Summary of Changes

Minor Changes:

• bgp: Bump GoBGP from v3 to v4.5.0 (cilium/cilium#45952, @rastislavs)
• cilium-cli: don't enable nodeinit on AKS (cilium/cilium#46105, @vipul-21)
• Replace boringcrypto with upstream Go crypto libraries (cilium/cilium#46092, @HadrienPatte)

CI Changes:

• cilium-cli connectivity tests now test for policy-based Envoy listener redirects on the wildcard port. (cilium/cilium#46251, @jrajahalme)
• cilium-cli: exclude non-Cilium nodes from perf node selection (cilium/cilium#46651, @aanm)
• cilium-cli: Ignore additional known GoBGPv4 warnings in no-errors-in-logs (cilium/cilium#46200, @ysksuzuki)
• cilium-cli: Remove partial JUnit file on error (cilium/cilium#46101, @rastislavs)
• cilium-cli: support versioned scenarios (cilium/cilium#45570, @rgo3)
• cilium-cli: tolerate config init-container restart and GC'd previous … (cilium/cilium#46648, @aanm)
• cli: add exception for "local key already allocated" warning (cilium/cilium#46216, @giorio94)

Misc Changes:

• chore(deps): update base-images (main) (cilium/cilium#46054, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 2d6c802 (main) (cilium/cilium#46163, @cilium-renovate[bot])
• cli/sysdump: capture more operator and clustermesh-apiserver troubleshooting information (cilium/cilium#46503, @giorio94)
• clustermesh: endpoint slices watch and kvstoremesh wiring (cilium/cilium#46506, @MrFreezeex)
• ipam: Migrate IPAMSpec.PodCIDRs to ip.Prefix (cilium/cilium#46599, @HadrienPatte)
• ipam: Migrate VirtualNetwork and IPAMCIDR to netip (cilium/cilium#46309, @HadrienPatte)
• sysdump: add CRD CiliumGatewayClassConfig to sysdump (cilium/cilium#46247, @mhofstetter)
• sysdump: add Gateway API BackendTLSPolicy to sysdump (cilium/cilium#46246, @mhofstetter)
• chore(deps): update actions/stale action to v10.3.0 by @renovate[bot] in #3244
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 6df14f4 by @renovate[bot] in #3243
• chore(deps): update all github action dependencies by @renovate[bot] in #3245
• Update stable release to v0.19.4 by @tklauser in #3242
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 2d6c802 by @renovate[bot] in #3246
• go.mod, vendor: update replace directives to match cilium's go.mod by @tklauser in #3247
• chore(deps): update all github action dependencies by @renovate[bot] in #3250
• ci: fix unquoted expression in images-dev shell condition by @immanuwell in #3249
• chore(deps): update go to v1.26.4 by @renovate[bot] in #3251
• fix: select released CLI asset by runner platform by @immanuwell in #3252
• chore(deps): update cilium to v1.19.5 by @renovate[bot] in #3257
• chore(deps): update all github action dependencies to 718ea10 by @renovate[bot] in #3256
• Prepare for v0.19.5 release by @michi-covalent in #3260

New Contributors

• @immanuwell made their first contribution in #3249

Full Changelog: v0.19.4...v0.19.5

Summary of Changes

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#45725, @cilium-renovate[bot])
• Fix incorrect 'skipping test' reason messages (cilium/cilium#46043, @atykhyy)
• Fix new golangci-lint findings (cilium/cilium#45894, @HadrienPatte)
• chore(deps): update gcr.io/distroless/static:latest docker digest to 3592aa8 by @renovate[bot] in #3235
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 313faae by @renovate[bot] in #3234
• chore(deps): update cilium/cilium digest to 08329ad by @renovate[bot] in #3231
• chore(deps): update cilium by @renovate[bot] in #3236
• renovate: add dependency cooldown, don't pin digests for cilium/cilium GitHub actions by @tklauser in #3238
• chore(deps): update cilium/cilium digest to b72d04b by @renovate[bot] in #3237
• ci: add write permissions to release workflow by @tklauser in #3233
• ci: pin cilium/cilium actions to v1.19.4, avoid digest updates by @tklauser in #3240
• Prepare for v0.19.4 release by @tklauser in #3241

Full Changelog: v0.19.3...v0.19.4

Summary of Changes

Minor Changes:

• A new parameter, --log-check-only-test-time, has been added to Cilium CLI connectivity tests. When set to true, only the logs written after the point in time where the tests have been started get checked. This aims at avoiding false positive. (cilium/cilium#44988, @fgiloux)
• Additionally collect Cluster Mesh certificate generation artifacts in sysdumps (cilium/cilium#44773, @giorio94)
• cilium-cli: add --cleanup flag for connectivity test artifacts (cilium/cilium#44075, @harshakumar25)
• encryption: remove deprecated enable-encryption-strict-mode encryption-strict-mode-cidr and encryption-strict-mode-allow-remote-node-identities options (cilium/cilium#45452, @smagnani96)
• Remove deprecated v2alpha1 CiliumNodeConfig API that was promoted to v2 in cilium 1.16. (cilium/cilium#44739, @HadrienPatte)

Bugfixes:

• envoy: Fix xds server npds listeners accounting (cilium/cilium#44830, @fristonio)
• Fix cilium-cli crash when using corrupted Helm values for clustermesh (cilium/cilium#45095, @Aprazor)

CI Changes:

• ci:tcpdump: harden sniffer startup with retries (cilium/cilium#45421, @smagnani96)
• cilium-cli/connectivity: fix static route setup/teardown (cilium/cilium#45388, @tklauser)
• cilium-cli/connectivity: require static routes only on kind (cilium/cilium#45824, @tklauser)
• cilium-cli: Add log-check-extra-exceptions flag for connectivity test (cilium/cilium#45443, @rastislavs)
• cilium-cli: Deploy FRR daemonset only once per node (cilium/cilium#45523, @rastislavs)
• cilium-cli: Fix port conflict for echo-external-node (cilium/cilium#45530, @pchaigno)
• cilium-cli: Ignore gobgp tcp close error in log checks (cilium/cilium#45010, @ysksuzuki)
• cilium-cli: introduce dedicated connectivity test skip condition helpers (cilium/cilium#45200, @tklauser)
• connectivity: make conn-disrupt sub-tests independently deployable (cilium/cilium#45382, @ysksuzuki)
• Fix cilium connectivity test namespace setup so configured namespace labels also apply to CCNP test namespaces. (cilium/cilium#45101, @Synte-Peng)
• Fix wildcard egress tls sni policy connectivity tests (cilium/cilium#44505, @fristonio)
• Remove sequential and only use concurrent tests (cilium/cilium#40103, @aanm)
• Use fake external targets on nodes without Cilium in GKE CI workflows for better stability. (cilium/cilium#41713, @gentoo-root)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#44565, @cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44667, @cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44948, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44566, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44663, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44781, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44923, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45460, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45611, @cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45726, @cilium-renovate[bot])

• chore(deps): update base-images to v1.26.2 (main) (cilium/cilium#45297, @cilium-renovate[bot])

• cilium-cli/connectivity: add --exit-zero-on-failure flag (cilium/cilium#44433, @darox)

• cilium-cli/connectivity: use WithCiliumVersion to skip tests per Cilium version (cilium/cilium#44765, @tklauser)

• cilium-cli/sysdump: collect Cilium L2 Announcement Policies (cilium/cilium#45353, @tklauser)

• cilium-cli: Disable Helm Server Side Apply (cilium/cilium#44546, @YutaroHayakawa)

• cilium-cli: Fix panic parsing IPv6 URL in connectivity tests (cilium/cilium#45337, @HadrienPatte)

• modernize: Enable waitgroup analyzer (cilium/cilium#44660, @HadrienPatte)

• renovate: Add support to manage echo-advanced image (cilium/cilium#44623, @HadrienPatte)

• Update release instructions by @tklauser in #3192

• Update stable release to v0.19.2 by @tklauser in #3193

• chore(deps): update actions/setup-go action to v6.3.0 by @renovate[bot] in #3194

• chore(deps): update gcr.io/distroless/static:latest docker digest to eca24e6 by @renovate[bot] in #3195

• chore(deps): update docker.io/library/golang:1.26.0 docker digest to 9edf713 by @renovate[bot] in #3196

• RELEASE: confirm that CLI release works for optional Cloud environments by @julianwiedmann in #3200

