Summary of Changes

Major Changes:

• Operator prometheus support TLS/mTLS using existing secret (cilium/cilium#42077, @phuhung273)

Minor Changes:

• CLI: Allow users to set the default Cilium namespace via the CILIUM_NAMESPACE environment variable (cilium/cilium#41557, @td0ne)
• Removed deprecated CiliumBGPPeeringPolicy CRD and its agent implementation. Use cilium.io/v2 CRDs (CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfigOverride) for configuring BGP. (cilium/cilium#42278, @rastislavs)

CI Changes:

• Add CCNP cilium connectivity tests (cilium/cilium#42051, @karina-ranadive)
• Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity (cilium/cilium#42984, @rptaylor)

Misc Changes:

• bgp: Correct misleading error message in GetPeeringState (cilium/cilium#42945, @hargrovee)
• bgp: Remove versions from bgp package names (cilium/cilium#42503, @rastislavs)
• cilium-cli: add own type for root command parameters (cilium/cilium#42609, @tklauser)
• cli: cleanups for pre-v1.15 removal (cilium/cilium#42757, @julianwiedmann)
• cli: require Cilium v1.15 (cilium/cilium#41538, @julianwiedmann)
• go.mod, vendor: bump github.com/google/go-github to v79 (cilium/cilium#42857, @tklauser)
• Update lrp frontend IP address to avoid IMDS conflict in the cloud environment in cilium-cli (cilium/cilium#42737, @liyihuang)
• Use modern Go constructs (cilium/cilium#42525, @HadrienPatte)
• Update stable release to v0.18.8 by @michi-covalent in #3121
• chore(deps): update actions/upload-artifact action to v5 by @renovate[bot] in #3124
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 8c945d3 by @renovate[bot] in #3122
• chore(deps): update dependency cilium/cilium to v1.18.3 by @renovate[bot] in #3123
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6bac879 by @renovate[bot] in #3125
• renovate: try to group dependency updates by @tklauser in #3126
• chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by @renovate[bot] in #3127
• chore(deps): update helm/kind-action action to v1.13.0 by @renovate[bot] in #3128
• chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by @renovate[bot] in #3129
• chore(deps): update golang docker tag to v1.25.4 by @renovate[bot] in #3130
• chore(deps): update go to v1.25.4 by @renovate[bot] in #3131
• chore(deps): update golang:1.25.4-alpine3.21 docker digest to 3289aac by @renovate[bot] in #3132
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to e68f6a0 by @renovate[bot] in #3135
• chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by @renovate[bot] in #3136
• chore(deps): update golangci/golangci-lint-action action to v9 by @renovate[bot] in #3133
• chore(deps): update dependency cilium/cilium to v1.18.4 by @renovate[bot] in #3134
• chore(deps): update all github action dependencies by @renovate[bot] in #3137
• chore(deps): update actions/setup-go action to v6.1.0 by @renovate[bot] in #3138
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #3139
• chore(deps): update golangci/golangci-lint-action action to v9.1.0 by @renovate[bot] in #3141
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to f60eaa8 by @renovate[bot] in #3140
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to 6981837 by @renovate[bot] in #3143
• chore(deps): update softprops/action-gh-release action to v2.5.0 by @renovate[bot] in #3144
• chore(deps): update golang docker tag to v1.25.5 by @renovate[bot] in #3147
• chore(deps): update actions/checkout action to v6.0.1 by @renovate[bot] in #3146
• Prepare for v0.18.9 release by @michi-covalent in #3145

Full Changelog: v0.18.8...v0.18.9

Summary of Changes

Minor Changes:

• clustermesh: add endpoints metrics and change global service (and MCS ServiceExport) metrics to report per cluster metrics instead of a global count (cilium/cilium#41323, @MrFreezeex)

Bugfixes:

• cilium-cli: Fix CNI config file collection in sysdump (cilium/cilium#42111, @pillai-ashwin)
• cilium-cli: Prevent panic in node-to-node-encryption connectivity test (cilium/cilium#41600, @HadrienPatte)
• connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 (cilium/cilium#42148, @julianwiedmann)
• Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (cilium/cilium#42080, @tklauser)

CI Changes:

