smig/nuc-talos

Watch

Fork 0

chore(deps): update helm release cilium to v1.19.6 #59

Merged

renovatebot merged 1 commit from renovate/cilium-1.x into main

2026-07-18 06:26:54 -04:00

renovatebot commented

2026-07-17 00:04:14 -04:00

Collaborator

This PR contains the following updates:

Package	Update	Change
cilium (source)	patch	`1.19.5` -> `1.19.6`

Release Notes

cilium/cilium (cilium)

`v1.19.6`: 1.19.6

Compare Source

Summary of Changes

Minor Changes:

datapath/l2responder: use l3 sockets for solicited node multicast signaling (Backport PR #46845, Upstream PR #46332, @bersoare)
gateway-api: add support for configuring Gateway access logs through the new spec.telemetry.accessLogs field in CiliumGatewayClassConfig. (Backport PR #46933, Upstream PR #46403, @arybolovlev)

Bugfixes:

[v1.19] Fix policy service label selector handling (#46946, @fristonio)
bpf: fix ipv6 neighbor solicitation handling in host firewall (Backport PR #46669, Upstream PR #46325, @atykhyy)
doublewrite: Don't run CRD backend with real handler when reading from KVStore (Backport PR #47181, Upstream PR #47144, @HadrienPatte)
endpoint: Fix race when reading endpoint properties (Backport PR #47181, Upstream PR #46991, @gandro)
Fix cilium_operator_unmanaged_pods gauge reporting 0 on reconcile cycles where an unmanaged pod is restarted. (Backport PR #46975, Upstream PR #46668, @Suyash1700)
Fix a bug which could lead to stale hostport entries if a pod was deleted and immediately recreated in host network. (Backport PR #46793, Upstream PR #46747, @giorio94)
Fix a regression that could cause established connections to a Pod to be briefly dropped during Cilium agent restart, upgrade, or downgrade, while the agent was restoring the Pod's network policy. (Backport PR #46974, Upstream PR #46927, @aanm)
Fix allowedRoute namespace and kind restrictions on multi-listener Gateways. (Backport PR #46826, Upstream PR #45693, @eufriction)
Fix bug that left the host firewall enabled in the live ConfigMap when disabling hostFirewall.enabled (toggling it from true to false) via Helm. (Backport PR #46669, Upstream PR #44748, @shibaPuppy)
Fix ClusterMesh service affinity annotation service.cilium.io/affinity: "none" incorrectly dropping all remote backends, causing traffic blackhole when no local endpoints exist. (Backport PR #46691, Upstream PR #46635, @mkamadeus)
Fix ctmap gc duration metric recording (Backport PR #46975, Upstream PR #46873, @fristonio)
Fix incorrect policy denials for traffic to L7 load balanced services when remote identity changes (Backport PR #47002, Upstream PR #46821, @fristonio)
Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR #47181, Upstream PR #46967, @ysksuzuki)
Fix regression preventing Cilium from starting when configured in kvstore mode with KPR enabled, if etcd is behind a Kubernetes service (Backport PR #47181, Upstream PR #46444, @giorio94)
Fix the UDP tunnel check in the BIG TCP probe. (Backport PR #46793, Upstream PR #46710, @gentoo-root)
Fixes a bug where Hubble policy correlation does not work for port ranges. (Backport PR #46793, Upstream PR #46643, @squeed)
gateway-api: Add Gateway check for when hostNetwork is enabled (Backport PR #46837, Upstream PR #46350, @xtineskim)
gateway-api: Each HTTPS and TLS passthrough port now receives its own Envoy listener and RouteConfiguration. (Backport PR #46826, Upstream PR #44889, @eufriction)
ipam/multi-pool: Do now wait for zero prealloc request (Backport PR #47181, Upstream PR #46867, @pippolo84)
operator: Fix nil-pointer panic in CiliumNode GC (Backport PR #47181, Upstream PR #47127, @HadrienPatte)

CI Changes:

.github: Generate CI binaries with correct module version (Backport PR #47099, Upstream PR #46742, @joestringer)
chore: check-cilium-envoy-image.sh should get values from Makefile.va… (Backport PR #46920, Upstream PR #46840, @sekhar-isovalent)
ci: Auth to image registry in clustermesh upgrade workflow (Backport PR #46691, Upstream PR #46632, @nebril)
ci: Remove merge_group from tests-smoke-conformance.yaml (Backport PR #46888, Upstream PR #46451, @nebril)
Fix workflow change detection for single-commit PRs to main (Backport PR #46793, Upstream PR #46684, @Demiserular)
Further GC ratchet test fix races (Backport PR #47224, Upstream PR #43075, @tommyp1ckles)