• chore(deps): update gcr.io/distroless/static:latest docker digest to 28efbe9 by @renovate[bot] in #3198

• chore(deps): update go by @renovate[bot] in #3201

• chore(deps): update all github action dependencies by @renovate[bot] in #3199

• chore(deps): update docker.io/library/golang docker tag to v1.26.1 by @renovate[bot] in #3202

• chore(deps): update all github action dependencies by @renovate[bot] in #3203

• chore(deps): update golangci-lint by @renovate[bot] in #3204

• chore(deps): update golangci/golangci-lint docker tag to v2.11.2 by @renovate[bot] in #3205

• chore(deps): update golangci/golangci-lint docker tag to v2.11.3 by @renovate[bot] in #3206

• chore(deps): update actions/download-artifact action to v8.0.1 by @renovate[bot] in #3207

• chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72 by @renovate[bot] in #3211

• chore(deps): update softprops/action-gh-release action to v2.5.1 by @renovate[bot] in #3210

• chore(deps): update docker.io/library/golang:1.26.1 docker digest to c7e98cc by @renovate[bot] in #3208

• chore(deps): update softprops/action-gh-release action to v2.6.1 by @renovate[bot] in #3212

• chore(deps): update golangci/golangci-lint docker tag to v2.11.4 by @renovate[bot] in #3214

• chore(deps): update docker.io/library/golang:1.26.1 docker digest to 595c784 by @renovate[bot] in #3213

• chore(deps): update dependency cilium/cilium to v1.19.2 by @renovate[bot] in #3215

• chore(deps): update actions/setup-go action to v6.4.0 by @renovate[bot] in #3217

• chore(deps): pin cilium/cilium action to 0f7ddbf by @renovate[bot] in #3216

• chore(deps): update go to v1.26.2 by @renovate[bot] in #3218

• chore(deps): update cilium/cilium digest to 143928b by @renovate[bot] in #3219

• chore(deps): update docker/build-push-action action to v7.1.0 by @renovate[bot] in #3220

• chore(deps): update all github action dependencies by @renovate[bot] in #3223

• chore(deps): update cilium by @renovate[bot] in #3222

• chore(deps): update cilium/cilium digest to 41774fc by @renovate[bot] in #3224

• chore(deps): update golangci/golangci-lint docker tag to v2.12.0 by @renovate[bot] in #3225

• chore(deps): update docker.io/library/golang:1.26.2 docker digest to 5f3787b by @renovate[bot] in #3221

• chore(deps): update cilium/cilium digest to 71eacde by @renovate[bot] in #3226

• chore(deps): update golangci/golangci-lint docker tag to v2.12.1 by @renovate[bot] in #3227

• chore(deps): update dependency golangci/golangci-lint to v2.12.2 by @renovate[bot] in #3229

• chore(deps): update go to v1.26.3 by @renovate[bot] in #3230

• chore(deps): update cilium/cilium digest to 3188dcd by @renovate[bot] in #3228

• Prepare for v0.19.3 release by @tklauser in #3232

Full Changelog: v0.19.2...v0.19.3

Summary of Changes

CI Changes:

• cilium-cli/connectivity: remove allowlist entry for deleting no longer present service (cilium/cilium#44423, @tklauser)
• cilium-cli: add gke specific configmaps to cilium sysdump (cilium/cilium#44422, @kamilWyszynski1)
• Connectivity tests for service loopback to catch regressions (cilium/cilium#42590, @saiaunghlyanhtet)
• tests: Ignore identity manager related error in versions < 1.18 (cilium/cilium#44327, @christarazi)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#44353, @cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44465, @cilium-renovate[bot])

• chore(deps): update base-images to v1.26.0 (main) (cilium/cilium#44360, @cilium-renovate[bot])

• cli: Add failed to retrieve cluster cfg to exclusion list (cilium/cilium#44332, @brb)

• deps: update helm to v4.1.1 (cilium/cilium#44390, @aanm)

• modernize: Enable rangeint analyzer (cilium/cilium#44457, @HadrienPatte)

• Fix multiple tag error on main and release builds by @ferozsalam in #3186

• chore(deps): update gcr.io/distroless/static:latest docker digest to d90359c by @renovate[bot] in #3185