• Add integration test to validate IPsec key derivation consistency across nodes, ensuring tunnel keys are properly derived and identical between Cilium pods. (cilium/cilium#40808, @pillai-ashwin)
• ci: enable copyloopvar linter (cilium/cilium#41893, @tklauser)
• cilium-cli, netns: fix golangci-lint 2.5.0 errors (cilium/cilium#41856, @tklauser)
• cilium-cli: Bring back NodePort Acceleration feature detection (cilium/cilium#41812, @brb)
• cilium-cli: Reenable L7 IPv6 tests (cilium/cilium#39662, @gentoo-root)
• cilium-cli: Specify TARGET for building release binaries (cilium/cilium#42177, @michi-covalent)
• cilium_cli: Override GO_BUILD Make variable (cilium/cilium#42162, @michi-covalent)
• cli, ipsec: Fix bidirectional IPsec tunnel check (cilium/cilium#42047, @pchaigno)
• cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (cilium/cilium#42146, @fristonio)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#41611, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#42018, @cilium-renovate[bot])
• chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to 0ce60b5 (main) (cilium/cilium#41558, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f (main) (cilium/cilium#41649, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d709837 (main) (cilium/cilium#42019, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 (main) (cilium/cilium#42252, @cilium-renovate[bot])
• chore(deps): update go to v1.25.1 (main) (cilium/cilium#41560, @cilium-renovate[bot])
• chore(deps): update go to v1.25.3 (main) (cilium/cilium#42061, @cilium-renovate[bot])
• cilium-cli/features: use common cmd metric list command (cilium/cilium#41630, @aanm)
• cilium-cli: drop disabled IP cache check from connectivity tests (cilium/cilium#42240, @tklauser)
• cli/clustermesh: remove leftover global services status info (cilium/cilium#41727, @giorio94)
• Refactor policy engine to use PolicyEntry as the internal representation of policies, as described in CFP-39646. (cilium/cilium#40213, @TheBeeZee)
• sysdump: add resource usage of nodes and pods (cilium/cilium#41415, @darox)
• chore(deps): update go to v1.25.1 (patch) by @renovate[bot] in #3097
• chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #3094
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d6bdb04 by @renovate[bot] in #3096
• chore(deps): update gcr.io/distroless/static:latest docker digest to 87bce11 by @renovate[bot] in #3099
• chore(deps): update softprops/action-gh-release action to v2.3.3 by @renovate[bot] in #3098
• chore(deps): update golang docker tag to v1.25.1 by @renovate[bot] in #3093
• chore(deps): update actions/stale action to v10 by @renovate[bot] in #3095
• chore(deps): update golang:1.25.1-alpine3.21 docker digest to 331bde4 by @renovate[bot] in #3100
• chore(deps): update dependency cilium/cilium to v1.18.2 by @renovate[bot] in #3102
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f by @renovate[bot] in #3103
• chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by @renovate[bot] in #3104
• chore(deps): update docker/login-action action to v3.6.0 by @renovate[bot] in #3105
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to ab1f5c4 by @renovate[bot] in #3106
• chore(deps): update actions/stale action to v10.1.0 by @renovate[bot] in #3108
• chore(deps): update softprops/action-gh-release action to v2.3.4 by @renovate[bot] in #3107
• chore(deps): update softprops/action-gh-release action to v2.4.0 by @renovate[bot] in #3109
• chore(deps): update golang docker tag to v1.25.2 by @renovate[bot] in #3110
• chore(deps): update go to v1.25.2 (patch) by @renovate[bot] in #3112
• chore(deps): update golang:1.25.2-alpine3.21 docker digest to 0134653 by @renovate[bot] in #3113
• RELEASE: also look for release-blockers in cilium/cilium by @julianwiedmann in #3116
• chore(deps): update golang docker tag to v1.25.3 by @renovate[bot] in #3117
• chore(deps): update softprops/action-gh-release action to v2.4.1 by @renovate[bot] in #3114
• chore(deps): update go to v1.25.3 (patch) by @renovate[bot] in #3118
• chore(deps): update golang:1.25.3-alpine3.21 docker digest to 0c9f3e0 by @renovate[bot] in #3115
• Makefile: fix renovate depname for GO_IMAGE_* updates by @tklauser in #3119
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 by @renovate[bot] in #3111
• Prepare for v0.18.8 release by @michi-covalent in #3120

What's Changed

Summary of Changes

Minor Changes:

• clustermesh: cli: accept more than one service IPs (excluding when connecting to NodePort Services) when connecting to remote clustermesh-apiserver (cilium/cilium#41253, @MrFreezeex)
• clustermesh: cli: add support for dict for helm values clustermesh.config.clusters (cilium/cilium#40879, @MrFreezeex)
• clustermesh: cli: support outputting clustermesh.config.clusters to the new dict format if the cluster is running Cilium >= 1.20 (cilium/cilium#40959, @MrFreezeex)

Bugfixes:

• Add l7 proxy check to policy-local-cluster-egress connectivity test (cilium/cilium#40797, @camrynl)
• cilium-cli: also restart cilium-operator pods on config changes (cilium/cilium#41067, @aanm)

CI Changes:

• Allow Egress Gateway connectivity tests to run concurrently (cilium/cilium#40980, @tommyp1ckles)
• cilium-cli: connectivity tests: Ignore some logs in error log check (cilium/cilium#40690, @jrife)
• cilium-cli: IPv6 connectivity tests for PodToIngress (cilium/cilium#39667, @gentoo-root)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#40893, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#41046, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#41340, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#41433, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.0 docker digest to 5502b0e (main) (cilium/cilium#41343, @cilium-renovate[bot])
• chore(deps): update go to v1.24.6 (main) (cilium/cilium#40992, @cilium-renovate[bot])
• cilium-cli: Optimized feature detection by running cluster-wide checks once (cilium/cilium#40715, @HadrienPatte)
• Include bgp remote peer capabilities in the sysdump (cilium/cilium#40719, @liyihuang)
• Update all-dependencies (main) (cilium/cilium#41175, @cilium-renovate[bot])
• Update docker.io/alpine/socat:1.8.0.3 Docker digest to 29d0f24 (main) (cilium/cilium#41204, @cilium-renovate[bot])
• Update Go to v1.25.0 (main) (cilium/cilium#41209, @cilium-renovate[bot])
• Update stable release to v0.18.6 by @tklauser in #3075
• chore(deps): update golangci/golangci-lint docker tag to v2.3.1 by @renovate[bot] in #3076
• chore(deps): update golang docker tag to v1.24.6 by @renovate[bot] in #3079
• chore(deps): update gcr.io/distroless/static:latest docker digest to 2e114d2 by @renovate[bot] in #3077
• chore(deps): update docker/login-action action to v3.5.0 by @renovate[bot] in #3078
• chore(deps): update go to v1.24.6 (patch) by @renovate[bot] in #3080
• chore(deps): update actions/checkout action to v5 by @renovate[bot] in #3082
• chore(deps): update golangci/golangci-lint docker tag to v2.4.0 by @renovate[bot] in #3086
• chore(deps): update golang docker tag to v1.25.0 by @renovate[bot] in #3085
• chore(deps): update go to v1.25.0 (minor) by @renovate[bot] in #3088
• chore(deps): update dependency cilium/cilium to v1.18.1 by @renovate[bot] in #3089
• chore(deps): update dependency kubernetes-sigs/kind to v0.30.0 by @renovate[bot] in #3091
• chore(deps): update golang-images - autoclosed by @renovate[bot] in #3090
• Prepare for v0.18.7 release by @michi-covalent in #3092

Full Changelog: v0.18.6...v0.18.7

What's Changed

Minor Changes:

• Cilium uninstall now removes annotations from Kubernetes nodes when clean-cilium-state: true (cilium/cilium#39931, @AritraDey-Dev)
• Deprecate v2alpha1 version of CiliumLoadBalancerIPPool CRD in favor of the v2 version (cilium/cilium#39134, @pippolo84)

Bugfixes:

• Fix bug where we would display the Max Seq. Number for IPsec on 32bits. (cilium/cilium#40622, @pchaigno)

CI Changes:

• Add l7 proxy check for to-fqdns connectivity test (cilium/cilium#40549, @vipul-21)
• cli: switch coredns image to registry.k8s.io, and fix renovate (cilium/cilium#40706, @giorio94)
• connectivity: Allow customization of tcpdump kill timeout (cilium/cilium#40774, @gentoo-root)
• connectivity: rework sniffer to execute tcpdump in background (cilium/cilium#40487, @smagnani96)

Misc Changes:

• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e (main) (cilium/cilium#40379, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be (main) (cilium/cilium#40738, @cilium-renovate[bot])
• chore(deps): update go to v1.24.5 (main) (cilium/cilium#40496, @cilium-renovate[bot])
• cilium-cli: Print partial output upon bgp peers errors (cilium/cilium#40278, @rastislavs)
• cilium-cli: Update default network-perf image (cilium/cilium#40376, @HadrienPatte)
• cilium-cli: Use slim k8s packages for connectivity tests (cilium/cilium#40708, @HadrienPatte)
• Fix misc typos (cilium/cilium#40769, @HadrienPatte)
• go.mod, vendor: pull in charts for Cilium 1.18.0 and Tetragon 1.5.0 (cilium/cilium#40823, @tklauser)
• Miscellaneous improvements to option.NewNamedMapOptions (cilium/cilium#40529, @giorio94)
• The unableTranslateCIDRgroups variable is removed as it is not used since the v1.17 release (cilium/cilium#40267, @Surya-7890)
• vendor: Update github.com/google/go-github to v73 (cilium/cilium#40326, @HadrienPatte)
• Update stable release to v0.18.5 by @tklauser in #3060
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e by @renovate[bot] in #3061
• Update RELEASE.md by @michi-covalent in #3062
• chore(deps): update golang docker tag to v1.24.5 by @renovate[bot] in #3063
• chore(deps): update go to v1.24.5 (patch) by @renovate[bot] in #3065
• chore(deps): update golangci/golangci-lint docker tag to v2.2.2 by @renovate[bot] in #3066
• chore(deps): update dependency cilium/cilium to v1.17.6 by @renovate[bot] in #3068
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 3ebc008 by @renovate[bot] in #3067
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 72ff633 by @renovate[bot] in #3069
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 6edc205 by @renovate[bot] in #3070
• chore(deps): update golangci/golangci-lint docker tag to v2.3.0 - autoclosed by @renovate[bot] in #3071
• chore(deps): update dependency cilium/cilium to v1.18.0 by @renovate[bot] in #3073
• chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be by @renovate[bot] in #3072
• Prepare for v0.18.6 release by @tklauser in #3074

Full Changelog: v0.18.5...v0.18.6

What's Changed

Minor Changes:

• cilium-cli: add clustermesh inspect-policy-default-local-cluster command (cilium/cilium#39828, @MrFreezeex)
• cli: add suport for policy-default-local-cluster in connectivity tests (cilium/cilium#39786, @MrFreezeex)
• cli: Enable tolerations flag for all connectivity tests (cilium/cilium#40072, @HadrienPatte)
• Improve EKS cluster name auto-detection by supporting both ARN and eksctl FQDN formats to avoid validation errors caused by overly long names. (cilium/cilium#39500, @zzuckerfrei)

CI Changes:

• cli,ci,ipsec: create key command and CI integration (cilium/cilium#37722, @viktor-kurchenko)
• connectivity: Include detailed failure messages in test report (cilium/cilium#39866, @aanm)
• fix(summary): arbitrary file access during archive extraction zipslip (cilium/cilium#39896, @odaysec)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#40081, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#40214, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 10c1318 (main) (cilium/cilium#40036, @cilium-renovate[bot])
• chore(deps): update go to v1.24.4 (main) (cilium/cilium#39943, @cilium-renovate[bot])
• cilium-cli: clean up log messages (cilium/cilium#40101, @tklauser)
• cilium-cli: Standardize build args in dockerfile (cilium/cilium#40126, @HadrienPatte)
• cli: Add OpenShift cluster Kind (cilium/cilium#40012, @nebril)
• cli: Do not directly depend on DaemonConfig (cilium/cilium#39907, @brb)
• deps: Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (cilium/cilium#40224, @HadrienPatte)
• docs: Add cmdref for cilium-cli (cilium/cilium#40017, @HadrienPatte)
• go.mod, vendor: bump github.com/google/go-github to v72 (cilium/cilium#40104, @tklauser)
• lint: Update staticcheck config in golangci-lint (cilium/cilium#40201, @sayboras)
• Test failure message included in Junit report of the connectivity tests. (cilium/cilium#40035, @mathpl)
• tools: Move codeowners library from cilium-cli dir (cilium/cilium#40253, @joestringer)
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 81bf592 by @renovate in #3044
• chore(deps): update golang docker tag to v1.24.4 by @renovate in #3046
• chore(deps): update softprops/action-gh-release action to v2.3.0 by @renovate in #3047
• chore(deps): update go to v1.24.4 (patch) by @renovate in #3045
• chore(deps): update softprops/action-gh-release action to v2.3.2 by @renovate in #3048
• chore(deps): update gcr.io/distroless/static:latest docker digest to b7b9a69 by @renovate in #3049
• chore(deps): update docker/setup-buildx-action action to v3.11.0 by @renovate in #3050
• RELEASE.md: drop reference to v0.10 branch by @tklauser in #3051
• Update stable release to v0.18.4 by @michi-covalent in #3052
• chore(deps): update docker/setup-buildx-action action to v3.11.1 by @renovate in #3053
• chore(deps): update golangci/golangci-lint docker tag to v2.2.0 by @renovate in #3057
• chore(deps): update dependency cilium/cilium to v1.17.5 by @renovate in #3054
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 10c1318 by @renovate in #3055
• chore(deps): update golangci/golangci-lint docker tag to v2.2.1 by @renovate in #3058
• Prepare for v0.18.5 release by @tklauser in #3059

