fix(deps): update all go dependencies main (main) (patch) #3312

cilium-renovate · 2025-01-17T11:20:00Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/cilium/cilium	require	patch	`v1.17.0-rc.1` -> `v1.17.0`
github.com/cilium/ebpf	require	patch	`v0.17.1` -> `v0.17.2`
github.com/cilium/little-vm-helper	require	patch	`v0.0.19` -> `v0.0.23`
github.com/spf13/pflag	require	patch	`v1.0.6-0.20210604193023-d5e0c0615ace` -> `v1.0.6`
sigs.k8s.io/controller-runtime	require	patch	`v0.19.4` -> `v0.19.5`

Release Notes

cilium/cilium (github.com/cilium/cilium)

`v1.17.0`: 1.17.0

Compare Source

We are excited to announce the Cilium 1.17.0 release!

A total of 2761 new commits have been contributed to this release by a growing community of over 880 developers and over 20,800 GitHub stars! 🤩

To keep up to date with all the latest Cilium releases, see Announcements

Here's what's new in v1.17.0:

🚠 Networking

🚦 Quality of Service: Annotate your Pods for Guaranteed, Burstable or BestEffort egress network traffic priority (#36025, @hemanthmalla)
🌐 Multi-Cluster Service API: Use Kubernetes MCS to manage global services in a Cilium Cluster Mesh (#34439, @MrFreezeex)
🔀 Load Balance based on L4 Protocol: Differentiate TCP and UDP based protocols for load balancing, so multiple services on the same port can be directed to different backends (#33434, @jibi)
🧲 Per-Service LB Algorithms: Choose maglev or random load balancing algorithms for individual services (#35735, @kl52752)
⛔ Deny lists for Service source ranges: Control whether Kubernetes loadBalancerSourceRanges are treated as an allow or deny list (#36120, @borkmann)
🏊 Better control over IPAM: IPs can be allocated statically using AWS tags, and multi-pool can support single IP ranges for pools (#34622, @antonipp; #34618, @juliusmh)
🔌 Dynamic MTU detection: Cilium respects changes made to MTU made at runtime without requiring agent restart (#34314, @dylandreimerink)

💂‍♀️ Security

🚀 Improved network policy performance: The cost of computing complex combinations of network policies has been reduced (Various PRs by @joamaki, @jrajahalme, @marseel, @nathanjsweet, @squeed and @youngnick)
🗂️ Prioritize critical network policies: Cilium respects Kubernetes priorityNamespaces to prioritize endpoint propagation for critical namespaces when using CiliumEndpointSlices (#34199, @Kaczyniec)
📋 Validate Network Policies: Receive better feedback from Kubernetes when creating network policies (#34585, @squeed; #35904, @renyunkang; #36598, @pippolo84)
🏷️ Select CIDRGroups by Label: Add labels to CIDRGroups and use these for network policy selection (#36087, @squeed)
🛎️ Extend ToServices for in-cluster services: Services with a selector can be selected with ToServices network policies statements (#34208, @chaunceyjiang)
🚧 FQDN Filtering for hostNetwork: Use CiliumClusterwideNetworkPolicy to configure Layer 7 filtering for DNS requests on nodes in the cluster (#34024, @atykhyy)
📶 HTTP policies on port ranges: Redirect multiple ports in a single policy towards Envoy for Layer 7 filtering of HTTP traffic (#36056, @jrajahalme)

🕸️ Service Mesh & Gateway API

⛩️ Gateway API 1.2.1: Add support for the latest Gateway API v1.2.1 release, including HTTP retries and mirror fractions (#34720, @sayboras)
📝 Static Gateway Addressing: Cilium now supports statically specifying addresses for gateways (#33042, @chaunceyjiang)
🔐 Improved Envoy TLS handling: Use SDS for managing TLS visibility secrets in Envoy, improving policy calculation speed and secrets access (#35513, @youngnick)

🛰️ Observability

🔍 Dynamic Hubble Metrics: Configure Hubble metrics with a new hubble-metrics-config ConfigMap to tune your network observability (#35185, @rectified95)
🛤️ Track enabled features using Prometheus: The cilium-agent and cilium-operator components expose Prometheus metrics for which features are enabled. (#35852, @aanm)
📊 Many new metrics: Improved metrics related to BGP, network connections, network policy, pod management, and Cilium component status (Various PRs by @AwesomePatrol, @harsimran-pabla, @joestringer, @jshr-w, @mikejoh, @nimishamehta5, @odinuge, @ovidiutirla, @rectified95 and @sjdot)

🌅 Scale

📈 Better cluster connectivity checking: The cilium-health component for cluster-wide network connectivity health detection is better tuned for reliable health checking at high scale (#35163, @jshr-w)
⏳ Rate-limit monitor events: Balance the number of eBPF events against the CPU usage required to process them (#29711, @siwiutki)
👥 Double-Write Identity mode: New allocation mode for Security Identities to ease migration between CRD and KVStore identity backends (#31920, @antonipp)
⚖️ Better scale testing: This release benefits from regular automated scale testing for network policy (#35278, @marseel)

🏘️ Community

❤️ Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
- Seznam, Alibaba Cloud, SysEleven, QingCloud, ECCO, Reddit, Confluent, SamsungAds, and Sony
The Cilium Annual Report 2024 was released covering all the highlights from across the community and marking the “Year of Kubernetes Networking”
The community gathered at Cilium + eBPF Day and the Cilium Developer Summit in Salt Lake City
Meet us at the upcoming CiliumCon and the Cilium Developer Summit in London

And finally, we would like to thank you to all contributors of Cilium that helped directly and indirectly with the project. The success of Cilium could not happen without all of you. ❤️ ❤️ ❤️

Other changes

Bugfixes:

Addresses attached to dummy devices aren't ignored from node addresses even if the device is down, unblocking usage of host network nodelocaldns with eBPF host routing. (#34228, @hemanthmalla)
agent: defend against null pointer refs in cecManager.getEndpoint() (Backport PR #37374, Upstream PR #37188, @aetimmes)
Allow cilium agent to start on linux kernels that don't have CONFIG_XFRM. (Backport PR #37247, Upstream PR #37123, @julianwiedmann)
bgpv2: Do not fail if PeerAddress is not configured for a peer (#36488, @rastislavs)
bpf-tproxy: don't look for local 'established' UDP sockets (#34591, @atykhyy)
bpf:nat: restore a NAT entry if its REV NAT is not found (#35304, @sugangli)
bugfix: fixed extravolumes mount in cilium-preflight (#35386, @tokarev-artem)
Cilium no longer fails compiling bpf programs if listing network links is interrupted. (#35259, @jrajahalme)
cilium-cli/connectivity: fix nil-pointer dereference if minimum version can't be detected (#35802, @tklauser)
cilium-dbg: fix status commands for cluster connectivity health (#33972, @darox)
cli: fix a case when connectivity perf command was hanging if LRP was enabled in the cluster (#35063, @marseel)
clustermesh: fix MCS-API service export cache not properly deleted (Backport PR #37126, Upstream PR #36892, @MrFreezeex)
clustermesh: add support for targetPort in MCS-API (Backport PR #37126, Upstream PR #36875, @MrFreezeex)
Correctly format cilium status -o json CLI output for errors and warnings (#34654, @nimishamehta5)
Datasource error fixed for Cilium Operator dashboard (#35420, @VergeDX)
Do not leak ipcache entries when apiserver entities are cluster external (#35868, @hemanthmalla)
endpoint: Skip incremental updates on an endpoint without policy map (Backport PR #37374, Upstream PR #37312, @jrajahalme)
envoy: add configurable access log buffer size (Backport PR #37126, Upstream PR #36823, @aetimmes)
envoy: Configure internal address config based on IP family (Backport PR #36781, Upstream PR #36733, @sayboras)
Export Map{Key,Value} fields to prevent map {get,list} handler panics. (#36219, @tommyp1ckles)
Fix a bug that prevents a pod from accessing Nodeport services when the pod is also in scope of a broad-range Egress Gateway policy. (Backport PR #37126, Upstream PR #36929, @julianwiedmann)
Fix bug causing the endpoint regeneration failure handler to be effective only once (Backport PR #37247, Upstream PR #37085, @giorio94)
Fix bug potentially causing newly added endpoints to remain stuck in waiting-to-regenerate state forever, causing traffic from/to that endpoint to be incorrectly dropped. (Backport PR #37126, Upstream PR #37086, @giorio94)
Fix bug that would break all pod-to-pod connectivity when using the per-tunnel IPsec key system. (#35806, @pchaigno)
Fix clustermesh endpointslice synchronization connectivity test (#34455, @giorio94)
fix concurrency issue related with allocator cache (Backport PR #37374, Upstream PR #37328, @aanm)
Fix configuration of proxy-max-concurrent-retries (Backport PR #37247, Upstream PR #37061, @joestringer)
Fix error in Cilium-cli that caused the encryption status per-node command to retrieve only the status of the 1st node. (#34637, @smagnani96)
Fix Hubble exporter config uses wrong separator (#34621, @chaunceyjiang)
Fix incorrect deletion of revNAT entries due to service ID conflict (#34552, @haozhangami)
Fix incorrect trace reason for egress packets when WireGuard is used with Host Firewall. (#35354, @smagnani96)
Fix memory leak caused by service events when when CNPs/CCNPs are disabled (Backport PR #37126, Upstream PR #36727, @giorio94)
Fix missing Helm chart version for status command (#34748, @pgils)
Fix race condition on cilium_ratelimit map (#34554, @pchaigno)
Fix runtime panic with L2announcer name generation (#35031, @YutaroHayakawa)
Fix services could not be removed in sync-lb-maps-with-k8s-services controller (#33885, @haozhangami)
fix(clustermesh): mesh connection mode (#34932, @littlejo)
Fix: cilium-cli install --repository flag respects repository even with cached versions. (#35670, @renyunkang)
fix: Hubble metrics not deleted for deleted pods (Backport PR #37126, Upstream PR #36819, @rectified95)
Fixed Cilium CLI fatal error: concurrent map read and map write (#35311, @chaunceyjiang)
Fixes a bug where identities may be leaked if a pod changes labels and is immediately deleted. (#35947, @orange30)
Fixes a type error that occurred when enabling the Grafana dashboards in the Helm chart. (Backport PR #37374, Upstream PR #36939, @nicl-dev)
Fixes BPF Masquerading exclusion CIDR for IPAM modes "eni", "azure" and "alibabacloud". (#35624, @pippolo84)
gateway-api: Add service observable event handler (#33352, @sayboras)
helm: Render valid image specs when tag is empty (#34891, @BenoitKnecht)
hubble: fix metrics configuration parsing (Backport PR #37126, Upstream PR #36371, @kaworu)
ipam: Avoid empty CIDR in ENI mode (#35695, @sayboras)
k8s: Avoid panic while checking ip mode (#35782, @sayboras)
l4lb: fix inability to properly update service after agent restart (#34077, @oblazek)
Make initial nat gc async during Daemon initialization. (#34070, @tommyp1ckles)
Make LB-IPAM allow IP sharing between services with the same ports but different protocols (#34691, @ldlb9527)
maps/nat/stats: Use Start context when waiting for maps (Backport PR #37277, Upstream PR #37262, @tommyp1ckles)
Metrics: Fix the reporting of bootstrap metric "overall" scope as it was not capturing a part of initialization (#34971, @marseel)
nodeinit: move kubelet restart inside if/else in startup.bash (Backport PR #37374, Upstream PR #37282, @ayuspin)
operator: don't reconcile non-GAMMA xRoutes without a Cilium-managed Gateway (Backport PR #37126, Upstream PR #35718, @aetimmes)
Policy rule labels are tracked more accurately in endpoint policy maps. (#34437, @jrajahalme)
Remove "_count" suffix from doublewrite metrics (Backport PR #37277, Upstream PR #36585, @antonipp)
Reopened connections are now correctly counted towards opened in Active Connection Tracking (#34082, @AwesomePatrol)
sysctlfix: close systemd config file before triggering reload (#36368, @dylandreimerink)
The cilium dnsproxy now handles EDNS0 large buffersize advertisements better. (#34852, @bimmlerd)

CI Changes:

.github/workflows: Enable DualStack for conformance-kind-proxy-embedded (#36398, @dylandreimerink)
.github/workflows: fix ci image cache cleaner (#34819, @aanm)
.github: Add disk-cleanup GHA to ipsec upgrade tests (#34321, @chancez)
.github: add missing export in variable (#34818, @aanm)
.github: Clean up cilium-cli action usages (#33573, @michi-covalent)
.github: extend timeout for tests-e2e-upgrade workflow (#35696, @rastislavs)
.github: prevent failure when deleting GitHub Actions cache (#34844, @aanm)
.github: quote arguments in bash string comparison (#35842, @devodev)
.github: remove CI tests from PR runs if not required (#34726, @aanm)
.github: remove use of deprecated --disable-check cilium-cli option (#35776, @tklauser)
.github: Set --interactive=false for cilium status (Backport PR #37247, Upstream PR #37151, @joestringer)
.github: Use --input-file when testing piping flows into Hubble CLI (#35858, @chancez)
.github: Use github ref for git push, not quay ref (#34392, @joestringer)
[v1.17] gh: replace kernel development trees with 6.12 kernel (#36841, @julianwiedmann)
[v1.17] gha: use /test to trigger tests in stable branches (#36690, @giorio94)
Add an empty Dockerfile for cilium-cli (#34370, @michi-covalent)
Add concurrency to e2e-upgrade tests (#34806, @aanm)
Add concurrency to test-ipsec-upgrade (#35362, @aanm)
Add Hubble CLI integration tests and skip running e2e/conformance on Hubble CLI only changes (#33850, @chancez)
Allow Renovate to bump to golang v1.22 (#33820, @ferozsalam)
ariane: don't run full test suite for BPF test changes (#34931, @julianwiedmann)
ariane: don't run tests for renovate config changes (#36543, @tklauser)
ariane: manage workflow exclusions for changes to CODEOWNERS and USERS.md (#34894, @julianwiedmann)
Ariane: skip E2E tests when changing unit tests only (#35334, @giorio94)
bpf/tests: test ipv6 udp packets when redirecting from l3 to l2 (#36536, @rgo3)
bpf: complexity-tests: add HAVE_SET_RETVAL and HAVE_NETNS_COOKIE for bpf_sock tests (#35291, @julianwiedmann)
Bugfix: fix cluster name in 100 nodes scale test (#33973, @thorn3r)
CFP-25694: Move cilium/cilium-cli code into cilium/cilium repository (#34178, @michi-covalent)
chore(dep): Bump gateway api to the lastest version (#34505, @sayboras)
ci-clustermesh-upgrade: Increment timeout between rollouts to 10min (#34638, @pippolo84)
ci-e2e-upgrade: Cover wireguard + geneve tunnel (Backport PR #37247, Upstream PR #37163, @jschwinger233)
CI-Runtime: Allow passing extra cilium options. (#34478, @tommyp1ckles)
ci/ipsec: Cilium agents in ci-ipsec-e2e no longer share host's boot ID (#35951, @jschwinger233)
ci: 100 node scale - alert on bootstrap/cpu/memory regressions (#34897, @marseel)
CI: Add channel arguments to GKE related workflows (#35522, @brlbil)
ci: add leak detection to conformance-ipsec-upgrade (Backport PR #37169, Upstream PR #36377, @smagnani96)
CI: Add list and filter artifacts steps (#35172, @brlbil)
CI: Add merge and upload composite action (#35355, @brlbil)
ci: add network policy scale test (#35278, @marseel)
ci: add watch request thresholds (#35808, @marseel)
ci: allow all GKE K8s release channels (#33770, @nbusseneau)
ci: clustermesh run tests concurrently (#33942, @viktor-kurchenko)
ci: configure connectivity test in delegated ipam e2e (#36475, @wedaly)
ci: conformance-kind: don't explicitly enable session affinity (#35290, @julianwiedmann)
ci: datapath-verifier: also run on 6.12 kernel (#36619, @julianwiedmann)
ci: fix cleanup of stale kops clusters. (#35986, @marseel)
ci: fix native wireguard encryption (#35520, @marseel)
CI: Fix syntax error in Image Cache Cleaner (#35104, @brlbil)
ci: increase verbosity of print-downgrade-script.sh (#34668, @marseel)
ci: Introduce CILIUM_INSTALL_NET_PERF_EXTRA_ARGS env var (#35178, @markpash)
ci: kind proxy run tests concurrently (#33944, @viktor-kurchenko)
CI: l4lb allow extra opts (#34813, @tommyp1ckles)
ci: more robust hubble relay service port-forwarding (Backport PR #37247, Upstream PR #37110, @rolinh)
ci: Move CiliumEndpointSlice migration to schedule (#34828, @marseel)
ci: netperf always run hubble (#35268, @marseel)
ci: Reduce concurrency for AWS CNI test (#34683, @marseel)
CI: remove unsed env variable (#35149, @brlbil)
ci: run privileged tests in parallel except for IPSec (#35232, @marseel)
ci: skip certain workflows for changes only affecting cilium-cli (#34550, @tklauser)
ci: switch most remaining workflows to new IPsec key system (#35295, @julianwiedmann)
ci: Update branch matrix list in call-backport-label-updater (#33761, @pippolo84)
ci: Update ref to cilium/scaffolding in ClusterMesh scale test workflow (#34499, @learnitall)
CI: Update tested K8S versions (#35726, @brlbil)
ci: use the VERSION file from the PR branch in push-charts-ci.yaml (#35950, @ferozsalam)
cilium-cli/connectivity: allow to specify log levels to check (#36231, @tklauser)
cilium-cli/connectivity: disable warning log checks before v1.17 (#36358, @giorio94)
cilium-cli/connectivity: fix IPv6 feature check for 2ndary node IPv6 (#36513, @tklauser)
cilium-cli: connectivity: fix the local-redirect-policy flow validation (#34919, @ysksuzuki)
cilium-cli: Define CLI_MAIN_DIR Make variable (#34910, @michi-covalent)
cilium-cli: Ignore "No egress gateway found" drops (#35609, @pchaigno)
cilium-cli: Improve tcpdump termination timeout handling (#36021, @liyihuang)
cilium-cli: retry exec-in-pod requests in case of transient errors (#35961, @tklauser)
cilium-cli: Run BGP tests sequentially (#35727, @rastislavs)
Cleanup leaked GCE kops clusters (#35915, @marseel)
Cleanups after LLVM upgrade. (#32067, @gentoo-root)
cli/connectivity: Check for unexpected warning logs (#35723, @pchaigno)
cli/connectivity: Test strict mode encryption (#35231, @jschwinger233)
cli: Don't ignore datapath bug packet drops (#36105, @pchaigno)
clustermesh: Run cilium-cli inside Docker (#33749, @michi-covalent)
conformance-{gateway-api,ingress}: Run cilium-cli inside Docker (#33724, @michi-covalent)
contrib/scripts/kind.sh: fix DNS resolution on nodes (#34154, @atykhyy)
datapath: Improve XFRM leak tests (#35796, @pchaigno)
Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test for v1.15 and v1.16. (#35742, @smagnani96)
envoy: Add renovate configuration for cilium-proxy image (#33424, @sayboras)
Fix bug in testsuite where a list of Pods was initialized with several empty elements rather than allocating the buffer with space for enough elements. (#35164, @rusttech)
Fix bug preventing the ability to build images with non-stripped binaries (#35326, @learnitall)
Fix cilium CLI connectivity tests in IPv6-only clusters. (#36026, @wedaly)
Fix flake in node manager TestNodeManagerEmitStatus test (#36097, @glrf)
fqdn-perf: allow to inject additional metrics measurements (#33583, @marseel)
gh: cilium-config: enable IPv6 BPF Masquerade with HostFW (#33686, @julianwiedmann)
gh: e2e-upgrade: add coverage for 6.12 kernel (#36640, @julianwiedmann)
gh: e2e-upgrade: re-enable config 12 (#34218, @julianwiedmann)
gh: e2e-upgrade: use DSR-Geneve in config 15 (Backport PR #37126, Upstream PR #36982, @julianwiedmann)
gh: harmonize lvh kernel naming scheme (Backport PR #37374, Upstream PR #37322, @julianwiedmann)
gh: nat46x64: don't set DSR dispatch mode when LB mode is SNAT (#33726, @julianwiedmann)
gh: update removed --loglevel option for kind (Backport PR #37126, Upstream PR #36935, @julianwiedmann)
gha(update-label-backport): ignore leading 'v' in branch parameter (#34013, @giorio94)
gha: Add coverage for policy secret sync (#36040, @sayboras)
gha: Allow CRD mismatch for Gateway API conformance (#33536, @sayboras)
gha: always collect and upload sysdump if 100 nodes scale test fails (#36367, @giorio94)
gha: always respect the given image-tag in the helm-default action (#36293, @giorio94)
gha: Bump k8s version to v1.32.0 (Backport PR #37126, Upstream PR #36905, @sayboras)
gha: bump ubuntu version in conformance-externalworkloads (Backport PR #37126, Upstream PR #36859, @giorio94)
gha: compress profiles archives in scale/perf tests (#33729, @giorio94)
gha: correctly downgrade to patch release in ipsec workflows (Backport PR #37126, Upstream PR #36858, @giorio94)
gha: default the helm-default image-tag also in pull request workflows (#36314, @giorio94)
gha: Disable envoy version check in upgrade/downgrade tests (Backport PR #36739, Upstream PR #36734, @sayboras)
gha: Enable Ingress Controller test in upgrade (#34185, @sayboras)
gha: Enable ingress-controller in e2e tests (#36043, @sayboras)