• chore(deps): update actions/stale action to v10.2.0 by @renovate[bot] in #3187

• chore(deps): update dependency cilium/cilium to v1.19.0 by @renovate[bot] in #3177

• chore(deps): update golangci/golangci-lint docker tag to v2.10.1 by @renovate[bot] in #3189

• chore(deps): update dependency cilium/cilium to v1.19.1 by @renovate[bot] in #3188

• chore(deps): update helm/kind-action action to v1.14.0 by @renovate[bot] in #3190

• Prepare for v0.19.2 release by @tklauser in #3191

Full Changelog: v0.19.1...v0.19.2

Summary of Changes

Minor Changes:

• cli: clustermesh: use ca bundle to connect clusters (cilium/cilium#42833, @MrFreezeex)

Bugfixes:

• cilium-cli: Fix NodePort deployment check in dual-stack clusters (cilium/cilium#43888, @gandro)
• Fix GKE conformance test NodePort timeouts by skipping unreachable external IP validation on GKE (cilium/cilium#44014, @pillai-ashwin)

CI Changes:

• cli: Relax warning exclusion for "unable to find key in local cache" (cilium/cilium#44149, @brb)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43700, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43824, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43965, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#44090, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#44235, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43827, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43969, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#44239, @cilium-renovate[bot])
• cilium-cli: Fix container name in connectivity test logs (cilium/cilium#44076, @HadrienPatte)
• docs: fix typos in comments (cilium/cilium#43821, @NAM-MAN)
• feat(cilium-cli): Add -r(estart) parameter to cilium upgrade (cilium/cilium#43722, @alagoutte)
• Introduce end-to-end tests for Cilium's ZTunnel integration. (cilium/cilium#43166, @ldelossa)
• Replace Index{,Byte} with Cut,Contains (cilium/cilium#43708, @joestringer)
• sysdump: Use label selectors for Hubble UI/Relay deployment collection (cilium/cilium#44227, @darox)
• chore(deps): update dependency cilium/cilium to v1.18.6 by @renovate[bot] in #3168
• Update stable release to v0.19.0 by @tklauser in #3169
• chore(deps): update go to v1.25.6 by @renovate[bot] in #3170
• chore(deps): update docker.io/library/golang:1.25.6 docker digest to ce63a16 by @renovate[bot] in #3172
• chore(deps): update actions/checkout action to v6.0.2 by @renovate[bot] in #3171
• ci: Harden the image build process by @ferozsalam in #3174
• chore(deps): update gcr.io/distroless/static:latest docker digest to 972618c by @renovate[bot] in #3176
• chore(deps): update all github action dependencies by @renovate[bot] in #3175
• chore(deps): update go to v1.25.7 by @renovate[bot] in #3178
• chore(deps): update golangci/golangci-lint docker tag to v2.9.0 by @renovate[bot] in #3179
• chore(deps): update go to v1.26.0 by @renovate[bot] in #3181
• chore(deps): update docker/build-push-action action to v6.19.0 by @renovate[bot] in #3180
• chore(deps): update docker/build-push-action action to v6.19.2 by @renovate[bot] in #3183
• Prepare for v0.19.1 release by @tklauser in #3184

New Contributors

• @ferozsalam made their first contribution in #3174

Full Changelog: v0.19.0...v0.19.1

Summary of Changes

CI Changes:

• Add L7 policy traffic disruption tests (cilium/cilium#42150, @fristonio)
• Cilium-cli SNI connectivity tests now retry expected successful operations to recover from failures due to external upstream issues. (cilium/cilium#42980, @jrajahalme)
• cli: connectivity: fix typo in L7 LB tests (cilium/cilium#43610, @julianwiedmann)
• Fix intermittent NodePort connectivity test timeouts in dual-stack clusters by validating NodePort readiness on all node IP addresses during test setup. (cilium/cilium#40812, @pillai-ashwin)
• tests: remove identity manager from ignored error messages (cilium/cilium#42982, @odinuge)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43169, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43456, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43508, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43457, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43538, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 (main) (cilium/cilium#43303, @cilium-renovate[bot])
• chore(deps): update go to v1.25.5 (main) (cilium/cilium#43173, @cilium-renovate[bot])
• cilium-cli/connectivity: remove matcher for bpf/init.sh errors (cilium/cilium#43109, @tklauser)
• cilium-cli: convert net.IP to netip.Addr (cilium/cilium#42371, @phuhung273)
• cli: Update network-perf image ref (cilium/cilium#43297, @HadrienPatte)
• chore(deps): update golangci/golangci-lint-action action to v9.2.0 by @renovate[bot] in #3148
• Update stable release to v0.18.9 by @michi-covalent in #3149
• chore(deps): update golangci/golangci-lint docker tag to v2.7.0 by @renovate[bot] in #3151
• chore(deps): update go to v1.25.5 by @renovate[bot] in #3153
• ci: clean up disk space in release workflow by @tklauser in #3154
• chore(deps): update actions/stale action to v10.1.1 by @renovate[bot] in #3150
• chore(deps): update gcr.io/distroless/static:latest docker digest to 4b2a093 by @renovate[bot] in #3152
• chore(deps): update golangci/golangci-lint docker tag to v2.7.2 by @renovate[bot] in #3155
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 by @renovate[bot] in #3156
• chore(deps): update actions/upload-artifact action to v6 by @renovate[bot] in #3157
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 36b4f45 by @renovate[bot] in #3160
• chore(deps): update dependency cilium/cilium to v1.18.5 by @renovate[bot] in #3159
• chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 by @renovate[bot] in #3158
• chore(deps): update docker/setup-buildx-action action to v3.12.0 by @renovate[bot] in #3162
• chore(deps): update golangci/golangci-lint docker tag to v2.8.0 by @renovate[bot] in #3163
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 by @renovate[bot] in #3164
• chore(deps): update gcr.io/distroless/static:latest docker digest to cd64bec by @renovate[bot] in #3165
• chore(deps): update actions/setup-go action to v6.2.0 by @renovate[bot] in #3166
• Prepare for v0.19.0 release by @tklauser in #3167

Full Changelog: v0.18.9...v0.19.0

Summary of Changes

Major Changes:

• Operator prometheus support TLS/mTLS using existing secret (cilium/cilium#42077, @phuhung273)

Minor Changes:

• CLI: Allow users to set the default Cilium namespace via the CILIUM_NAMESPACE environment variable (cilium/cilium#41557, @td0ne)
• Removed deprecated CiliumBGPPeeringPolicy CRD and its agent implementation. Use cilium.io/v2 CRDs (CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfigOverride) for configuring BGP. (cilium/cilium#42278, @rastislavs)

CI Changes:

• Add CCNP cilium connectivity tests (cilium/cilium#42051, @karina-ranadive)
• Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity (cilium/cilium#42984, @rptaylor)

Misc Changes:

• bgp: Correct misleading error message in GetPeeringState (cilium/cilium#42945, @hargrovee)
• bgp: Remove versions from bgp package names (cilium/cilium#42503, @rastislavs)
• cilium-cli: add own type for root command parameters (cilium/cilium#42609, @tklauser)
• cli: cleanups for pre-v1.15 removal (cilium/cilium#42757, @julianwiedmann)
• cli: require Cilium v1.15 (cilium/cilium#41538, @julianwiedmann)
• go.mod, vendor: bump github.com/google/go-github to v79 (cilium/cilium#42857, @tklauser)
• Update lrp frontend IP address to avoid IMDS conflict in the cloud environment in cilium-cli (cilium/cilium#42737, @liyihuang)
• Use modern Go constructs (cilium/cilium#42525, @HadrienPatte)
• Update stable release to v0.18.8 by @michi-covalent in #3121
• chore(deps): update actions/upload-artifact action to v5 by @renovate[bot] in #3124
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 8c945d3 by @renovate[bot] in #3122
• chore(deps): update dependency cilium/cilium to v1.18.3 by @renovate[bot] in #3123
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6bac879 by @renovate[bot] in #3125
• renovate: try to group dependency updates by @tklauser in #3126
• chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by @renovate[bot] in #3127
• chore(deps): update helm/kind-action action to v1.13.0 by @renovate[bot] in #3128
• chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by @renovate[bot] in #3129
• chore(deps): update golang docker tag to v1.25.4 by @renovate[bot] in #3130
• chore(deps): update go to v1.25.4 by @renovate[bot] in #3131
• chore(deps): update golang:1.25.4-alpine3.21 docker digest to 3289aac by @renovate[bot] in #3132
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to e68f6a0 by @renovate[bot] in #3135
• chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by @renovate[bot] in #3136
• chore(deps): update golangci/golangci-lint-action action to v9 by @renovate[bot] in #3133
• chore(deps): update dependency cilium/cilium to v1.18.4 by @renovate[bot] in #3134
• chore(deps): update all github action dependencies by @renovate[bot] in #3137
• chore(deps): update actions/setup-go action to v6.1.0 by @renovate[bot] in #3138
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #3139
• chore(deps): update golangci/golangci-lint-action action to v9.1.0 by @renovate[bot] in #3141
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to f60eaa8 by @renovate[bot] in #3140
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to 6981837 by @renovate[bot] in #3143
• chore(deps): update softprops/action-gh-release action to v2.5.0 by @renovate[bot] in #3144
• chore(deps): update golang docker tag to v1.25.5 by @renovate[bot] in #3147
• chore(deps): update actions/checkout action to v6.0.1 by @renovate[bot] in #3146
• Prepare for v0.18.9 release by @michi-covalent in #3145