Full Changelog: v0.18.4...v0.18.5

What's Changed

Major Changes:

• Add support for VXLAN in IPsec (VinE) (cilium/cilium#37723, @ldelossa)
• Promote CiliumLoadBalancerIPPool CRD to v2 API version (cilium/cilium#39090, @pippolo84)
• Support IPv6 as a tunneling underlay. (cilium/cilium#38296, @pchaigno)

Minor Changes:

• Add support for IPv6 egress gateway policies (cilium/cilium#38452, @rgo3)
• cilium-cli: Fix ipv6 ping regex (cilium/cilium#38814, @yrsuthari)
• policy: Add validation and docs for TLS SNI ServerNames (cilium/cilium#38615, @sayboras)
• Since pod CIDRs are now stored into the ipcache map, tunnel map is not needed anymore. Any reference to the tunnel map have been removed from cilium-dbg, cilium status and bugtool. (cilium/cilium#38839, @pippolo84)

Bugfixes:

• cli: default to SPDY connection for exec (cilium/cilium#38988, @asauber)
• gateway-api: Fix parentRefMatched to check Group and Kind (cilium/cilium#39275, @syedazeez337)

CI Changes:

• Assign codeowners for no-errors-in-logs testcase (cilium/cilium#38812, @marseel)
• cilium-cli: IPv6 connectivity tests for PodToHostPort (cilium/cilium#39666, @gentoo-root)
• cilium-cli: Use v2alpha1 version of CCG for Cilium versions below v1.18 (cilium/cilium#39776, @christarazi)
• cilium-cli:fix: account for current TunnelPort when building tcpdump overlay filters (cilium/cilium#38680, @smagnani96)
• CLI: bump ConnectivityTestConnDisruptImage (cilium/cilium#39200, @darox)
• cli: encryption: improve ICMPv6 NA detection (cilium/cilium#39160, @julianwiedmann)
• cli: Generate each owners field separately (cilium/cilium#38987, @joestringer)
• cli: Simplify junit representation of code owners (cilium/cilium#39020, @joestringer)
• gateway-api: Fix parentRefMatched to check Group and Kind (cilium/cilium#39275, @syedazeez337)

CI Changes:

• Assign codeowners for no-errors-in-logs testcase (cilium/cilium#38812, @marseel)
• cilium-cli: IPv6 connectivity tests for PodToHostPort (cilium/cilium#39666, @gentoo-root)
• cilium-cli: Use v2alpha1 version of CCG for Cilium versions below v1.18 (cilium/cilium#39776, @christarazi)
• cilium-cli:fix: account for current TunnelPort when building tcpdump overlay filters (cilium/cilium#38680, @smagnani96)
• CLI: bump ConnectivityTestConnDisruptImage (cilium/cilium#39200, @darox)
• cli: encryption: improve ICMPv6 NA detection (cilium/cilium#39160, @julianwiedmann)
• cli: Generate each owners field separately (cilium/cilium#38987, @joestringer)
• cli: Simplify junit representation of code owners (cilium/cilium#39020, @joestringer)
• cli: sysdump: collect logs from restarted test pods. (cilium/cilium#38796, @tommyp1ckles)
• connectivity: Correct version check for Ingress test (cilium/cilium#38803, @sayboras)
• connectivity: encryption tests: filter when icmpv6.type == 136 (cilium/cilium#38798, @tommyp1ckles)
• connectivity: Fix flow validation for wildcard tls sni (cilium/cilium#38881, @sayboras)
• feat(connectivity): add network bandwidth management test (cilium/cilium#38390, @l1b0k)
• ipsec: fix connection disruption issue for ipv6 ipsec upgrade scenarios. (cilium/cilium#39061, @ldelossa)
• test/runtime: remove already covered FQDN tests (cilium/cilium#38866, @tklauser)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#39044, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#39686, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 18a1f2d (main) (cilium/cilium#38857, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 1ecc479 (main) (cilium/cilium#38902, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 30baaea (main) (cilium/cilium#39308, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to d9db321 (main) (cilium/cilium#39042, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 4c0a181 (main) (cilium/cilium#39698, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 81bf592 (main) (cilium/cilium#39811, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 86b4cff (main) (cilium/cilium#39596, @cilium-renovate[bot])
• chore(deps): update docker/dockerfile:1.15 docker digest to 9857836 (main) (cilium/cilium#39309, @cilium-renovate[bot])
• chore(deps): update go to v1.24.2 (main) (cilium/cilium#38708, @cilium-renovate[bot])
• chore(deps): update go to v1.24.3 (main) (cilium/cilium#39378, @cilium-renovate[bot])
• cilium-cli: add annotation to indicate we should wait for policy (cilium/cilium#38867, @squeed)
• cilium-cli: add conn tests for ipv6 egress gateway policies (cilium/cilium#38691, @rgo3)
• cilium-cli: Allow BINDIR environment variable to be dynamically configured for install path (cilium/cilium#38799, @mowntan)
• cilium-cli: Capture stderr from tcpdump as an error (cilium/cilium#38884, @gentoo-root)
• cilium-cli: Export codeowners for passing testcases (cilium/cilium#38710, @joestringer)
• cilium-cli: Migrate from corev1.Endpoints to discoveryv1.EndpointSlice (cilium/cilium#39364, @HadrienPatte)
• cli: De-duplicate workflow owners results in junit (cilium/cilium#39157, @joestringer)
• cli: Emit target package for error in logs failure (cilium/cilium#38986, @joestringer)
• cli: encryption: limit tunnel filter to dst port (cilium/cilium#39222, @julianwiedmann)
• cli: Move unexpected packet drops to final test (cilium/cilium#39334, @nebril)
• cli: require Cilium v1.14 (cilium/cilium#39717, @julianwiedmann)
• cli: Search and print previous logs if failed (cilium/cilium#39347, @joestringer)
• cli: Tidy up owners sorting logic (cilium/cilium#39019, @joestringer)
• cli: Use RFC3339 for junit timestamp reporting (cilium/cilium#39017, @joestringer)
• connectivity/check: fix logging error (cilium/cilium#38956, @mhofstetter)
• Fix the message when no nodes are available to be added multicast group. (cilium/cilium#38637, @fujitatomoya)
• go.mod: bump github.com/google/go-github to v71 (cilium/cilium#38827, @tklauser)
• Move node to slog (cilium/cilium#39147, @aanm)
• New clusters created in ENI mode will no longer masquerade pod traffic to the external world. (cilium/cilium#38663, @liyihuang)
• sysdump: don't rely on timeout command to collect hubble flows (cilium/cilium#38999, @giorio94)
• Use modern Go constructs, part 2 (cilium/cilium#38652, @tklauser)
• Update stable release to v0.18.3 by @michi-covalent in #3004
• chore(deps): update go to v1.24.2 (patch) by @renovate in #3005
• github: Clean up kind workflow by @michi-covalent in #3008
• github: Remove cloud provider workflows by @michi-covalent in #3006
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to b51b7be by @renovate in #3010
• chore(deps): update golangci/golangci-lint docker tag to v2.1.0 by @renovate in #3012
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 1ecc479 by @renovate in #3011
• chore(deps): update golangci/golangci-lint docker tag to v2.1.1 by @renovate in #3013
• chore(deps): update dependency cilium/cilium to v1.17.3 by @renovate in #3014
• chore(deps): update docker/dockerfile docker tag to v1.15 by @renovate in #3015
• chore(deps): update golangci/golangci-lint docker tag to v2.1.2 by @renovate in #3016
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to d9db321 by @renovate in #3017
• chore(deps): update softprops/action-gh-release action to v2.2.2 by @renovate in #3018
• chore(deps): update docker/build-push-action action to v6.16.0 by @renovate in #3019
• chore(deps): update golangci/golangci-lint docker tag to v2.1.4 by @renovate in #3020
• chore(deps): update docker/dockerfile:1.15 docker digest to 9857836 by @renovate in #3021
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 30baaea by @renovate in #3022
• chore(deps): update golangci/golangci-lint-action action to v7.0.1 by @renovate in #3023
• chore(deps): update golangci/golangci-lint docker tag to v2.1.6 by @renovate in #3025
• chore(deps): update golangci/golangci-lint-action action to v8 by @renovate in #3024
• Dockerfile: do not specify syntax by @tklauser in #3026
• README.md: remove status badges for removed cloud provider workflows by @tklauser in #3027
• chore(deps): update golang docker tag to v1.24.3 by @renovate in #3028
• chore(deps): update actions/setup-go action to v5.5.0 by @renovate in #3029
• chore(deps): update go to v1.24.3 (patch) by @renovate in #3030
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 86b4cff by @renovate in #3033
• chore(deps): update docker/build-push-action action to v6.17.0 by @renovate in #3031
• chore(deps): update de...

