Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all github action dependencies (v1.15) #32366

Merged
merged 1 commit into from
May 6, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 6, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.1.1 -> v4.1.4
actions/download-artifact action patch v4.1.5 -> v4.1.7
actions/setup-go action patch v5.0.0 -> v5.0.1
actions/upload-artifact action patch v4.3.2 -> v4.3.3
actions/upload-artifact action digest 1746f4a -> 6546280
eksctl-io/eksctl minor v0.175.0 -> v0.176.0
golangci/golangci-lint-action action major v4.0.0 -> v5.3.0
helm/kind-action action minor v1.9.0 -> v1.10.0

Release Notes

actions/checkout (actions/checkout)

v4.1.4

Compare Source

v4.1.3

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

actions/download-artifact (actions/download-artifact)

v4.1.7

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.6...v4.1.7

v4.1.6

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.1.5...v4.1.6

actions/setup-go (actions/setup-go)

v5.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

actions/upload-artifact (actions/upload-artifact)

v4.3.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

eksctl-io/eksctl (eksctl-io/eksctl)

v0.176.0: eksctl 0.176.0

Compare Source

Release v0.176.0

🚀 Features

  • Add support for AMIs based on AmazonLinux2023 (#​7684)

🎯 Improvements

  • Display full draft release notes in PR description (#​7686)

🐛 Bug Fixes

  • Enforce authenticationMode:CONFIG\_MAP on Outposts (#​7699)
  • [EKSCTL create cluster command] Authorise self-managed nodes via aws-auth configmap when EKS access entries are disabled (#​7698)
  • Allow GPU instance types for Windows nodes (#​7681)
  • Include MixedInstancesPolicy LaunchTemplate for validation (#​7661)
  • Aim for namespace uniqueness across parallel integration tests specs (#​7680)

🧰 Maintenance

Acknowledgments

The eksctl maintainers would like to sincerely thank @​qclaogui.

golangci/golangci-lint-action (golangci/golangci-lint-action)

v5.3.0

Compare Source

What's Changed

Changes

Full Changelog: golangci/golangci-lint-action@v5.2.0...v5.3.0

v5.2.0

Compare Source

v5.1.0

Compare Source

What's Changed

Changes
Dependencies

Full Changelog: golangci/golangci-lint-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

What's Changed

skip-pkg-cache and skip-build-cache have been removed because the cache related to Go itself is already handled by actions/setup-go.

Changes

New Contributors

Full Changelog: golangci/golangci-lint-action@v4.0.1...v5.0.0

v4.0.1

Compare Source

What's Changed

Documentation
Dependencies

New Contributors

Full Changelog: golangci/golangci-lint-action@v4.0.0...v4.0.1

helm/kind-action (helm/kind-action)

v1.10.0

Compare Source

Requirements

We changed to use wget instead of curl

What's Changed

Full Changelog: helm/kind-action@v1.9.0...v1.10.0


Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Signed-off-by: renovate[bot] <bot@renovateapp.com>
@renovate renovate bot requested review from a team as code owners May 6, 2024 05:42
@renovate renovate bot added kind/enhancement This would improve or streamline existing functionality. release-note/misc This PR makes changes that have no direct user impact. renovate/stop-updating Tell Renovate to stop updating PR labels May 6, 2024
@renovate renovate bot requested a review from brlbil May 6, 2024 05:42
@maintainer-s-little-helper maintainer-s-little-helper bot added backport/1.15 This PR represents a backport for Cilium 1.15.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. labels May 6, 2024
@github-actions github-actions bot added the kind/community-contribution This was a contribution made by a community member. label May 6, 2024
@julianwiedmann
Copy link
Member

