Prepare for release v1.13.16

[nebril]

Summary of Changes

Minor Changes:

• bugtool: Collect hubble metrics (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR bugtool: Collect hubble metrics #31533, @chancez)
• envoy: Bump go version to 1.21.10 (envoy: Bump go version to 1.21.10 #32415, @sayboras)
• Fix overlapping keys in agent-side service BPF map cache used for retries. In rare cases this bug may have caused retrying of a failed BPF map update for a services entry to be skipped leading to a missing entry. This may have, for example, adversely affected recovering from a full BPF service map after excess services were removed. (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR daemon: add BackendSlot to Service6Key.String and Service4Key.String #29581, @xyz-li)

Bugfixes:

• Agent: add kubeconfigPath to initContainers (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR Agent: add kubeconfigPath to initContainers #32008, @darox)
• cilium-cni: Reserve ports that can conflict with transparent DNS proxy (Backport PR [v1.13] cilium-cni: Reserve ports that can conflict with transparent DNS proxy #32420, Upstream PR cilium-cni: Reserve ports that can conflict with transparent DNS proxy #32128, @gandro)
• cni: Allow text-ts log format value (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR cni: Allow text-ts log format value #31686, @sayboras)
• cni: Use correct route MTU when ENI, Azure or Alibaba Cloud IPAM is enabled (Backport PR v1.13 Backports 2024-05-06 #32386, Upstream PR cni: Use correct route MTU for various cloud cidrs #32244, @learnitall)
• dnsproxy: Fix bug where DNS request timed out too soon (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR dnsproxy: Fix bug where DNS request timed out too soon #31999, @gandro)
• Envoy upstream connections are now unique for each downstream connection when using the original source address of a source pod. (Backport PR [v1.13] envoy: Update to use source port in connection pool hash #32330, Upstream PR envoy: Update to use source port in connection pool hash #32270, @jrajahalme)
• Fixes an (unlikely) bug where HostFirewall policies may miss updates to a node's labels. (Backport PR v1.13 Backports 2024-05-06 #32386, Upstream PR pkg: don't cache Host identity rule matches #30548, @squeed)
• fqdn: fix memory leak in transparent mode when there was a moderately high number of parallel DNS requests (>100). (Backport PR v1.13 Backports 2024-04-18 #32053, Upstream PR fqdn: Fix goroutine leak in transparent-mode #31959, @marseel)
• ipam: retry netlink.LinkList call when setting up ENI devices (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR ipam: retry netlink.LinkList call when setting up ENI devices #32099, @jasonaliyetti)
• xds: Avoid xds timeout due to agent restart in envoy DS mode (Backport PR v1.13 Backports 2024-04-18 #32053, Upstream PR xds: Avoid xds timeout due to agent restart in envoy DS mode #31061, @sayboras)

CI Changes:

• [v1.13] Go linter fix backport ([v1.13] Go linter fix backport #31983, @tklauser)
• ci: Filter supported versions of AKS (Backport PR v1.13 Backports 2024-05-06 #32386, Upstream PR ci: Filter supported versions of AKS #32303, @marseel)
• ci: Increase timeout for images for l4lb test (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR ci: Increase timeout for images for l4lb test #32201, @marseel)
• Miscellaneous improvements to the clustermesh upgrade/downgrade test (Backport PR v1.13 Backports 2024-04-18 #32053, Upstream PR Miscellaneous improvements to the clustermesh upgrade/downgrade test #31958, @giorio94)
• test: De-flake xds server_e2e_test (Backport PR v1.13 Backports 2024-04-18 #32053, Upstream PR test: De-flake xds server_e2e_test #32004, @jrajahalme)
• vagrant: bump box versions to pick up Go 1.20.1 (Backport PR [v1.13] golangci: Enable errorlint #31796, Upstream PR vagrant: bump box versions to pick up Go 1.20.1 #23983, @tklauser)
• workflows: Fix CI jobs for push events on private forks (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR workflows: Fix CI jobs for push events on private forks #32085, @pchaigno)

Misc Changes:

• [v.13] test: Fix Endpoint Test ([v.13] test: Fix Endpoint Test #32197, @nathanjsweet)
• [v1.13] endpoint: Fix Endpoint Integration Tests ([v1.13] endpoint: Fix Endpoint Integration Tests #32171, @nathanjsweet)
• build(deps): bump pydantic from 2.3.0 to 2.4.0 in /Documentation (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR build(deps): bump pydantic from 2.3.0 to 2.4.0 in /Documentation #32176, @dependabot[bot])
• chore(deps): update all github action dependencies (v1.13) (chore(deps): update all github action dependencies (v1.13) #32380, @renovate[bot])
• chore(deps): update dependency cilium/hubble to v0.13.3 (v1.13) (chore(deps): update dependency cilium/hubble to v0.13.3 (v1.13) #32446, @renovate[bot])
• chore(deps): update go to v1.21.10 (v1.13) (chore(deps): update go to v1.21.10 (v1.13) #32374, @renovate[bot])
• chore(deps): update quay.io/cilium/hubble docker tag to v0.13.3 (v1.13) (chore(deps): update quay.io/cilium/hubble docker tag to v0.13.3 (v1.13) #32379, @renovate[bot])
• chore(deps): update stable lvh-images (v1.13) (patch) (chore(deps): update stable lvh-images (v1.13) (patch) #31831, @renovate[bot])
• cilium-dbg: avoid leaking file resources (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR cilium-dbg: avoid leaking file resources #31750, @tklauser)
• command/exec: remove unused (*Cmd).WithFilters method (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR command/exec: remove unused (*Cmd).WithFilters method #25642, @tklauser)
• docs: Fix prometheus port regex (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR docs: Fix prometheus port regex #32030, @JBodkin-Amphora)
• Docs: mark Tetragon as Stable (Backport PR v1.13 Backports 2024-04-18 #32053, Upstream PR Docs: mark Tetragon as Stable #31886, @sharlns)
• endpoint: Skip build queue warning log is context is canceled (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR endpoint: Skip build queue warning log is context is canceled #32132, @jrajahalme)
• Fix spelling in DNS-based proxy info (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR Fix spelling in DNS-based proxy info #31728, @saintdle)
• fqdn: Change error log to warning (Backport PR v1.13 Backports 2024-05-06 #32386, Upstream PR fqdn: Change error log to warning #32333, @jrajahalme)
• fqdn: Fix Upgrade Issue Between PortProto Versions (Backport PR v1.13 Backports 2024-05-06 #32386, Upstream PR fqdn: Fix Upgrade Issue Between PortProto Versions #32325, @nathanjsweet)
• golangci: Enable errorlint (Backport PR [v1.13] golangci: Enable errorlint #31796, Upstream PR golangci: Enable errorlint #31458, @jrajahalme)
• Improve release organization page (Backport PR v1.13 Backports 2024-04-18 #32053, Upstream PR Improve release organization page #31970, @joestringer)
• install/kubernetes: update nodeinit image to latest version (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR install/kubernetes: update nodeinit image to latest version #32181, @tklauser)
• ipsec: Debug info for transient IPsec upgrade drops (Backport PR v1.13 Backports 2024-05-06 #32386, Upstream PR ipsec: Debug info for transient IPsec upgrade drops #32240, @pchaigno)
• Move governance docs to the Cilium community repo (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR Move governance docs to the Cilium community repo #31692, @katiestruthers)
• Remove aks-preview from AKS workflows (Backport PR v1.13 Backports 2024-04-30 #32252, Upstream PR Remove aks-preview from AKS workflows #32118, @marseel)
• Remove Hubble-OTel from the roadmap (Backport PR v1.13 Backports 2024-04-10 #31887, Upstream PR docs: Remove Hubble-OTel from roadmap #31847, @xmulligan)

Other Changes:

• [v1.13-backport] Introduce fromEgressProxyRule ([v1.13-backport] Introduce fromEgressProxyRule #31928, @jschwinger233)
• ci: no longer suppported v1.25 in GKE (ci: no longer suppported v1.25 in GKE #32182, @marseel)
• envoy: Bump envoy version to v1.27.5 (envoy: Bump envoy version to v1.27.5 #32079, @sayboras)
• fix k8s versions tested in CI (fix k8s versions tested in CI #31968, @nbusseneau)
• install: Update image digests for v1.13.15 (install: Update image digests for v1.13.15 #31913, @asauber)