gha: Enable parallel requests for L7 tests (#36623, @sayboras)
gha: enable the log-errors check in the clustermesh upgrade workflow (#35739, @giorio94)
gha: extra Cilium agents CPU and Mem metrics in clustermesh scale test (#36481, @giorio94)
gha: fix case mismatch in conformance clustermesh ipFamily variable (#34555, @giorio94)
gha: fix permissions of update label backport PR workflow (#35117, @giorio94)
gha: fix retrieval of DNS server in conformance external workloads (Backport PR #37374, Upstream PR #37361, @giorio94)
gha: Retrieve eks supported version via aws cli (Backport PR #37222, Upstream PR #37210, @sayboras)
gha: Simplify integration test job (#34676, @sayboras)
gha: test disabled kvstoremesh clustermesh upgrade/downgrade tests (#36242, @giorio94)
gha: uniform downgrade settings in clustermesh upgrade/downgrade test (#36239, @giorio94)
gha: Update logic to extract gateway-api version (#35189, @sayboras)
ginkgo: Get rid of K8sUpdates (#35035, @brb)
Ginkgo: test runner: add flag to allow helm overrides (#34096, @tommyp1ckles)
github: Add a workflow to build cilium-cli binaries (#34462, @michi-covalent)
github: bump LVH image versions (#35719, @julianwiedmann)
github: Checkout code before running cilium/cilium-cli action (#36117, @michi-covalent)
github: Fix branch name in build-go-caches.yaml (#36906, @michi-covalent)
github: Simplify the checkout logic (#36190, @michi-covalent)
hive/metrics: Fix flaky test (#36418, @ovidiutirla)
hubble: ignore some testifylint linter errors (#36096, @rolinh)
integration: Bump ubuntu to 24.04 for arm runners (Backport PR #37126, Upstream PR #37042, @sayboras)
Introduce ClusterMesh scale tests (#33562, @giorio94)
ipsec: Fix arguments in XFRM IN policy test (#36030, @pchaigno)
ipsec: Run cilium-cli inside Docker (#33750, @michi-covalent)
labeler: Add cilium-cli label (#34447, @michi-covalent)
Makefile: Increase timeout for integration tests to 12min (Backport PR #37374, Upstream PR #37279, @pchaigno)
metrics: Add metrics config test for Hubble. (#34325, @rectified95)
Miscellaneus improvements to the clustermesh scale test (#34704, @giorio94)
Modify bpftrace script in CI to ignore proxy traffic if destination is outside pod CIDRs. (Backport PR #37126, Upstream PR #36364, @smagnani96)
net-perf-gke: Shorten the cluster name (#34260, @michi-covalent)
option: Fix merge conflict in test expectations (#33572, @pchaigno)
perf: Run cilium-cli inside Docker (#33752, @michi-covalent)
policy/ci: Add Complex Allow Test to Policy Engine (#35156, @nathanjsweet)
Quarantine of high-scale IPcache (#36376, @Artyop)
Reapply "kind.sh: fix DNS resolution on nodes, make external DNS configurable (#34293, @sayboras)
Remove ghc in GHA disk cleanup (#34320, @chancez)
renovate: Fix image updates for IPsec workflows (#35555, @pchaigno)
renovate: manually bump version (#35660, @julianwiedmann)
renovate: Only update patch version for statedb (#33623, @sayboras)
renovate: use proper image repository for config check (#36227, @tklauser)
renovate: various smaller updates (#36135, @julianwiedmann)
Revert "ci: increase verbosity of print-downgrade-script.sh" (#34863, @marseel)
Run cilium-cli inside Docker (#33753, @michi-covalent)
Run cilium-cli inside Docker (#33797, @michi-covalent)
Run ipv6 smoke test inside Docker (#34191, @michi-covalent)
Run scheduled workflows every 8h instead of 6h (#34898, @auriaave)
scale-test: disable kube-proxy and configure KPR (#33664, @thorn3r)
Skip tracking unmarked plain-text TCP RST packets generated from proxy timeouts in the CI bpftrace script. (Backport PR #37247, Upstream PR #36962, @smagnani96)
test, cli/connectivity: Remove stale error log exceptions (#35848, @pchaigno)
test/helpers: Update operator lock error (#34307, @pchaigno)
test/k8s: remove unused migrate-svc manifests (#36388, @tklauser)
test/runtime: Remove already-covered test for agent restart (#34357, @pchaigno)
test: add dual-stack to delegated IPAM E2E test (#34937, @wedaly)
test: Add unit tests for directory policy watcher (#33920, @tamilmani1989)
test: Cilium Identity management tests (#34743, @dlapcevic)
test: drop no-op -cilium.provision-k8s flag (Backport PR #37374, Upstream PR [#37300](https://redirect.github.com/cilium/cil

Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

cilium-renovate · 2025-01-23T12:18:30Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

10 additional dependencies were updated

Details:

Package	Change
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/docker/docker`	`v27.4.0+incompatible` -> `v27.5.1+incompatible`
`github.com/klauspost/compress`	`v1.17.9` -> `v1.17.11`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.53.0` -> `v0.58.0`
`go.opentelemetry.io/otel`	`v1.32.0` -> `v1.33.0`
`go.opentelemetry.io/otel/metric`	`v1.32.0` -> `v1.33.0`
`go.opentelemetry.io/otel/trace`	`v1.32.0` -> `v1.33.0`
`golang.org/x/net`	`v0.33.0` -> `v0.34.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20241202173237-19429a94021a` -> `v0.0.0-20241209162323-e6fa225c2576`

Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>

cilium-renovate bot requested a review from a team as a code owner January 17, 2025 11:20

cilium-renovate bot added release-blocker This PR or issue is blocking the next release. release-note/dependency This PR updates one or multiple dependencies labels Jan 17, 2025

cilium-renovate bot requested a review from tpapagian January 17, 2025 11:20

cilium-renovate bot force-pushed the renovate/main-patch-all-go-deps-main branch from 7dc4584 to a997978 Compare January 23, 2025 12:18

cilium-renovate bot changed the title ~~fix(deps): update module google.golang.org/protobuf to v1.36.3 (main)~~ fix(deps): update all go dependencies main (main) (patch) Jan 23, 2025

cilium-renovate bot force-pushed the renovate/main-patch-all-go-deps-main branch 8 times, most recently from c2b8f3b to fcdba98 Compare January 30, 2025 11:15

fix(deps): update all go dependencies main

37d6190

Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>

cilium-renovate bot force-pushed the renovate/main-patch-all-go-deps-main branch from fcdba98 to 37d6190 Compare February 4, 2025 16:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all go dependencies main (main) (patch) #3312

fix(deps): update all go dependencies main (main) (patch) #3312

cilium-renovate bot commented Jan 17, 2025 •

edited

Loading

cilium-renovate bot commented Jan 23, 2025 •

edited

Loading

fix(deps): update all go dependencies main (main) (patch) #3312

Are you sure you want to change the base?

fix(deps): update all go dependencies main (main) (patch) #3312

Conversation

cilium-renovate bot commented Jan 17, 2025 • edited Loading

Release Notes

v1.17.0: 1.17.0

Other changes

Configuration

cilium-renovate bot commented Jan 23, 2025 • edited Loading

ℹ Artifact update notice

File name: go.mod

cilium-renovate bot commented Jan 17, 2025 •

edited

Loading

`v1.17.0`: 1.17.0

cilium-renovate bot commented Jan 23, 2025 •

edited

Loading