Full Changelog: v0.18.8...v0.18.9

Summary of Changes

Minor Changes:

• clustermesh: add endpoints metrics and change global service (and MCS ServiceExport) metrics to report per cluster metrics instead of a global count (cilium/cilium#41323, @MrFreezeex)

Bugfixes:

• cilium-cli: Fix CNI config file collection in sysdump (cilium/cilium#42111, @pillai-ashwin)
• cilium-cli: Prevent panic in node-to-node-encryption connectivity test (cilium/cilium#41600, @HadrienPatte)
• connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 (cilium/cilium#42148, @julianwiedmann)
• Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (cilium/cilium#42080, @tklauser)

CI Changes:

• Add integration test to validate IPsec key derivation consistency across nodes, ensuring tunnel keys are properly derived and identical between Cilium pods. (cilium/cilium#40808, @pillai-ashwin)
• ci: enable copyloopvar linter (cilium/cilium#41893, @tklauser)
• cilium-cli, netns: fix golangci-lint 2.5.0 errors (cilium/cilium#41856, @tklauser)
• cilium-cli: Bring back NodePort Acceleration feature detection (cilium/cilium#41812, @brb)
• cilium-cli: Reenable L7 IPv6 tests (cilium/cilium#39662, @gentoo-root)
• cilium-cli: Specify TARGET for building release binaries (cilium/cilium#42177, @michi-covalent)
• cilium_cli: Override GO_BUILD Make variable (cilium/cilium#42162, @michi-covalent)
• cli, ipsec: Fix bidirectional IPsec tunnel check (cilium/cilium#42047, @pchaigno)
• cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (cilium/cilium#42146, @fristonio)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#41611, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#42018, @cilium-renovate[bot])
• chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to 0ce60b5 (main) (cilium/cilium#41558, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f (main) (cilium/cilium#41649, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d709837 (main) (cilium/cilium#42019, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 (main) (cilium/cilium#42252, @cilium-renovate[bot])
• chore(deps): update go to v1.25.1 (main) (cilium/cilium#41560, @cilium-renovate[bot])
• chore(deps): update go to v1.25.3 (main) (cilium/cilium#42061, @cilium-renovate[bot])
• cilium-cli/features: use common cmd metric list command (cilium/cilium#41630, @aanm)
• cilium-cli: drop disabled IP cache check from connectivity tests (cilium/cilium#42240, @tklauser)
• cli/clustermesh: remove leftover global services status info (cilium/cilium#41727, @giorio94)
• Refactor policy engine to use PolicyEntry as the internal representation of policies, as described in CFP-39646. (cilium/cilium#40213, @TheBeeZee)
• sysdump: add resource usage of nodes and pods (cilium/cilium#41415, @darox)
• chore(deps): update go to v1.25.1 (patch) by @renovate[bot] in #3097
• chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #3094
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d6bdb04 by @renovate[bot] in #3096
• chore(deps): update gcr.io/distroless/static:latest docker digest to 87bce11 by @renovate[bot] in #3099
• chore(deps): update softprops/action-gh-release action to v2.3.3 by @renovate[bot] in #3098
• chore(deps): update golang docker tag to v1.25.1 by @renovate[bot] in #3093
• chore(deps): update actions/stale action to v10 by @renovate[bot] in #3095
• chore(deps): update golang:1.25.1-alpine3.21 docker digest to 331bde4 by @renovate[bot] in #3100
• chore(deps): update dependency cilium/cilium to v1.18.2 by @renovate[bot] in #3102
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f by @renovate[bot] in #3103
• chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by @renovate[bot] in #3104
• chore(deps): update docker/login-action action to v3.6.0 by @renovate[bot] in #3105
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to ab1f5c4 by @renovate[bot] in #3106
• chore(deps): update actions/stale action to v10.1.0 by @renovate[bot] in #3108
• chore(deps): update softprops/action-gh-release action to v2.3.4 by @renovate[bot] in #3107
• chore(deps): update softprops/action-gh-release action to v2.4.0 by @renovate[bot] in #3109
• chore(deps): update golang docker tag to v1.25.2 by @renovate[bot] in #3110
• chore(deps): update go to v1.25.2 (patch) by @renovate[bot] in #3112
• chore(deps): update golang:1.25.2-alpine3.21 docker digest to 0134653 by @renovate[bot] in #3113
• RELEASE: also look for release-blockers in cilium/cilium by @julianwiedmann in #3116
• chore(deps): update golang docker tag to v1.25.3 by @renovate[bot] in #3117
• chore(deps): update softprops/action-gh-release action to v2.4.1 by @renovate[bot] in #3114
• chore(deps): update go to v1.25.3 (patch) by @renovate[bot] in #3118
• chore(deps): update golang:1.25.3-alpine3.21 docker digest to 0c9f3e0 by @renovate[bot] in #3115
• Makefile: fix renovate depname for GO_IMAGE_* updates by @tklauser in #3119
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 by @renovate[bot] in #3111
• Prepare for v0.18.8 release by @michi-covalent in #3120

What's Changed

Summary of Changes

Minor Changes:

• clustermesh: cli: accept more than one service IPs (excluding when connecting to NodePort Services) when connecting to remote clustermesh-apiserver (cilium/cilium#41253, @MrFreezeex)
• clustermesh: cli: add support for dict for helm values clustermesh.config.clusters (cilium/cilium#40879, @MrFreezeex)
• clustermesh: cli: support outputting clustermesh.config.clusters to the new dict format if the cluster is running Cilium >= 1.20 (cilium/cilium#40959, @MrFreezeex)

Bugfixes:

• Add l7 proxy check to policy-local-cluster-egress connectivity test (cilium/cilium#40797, @camrynl)
• cilium-cli: also restart cilium-operator pods on config changes (cilium/cilium#41067, @aanm)

CI Changes:

• Allow Egress Gateway connectivity tests to run concurrently (cilium/cilium#40980, @tommyp1ckles)
• cilium-cli: connectivity tests: Ignore some logs in error log check (cilium/cilium#40690, @jrife)
• cilium-cli: IPv6 connectivity tests for PodToIngress (cilium/cilium#39667, @gentoo-root)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#40893, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#41046, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#41340, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#41433, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.0 docker digest to 5502b0e (main) (cilium/cilium#41343, @cilium-renovate[bot])
• chore(deps): update go to v1.24.6 (main) (cilium/cilium#40992, @cilium-renovate[bot])
• cilium-cli: Optimized feature detection by running cluster-wide checks once (cilium/cilium#40715, @HadrienPatte)
• Include bgp remote peer capabilities in the sysdump (cilium/cilium#40719, @liyihuang)
• Update all-dependencies (main) (cilium/cilium#41175, @cilium-renovate[bot])
• Update docker.io/alpine/socat:1.8.0.3 Docker digest to 29d0f24 (main) (cilium/cilium#41204, @cilium-renovate[bot])
• Update Go to v1.25.0 (main) (cilium/cilium#41209, @cilium-renovate[bot])
• Update stable release to v0.18.6 by @tklauser in #3075
• chore(deps): update golangci/golangci-lint docker tag to v2.3.1 by @renovate[bot] in #3076
• chore(deps): update golang docker tag to v1.24.6 by @renovate[bot] in #3079
• chore(deps): update gcr.io/distroless/static:latest docker digest to 2e114d2 by @renovate[bot] in #3077
• chore(deps): update docker/login-action action to v3.5.0 by @renovate[bot] in #3078
• chore(deps): update go to v1.24.6 (patch) by @renovate[bot] in #3080
• chore(deps): update actions/checkout action to v5 by @renovate[bot] in #3082
• chore(deps): update golangci/golangci-lint docker tag to v2.4.0 by @renovate[bot] in #3086
• chore(deps): update golang docker tag to v1.25.0 by @renovate[bot] in #3085
• chore(deps): update go to v1.25.0 (minor) by @renovate[bot] in #3088
• chore(deps): update dependency cilium/cilium to v1.18.1 by @renovate[bot] in #3089
• chore(deps): update dependency kubernetes-sigs/kind to v0.30.0 by @renovate[bot] in #3091
• chore(deps): update golang-images - autoclosed by @renovate[bot] in #3090
• Prepare for v0.18.7 release by @michi-covalent in #3092

Full Changelog: v0.18.6...v0.18.7

What's Changed

Minor Changes:

• Cilium uninstall now removes annotations from Kubernetes nodes when clean-cilium-state: true (cilium/cilium#39931, @AritraDey-Dev)
• Deprecate v2alpha1 version of CiliumLoadBalancerIPPool CRD in favor of the v2 version (cilium/cilium#39134, @pippolo84)

Bugfixes:

• Fix bug where we would display the Max Seq. Number for IPsec on 32bits. (cilium/cilium#40622, @pchaigno)

CI Changes:

• Add l7 proxy check for to-fqdns connectivity test (cilium/cilium#40549, @vipul-21)
• cli: switch coredns image to registry.k8s.io, and fix renovate (cilium/cilium#40706, @giorio94)
• connectivity: Allow customization of tcpdump kill timeout (cilium/cilium#40774, @gentoo-root)
• connectivity: rework sniffer to execute tcpdump in background (cilium/cilium#40487, @smagnani96)

Misc Changes:

• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e (main) (cilium/cilium#40379, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be (main) (cilium/cilium#40738, @cilium-renovate[bot])
• chore(deps): update go to v1.24.5 (main) (cilium/cilium#40496, @cilium-renovate[bot])
• cilium-cli: Print partial output upon bgp peers errors (cilium/cilium#40278, @rastislavs)
• cilium-cli: Update default network-perf image (cilium/cilium#40376, @HadrienPatte)
• cilium-cli: Use slim k8s packages for connectivity tests (cilium/cilium#40708, @HadrienPatte)
• Fix misc typos (cilium/cilium#40769, @HadrienPatte)
• go.mod, vendor: pull in charts for Cilium 1.18.0 and Tetragon 1.5.0 (cilium/cilium#40823, @tklauser)
• Miscellaneous improvements to option.NewNamedMapOptions (cilium/cilium#40529, @giorio94)
• The unableTranslateCIDRgroups variable is removed as it is not used since the v1.17 release (cilium/cilium#40267, @Surya-7890)
• vendor: Update github.com/google/go-github to v73 (cilium/cilium#40326, @HadrienPatte)
• Update stable release to v0.18.5 by @tklauser in #3060
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e by @renovate[bot] in #3061
• Update RELEASE.md by @michi-covalent in #3062
• chore(deps): update golang docker tag to v1.24.5 by @renovate[bot] in #3063
• chore(deps): update go to v1.24.5 (patch) by @renovate[bot] in #3065
• chore(deps): update golangci/golangci-lint docker tag to v2.2.2 by @renovate[bot] in #3066
• chore(deps): update dependency cilium/cilium to v1.17.6 by @renovate[bot] in #3068
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 3ebc008 by @renovate[bot] in #3067
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 72ff633 by @renovate[bot] in #3069
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 6edc205 by @renovate[bot] in #3070
• chore(deps): update golangci/golangci-lint docker tag to v2.3.0 - autoclosed by @renovate[bot] in #3071
• chore(deps): update dependency cilium/cilium to v1.18.0 by @renovate[bot] in #3073
• chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be by @renovate[bot] in #3072
• Prepare for v0.18.6 release by @tklauser in #3074

Full Changelog: v0.18.5...v0.18.6