Release v0.20.0

Summary of Changes

Minor Changes:

• CiliumPodIPPools now support reservedRanges for multi-pool IPAM. (cilium/cilium#46880, @kyounghoonJang)
• envoy: Add support for HTTP CONNECT (cilium/cilium#45051, @nezdolik)

Bugfixes:

• Fixed cilium connectivity perf always reporting Cilium version: 0.0.0 instead of the actual detected Cilium version. (cilium/cilium#47927, @khaddict)
• sysdump: reject collected file names that resolve outside the sysdump directory (cilium/cilium#46609, @sage-mode-hunter)

CI Changes:

• cilium-cli: add connectivity test for toFQDNs on host (cilium/cilium#45026, @atykhyy)
• cilium-cli: bump test-connection-disruption image to v0.0.18 (cilium/cilium#47806, @aanm)
• cilium-cli: disable host-firewall-egress-to-fqdns test on RHEL (cilium/cilium#47970, @atykhyy)
• cilium-cli: don't count pods rejected before running as live (cilium/cilium#47839, @aanm)
• cilium-cli: keep connectivity perf usable without Cilium (cilium/cilium#48128, @aanm)
• cilium-cli: Skip HostToWorld if no external IPv6 (cilium/cilium#47931, @joamaki)

Misc Changes:

• [CFP-39876]: Add connectivity test for non-global namespace isolation (cilium/cilium#46604, @jimassa)
• chore(deps): update all-dependencies (main) (cilium/cilium#47744, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#47859, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#48145, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#47947, @cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#48095, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.26.5 docker digest to 2005724 (main) (cilium/cilium#47860, @cilium-renovate[bot])
• cilium-cli/clustermesh: log enable messages via Parameters.Writer (cilium/cilium#47439, @FirePheonix)
• cilium-cli: Replace reflect.DeepEqual with assert.Equal in tests (cilium/cilium#47533, @HadrienPatte)
• CLI: add toleration for a single etcd container restart (cilium/cilium#48106, @giorio94)
• CLI: add toleration for three more log warnings (cilium/cilium#48091, @giorio94)
• cli: the CLI now considers the ENI IPv6 beta warning log as expected and detects EKS flavor for IPv6 EKS clusters. (cilium/cilium#47524, @41ks)
• Revert "cli: drop restarts exclusion for Cilium v1.16 and earlier" (cilium/cilium#48115, @giorio94)
• Update all-dependencies (main) (cilium/cilium#47654, @cilium-renovate[bot])
• Use k8s API constants instead of string literals (cilium/cilium#47505, @HadrienPatte)
• Update stable release to v0.19.7 by @michi-covalent in #3280
• chore(deps): update dependency cilium/cilium to v1.19.6 by @renovate[bot] in #3279
• README.md: Update compatible Cilium versions by @michi-covalent in #3281
• chore(deps): update docker.io/library/golang docker tag to v1.26.5 by @renovate[bot] in #3282
• action: retry Cilium CLI download in case of errors by @giorio94 in #3286
• chore(deps): update docker.io/library/golang:1.26.5 docker digest to 2005724 by @renovate[bot] in #3285
• build(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @dependabot[bot] in #3272
• chore(deps): update actions/stale action to v11 by @renovate[bot] in #3283
• chore(deps): update dependency cilium/cilium to v1.20.0 by @renovate[bot] in #3284
• chore(deps): update golangci/golangci-lint docker tag to v2.12.2 by @renovate[bot] in #3287
• chore(deps): update dependency go to v1.26.6 by @renovate[bot] in #3288
• chore(deps): update golangci/golangci-lint docker tag to v2.13.1 by @renovate[bot] in #3292
• chore(deps): update dependency cilium/cilium to v1.20.1 by @renovate[bot] in #3289
• chore(deps): update docker/setup-buildx-action action to v4.3.0 by @renovate[bot] in #3290
• chore(deps): update gcr.io/distroless/static:latest docker digest to f2ea270 by @renovate[bot] in #3293
• chore(deps): update go to v1.27.0 by @renovate[bot] in #3291
• Prepare for v0.20.0 release by @tklauser in #3294

Full Changelog: v0.19.7...v0.20.0