/test-backport-1.15

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label May 6, 2024
@julianwiedmann julianwiedmann merged commit 19e7b69 into v1.15 May 6, 2024
231 checks passed
@julianwiedmann julianwiedmann deleted the renovate/v1.15-all-github-action branch May 6, 2024 07:41
github-merge-queue bot pushed a commit to microsoft/retina that referenced this pull request May 15, 2024
Bumps [github.com/cilium/cilium](https://github.com/cilium/cilium) from
1.15.4 to 1.15.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cilium/cilium/blob/1.15.5/CHANGELOG.md">github.com/cilium/cilium's
changelog</a>.</em></p>
<blockquote>
<h2>v1.15.5</h2>
<h2>Summary of Changes</h2>
<p><strong>Minor Changes:</strong></p>
<ul>
<li><code>cilium/cilium#32413</code><a
href="https://github.com/sayboras"><code>@​sayboras</code></a>)</li>
<li>labels: Add controller-uid into default ignore list (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31964">#31964</a>,
<a href="https://github.com/sayboras"><code>@​sayboras</code></a>)</li>
</ul>
<p><strong>Bugfixes:</strong></p>
<ul>
<li>Agent: add kubeconfigPath to initContainers (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32008">#32008</a>,
<a href="https://github.com/darox"><code>@​darox</code></a>)</li>
<li>Avoids drops with &quot;No mapping for NAT masquerade&quot; for ICMP
messages by local service backends. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32155">#32155</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>cilium-cni: Reserve ports that can conflict with transparent DNS
proxy (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32418">#32418</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32128">#32128</a>,
<a href="https://github.com/gandro"><code>@​gandro</code></a>)</li>
<li>cni: Use correct route MTU when ENI, Azure or Alibaba Cloud IPAM is
enabled (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32244">#32244</a>,
<a
href="https://github.com/learnitall"><code>@​learnitall</code></a>)</li>
<li>dnsproxy: Fix bug where DNS request timed out too soon (Backport PR
<a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31999">#31999</a>,
<a href="https://github.com/gandro"><code>@​gandro</code></a>)</li>
<li>Envoy upstream connections are now unique for each downstream
connection when using the original source address of a source pod.
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32312">#32312</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32270">#32270</a>,
<a
href="https://github.com/jrajahalme"><code>@​jrajahalme</code></a>)</li>
<li>envoy: pass idle timeout configuration option to cilium configmap
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32203">#32203</a>,
<a
href="https://github.com/mhofstetter"><code>@​mhofstetter</code></a>)</li>
<li>Fix failing service connections, when the service requests are
transported via cilium's overlay network. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32116">#32116</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>Fix issue causing clustermesh-apiserver/kvstoremesh to not start
when run with a non-root user (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/31879">#31879</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31539">#31539</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>Fix service connection to terminating backend, when the service has
no more backends available. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32092">#32092</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31840">#31840</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>Fix various bugs related to restart of StatefulSet pods that may
result in connectivity issues (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32432">#32432</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31605">#31605</a>,
<a
href="https://github.com/christarazi"><code>@​christarazi</code></a>)</li>
<li>Fixes a bug where Cilium in chained mode removed the
<code>agent-not-ready</code> taint too early if the primary network is
slow in deploying. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32168">#32168</a>,
<a href="https://github.com/squeed"><code>@​squeed</code></a>)</li>
<li>Fixes an (unlikely) bug where HostFirewall policies may miss updates
to a node's labels. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/30548">#30548</a>,
<a href="https://github.com/squeed"><code>@​squeed</code></a>)</li>
<li>fqdn: fix memory leak in transparent mode when there was a
moderately high number of parallel DNS requests (&gt;100). (Backport PR
<a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31959">#31959</a>,
<a href="https://github.com/marseel"><code>@​marseel</code></a>)</li>
<li>Ingress/Gateway API: merge Envoy listeners for HTTP(S) and TLS
passthrough (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32178">#32178</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31646">#31646</a>,
<a
href="https://github.com/mhofstetter"><code>@​mhofstetter</code></a>)</li>
<li>ipam: retry netlink.LinkList call when setting up ENI devices
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32099">#32099</a>,
<a
href="https://github.com/jasonaliyetti"><code>@​jasonaliyetti</code></a>)</li>
<li>loader: sanitize bpffs directory strings for netdevs (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32090">#32090</a>,
<a href="https://github.com/rgo3"><code>@​rgo3</code></a>)</li>
<li><code>cilium/cilium#32005</code><a
href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>tables: Sort node addresses also by public vs private IP (Backport
PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/30579">#30579</a>,
<a href="https://github.com/joamaki"><code>@​joamaki</code></a>)</li>
</ul>
<p><strong>CI Changes:</strong></p>
<ul>
<li>alibabacloud/eni: avoid racing node mgr in test (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/31967">#31967</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31877">#31877</a>,
<a href="https://github.com/bimmlerd"><code>@​bimmlerd</code></a>)</li>
<li>ci: Filter supported versions of AKS (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32303">#32303</a>,
<a href="https://github.com/marseel"><code>@​marseel</code></a>)</li>
<li>ci: Increase timeout for images for l4lb test (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32201">#32201</a>,
<a href="https://github.com/marseel"><code>@​marseel</code></a>)</li>
<li>ci: Set hubble.relay.retryTimeout=5s (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32066">#32066</a>,
<a href="https://github.com/chancez"><code>@​chancez</code></a>)</li>
<li>enable kube cache mutation detector (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32069">#32069</a>,
<a href="https://github.com/aanm"><code>@​aanm</code></a>)</li>
<li>gha: bump post-upgrade timeout in clustermesh upgrade/downgrade
tests (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32347">#32347</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>gha: configure fully-qualified DNS names as external targets
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31510">#31510</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>gha: drop double installation of Cilium CLI in conformance-eks
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32042">#32042</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>Miscellaneous improvements to the clustermesh upgrade/downgrade test
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31958">#31958</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>route: dedicated net ns for each subtest of runListRules (Backport
PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/29916">#29916</a>,
<a
href="https://github.com/mhofstetter"><code>@​mhofstetter</code></a>)</li>
<li>test: De-flake xds server_e2e_test (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32004">#32004</a>,
<a
href="https://github.com/jrajahalme"><code>@​jrajahalme</code></a>)</li>
<li>workflows: Fix CI jobs for push events on private forks (Backport PR
<a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32085">#32085</a>,
<a href="https://github.com/pchaigno"><code>@​pchaigno</code></a>)</li>
</ul>
<p><strong>Misc Changes:</strong></p>
<ul>
<li>bpf: host: simplify MARK_MAGIC_PROXY_EGRESS_EPID handling (Backport
PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/29803">#29803</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>build(deps): bump pydantic from 2.3.0 to 2.4.0 in /Documentation
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32176">#32176</a>,
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li><code>cilium/cilium#31954</code><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><code>cilium/cilium#32107</code><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><code>cilium/cilium#32366</code><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cilium/cilium/commit/8c7e442ccd48b9011a10f34a128ec98751d9a80e"><code>8c7e442</code></a>
Prepare for release v1.15.5</li>
<li><a
href="https://github.com/cilium/cilium/commit/05e5d8ff6f37aa2d854f6a3565310428081c523b"><code>05e5d8f</code></a>
images: update cilium-{runtime,builder}</li>
<li><a
href="https://github.com/cilium/cilium/commit/67e80e3205cb4fff3028947d262b58cb62c533d2"><code>67e80e3</code></a>
k8s/watchers: Fix pod IP modified check</li>
<li><a
href="https://github.com/cilium/cilium/commit/6cc13936114175122ac2d2000aec17583cc96546"><code>6cc1393</code></a>
daemon,endpoint,cni: Pass pod UID through CNI ADD</li>
<li><a
href="https://github.com/cilium/cilium/commit/c5ae085561e01ed0614408a274f3a182ddcfaa5c"><code>c5ae085</code></a>
watchers: Detect Pod UID changes</li>
<li><a
href="https://github.com/cilium/cilium/commit/6750bb330d22ae9eff7c780be518864d34aa7370"><code>6750bb3</code></a>
daemon, endpoint: Consolidate K8s metadata into struct</li>
<li><a
href="https://github.com/cilium/cilium/commit/b09552599b61ab595b887bed3dbb3a3031b15a26"><code>b095525</code></a>
k8s/watcher: Remove outdated comments about K8sEventHandover</li>
<li><a
href="https://github.com/cilium/cilium/commit/fa03bba448d1a5082c0587bd4c1507df2145f5d7"><code>fa03bba</code></a>
cilium-cni: Reserve ports that can conflict with transparent DNS
proxy</li>
<li><a
href="https://github.com/cilium/cilium/commit/a29a4ab80100a442289605d00a5e8aa5cf927f35"><code>a29a4ab</code></a>
wireguard: Export ListenPort constant</li>
<li><a
href="https://github.com/cilium/cilium/commit/eb7b7448429c3fe852e899adaa8c719d9b2ef600"><code>eb7b744</code></a>
wireguard: Remove unused constants</li>
<li>Additional commits viewable in <a
href="https://github.com/cilium/cilium/compare/1.15.4...1.15.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cilium/cilium&package-manager=go_modules&previous-version=1.15.4&new-version=1.15.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evan Baker <rbtr@users.noreply.github.com>
matmerr pushed a commit to matmerr/retina that referenced this pull request Jul 3, 2024
)

Bumps [github.com/cilium/cilium](https://github.com/cilium/cilium) from
1.15.4 to 1.15.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cilium/cilium/blob/1.15.5/CHANGELOG.md">github.com/cilium/cilium's
changelog</a>.</em></p>
<blockquote>
<h2>v1.15.5</h2>
<h2>Summary of Changes</h2>
<p><strong>Minor Changes:</strong></p>
<ul>
<li><code>cilium/cilium#32413</code><a
href="https://github.com/sayboras"><code>@​sayboras</code></a>)</li>
<li>labels: Add controller-uid into default ignore list (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31964">#31964</a>,
<a href="https://github.com/sayboras"><code>@​sayboras</code></a>)</li>
</ul>
<p><strong>Bugfixes:</strong></p>
<ul>
<li>Agent: add kubeconfigPath to initContainers (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32008">#32008</a>,
<a href="https://github.com/darox"><code>@​darox</code></a>)</li>
<li>Avoids drops with &quot;No mapping for NAT masquerade&quot; for ICMP
messages by local service backends. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32155">#32155</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>cilium-cni: Reserve ports that can conflict with transparent DNS
proxy (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32418">#32418</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32128">#32128</a>,
<a href="https://github.com/gandro"><code>@​gandro</code></a>)</li>
<li>cni: Use correct route MTU when ENI, Azure or Alibaba Cloud IPAM is
enabled (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32244">#32244</a>,
<a
href="https://github.com/learnitall"><code>@​learnitall</code></a>)</li>
<li>dnsproxy: Fix bug where DNS request timed out too soon (Backport PR
<a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31999">#31999</a>,
<a href="https://github.com/gandro"><code>@​gandro</code></a>)</li>
<li>Envoy upstream connections are now unique for each downstream
connection when using the original source address of a source pod.
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32312">#32312</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32270">#32270</a>,
<a
href="https://github.com/jrajahalme"><code>@​jrajahalme</code></a>)</li>
<li>envoy: pass idle timeout configuration option to cilium configmap
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32203">#32203</a>,
<a
href="https://github.com/mhofstetter"><code>@​mhofstetter</code></a>)</li>
<li>Fix failing service connections, when the service requests are
transported via cilium's overlay network. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32116">#32116</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>Fix issue causing clustermesh-apiserver/kvstoremesh to not start
when run with a non-root user (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/31879">#31879</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31539">#31539</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>Fix service connection to terminating backend, when the service has
no more backends available. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32092">#32092</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31840">#31840</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>Fix various bugs related to restart of StatefulSet pods that may
result in connectivity issues (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32432">#32432</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31605">#31605</a>,
<a
href="https://github.com/christarazi"><code>@​christarazi</code></a>)</li>
<li>Fixes a bug where Cilium in chained mode removed the
<code>agent-not-ready</code> taint too early if the primary network is
slow in deploying. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32168">#32168</a>,
<a href="https://github.com/squeed"><code>@​squeed</code></a>)</li>
<li>Fixes an (unlikely) bug where HostFirewall policies may miss updates
to a node's labels. (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/30548">#30548</a>,
<a href="https://github.com/squeed"><code>@​squeed</code></a>)</li>
<li>fqdn: fix memory leak in transparent mode when there was a
moderately high number of parallel DNS requests (&gt;100). (Backport PR
<a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31959">#31959</a>,
<a href="https://github.com/marseel"><code>@​marseel</code></a>)</li>
<li>Ingress/Gateway API: merge Envoy listeners for HTTP(S) and TLS
passthrough (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32178">#32178</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31646">#31646</a>,
<a
href="https://github.com/mhofstetter"><code>@​mhofstetter</code></a>)</li>
<li>ipam: retry netlink.LinkList call when setting up ENI devices
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32099">#32099</a>,
<a
href="https://github.com/jasonaliyetti"><code>@​jasonaliyetti</code></a>)</li>
<li>loader: sanitize bpffs directory strings for netdevs (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32090">#32090</a>,
<a href="https://github.com/rgo3"><code>@​rgo3</code></a>)</li>
<li><code>cilium/cilium#32005</code><a
href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>tables: Sort node addresses also by public vs private IP (Backport
PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/30579">#30579</a>,
<a href="https://github.com/joamaki"><code>@​joamaki</code></a>)</li>
</ul>
<p><strong>CI Changes:</strong></p>
<ul>
<li>alibabacloud/eni: avoid racing node mgr in test (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/31967">#31967</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31877">#31877</a>,
<a href="https://github.com/bimmlerd"><code>@​bimmlerd</code></a>)</li>
<li>ci: Filter supported versions of AKS (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32303">#32303</a>,
<a href="https://github.com/marseel"><code>@​marseel</code></a>)</li>
<li>ci: Increase timeout for images for l4lb test (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32201">#32201</a>,
<a href="https://github.com/marseel"><code>@​marseel</code></a>)</li>
<li>ci: Set hubble.relay.retryTimeout=5s (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32066">#32066</a>,
<a href="https://github.com/chancez"><code>@​chancez</code></a>)</li>
<li>enable kube cache mutation detector (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32069">#32069</a>,
<a href="https://github.com/aanm"><code>@​aanm</code></a>)</li>
<li>gha: bump post-upgrade timeout in clustermesh upgrade/downgrade
tests (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32347">#32347</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>gha: configure fully-qualified DNS names as external targets
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31510">#31510</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>gha: drop double installation of Cilium CLI in conformance-eks
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32042">#32042</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>Miscellaneous improvements to the clustermesh upgrade/downgrade test
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/31958">#31958</a>,
<a href="https://github.com/giorio94"><code>@​giorio94</code></a>)</li>
<li>route: dedicated net ns for each subtest of runListRules (Backport
PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/29916">#29916</a>,
<a
href="https://github.com/mhofstetter"><code>@​mhofstetter</code></a>)</li>
<li>test: De-flake xds server_e2e_test (Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32103">#32103</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32004">#32004</a>,
<a
href="https://github.com/jrajahalme"><code>@​jrajahalme</code></a>)</li>
<li>workflows: Fix CI jobs for push events on private forks (Backport PR
<a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32085">#32085</a>,
<a href="https://github.com/pchaigno"><code>@​pchaigno</code></a>)</li>
</ul>
<p><strong>Misc Changes:</strong></p>
<ul>
<li>bpf: host: simplify MARK_MAGIC_PROXY_EGRESS_EPID handling (Backport
PR <a
href="https://redirect.github.com/cilium/cilium/issues/32384">#32384</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/29803">#29803</a>,
<a
href="https://github.com/julianwiedmann"><code>@​julianwiedmann</code></a>)</li>
<li>build(deps): bump pydantic from 2.3.0 to 2.4.0 in /Documentation
(Backport PR <a
href="https://redirect.github.com/cilium/cilium/issues/32230">#32230</a>,
Upstream PR <a
href="https://redirect.github.com/cilium/cilium/issues/32176">#32176</a>,
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li><code>cilium/cilium#31954</code><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><code>cilium/cilium#32107</code><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><code>cilium/cilium#32366</code><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cilium/cilium/commit/8c7e442ccd48b9011a10f34a128ec98751d9a80e"><code>8c7e442</code></a>
Prepare for release v1.15.5</li>
<li><a
href="https://github.com/cilium/cilium/commit/05e5d8ff6f37aa2d854f6a3565310428081c523b"><code>05e5d8f</code></a>
images: update cilium-{runtime,builder}</li>
<li><a
href="https://github.com/cilium/cilium/commit/67e80e3205cb4fff3028947d262b58cb62c533d2"><code>67e80e3</code></a>
k8s/watchers: Fix pod IP modified check</li>
<li><a
href="https://github.com/cilium/cilium/commit/6cc13936114175122ac2d2000aec17583cc96546"><code>6cc1393</code></a>
daemon,endpoint,cni: Pass pod UID through CNI ADD</li>
<li><a
href="https://github.com/cilium/cilium/commit/c5ae085561e01ed0614408a274f3a182ddcfaa5c"><code>c5ae085</code></a>
watchers: Detect Pod UID changes</li>
<li><a
href="https://github.com/cilium/cilium/commit/6750bb330d22ae9eff7c780be518864d34aa7370"><code>6750bb3</code></a>
daemon, endpoint: Consolidate K8s metadata into struct</li>
<li><a
href="https://github.com/cilium/cilium/commit/b09552599b61ab595b887bed3dbb3a3031b15a26"><code>b095525</code></a>
k8s/watcher: Remove outdated comments about K8sEventHandover</li>
<li><a
href="https://github.com/cilium/cilium/commit/fa03bba448d1a5082c0587bd4c1507df2145f5d7"><code>fa03bba</code></a>
cilium-cni: Reserve ports that can conflict with transparent DNS
proxy</li>
<li><a
href="https://github.com/cilium/cilium/commit/a29a4ab80100a442289605d00a5e8aa5cf927f35"><code>a29a4ab</code></a>
wireguard: Export ListenPort constant</li>
<li><a
href="https://github.com/cilium/cilium/commit/eb7b7448429c3fe852e899adaa8c719d9b2ef600"><code>eb7b744</code></a>
wireguard: Remove unused constants</li>
<li>Additional commits viewable in <a
href="https://github.com/cilium/cilium/compare/1.15.4...1.15.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/cilium/cilium&package-manager=go_modules&previous-version=1.15.4&new-version=1.15.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evan Baker <rbtr@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/1.15 This PR represents a backport for Cilium 1.15.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. kind/community-contribution This was a contribution made by a community member. kind/enhancement This would improve or streamline existing functionality. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/misc This PR makes changes that have no direct user impact. renovate/stop-updating Tell Renovate to stop updating PR
Projects
No open projects
Status: Released
Development

Successfully merging this pull request may close these issues.

2 participants