What's Changed

Minor Changes:

• Cilium uninstall now removes annotations from Kubernetes nodes when clean-cilium-state: true (cilium/cilium#39931, @AritraDey-Dev)
• Deprecate v2alpha1 version of CiliumLoadBalancerIPPool CRD in favor of the v2 version (cilium/cilium#39134, @pippolo84)

Bugfixes:

• Fix bug where we would display the Max Seq. Number for IPsec on 32bits. (cilium/cilium#40622, @pchaigno)

CI Changes:

• Add l7 proxy check for to-fqdns connectivity test (cilium/cilium#40549, @vipul-21)
• cli: switch coredns image to registry.k8s.io, and fix renovate (cilium/cilium#40706, @giorio94)
• connectivity: Allow customization of tcpdump kill timeout (cilium/cilium#40774, @gentoo-root)
• connectivity: rework sniffer to execute tcpdump in background (cilium/cilium#40487, @smagnani96)

Misc Changes:

• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e (main) (cilium/cilium#40379, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be (main) (cilium/cilium#40738, @cilium-renovate[bot])
• chore(deps): update go to v1.24.5 (main) (cilium/cilium#40496, @cilium-renovate[bot])
• cilium-cli: Print partial output upon bgp peers errors (cilium/cilium#40278, @rastislavs)
• cilium-cli: Update default network-perf image (cilium/cilium#40376, @HadrienPatte)
• cilium-cli: Use slim k8s packages for connectivity tests (cilium/cilium#40708, @HadrienPatte)
• Fix misc typos (cilium/cilium#40769, @HadrienPatte)
• go.mod, vendor: pull in charts for Cilium 1.18.0 and Tetragon 1.5.0 (cilium/cilium#40823, @tklauser)
• Miscellaneous improvements to option.NewNamedMapOptions (cilium/cilium#40529, @giorio94)
• The unableTranslateCIDRgroups variable is removed as it is not used since the v1.17 release (cilium/cilium#40267, @Surya-7890)
• vendor: Update github.com/google/go-github to v73 (cilium/cilium#40326, @HadrienPatte)
• Update stable release to v0.18.5 by @tklauser in #3060
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e by @renovate[bot] in #3061
• Update RELEASE.md by @michi-covalent in #3062
• chore(deps): update golang docker tag to v1.24.5 by @renovate[bot] in #3063
• chore(deps): update go to v1.24.5 (patch) by @renovate[bot] in #3065
• chore(deps): update golangci/golangci-lint docker tag to v2.2.2 by @renovate[bot] in #3066
• chore(deps): update dependency cilium/cilium to v1.17.6 by @renovate[bot] in #3068
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 3ebc008 by @renovate[bot] in #3067
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 72ff633 by @renovate[bot] in #3069
• chore(deps): update golang:1.24.5-alpine3.21 docker digest to 6edc205 by @renovate[bot] in #3070
• chore(deps): update golangci/golangci-lint docker tag to v2.3.0 - autoclosed by @renovate[bot] in #3071
• chore(deps): update dependency cilium/cilium to v1.18.0 by @renovate[bot] in #3073
• chore(deps): update docker.io/library/golang:1.24.5 docker digest to ef5b4be by @renovate[bot] in #3072
• Prepare for v0.18.6 release by @tklauser in #3074

Full Changelog: v0.18.5...v0.18.6

What's Changed

Minor Changes:

• cilium-cli: add clustermesh inspect-policy-default-local-cluster command (cilium/cilium#39828, @MrFreezeex)
• cli: add suport for policy-default-local-cluster in connectivity tests (cilium/cilium#39786, @MrFreezeex)
• cli: Enable tolerations flag for all connectivity tests (cilium/cilium#40072, @HadrienPatte)
• Improve EKS cluster name auto-detection by supporting both ARN and eksctl FQDN formats to avoid validation errors caused by overly long names. (cilium/cilium#39500, @zzuckerfrei)

CI Changes:

• cli,ci,ipsec: create key command and CI integration (cilium/cilium#37722, @viktor-kurchenko)
• connectivity: Include detailed failure messages in test report (cilium/cilium#39866, @aanm)
• fix(summary): arbitrary file access during archive extraction zipslip (cilium/cilium#39896, @odaysec)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#40081, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#40214, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 10c1318 (main) (cilium/cilium#40036, @cilium-renovate[bot])
• chore(deps): update go to v1.24.4 (main) (cilium/cilium#39943, @cilium-renovate[bot])
• cilium-cli: clean up log messages (cilium/cilium#40101, @tklauser)
• cilium-cli: Standardize build args in dockerfile (cilium/cilium#40126, @HadrienPatte)
• cli: Add OpenShift cluster Kind (cilium/cilium#40012, @nebril)
• cli: Do not directly depend on DaemonConfig (cilium/cilium#39907, @brb)
• deps: Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 (cilium/cilium#40224, @HadrienPatte)
• docs: Add cmdref for cilium-cli (cilium/cilium#40017, @HadrienPatte)
• go.mod, vendor: bump github.com/google/go-github to v72 (cilium/cilium#40104, @tklauser)
• lint: Update staticcheck config in golangci-lint (cilium/cilium#40201, @sayboras)
• Test failure message included in Junit report of the connectivity tests. (cilium/cilium#40035, @mathpl)
• tools: Move codeowners library from cilium-cli dir (cilium/cilium#40253, @joestringer)
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 81bf592 by @renovate in #3044
• chore(deps): update golang docker tag to v1.24.4 by @renovate in #3046
• chore(deps): update softprops/action-gh-release action to v2.3.0 by @renovate in #3047
• chore(deps): update go to v1.24.4 (patch) by @renovate in #3045
• chore(deps): update softprops/action-gh-release action to v2.3.2 by @renovate in #3048
• chore(deps): update gcr.io/distroless/static:latest docker digest to b7b9a69 by @renovate in #3049
• chore(deps): update docker/setup-buildx-action action to v3.11.0 by @renovate in #3050
• RELEASE.md: drop reference to v0.10 branch by @tklauser in #3051
• Update stable release to v0.18.4 by @michi-covalent in #3052
• chore(deps): update docker/setup-buildx-action action to v3.11.1 by @renovate in #3053
• chore(deps): update golangci/golangci-lint docker tag to v2.2.0 by @renovate in #3057
• chore(deps): update dependency cilium/cilium to v1.17.5 by @renovate in #3054
• chore(deps): update docker.io/library/golang:1.24.4 docker digest to 10c1318 by @renovate in #3055
• chore(deps): update golangci/golangci-lint docker tag to v2.2.1 by @renovate in #3058
• Prepare for v0.18.5 release by @tklauser in #3059

Full Changelog: v0.18.4...v0.18.5

What's Changed

Major Changes:

• Add support for VXLAN in IPsec (VinE) (cilium/cilium#37723, @ldelossa)
• Promote CiliumLoadBalancerIPPool CRD to v2 API version (cilium/cilium#39090, @pippolo84)
• Support IPv6 as a tunneling underlay. (cilium/cilium#38296, @pchaigno)

Minor Changes:

• Add support for IPv6 egress gateway policies (cilium/cilium#38452, @rgo3)
• cilium-cli: Fix ipv6 ping regex (cilium/cilium#38814, @yrsuthari)
• policy: Add validation and docs for TLS SNI ServerNames (cilium/cilium#38615, @sayboras)
• Since pod CIDRs are now stored into the ipcache map, tunnel map is not needed anymore. Any reference to the tunnel map have been removed from cilium-dbg, cilium status and bugtool. (cilium/cilium#38839, @pippolo84)

Bugfixes:

• cli: default to SPDY connection for exec (cilium/cilium#38988, @asauber)
• gateway-api: Fix parentRefMatched to check Group and Kind (cilium/cilium#39275, @syedazeez337)

CI Changes:

• Assign codeowners for no-errors-in-logs testcase (cilium/cilium#38812, @marseel)
• cilium-cli: IPv6 connectivity tests for PodToHostPort (cilium/cilium#39666, @gentoo-root)
• cilium-cli: Use v2alpha1 version of CCG for Cilium versions below v1.18 (cilium/cilium#39776, @christarazi)
• cilium-cli:fix: account for current TunnelPort when building tcpdump overlay filters (cilium/cilium#38680, @smagnani96)
• CLI: bump ConnectivityTestConnDisruptImage (cilium/cilium#39200, @darox)
• cli: encryption: improve ICMPv6 NA detection (cilium/cilium#39160, @julianwiedmann)
• cli: Generate each owners field separately (cilium/cilium#38987, @joestringer)
• cli: Simplify junit representation of code owners (cilium/cilium#39020, @joestringer)
• gateway-api: Fix parentRefMatched to check Group and Kind (cilium/cilium#39275, @syedazeez337)

CI Changes:

• Assign codeowners for no-errors-in-logs testcase (cilium/cilium#38812, @marseel)
• cilium-cli: IPv6 connectivity tests for PodToHostPort (cilium/cilium#39666, @gentoo-root)
• cilium-cli: Use v2alpha1 version of CCG for Cilium versions below v1.18 (cilium/cilium#39776, @christarazi)
• cilium-cli:fix: account for current TunnelPort when building tcpdump overlay filters (cilium/cilium#38680, @smagnani96)
• CLI: bump ConnectivityTestConnDisruptImage (cilium/cilium#39200, @darox)
• cli: encryption: improve ICMPv6 NA detection (cilium/cilium#39160, @julianwiedmann)
• cli: Generate each owners field separately (cilium/cilium#38987, @joestringer)
• cli: Simplify junit representation of code owners (cilium/cilium#39020, @joestringer)
• cli: sysdump: collect logs from restarted test pods. (cilium/cilium#38796, @tommyp1ckles)
• connectivity: Correct version check for Ingress test (cilium/cilium#38803, @sayboras)
• connectivity: encryption tests: filter when icmpv6.type == 136 (cilium/cilium#38798, @tommyp1ckles)
• connectivity: Fix flow validation for wildcard tls sni (cilium/cilium#38881, @sayboras)
• feat(connectivity): add network bandwidth management test (cilium/cilium#38390, @l1b0k)
• ipsec: fix connection disruption issue for ipv6 ipsec upgrade scenarios. (cilium/cilium#39061, @ldelossa)
• test/runtime: remove already covered FQDN tests (cilium/cilium#38866, @tklauser)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#39044, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#39686, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 18a1f2d (main) (cilium/cilium#38857, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 1ecc479 (main) (cilium/cilium#38902, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 30baaea (main) (cilium/cilium#39308, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to d9db321 (main) (cilium/cilium#39042, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 4c0a181 (main) (cilium/cilium#39698, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 81bf592 (main) (cilium/cilium#39811, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 86b4cff (main) (cilium/cilium#39596, @cilium-renovate[bot])
• chore(deps): update docker/dockerfile:1.15 docker digest to 9857836 (main) (cilium/cilium#39309, @cilium-renovate[bot])
• chore(deps): update go to v1.24.2 (main) (cilium/cilium#38708, @cilium-renovate[bot])
• chore(deps): update go to v1.24.3 (main) (cilium/cilium#39378, @cilium-renovate[bot])
• cilium-cli: add annotation to indicate we should wait for policy (cilium/cilium#38867, @squeed)
• cilium-cli: add conn tests for ipv6 egress gateway policies (cilium/cilium#38691, @rgo3)
• cilium-cli: Allow BINDIR environment variable to be dynamically configured for install path (cilium/cilium#38799, @mowntan)
• cilium-cli: Capture stderr from tcpdump as an error (cilium/cilium#38884, @gentoo-root)
• cilium-cli: Export codeowners for passing testcases (cilium/cilium#38710, @joestringer)
• cilium-cli: Migrate from corev1.Endpoints to discoveryv1.EndpointSlice (cilium/cilium#39364, @HadrienPatte)
• cli: De-duplicate workflow owners results in junit (cilium/cilium#39157, @joestringer)
• cli: Emit target package for error in logs failure (cilium/cilium#38986, @joestringer)
• cli: encryption: limit tunnel filter to dst port (cilium/cilium#39222, @julianwiedmann)
• cli: Move unexpected packet drops to final test (cilium/cilium#39334, @nebril)
• cli: require Cilium v1.14 (cilium/cilium#39717, @julianwiedmann)
• cli: Search and print previous logs if failed (cilium/cilium#39347, @joestringer)
• cli: Tidy up owners sorting logic (cilium/cilium#39019, @joestringer)
• cli: Use RFC3339 for junit timestamp reporting (cilium/cilium#39017, @joestringer)
• connectivity/check: fix logging error (cilium/cilium#38956, @mhofstetter)
• Fix the message when no nodes are available to be added multicast group. (cilium/cilium#38637, @fujitatomoya)
• go.mod: bump github.com/google/go-github to v71 (cilium/cilium#38827, @tklauser)
• Move node to slog (cilium/cilium#39147, @aanm)
• New clusters created in ENI mode will no longer masquerade pod traffic to the external world. (cilium/cilium#38663, @liyihuang)
• sysdump: don't rely on timeout command to collect hubble flows (cilium/cilium#38999, @giorio94)
• Use modern Go constructs, part 2 (cilium/cilium#38652, @tklauser)
• