smig/nuc-talos
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

chore(deps): update helm release cilium to v1.19.3 #37

Merged
renovatebot merged 1 commit from renovate/cilium-1.x into main 2026-04-17 00:05:50 -04:00
Conversation 0 Commits 1 Files changed 1 +1 -1
renovatebot commented 2026-04-16 00:04:44 -04:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
cilium (source) patch 1.19.2 -> 1.19.3

Release Notes

cilium/cilium (cilium)

v1.19.3: 1.19.3

Compare Source

Summary of Changes

Minor Changes:

Bugfixes:

  • [v1.19] Fix incorrect policy service selector handling (#​44888, @​fristonio)
  • bgp: Fix potential race in service advertisements upon error retry (Backport PR #​45211, Upstream PR #​45049, @​rastislavs)
  • clustermesh: fix a bug in the MCS-API CRD installl that could attempt a CRD downgrade when the version label is higher (Backport PR #​44828, Upstream PR #​44738, @​MrFreezeex)
  • ctmap: Change order of active maps (Backport PR #​44828, Upstream PR #​44729, @​brb)
  • Ensure completion.WaitGroup always has a timeout (Backport PR #​45217, Upstream PR #​44731, @​jrajahalme)
  • envoy: Fix xds server npds listeners accounting (Backport PR #​45217, Upstream PR #​44830, @​fristonio)
  • Fix a slow memory leak triggered by incremental policy updates (Backport PR #​44994, Upstream PR #​44328, @​odinuge)
  • Fix endpoints for static pods stuck in init identity (Backport PR #​45211, Upstream PR #​45016, @​aaroniscode)
  • Fix in-cluster NodePort connectivity failure in DSR mode when SocketLB is disabled. When a pod accesses a NodePort service via a remote node's IP (instead of the ClusterIP) and the selected backend resides on the same node as the client, the connection fails due to missing reverse NAT on the reply path. (Backport PR #​44968, Upstream PR #​41963, @​gyutaeb)
  • Fix memory leak triggered by policies being created and deleted (Backport PR #​44828, Upstream PR #​44724, @​odinuge)
  • Fix panic in Hubble Relay when new peer address is unresolvable (Backport PR #​45211, Upstream PR #​45021, @​pesarkhobeee)
  • fix(datapath): ignore link-local IPv6 addresses for NodePort binding (Backport PR #​44974, Upstream PR #​44778, @​Bigdelle)
  • Fixed a bug in dual-stack cluster-pool IPAM where an operator restart with a pre-existing duplicate IPv6 PodCIDR could cause the affected node's IPv4 PodCIDR to be incorrectly freed and reassigned to another node. (Backport PR #​44866, Upstream PR #​44832, @​christarazi)
  • Fixed an issue where policy update ack is never completed after endpoint deletion. (Backport PR #​44818, Upstream PR #​44754, @​jrajahalme)
  • Fixed ipcache identity update hang when last proxy listener is removed. (Backport PR #​45217, Upstream PR #​44597, @​jrajahalme)
  • Fixes GRPCRoute being silently excluded from Envoy config when a Gateway listener explicitly sets allowedRoutes.kinds. (Backport PR #​44974, Upstream PR #​44826, @​eufriction)
  • Fixes increased CPU usage in hubble observe caused by log coloring feature, even when coloring was disabled (Backport PR #​44828, Upstream PR #​44119, @​tporeba)
  • lb: fix panic in orphan backend cleanup when addr is zero-value (Backport PR #​44994, Upstream PR #​44853, @​vipul-21)
  • lb: Skip nil slots during BPF map restore to prevent panic (Backport PR #​44974, Upstream PR #​44895, @​vipul-21)
  • operator/identitygc: fix nil pointer dereference on shutdown (Backport PR #​45211, Upstream PR #​45091, @​tsotne95)
  • wal: Do not truncate in NewWriter (Backport PR #​44974, Upstream PR #​44886, @​joamaki)
  • WireGuard now respects the underlay-protocol=ipv6 setting when selecting peer endpoints in dual-stack clusters with IPv6 underlay, fixing connectivity issues where IPv4 was incorrectly used despite being unreachable across nodes. (Backport PR #​45247, Upstream PR #​44629, @​tibrezus)

CI Changes:

Misc Changes:

Other Changes:

Docker Manifests

cilium

quay.io/cilium/cilium:v1.19.3@​sha256:2e61680593cddca8b6c055f6d4c849d87a26a1c91c7e3b8b56c7fb76ab7b7b10

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.19.3@​sha256:a8136a7615d6c6041d3aa6f2674d17beaec238170d669507ccc05328a778e2b7

docker-plugin

quay.io/cilium/docker-plugin:v1.19.3@​sha256:728c3903518b0b6904e7208143355b38b7e6de3b514694fb6098b25bb9457397

hubble-relay

quay.io/cilium/hubble-relay:v1.19.3@​sha256:5ee21d57b6ef2aa6db67e603a735fdceb162454b352b7335b651456e308f681b

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.19.3@​sha256:176321a65123373ff8c7823b25183102cbad98375e8d6c80b96d68b6e8491103

operator-aws

quay.io/cilium/operator-aws:v1.19.3@​sha256:a53dcbfb77282bf2ddd3abbe60f6d49762e7c1389a36cb35b71d504644a56640

operator-azure

quay.io/cilium/operator-azure:v1.19.3@​sha256:699c1571a3df1a98882ee13610d47cffb7b34ee7e8d276096db798a5f6c7e4cb

operator-generic

quay.io/cilium/operator-generic:v1.19.3@​sha256:205b09b0ed6accbf9fe688d312a9f0fcfc6a316fc081c23fbffb472af5dd62cd

operator

quay.io/cilium/operator:v1.19.3@​sha256:9075e6944996227574762ec0118caab0145d6e67f821409c4a6756b6b6caf6ea

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.19.2` -> `1.19.3` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.19.3`](https://github.com/cilium/cilium/releases/tag/v1.19.3): 1.19.3 [Compare Source](https://github.com/cilium/cilium/compare/1.19.2...1.19.3) ## Summary of Changes **Minor Changes:** - Fix performance bug in L7 policy proxy redirect handling (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44613](https://github.com/cilium/cilium/issues/44613), [@&#8203;fristonio](https://github.com/fristonio)) - Fixes issue where the Cilium agent fails to initialise when using KVStore identity mode with etcd behind a K8s Service (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44653](https://github.com/cilium/cilium/issues/44653), [@&#8203;41ks](https://github.com/41ks)) - helm,docs: add configDriftDetection Helm values and documentation (Backport PR [#&#8203;44974](https://github.com/cilium/cilium/issues/44974), Upstream PR [#&#8203;44703](https://github.com/cilium/cilium/issues/44703), [@&#8203;PhilipSchmid](https://github.com/PhilipSchmid)) **Bugfixes:** - \[v1.19] Fix incorrect policy service selector handling ([#&#8203;44888](https://github.com/cilium/cilium/issues/44888), [@&#8203;fristonio](https://github.com/fristonio)) - bgp: Fix potential race in service advertisements upon error retry (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45049](https://github.com/cilium/cilium/issues/45049), [@&#8203;rastislavs](https://github.com/rastislavs)) - clustermesh: fix a bug in the MCS-API CRD installl that could attempt a CRD downgrade when the version label is higher (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44738](https://github.com/cilium/cilium/issues/44738), [@&#8203;MrFreezeex](https://github.com/MrFreezeex)) - ctmap: Change order of active maps (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44729](https://github.com/cilium/cilium/issues/44729), [@&#8203;brb](https://github.com/brb)) - Ensure completion.WaitGroup always has a timeout (Backport PR [#&#8203;45217](https://github.com/cilium/cilium/issues/45217), Upstream PR [#&#8203;44731](https://github.com/cilium/cilium/issues/44731), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - envoy: Fix xds server npds listeners accounting (Backport PR [#&#8203;45217](https://github.com/cilium/cilium/issues/45217), Upstream PR [#&#8203;44830](https://github.com/cilium/cilium/issues/44830), [@&#8203;fristonio](https://github.com/fristonio)) - Fix a slow memory leak triggered by incremental policy updates (Backport PR [#&#8203;44994](https://github.com/cilium/cilium/issues/44994), Upstream PR [#&#8203;44328](https://github.com/cilium/cilium/issues/44328), [@&#8203;odinuge](https://github.com/odinuge)) - Fix endpoints for static pods stuck in init identity (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45016](https://github.com/cilium/cilium/issues/45016), [@&#8203;aaroniscode](https://github.com/aaroniscode)) - Fix in-cluster NodePort connectivity failure in DSR mode when SocketLB is disabled. When a pod accesses a NodePort service via a remote node's IP (instead of the ClusterIP) and the selected backend resides on the same node as the client, the connection fails due to missing reverse NAT on the reply path. (Backport PR [#&#8203;44968](https://github.com/cilium/cilium/issues/44968), Upstream PR [#&#8203;41963](https://github.com/cilium/cilium/issues/41963), [@&#8203;gyutaeb](https://github.com/gyutaeb)) - Fix memory leak triggered by policies being created and deleted (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44724](https://github.com/cilium/cilium/issues/44724), [@&#8203;odinuge](https://github.com/odinuge)) - Fix panic in Hubble Relay when new peer address is unresolvable (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45021](https://github.com/cilium/cilium/issues/45021), [@&#8203;pesarkhobeee](https://github.com/pesarkhobeee)) - fix(datapath): ignore link-local IPv6 addresses for NodePort binding (Backport PR [#&#8203;44974](https://github.com/cilium/cilium/issues/44974), Upstream PR [#&#8203;44778](https://github.com/cilium/cilium/issues/44778), [@&#8203;Bigdelle](https://github.com/Bigdelle)) - Fixed a bug in dual-stack cluster-pool IPAM where an operator restart with a pre-existing duplicate IPv6 PodCIDR could cause the affected node's IPv4 PodCIDR to be incorrectly freed and reassigned to another node. (Backport PR [#&#8203;44866](https://github.com/cilium/cilium/issues/44866), Upstream PR [#&#8203;44832](https://github.com/cilium/cilium/issues/44832), [@&#8203;christarazi](https://github.com/christarazi)) - Fixed an issue where policy update ack is never completed after endpoint deletion. (Backport PR [#&#8203;44818](https://github.com/cilium/cilium/issues/44818), Upstream PR [#&#8203;44754](https://github.com/cilium/cilium/issues/44754), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Fixed ipcache identity update hang when last proxy listener is removed. (Backport PR [#&#8203;45217](https://github.com/cilium/cilium/issues/45217), Upstream PR [#&#8203;44597](https://github.com/cilium/cilium/issues/44597), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Fixes GRPCRoute being silently