Misc Changes:

(minor) docs: update reference to aws-cli image (Backport PR #46975, Upstream PR #46923, @squeed)
.github: allow fork PR checkout with actions/checkout v7 (Backport PR #47135, Upstream PR #47133, @aanm)
[v1.19] - .github/workflows: unpin cilium/cilium self-references to track main (#46613, @aanm)
[v1.19] - Reapply ".github/workflows: do not use deployments for environments" (#46574, @aanm)
[v1.19] vendor: bump github.com/cilium/statedb to v0.5.9 (#47083, @giorio94)
bgp: fix status condition reporting: update reasons to accurately reflect current condition state (Backport PR #46920, Upstream PR #46383, @martonra)
bpf: Condition ICMP SNAT on BPF masquerading and inter-cluster SNAT (Backport PR #47181, Upstream PR #47021, @pchaigno)
chore(deps): update all github action dependencies (v1.19) (#46658, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.19) (#46908, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.19) (#47109, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.19) (#46906, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.19) (#47045, @cilium-renovate[bot])
chore(deps): update aws-actions/configure-aws-credentials action to v6.2.2 (v1.19) (#47124, @cilium-renovate[bot])
chore(deps): update base-images (v1.19) (#46774, @cilium-renovate[bot])
chore(deps): update base-images to v1.25.12 (v1.19) (#46982, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.19.5 (v1.19) (#46726, @cilium-renovate[bot])
chore(deps): update docker.io/library/alpine docker tag to v3.23.5 (v1.19) (#46773, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.25.11 docker digest to 00feed3 (v1.19) (#46657, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/certgen docker tag to v0.4.6 (v1.19) (#47039, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1782267392-edeb3f2af56c37c407efa1f63f0b32f595399bbc (v1.19) (#46700, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/image-tester docker tag to v1783861476 (v1.19) (#47122, @cilium-renovate[bot])
chore: BYOCNI loopback for cilium (Backport PR #46691, Upstream PR #46646, @sekhar-isovalent)
chore: optimize building gops and cni/loopback (Backport PR #46845, Upstream PR #46781, @sekhar-isovalent)
ci: always set fail-fast to false on image builds (Backport PR #47181, Upstream PR #47064, @aanm)
ci: remove non-ariane workflows from config (Backport PR #46845, Upstream PR #46787, @nebril)
clustermesh: add reusable backend selector constructor (Backport PR #46691, Upstream PR #45648, @viktor-kurchenko)
docs: clarify Hubble static/dynamic exporter file rotation settings (Backport PR #47181, Upstream PR #47026, @maksymbilokur-cisco)
docs: fix note about ipv4-native-routing-cidr default value (Backport PR #46793, Upstream PR #46603, @rptaylor)
Egress Gateway: handle nil events (Backport PR #47181, Upstream PR #46476, @tommyp1ckles)
endpoint: reap restart-preserved policy map entries once ready (Backport PR #47063, Upstream PR #47062, @aanm)
endpoint: sync desired policy before reload on the restore path (restore-path hardening) (Backport PR #47076, Upstream PR #47075, @aanm)
Fix instance of cilium having incorrect specified policy_change_total failure label "failure" value which caused unnecessary warnings. (Backport PR #46793, Upstream PR #46388, @tommyp1ckles)
Fix instance of cilium having incorrect specified policy_change_total failure label "failure" value which caused unnecessary warnings. (Backport PR #46845, Upstream PR #46388, @tommyp1ckles)
fix(deps): update k8s.io/utils digest to be93311 (v1.19) (#46907, @cilium-renovate[bot])
fix(deps): update k8s.io/utils digest to cf1189d (v1.19) (#47115, @cilium-renovate[bot])
Fixed Gateway API reconciler incorrectly reporting "Accepted HTTPRoute" in the status condition message for GRPCRoute and TLSRoute resources. (Backport PR #46826, Upstream PR #44962, @eufriction)
gateway-api: return model from Gateway API ingestion (Backport PR #46933, Upstream PR #46450, @arybolovlev)
gha: fail fast in external-target provisioning scripts instead of swallowing failures (Backport PR #47181, Upstream PR #47085, @aanm)
Improve cilium-dbg status output of module health (Backport PR #46845, Upstream PR #46739, @joestringer)
loadbalancer: proxy ports are now resolved per frontend instead of per service, preventing one port from losing its L7 redirect when multiple listeners share a service. (Backport PR #46826, Upstream PR #45949, @eufriction)
loadbalancer: validate DSR dispatch configuration globally (Backport PR #46793, Upstream PR #45545, @FelipeYepez)
Makefile: Generate full Cilium version in worktree (Backport PR #46793, Upstream PR #46737, @joestringer)
Revert restore-path policy map changes (#46927, #47062, #47075) (Backport PR #47213, Upstream PR #47202, @aanm)
Upgraded cilium/ebpf to version v0.22.0 (Backport PR #46845, Upstream PR #46783, @dylandreimerink)

Other Changes:

install: Update image digests for v1.19.5 (#46593, @cilium-release-bot[bot])
v1.19: gateway-api: fix sds secrets in golden tests (#47229, @0xch4z)

Docker Manifests

cilium

quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.19.6@sha256:accab5fe6ab7134fcd6f916acc9e4c785382a022128ae5495ec4a45fbe18c9a6

docker-plugin

quay.io/cilium/docker-plugin:v1.19.6@sha256:81a8d37e541edfff4016037373853e8e875f1ea0433c58b9ab54b314c305b9ec

hubble-relay

quay.io/cilium/hubble-relay:v1.19.6@sha256:6782a49e3f28eba015701c4410a5ec7fa096fe9a562f879b4372dbecd827ea44

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.19.6@sha256:031e332cdec61a9ebaca42f044e7e2f5b876ba96ac0ccf1d42acd5954779efaf

operator-aws

quay.io/cilium/operator-aws:v1.19.6@sha256:546d13ac511cf82441b5e9e99e03d0e054b788513ceb1a883e620b8284d5ccc3

operator-azure

quay.io/cilium/operator-azure:v1.19.6@sha256:e555430b7f5e4c407daab1afbec3c431ec016a53f1f1b848f67b9242cd3adedd

operator-generic

quay.io/cilium/operator-generic:v1.19.6@sha256:0db4ca4e06969d8904ee036617795d0e9c3228cf7b8d902ba74fc2bb98d2d665

operator

quay.io/cilium/operator:v1.19.6@sha256:37e36840be5a0882a9a065b2308859785e960a742aed0aeac794e0ac4aabdf90

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.19.5` -> `1.19.6` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.19.6`](https://github.com/cilium/cilium/releases/tag/v1.19.6): 1.19.6 [Compare Source](https://github.com/cilium/cilium/compare/1.19.5...1.19.6) ## Summary of Changes **Minor Changes:** - datapath/l2responder: use l3 sockets for solicited node multicast signaling (Backport PR [#46845](https://github.com/cilium/cilium/issues/46845), Upstream PR [#46332](https://github.com/cilium/cilium/issues/46332), [@bersoare](https://github.com/bersoare)) - gateway-api: add support for configuring Gateway access logs through the new `spec.telemetry.accessLogs` field in CiliumGatewayClassConfig. (Backport PR [#46933](https://github.com/cilium/cilium/issues/46933), Upstream PR [#46403](https://github.com/cilium/cilium/issues/46403), [@arybolovlev](https://github.com/arybolovlev)) **Bugfixes:** - \[v1.19] Fix policy service label selector handling ([#46946](https://github.com/cilium/cilium/issues/46946), [@fristonio](https://github.com/fristonio)) - bpf: fix ipv6 neighbor solicitation handling in host firewall (Backport PR [#46669](https://github.com/cilium/cilium/issues/46669), Upstream PR [#46325](https://github.com/cilium/cilium/issues/46325), [@atykhyy](https://github.com/atykhyy)) - doublewrite: Don't run CRD backend with real handler when reading from KVStore (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#47144](https://github.com/cilium/cilium/issues/47144), [@HadrienPatte](https://github.com/HadrienPatte)) - endpoint: Fix race when reading endpoint properties (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#46991](https://github.com/cilium/cilium/issues/46991), [@gandro](https://github.com/gandro)) - Fix `cilium_operator_unmanaged_pods` gauge reporting 0 on reconcile cycles where an unmanaged pod is restarted. (Backport PR [#46975](https://github.com/cilium/cilium/issues/46975), Upstream PR [#46668](https://github.com/cilium/cilium/issues/46668), [@Suyash1700](https://github.com/Suyash1700)) - Fix a bug which could lead to stale hostport entries if a pod was deleted and immediately recreated in host network. (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46747](https://github.com/cilium/cilium/issues/46747), [@giorio94](https://github.com/giorio94)) - Fix a regression that could cause established connections to a Pod to be briefly dropped during Cilium agent restart, upgrade, or downgrade, while the agent was restoring the Pod's network policy. (Backport PR [#46974](https://github.com/cilium/cilium/issues/46974), Upstream PR [#46927](https://github.com/cilium/cilium/issues/46927), [@aanm](https://github.com/aanm)) - Fix allowedRoute namespace and kind restrictions on multi-listener Gateways. (Backport PR [#46826](https://github.com/cilium/cilium/issues/46826), Upstream PR [#45693](https://github.com/cilium/cilium/issues/45693), [@eufriction](https://github.com/eufriction)) - Fix bug that left the host firewall enabled in the live ConfigMap when disabling hostFirewall.enabled (toggling it from true to false) via Helm. (Backport PR [#46669](https://github.com/cilium/cilium/issues/46669), Upstream PR [#44748](https://github.com/cilium/cilium/issues/44748), [@shibaPuppy](https://github.com/shibaPuppy)) - Fix ClusterMesh service affinity annotation `service.cilium.io/affinity: "none"` incorrectly dropping all remote backends, causing traffic blackhole when no local endpoints exist. (Backport PR [#46691](https://github.com/cilium/cilium/issues/46691), Upstream PR [#46635](https://github.com/cilium/cilium/issues/46635), [@mkamadeus](https://github.com/mkamadeus)) - Fix ctmap gc duration metric recording (Backport PR [#46975](https://github.com/cilium/cilium/issues/46975), Upstream PR [#46873](https://github.com/cilium/cilium/issues/46873), [@fristonio](https://github.com/fristonio)) - Fix incorrect policy denials for traffic to L7 load balanced services when remote identity changes (Backport PR [#47002](https://github.com/cilium/cilium/issues/47002), Upstream PR [#46821](https://github.com/cilium/cilium/issues/46821), [@fristonio](https://github.com/fristonio)) - Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#46967](https://github.com/cilium/cilium/issues/46967), [@ysksuzuki](https://github.com/ysksuzuki)) - Fix regression preventing Cilium from starting when configured in kvstore mode with KPR enabled, if etcd is behind a Kubernetes service (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#46444](https://github.com/cilium/cilium/issues/46444), [@giorio94](https://github.com/giorio94)) - Fix the UDP tunnel check in the BIG TCP probe. (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46710](https://github.com/cilium/cilium/issues/46710), [@gentoo-root](https://github.com/gentoo-root)) - Fixes