli: Generate each owners field separately (cilium/cilium#38987, @joestringer)
- cli: Simplify junit representation of code owners (cilium/cilium#39020, @joestringer)
- gateway-api: Fix parentRefMatched to check Group and Kind (cilium/cilium#39275, @syedazeez337)
CI Changes:
- Assign codeowners for no-errors-in-logs testcase (cilium/cilium#38812, @marseel)
- cilium-cli: IPv6 connectivity tests for PodToHostPort (cilium/cilium#39666, @gentoo-root)
- cilium-cli: Use v2alpha1 version of CCG for Cilium versions below v1.18 (cilium/cilium#39776, @christarazi)
- cilium-cli:fix: account for current TunnelPort when building tcpdump overlay filters (cilium/cilium#38680, @smagnani96)
- CLI: bump ConnectivityTestConnDisruptImage (cilium/cilium#39200, @darox)
- cli: encryption: improve ICMPv6 NA detection (cilium/cilium#39160, @julianwiedmann)
- cli: Generate each owners field separately (cilium/cilium#38987, @joestringer)
- cli: Simplify junit representation of code owners (cilium/cilium#39020, @joestringer)
- cli: sysdump: collect logs from restarted test pods. (cilium/cilium#38796, @tommyp1ckles)
- connectivity: Correct version check for Ingress test (cilium/cilium#38803, @sayboras)
- connectivity: encryption tests: filter when icmpv6.type == 136 (cilium/cilium#38798, @tommyp1ckles)
- connectivity: Fix flow validation for wildcard tls sni (cilium/cilium#38881, @sayboras)
- feat(connectivity): add network bandwidth management test (cilium/cilium#38390, @l1b0k)
- ipsec: fix connection disruption issue for ipv6 ipsec upgrade scenarios. (cilium/cilium#39061, @ldelossa)
- test/runtime: remove already covered FQDN tests (cilium/cilium#38866, @tklauser)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#39044, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#39686, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.2 docker digest to 18a1f2d (main) (cilium/cilium#38857, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.2 docker digest to 1ecc479 (main) (cilium/cilium#38902, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.2 docker digest to 30baaea (main) (cilium/cilium#39308, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.2 docker digest to d9db321 (main) (cilium/cilium#39042, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.3 docker digest to 4c0a181 (main) (cilium/cilium#39698, @cilium-

Summary of Changes
Announcement
Cilium CLI releases are now available as Docker images here: https://quay.io/repository/cilium/cilium-cli?tab=tags&tag=latest
Minor Changes:
- Add support to capture kernel profiles during performance testing (cilium/cilium#38402, @giorio94)
- Make Cilium CLI performance tests not depend on Cilium (cilium/cilium#38245, @giorio94)
- Reject IPSec key rotation with mismatching key lengths to prevent IPv6 disruptions. (cilium/cilium#37936, @smagnani96)
Bugfixes:
- cilium-cli: Fix logger busy loop (cilium/cilium#38199, @jrajahalme)
CI Changes:
- Add parallel streams throughput tests, and enable them in the EGW workflow (cilium/cilium#38027, @giorio94)
- ci: use custom kubeconfig for cilium-cli cloud provider tests (cilium/cilium#37970, @marseel)
- cilium-cli: Add strict-mode-test v2 (cilium/cilium#38566, @pippolo84)
- cilium-cli: connectivity: clean up any leftover egw routes. (cilium/cilium#36651, @tommyp1ckles)
- cilium-cli: extend no-interrupted-connections to test Egress Gateway (cilium/cilium#38193, @ysksuzuki)
- cilium-cli: run IPv6 test with skipRedirectFromBackend=true on >=v1.17.3 (cilium/cilium#38630, @ysksuzuki)
- cilium-cli: Use distroless (cilium/cilium#38189, @michi-covalent)
- cli: Reduce the flood of the terminal with logs on failure during tests (cilium/cilium#38240, @roman-kiselenko)
- cli: reverse finalizers of connectivity test (cilium/cilium#38232, @marseel)
- connectivity: Add test for source egress in Ingress (cilium/cilium#38053, @sayboras)
- test: Add negative test case for TLS SNI + Inception (cilium/cilium#38194, @sayboras)
- workflows/e2e: Cover IPv6-only (cilium/cilium#38235, @pchaigno)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#38603, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.24.1 docker digest to 52ff1b3 (main) (cilium/cilium#38421, @cilium-renovate[bot])
- chore(deps): update go to v1.24.1 (main) (cilium/cilium#38092, @cilium-renovate[bot])
- cilium-cli: add IPv6 connectivity test for LocalRedirectPolicy (cilium/cilium#37192, @saiaunghlyanhtet)
- cilium-cli: add test owners as part of junit files (cilium/cilium#38269, @aanm)
- cilium-cli: Allow running outside the Cilium tree (cilium/cilium#38133, @joestringer)
- cli: Load code owners dynamically via --code-owners (cilium/cilium#38044, @joestringer)
- Enable new testifylint checks, and mechanically fix reported issues (cilium/cilium#38485, @giorio94)
- Fix cli disconnect error message (cilium/cilium#38545, @samsonkolge)
- Modernize Go map and slice operations (cilium/cilium#38126, @tklauser)
- Standardize hubble and cilium CLIs makefile (cilium/cilium#37716, @HadrienPatte)
- Test IPv4 and IPv6 explicitly in PodToWorld and PodToWorld2 connectivity tests (cilium/cilium#37435, @gentoo-root)
- Use slices.Sorted(maps.Keys(...)) to get sorted list of map keys (cilium/cilium#38519, @tklauser)
- Use more efficient SplitSeq instead of Split (cilium/cilium#38157, @tklauser)
- Update stable release to v0.18.2 by @michi-covalent in #2972
- chore(deps): update golang docker tag to v1.24.1 by @renovate in #2971
- chore(deps): update docker.io/library/golang docker tag to v1.24.1 by @renovate in #2970
- chore(deps): update golangci/golangci-lint docker tag to v1.64.7 by @renovate in #2974
- action: Only install a single version by @joestringer in #2973
- chore(deps): update golangci/golangci-lint-action action to v6.5.1 by @renovate in #2975
- chore(deps): update golangci/golangci-lint-action action to v6.5.2 by @renovate in #2979
- chore(deps): update golangci/golangci-lint docker tag to v1.64.8 by @renovate in #2978
- chore(deps): update dependency cilium/cilium to v1.16.8 by @renovate in #2977
- chore(deps): update docker/login-action action to v3.4.0 by @renovate in #2976
- github: Remove multicluster.yaml by @michi-covalent in #2983
- chore(deps): update actions/upload-artifact action to v4.6.2 by @renovate in #2981
- Simplify Dockerfile and clean up docker image work