excluded from Envoy config when a Gateway listener explicitly sets allowedRoutes.kinds. (Backport PR [#&#8203;44974](https://github.com/cilium/cilium/issues/44974), Upstream PR [#&#8203;44826](https://github.com/cilium/cilium/issues/44826), [@&#8203;eufriction](https://github.com/eufriction)) - Fixes increased CPU usage in `hubble observe` caused by log coloring feature, even when coloring was disabled (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44119](https://github.com/cilium/cilium/issues/44119), [@&#8203;tporeba](https://github.com/tporeba)) - lb: fix panic in orphan backend cleanup when addr is zero-value (Backport PR [#&#8203;44994](https://github.com/cilium/cilium/issues/44994), Upstream PR [#&#8203;44853](https://github.com/cilium/cilium/issues/44853), [@&#8203;vipul-21](https://github.com/vipul-21)) - lb: Skip nil slots during BPF map restore to prevent panic (Backport PR [#&#8203;44974](https://github.com/cilium/cilium/issues/44974), Upstream PR [#&#8203;44895](https://github.com/cilium/cilium/issues/44895), [@&#8203;vipul-21](https://github.com/vipul-21)) - operator/identitygc: fix nil pointer dereference on shutdown (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45091](https://github.com/cilium/cilium/issues/45091), [@&#8203;tsotne95](https://github.com/tsotne95)) - wal: Do not truncate in NewWriter (Backport PR [#&#8203;44974](https://github.com/cilium/cilium/issues/44974), Upstream PR [#&#8203;44886](https://github.com/cilium/cilium/issues/44886), [@&#8203;joamaki](https://github.com/joamaki)) - WireGuard now respects the `underlay-protocol=ipv6` setting when selecting peer endpoints in dual-stack clusters with IPv6 underlay, fixing connectivity issues where IPv4 was incorrectly used despite being unreachable across nodes. (Backport PR [#&#8203;45247](https://github.com/cilium/cilium/issues/45247), Upstream PR [#&#8203;44629](https://github.com/cilium/cilium/issues/44629), [@&#8203;tibrezus](https://github.com/tibrezus)) **CI Changes:** - .github/workflows: disable cache for go steps (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45073](https://github.com/cilium/cilium/issues/45073), [@&#8203;aanm](https://github.com/aanm)) - .github/workflows: replace external set-commit-status action (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45078](https://github.com/cilium/cilium/issues/45078), [@&#8203;aanm](https://github.com/aanm)) - .github: cleanup disk before ci-verifier tests (Backport PR [#&#8203;44994](https://github.com/cilium/cilium/issues/44994), Upstream PR [#&#8203;44971](https://github.com/cilium/cilium/issues/44971), [@&#8203;aanm](https://github.com/aanm)) - allocator: handle unlikely goroutine leak (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44589](https://github.com/cilium/cilium/issues/44589), [@&#8203;asauber](https://github.com/asauber)) - ci: add fail-fast false to ci image builds (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45079](https://github.com/cilium/cilium/issues/45079), [@&#8203;Artyop](https://github.com/Artyop)) - ci: fix is-workflow-call check to handle empty input (Backport PR [#&#8203;45052](https://github.com/cilium/cilium/issues/45052), Upstream PR [#&#8203;45020](https://github.com/cilium/cilium/issues/45020), [@&#8203;aanm](https://github.com/aanm)) - ci: fix PR branch pull step on stable pushes (Backport PR [#&#8203;45052](https://github.com/cilium/cilium/issues/45052), Upstream PR [#&#8203;45019](https://github.com/cilium/cilium/issues/45019), [@&#8203;Artyop](https://github.com/Artyop)) - ci: fix pr number check for base branch retrieval (Backport PR [#&#8203;45052](https://github.com/cilium/cilium/issues/45052), Upstream PR [#&#8203;45024](https://github.com/cilium/cilium/issues/45024), [@&#8203;Artyop](https://github.com/Artyop)) - ci: set TMPDIR=/host/tmp in datapath verifier tests (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45047](https://github.com/cilium/cilium/issues/45047), [@&#8203;aanm](https://github.com/aanm)) - ci: Switch catchpoint/workflow-telemetry-action to our fork ([#&#8203;45219](https://github.com/cilium/cilium/issues/45219), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - Fix some test-e2e-upgrade issues (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45075](https://github.com/cilium/cilium/issues/45075), [@&#8203;aanm](https://github.com/aanm)) - fix: escape $ character in regex to prevent injection (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44638](https://github.com/cilium/cilium/issues/44638), [@&#8203;peoyekunle](https://github.com/peoyekunle)) - fix: harden k8s apiserver endpoint access (Backport PR [#&#8203;44994](https://github.com/cilium/cilium/issues/44994), Upstream PR [#&#8203;44863](https://github.com/cilium/cilium/issues/44863), [@&#8203;sekhar-isovalent](https://github.com/sekhar-isovalent)) - sockets: Ensure bpffs is mounted in TestPrivilegedSocketDestroyers (Backport PR [#&#8203;45052](https://github.com/cilium/cilium/issues/45052), Upstream PR [#&#8203;44979](https://github.com/cilium/cilium/issues/44979), [@&#8203;christarazi](https://github.com/christarazi)) **Misc Changes:** - .github/workflows: do not use deployments for environments (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;44908](https://github.com/cilium/cilium/issues/44908), [@&#8203;aanm](https://github.com/aanm)) - \[v1.19] vendor: update google.golang.org/grpc to v1.79.3 ([#&#8203;45345](https://github.com/cilium/cilium/issues/45345), [@&#8203;aanm](https://github.com/aanm)) - bgp: Disable MPTCP in the MD5 probing in the test (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45102](https://github.com/cilium/cilium/issues/45102), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - bgp: Introduce --with-attrs option to bgp/routes (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45015](https://github.com/cilium/cilium/issues/45015), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - bpf: lxc: limit NAT buffer lookup to per-packet LB (Backport PR [#&#8203;44968](https://github.com/cilium/cilium/issues/44968), Upstream PR [#&#8203;44387](https://github.com/cilium/cilium/issues/44387), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - bpf: Reduce scope of large variables (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;45067](https://github.com/cilium/cilium/issues/45067), [@&#8203;pchaigno](https://github.com/pchaigno)) - bpf: Use global function for `snat_v6_needs_masquerade` (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44544](https://github.com/cilium/cilium/issues/44544), [@&#8203;pchaigno](https://github.com/pchaigno)) - bpf\_lxc: improve per-packet LB for NodePort services (Backport PR [#&#8203;44968](https://github.com/cilium/cilium/issues/44968), Upstream PR [#&#8203;44710](https://github.com/cilium/cilium/issues/44710), [@&#8203;saiaunghlyanhtet](https://github.com/saiaunghlyanhtet)) - chore(deps): update all github action dependencies (v1.19) ([#&#8203;44934](https://github.com/cilium/cilium/issues/44934), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.19) ([#&#8203;45038](https://github.com/cilium/cilium/issues/45038), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.19) ([#&#8203;45169](https://github.com/cilium/cilium/issues/45169), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.19) ([#&#8203;45304](https://github.com/cilium/cilium/issues/45304), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.19) ([#&#8203;44674](https://github.com/cilium/cilium/issues/44674), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.19) ([#&#8203;45039](https://github.com/cilium/cilium/issues/45039), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.19) ([#&#8203;45305](https://github.com/cilium/cilium/issues/45305), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update base-images (v1.19) ([#&#8203;44786](https://github.com/cilium/cilium/issues/44786), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update base-images to v1.25.9 (v1.19) ([#&#8203;45273](https://github.com/cilium/cilium/issues/45273), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update dependency bufbuild/buf to v1.67.0 (v1.19) ([#&#8203;45167](https://github.com/cilium/cilium/issues/45167), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/little-vm-helper to v0.0.29 (v1.19) ([#&#8203;45280](https://github.com/cilium/cilium/issues/45280), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/busybox:1.37.0 docker digest to [`1487d0a`](https://github.com/cilium/cilium/commit/1487d0a) (v1.19) ([#&#8203;45035](https://github.com/cilium/cilium/issues/45035), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.25.9 docker digest to [`a95d3d1`](https://github.com/cilium/cilium/commit/a95d3d1) (v1.19) ([#&#8203;45315](https://github.com/cilium/cilium/issues/45315), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.6.9 (v1.19) ([#&#8203;44929](https://github.com/cilium/cilium/issues/44929), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 \[security] (v1.19) ([#&#8203;45149](https://github.com/cilium/cilium/issues/45149), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update module sigs.k8s.io/kube-api-linter to v0.0.0-20260320123815-c9b9b51b278a (v1.19) ([#&#8203;44930](https://github.com/cilium/cilium/issues/44930), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update module sigs.k8s.io/kube-api-linter to v0.0.0-20260408163332-73b2175ca510 (v1.19) ([#&#8203;45302](https://github.com/cilium/cilium/issues/45302), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.35.9-1773729248-8de84653be3b2b3011e1cee5b3e702f6556fb3df (v1.19) ([#&#8203;44931](https://github.com/cilium/cilium/issues/44931), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.35.9-1774363526-9d47d40f80df306891816788b71415813ce49ef3 (v1.19) ([#&#8203;45036](https://github.com/cilium/cilium/issues/45036), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.5-1775137579-2b3493aca96923190423ccec7e4dbc5f074ccad4 (v1.19) ([#&#8203;45168](https://github.com/cilium/cilium/issues/45168), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.6-1775912317-d56e4f5fec87556b7aaf3b8edeb100025ec87183 (v1.19) ([#&#8203;45303](https://github.com/cilium/cilium/issues/45303), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.6-1776000132-2437d2edeaf4d9b56ef279bd0d71127440c067aa (v1.19) ([#&#8203;45320](https://github.com/cilium/cilium/issues/45320), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/goswagger/swagger