a bug where Hubble policy correlation does not work for port ranges. (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46643](https://github.com/cilium/cilium/issues/46643), [@squeed](https://github.com/squeed)) - gateway-api: Add Gateway check for when hostNetwork is enabled (Backport PR [#46837](https://github.com/cilium/cilium/issues/46837), Upstream PR [#46350](https://github.com/cilium/cilium/issues/46350), [@xtineskim](https://github.com/xtineskim)) - gateway-api: Each HTTPS and TLS passthrough port now receives its own Envoy listener and RouteConfiguration. (Backport PR [#46826](https://github.com/cilium/cilium/issues/46826), Upstream PR [#44889](https://github.com/cilium/cilium/issues/44889), [@eufriction](https://github.com/eufriction)) - ipam/multi-pool: Do now wait for zero prealloc request (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#46867](https://github.com/cilium/cilium/issues/46867), [@pippolo84](https://github.com/pippolo84)) - operator: Fix nil-pointer panic in CiliumNode GC (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#47127](https://github.com/cilium/cilium/issues/47127), [@HadrienPatte](https://github.com/HadrienPatte)) **CI Changes:** - .github: Generate CI binaries with correct module version (Backport PR [#47099](https://github.com/cilium/cilium/issues/47099), Upstream PR [#46742](https://github.com/cilium/cilium/issues/46742), [@joestringer](https://github.com/joestringer)) - chore: check-cilium-envoy-image.sh should get values from Makefile.va… (Backport PR [#46920](https://github.com/cilium/cilium/issues/46920), Upstream PR [#46840](https://github.com/cilium/cilium/issues/46840), [@sekhar-isovalent](https://github.com/sekhar-isovalent)) - ci: Auth to image registry in clustermesh upgrade workflow (Backport PR [#46691](https://github.com/cilium/cilium/issues/46691), Upstream PR [#46632](https://github.com/cilium/cilium/issues/46632), [@nebril](https://github.com/nebril)) - ci: Remove merge\_group from tests-smoke-conformance.yaml (Backport PR [#46888](https://github.com/cilium/cilium/issues/46888), Upstream PR [#46451](https://github.com/cilium/cilium/issues/46451), [@nebril](https://github.com/nebril)) - Fix workflow change detection for single-commit PRs to main (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46684](https://github.com/cilium/cilium/issues/46684), [@Demiserular](https://github.com/Demiserular)) - Further GC ratchet test fix races (Backport PR [#47224](https://github.com/cilium/cilium/issues/47224), Upstream PR [#43075](https://github.com/cilium/cilium/issues/43075), [@tommyp1ckles](https://github.com/tommyp1ckles)) **Misc Changes:** - (minor) docs: update reference to aws-cli image (Backport PR [#46975](https://github.com/cilium/cilium/issues/46975), Upstream PR [#46923](https://github.com/cilium/cilium/issues/46923), [@squeed](https://github.com/squeed)) - .github: allow fork PR checkout with actions/checkout v7 (Backport PR [#47135](https://github.com/cilium/cilium/issues/47135), Upstream PR [#47133](https://github.com/cilium/cilium/issues/47133), [@aanm](https://github.com/aanm)) - \[v1.19] - .github/workflows: unpin cilium/cilium self-references to track main ([#46613](https://github.com/cilium/cilium/issues/46613), [@aanm](https://github.com/aanm)) - \[v1.19] - Reapply ".github/workflows: do not use deployments for environments" ([#46574](https://github.com/cilium/cilium/issues/46574), [@aanm](https://github.com/aanm)) - \[v1.19] vendor: bump github.com/cilium/statedb to v0.5.9 ([#47083](https://github.com/cilium/cilium/issues/47083), [@giorio94](https://github.com/giorio94)) - bgp: fix status condition reporting: update reasons to accurately reflect current condition state (Backport PR [#46920](https://github.com/cilium/cilium/issues/46920), Upstream PR [#46383](https://github.com/cilium/cilium/issues/46383), [@martonra](https://github.com/martonra)) - bpf: Condition ICMP SNAT on BPF masquerading and inter-cluster SNAT (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#47021](https://github.com/cilium/cilium/issues/47021), [@pchaigno](https://github.com/pchaigno)) - chore(deps): update all github action dependencies (v1.19) ([#46658](https://github.com/cilium/cilium/issues/46658), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.19) ([#46908](https://github.com/cilium/cilium/issues/46908), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.19) ([#47109](https://github.com/cilium/cilium/issues/47109), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.19) ([#46906](https://github.com/cilium/cilium/issues/46906), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.19) ([#47045](https://github.com/cilium/cilium/issues/47045), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update aws-actions/configure-aws-credentials action to v6.2.2 (v1.19) ([#47124](https://github.com/cilium/cilium/issues/47124), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update base-images (v1.19) ([#46774](https://github.com/cilium/cilium/issues/46774), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update base-images to v1.25.12 (v1.19) ([#46982](https://github.com/cilium/cilium/issues/46982), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.19.5 (v1.19) ([#46726](https://github.com/cilium/cilium/issues/46726), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/alpine docker tag to v3.23.5 (v1.19) ([#46773](https://github.com/cilium/cilium/issues/46773), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.25.11 docker digest to [`00feed3`](https://github.com/cilium/cilium/commit/00feed3) (v1.19) ([#46657](https://github.com/cilium/cilium/issues/46657), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/certgen docker tag to v0.4.6 (v1.19) ([#47039](https://github.com/cilium/cilium/issues/47039), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1782267392-edeb3f2af56c37c407efa1f63f0b32f595399bbc (v1.19) ([#46700](https://github.com/cilium/cilium/issues/46700), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/image-tester docker tag to v1783861476 (v1.19) ([#47122](https://github.com/cilium/cilium/issues/47122), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore: BYOCNI loopback for cilium (Backport PR [#46691](https://github.com/cilium/cilium/issues/46691), Upstream PR [#46646](https://github.com/cilium/cilium/issues/46646), [@sekhar-isovalent](https://github.com/sekhar-isovalent)) - chore: optimize building gops and cni/loopback (Backport PR [#46845](https://github.com/cilium/cilium/issues/46845), Upstream PR [#46781](https://github.com/cilium/cilium/issues/46781), [@sekhar-isovalent](https://github.com/sekhar-isovalent)) - ci: always set fail-fast to false on image builds (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#47064](https://github.com/cilium/cilium/issues/47064), [@aanm](https://github.com/aanm)) - ci: remove non-ariane workflows from config (Backport PR [#46845](https://github.com/cilium/cilium/issues/46845), Upstream PR [#46787](https://github.com/cilium/cilium/issues/46787), [@nebril](https://github.com/nebril)) - clustermesh: add reusable backend selector constructor (Backport PR [#46691](https://github.com/cilium/cilium/issues/46691), Upstream PR [#45648](https://github.com/cilium/cilium/issues/45648), [@viktor-kurchenko](https://github.com/viktor-kurchenko)) - docs: clarify Hubble static/dynamic exporter file rotation settings (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#47026](https://github.com/cilium/cilium/issues/47026), [@maksymbilokur-cisco](https://github.com/maksymbilokur-cisco)) - docs: fix note about ipv4-native-routing-cidr default value (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46603](https://github.com/cilium/cilium/issues/46603), [@rptaylor](https://github.com/rptaylor)) - Egress Gateway: handle nil events (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#46476](https://github.com/cilium/cilium/issues/46476), [@tommyp1ckles](https://github.com/tommyp1ckles)) - endpoint: reap restart-preserved policy map entries once ready (Backport PR [#47063](https://github.com/cilium/cilium/issues/47063), Upstream PR [#47062](https://github.com/cilium/cilium/issues/47062), [@aanm](https://github.com/aanm)) - endpoint: sync desired policy before reload on the restore path (restore-path hardening) (Backport PR [#47076](https://github.com/cilium/cilium/issues/47076), Upstream PR [#47075](https://github.com/cilium/cilium/issues/47075), [@aanm](https://github.com/aanm)) - Fix instance of cilium having incorrect specified policy\_change\_total failure label "failure" value which caused unnecessary warnings. (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46388](https://github.com/cilium/cilium/issues/46388), [@tommyp1ckles](https://github.com/tommyp1ckles)) - Fix instance of cilium having incorrect specified policy\_change\_total failure label "failure" value which caused unnecessary warnings. (Backport PR [#46845](https://github.com/cilium/cilium/issues/46845), Upstream PR [#46388](https://github.com/cilium/cilium/issues/46388), [@tommyp1ckles](https://github.com/tommyp1ckles)) - fix(deps): update k8s.io/utils digest to [`be93311`](https://github.com/cilium/cilium/commit/be93311) (v1.19) ([#46907](https://github.com/cilium/cilium/issues/46907), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - fix(deps): update k8s.io/utils digest to [`cf1189d`](https://github.com/cilium/cilium/commit/cf1189d) (v1.19) ([#47115](https://github.com/cilium/cilium/issues/47115), [@cilium-renovate](https://github.com/cilium-renovate)\[bot]) - Fixed Gateway API reconciler incorrectly reporting "Accepted HTTPRoute" in