Summary of Changes

Announcement

Cilium CLI releases are now available as Docker images here: https://quay.io/repository/cilium/cilium-cli?tab=tags&tag=latest

Minor Changes:

• Add support to capture kernel profiles during performance testing (cilium/cilium#38402, @giorio94)
• Make Cilium CLI performance tests not depend on Cilium (cilium/cilium#38245, @giorio94)
• Reject IPSec key rotation with mismatching key lengths to prevent IPv6 disruptions. (cilium/cilium#37936, @smagnani96)

Bugfixes:

• cilium-cli: Fix logger busy loop (cilium/cilium#38199, @jrajahalme)

CI Changes:

• Add parallel streams throughput tests, and enable them in the EGW workflow (cilium/cilium#38027, @giorio94)
• ci: use custom kubeconfig for cilium-cli cloud provider tests (cilium/cilium#37970, @marseel)
• cilium-cli: Add strict-mode-test v2 (cilium/cilium#38566, @pippolo84)
• cilium-cli: connectivity: clean up any leftover egw routes. (cilium/cilium#36651, @tommyp1ckles)
• cilium-cli: extend no-interrupted-connections to test Egress Gateway (cilium/cilium#38193, @ysksuzuki)
• cilium-cli: run IPv6 test with skipRedirectFromBackend=true on >=v1.17.3 (cilium/cilium#38630, @ysksuzuki)
• cilium-cli: Use distroless (cilium/cilium#38189, @michi-covalent)
• cli: Reduce the flood of the terminal with logs on failure during tests (cilium/cilium#38240, @roman-kiselenko)
• cli: reverse finalizers of connectivity test (cilium/cilium#38232, @marseel)
• connectivity: Add test for source egress in Ingress (cilium/cilium#38053, @sayboras)
• test: Add negative test case for TLS SNI + Inception (cilium/cilium#38194, @sayboras)
• workflows/e2e: Cover IPv6-only (cilium/cilium#38235, @pchaigno)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#38603, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.1 docker digest to 52ff1b3 (main) (cilium/cilium#38421, @cilium-renovate[bot])
• chore(deps): update go to v1.24.1 (main) (cilium/cilium#38092, @cilium-renovate[bot])
• cilium-cli: add IPv6 connectivity test for LocalRedirectPolicy (cilium/cilium#37192, @saiaunghlyanhtet)
• cilium-cli: add test owners as part of junit files (cilium/cilium#38269, @aanm)
• cilium-cli: Allow running outside the Cilium tree (cilium/cilium#38133, @joestringer)
• cli: Load code owners dynamically via --code-owners (cilium/cilium#38044, @joestringer)
• Enable new testifylint checks, and mechanically fix reported issues (cilium/cilium#38485, @giorio94)
• Fix cli disconnect error message (cilium/cilium#38545, @samsonkolge)
• Modernize Go map and slice operations (cilium/cilium#38126, @tklauser)
• Standardize hubble and cilium CLIs makefile (cilium/cilium#37716, @HadrienPatte)
• Test IPv4 and IPv6 explicitly in PodToWorld and PodToWorld2 connectivity tests (cilium/cilium#37435, @gentoo-root)
• Use slices.Sorted(maps.Keys(...)) to get sorted list of map keys (cilium/cilium#38519, @tklauser)
• Use more efficient SplitSeq instead of Split (cilium/cilium#38157, @tklauser)
• Update stable release to v0.18.2 by @michi-covalent in #2972
• chore(deps): update golang docker tag to v1.24.1 by @renovate in #2971
• chore(deps): update docker.io/library/golang docker tag to v1.24.1 by @renovate in #2970
• chore(deps): update golangci/golangci-lint docker tag to v1.64.7 by @renovate in #2974
• action: Only install a single version by @joestringer in #2973
• chore(deps): update golangci/golangci-lint-action action to v6.5.1 by @renovate in #2975
• chore(deps): update golangci/golangci-lint-action action to v6.5.2 by @renovate in #2979
• chore(deps): update golangci/golangci-lint docker tag to v1.64.8 by @renovate in #2978
• chore(deps): update dependency cilium/cilium to v1.16.8 by @renovate in #2977
• chore(deps): update docker/login-action action to v3.4.0 by @renovate in #2976
• github: Remove multicluster.yaml by @michi-covalent in #2983
• chore(deps): update actions/upload-artifact action to v4.6.2 by @renovate in #2981
• Simplify Dockerfile and clean up docker image workflow by @michi-covalent in #2980
• chore(deps): update docker/login-action action to v3.4.0 by @renovate in #2982
• chore(deps): update golangci/golangci-lint{-action} by @michi-covalent in #2988
• Optimize image layers by @marcofranssen in #2782
• chore(deps): update golangci/golangci-lint docker tag to v2.0.2 by @renovate in #2989
• chore(deps): update docker.io/library/golang:1.24.1 docker digest to 52ff1b3 by @renovate in #2990
• chore(deps): update gcr.io/distroless/static:latest docker digest to 3d0f463 by @renovate in #2991
• chore(deps): update golang docker tag to v1.24.2 by @renovate in #2995
• chore(deps): update cilium (minor) by @renovate in #2924
• chore(deps): update azure/login action to v2.3.0 by @renovate in #2998
• chore(deps): update cilium/cilium digest to 67fbabc by @renovate in #3000
• chore(deps): update cilium/cilium digest to 20f0e00 by @renovate in #3002
• Prepare for v0.18.3 release by @michi-covalent in #2993