docker tag to v0.33.2 (v1.19) ([#&#8203;44932](https://github.com/cilium/cilium/issues/44932), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.19) (patch) ([#&#8203;45037](https://github.com/cilium/cilium/issues/45037), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - docs: document reverse\_sk map exhaustion impact on socket termination (Backport PR [#&#8203;44860](https://github.com/cilium/cilium/issues/44860), Upstream PR [#&#8203;44835](https://github.com/cilium/cilium/issues/44835), [@&#8203;ysksuzuki](https://github.com/ysksuzuki)) - docs: Update sphinx theme to v3.1.0 (Backport PR [#&#8203;45335](https://github.com/cilium/cilium/issues/45335), Upstream PR [#&#8203;45289](https://github.com/cilium/cilium/issues/45289), [@&#8203;joestringer](https://github.com/joestringer)) - Fix EKS workflows misc errors (Backport PR [#&#8203;45052](https://github.com/cilium/cilium/issues/45052), Upstream PR [#&#8203;45023](https://github.com/cilium/cilium/issues/45023), [@&#8203;aanm](https://github.com/aanm)) - fix(deps): update k8s.io patch updates stable to v0.35.3 (v1.19) (patch) ([#&#8203;44933](https://github.com/cilium/cilium/issues/44933), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - fix(deps): update k8s.io/utils digest to [`28399d8`](https://github.com/cilium/cilium/commit/28399d8) (v1.19) ([#&#8203;44928](https://github.com/cilium/cilium/issues/44928), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - fix(deps): update sigs.k8s.io/mcs-api/controllers digest to [`4b9911b`](https://github.com/cilium/cilium/commit/4b9911b) (v1.19) ([#&#8203;45177](https://github.com/cilium/cilium/issues/45177), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - fix: using a local action needs checkout in eks-cluster-delete (Backport PR [#&#8203;44994](https://github.com/cilium/cilium/issues/44994), Upstream PR [#&#8203;44890](https://github.com/cilium/cilium/issues/44890), [@&#8203;sekhar-isovalent](https://github.com/sekhar-isovalent)) - helm: Use bash instead of sh in init containers for Ubuntu 24.04 compatibility (Backport PR [#&#8203;44828](https://github.com/cilium/cilium/issues/44828), Upstream PR [#&#8203;44615](https://github.com/cilium/cilium/issues/44615), [@&#8203;shivdesh](https://github.com/shivdesh)) - Probe support for BIG TCP for tunnels instead of relying on the config option. (Backport PR [#&#8203;45211](https://github.com/cilium/cilium/issues/45211), Upstream PR [#&#8203;43959](https://github.com/cilium/cilium/issues/43959), [@&#8203;gentoo-root](https://github.com/gentoo-root)) **Other Changes:** - \[v1.19] deps: bump cni plugins to v1.9.1 ([#&#8203;45240](https://github.com/cilium/cilium/issues/45240), [@&#8203;ferozsalam](https://github.com/ferozsalam)) - chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.6.10 (v1.19) ([#&#8203;45166](https://github.com/cilium/cilium/issues/45166), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - install: Update image digests for v1.19.2 ([#&#8203;44957](https://github.com/cilium/cilium/issues/44957), [@&#8203;cilium-release-bot](https://github.com/cilium-release-bot)\[bot]) - loadbalancer: Fix issue in resynchronization of state from api-server which may have left stale backends around until an updated EndpointSlice was received ([#&#8203;45198](https://github.com/cilium/cilium/issues/45198), [@&#8203;joamaki](https://github.com/joamaki)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.19.3@&#8203;sha256:2e61680593cddca8b6c055f6d4c849d87a26a1c91c7e3b8b56c7fb76ab7b7b10` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.19.3@&#8203;sha256:a8136a7615d6c6041d3aa6f2674d17beaec238170d669507ccc05328a778e2b7` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.19.3@&#8203;sha256:728c3903518b0b6904e7208143355b38b7e6de3b514694fb6098b25bb9457397` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.19.3@&#8203;sha256:5ee21d57b6ef2aa6db67e603a735fdceb162454b352b7335b651456e308f681b` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.19.3@&#8203;sha256:176321a65123373ff8c7823b25183102cbad98375e8d6c80b96d68b6e8491103` ##### operator-aws `quay.io/cilium/operator-aws:v1.19.3@&#8203;sha256:a53dcbfb77282bf2ddd3abbe60f6d49762e7c1389a36cb35b71d504644a56640` ##### operator-azure `quay.io/cilium/operator-azure:v1.19.3@&#8203;sha256:699c1571a3df1a98882ee13610d47cffb7b34ee7e8d276096db798a5f6c7e4cb` ##### operator-generic `quay.io/cilium/operator-generic:v1.19.3@&#8203;sha256:205b09b0ed6accbf9fe688d312a9f0fcfc6a316fc081c23fbffb472af5dd62cd` ##### operator `quay.io/cilium/operator:v1.19.3@&#8203;sha256:9075e6944996227574762ec0118caab0145d6e67f821409c4a6756b6b6caf6ea` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43My4wIiwidXBkYXRlZEluVmVyIjoiNDEuNzMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
chore(deps): update helm release cilium to v1.19.3
All checks were successful
Notify Mattermost on Renovate PR Merge / notify (pull_request) Successful in 1s
Details
f0e88e41a8
renovatebot scheduled this pull request to auto merge when all checks succeed 2026-04-16 00:04:44 -04:00
renovatebot deleted branch renovate/cilium-1.x 2026-04-17 00:05:51 -04:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
smig/nuc-talos!37
No description provided.