the status condition message for GRPCRoute and TLSRoute resources. (Backport PR [#46826](https://github.com/cilium/cilium/issues/46826), Upstream PR [#44962](https://github.com/cilium/cilium/issues/44962), [@eufriction](https://github.com/eufriction)) - gateway-api: return model from Gateway API ingestion (Backport PR [#46933](https://github.com/cilium/cilium/issues/46933), Upstream PR [#46450](https://github.com/cilium/cilium/issues/46450), [@arybolovlev](https://github.com/arybolovlev)) - gha: fail fast in external-target provisioning scripts instead of swallowing failures (Backport PR [#47181](https://github.com/cilium/cilium/issues/47181), Upstream PR [#47085](https://github.com/cilium/cilium/issues/47085), [@aanm](https://github.com/aanm)) - Improve cilium-dbg status output of module health (Backport PR [#46845](https://github.com/cilium/cilium/issues/46845), Upstream PR [#46739](https://github.com/cilium/cilium/issues/46739), [@joestringer](https://github.com/joestringer)) - loadbalancer: proxy ports are now resolved per frontend instead of per service, preventing one port from losing its L7 redirect when multiple listeners share a service. (Backport PR [#46826](https://github.com/cilium/cilium/issues/46826), Upstream PR [#45949](https://github.com/cilium/cilium/issues/45949), [@eufriction](https://github.com/eufriction)) - loadbalancer: validate DSR dispatch configuration globally (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#45545](https://github.com/cilium/cilium/issues/45545), [@FelipeYepez](https://github.com/FelipeYepez)) - Makefile: Generate full Cilium version in worktree (Backport PR [#46793](https://github.com/cilium/cilium/issues/46793), Upstream PR [#46737](https://github.com/cilium/cilium/issues/46737), [@joestringer](https://github.com/joestringer)) - Revert restore-path policy map changes ([#46927](https://github.com/cilium/cilium/issues/46927), [#47062](https://github.com/cilium/cilium/issues/47062), [#47075](https://github.com/cilium/cilium/issues/47075)) (Backport PR [#47213](https://github.com/cilium/cilium/issues/47213), Upstream PR [#47202](https://github.com/cilium/cilium/issues/47202), [@aanm](https://github.com/aanm)) - Upgraded cilium/ebpf to version v0.22.0 (Backport PR [#46845](https://github.com/cilium/cilium/issues/46845), Upstream PR [#46783](https://github.com/cilium/cilium/issues/46783), [@dylandreimerink](https://github.com/dylandreimerink)) **Other Changes:** - install: Update image digests for v1.19.5 ([#46593](https://github.com/cilium/cilium/issues/46593), [@cilium-release-bot](https://github.com/cilium-release-bot)\[bot]) - v1.19: gateway-api: fix sds secrets in golden tests ([#47229](https://github.com/cilium/cilium/issues/47229), [@0xch4z](https://github.com/0xch4z)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.19.6@sha256:accab5fe6ab7134fcd6f916acc9e4c785382a022128ae5495ec4a45fbe18c9a6` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.19.6@sha256:81a8d37e541edfff4016037373853e8e875f1ea0433c58b9ab54b314c305b9ec` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.19.6@sha256:6782a49e3f28eba015701c4410a5ec7fa096fe9a562f879b4372dbecd827ea44` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.19.6@sha256:031e332cdec61a9ebaca42f044e7e2f5b876ba96ac0ccf1d42acd5954779efaf` ##### operator-aws `quay.io/cilium/operator-aws:v1.19.6@sha256:546d13ac511cf82441b5e9e99e03d0e054b788513ceb1a883e620b8284d5ccc3` ##### operator-azure `quay.io/cilium/operator-azure:v1.19.6@sha256:e555430b7f5e4c407daab1afbec3c431ec016a53f1f1b848f67b9242cd3adedd` ##### operator-generic `quay.io/cilium/operator-generic:v1.19.6@sha256:0db4ca4e06969d8904ee036617795d0e9c3228cf7b8d902ba74fc2bb98d2d665` ##### operator `quay.io/cilium/operator:v1.19.6@sha256:37e36840be5a0882a9a065b2308859785e960a742aed0aeac794e0ac4aabdf90` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovatebot added 1 commit

2026-07-17 00:04:14 -04:00

chore(deps): update helm release cilium to v1.19.6

Notify Mattermost on Renovate PR Merge / notify (pull_request) Successful in 1s

Details

446bb7d4ef

renovatebot scheduled this pull request to auto merge when all checks succeed

2026-07-17 00:04:15 -04:00

renovatebot merged commit da814fdb47 into main

2026-07-18 06:26:54 -04:00

renovatebot deleted branch renovate/cilium-1.x

2026-07-18 06:26:54 -04:00

renovatebot referenced this pull request from a commit

2026-07-18 06:26:54 -04:00

Merge pull request 'chore(deps): update helm release cilium to v1.19.6' (#59) from renovate/cilium-1.x into main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

smig/nuc-talos!59

No description provided.

Rows
Columns

chore(deps): update helm release cilium to v1.19.6 #59

Release Notes

v1.19.6: 1.19.6

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

Configuration

`v1.19.6`: 1.19.6