Full Changelog: v0.18.2...v0.18.3

What's Changed

Minor Changes:

• cilium-cli/sysdump: relax extra-label-selectors to target all namespaces (cilium/cilium#37715, @giorio94)
• Extend cilium-cli connectivity perf to allow testing egress gateway performance (cilium/cilium#37748, @giorio94)

CI Changes:

• Add explicit IPv6 testing to PodToService cilium-cli connectivity test (cilium/cilium#37544, @saiaunghlyanhtet)
• cilium-cli/connectivity: Fix output for LRP tests (cilium/cilium#37893, @pchaigno)
• cilium-cli/connectivity: only check container restarts on v1.17+ (cilium/cilium#37823, @giorio94)
• cli: Attribute test failures outside of action failures (cilium/cilium#37757, @joestringer)
• cli: Clean up Makefile (cilium/cilium#37911, @michi-covalent)
• cli: connectivity: Log tcpdump cmd on error (cilium/cilium#37822, @jschwinger233)
• connectivity tests: keep tcpdump alive by printing to stdout (cilium/cilium#37984, @asauber)
• Egress Gateway performance testing (cilium/cilium#37753, @giorio94)
• Fix egress device computation in cli connectivity pod-to-pod-encryption-v2 tests for AWS chaining mode. (cilium/cilium#37680, @smagnani96)
• Miscellaneous improvements to the Egress Gateway scale test (cilium/cilium#37611, @giorio94)

Misc Changes:

• Add sloglint and fix issues (cilium/cilium#37851, @aanm)
• bpf: tolerate dropped ICMPv6 messages with ICMPv6 payload (cilium/cilium#38068, @julianwiedmann)
• chore(deps): update docker.io/library/golang:1.24.0 docker digest to 3f74443 (main) (cilium/cilium#37938, @cilium-renovate[bot])
• cilium-cli: Ignore k8s client network error warning (cilium/cilium#37773, @jrajahalme)
• cilium-cli: Only use --curl-parallel when expecting success (cilium/cilium#37803, @jrajahalme)
• cli: Added parameter to print used images (cilium/cilium#37390, @PhilipSchmid)
• cli: Support filtering --log-code-owners (cilium/cilium#37905, @joestringer)
• k8s: move portforward functionality to separate sub-package (cilium/cilium#38060, @tklauser)
• Update connectivity tests to correctly detect TLS Interception (cilium/cilium#37796, @youngnick)
• chore(deps): update dependency go to v1.24.1 by @renovate in #2969
• Update stable release to v0.18.1 by @michi-covalent in #2968
• Prepare for v0.18.2 release by @michi-covalent in #2964

What's Changed

• Update stable release to v0.18.0 by @michi-covalent in #2959
• chore(deps): update golangci/golangci-lint docker tag to v1.64.6 by @renovate in #2960
• gh: add option to specify kubeconfig by @marseel in #2965
• Prepare for v0.18.1 release by @michi-covalent in #2967

Full Changelog: v0.18.0...v0.18.1

⚠️ A Breaking Change ⚠️

Cilium CLI GitHub Action now defaults to using the top-level go.mod file to determine Go version to build Cilium CLI when skip-build parameter is set to false (#2956).

What's Changed

• chore(deps): update actions/upload-artifact action to v4.6.1 by @renovate in #2949
• Always update github.com/cilium/cilium from main by @tklauser in #2951
• chore(deps): update actions/download-artifact action to v4.1.9 by @renovate in #2952
• renovate: clean up configuration by @tklauser in #2954
• chore(deps): update all github action dependencies (minor) by @renovate in #2955
• chore(deps): update dependency go to v1.24.0 by @renovate in #2957
• action: Clean up the logic to handle go-mod-directory by @michi-covalent in #2956
• Prepare for v0.18.0 release by @michi-covalent in #2958

Full Changelog: v0.17.0...v0.18.0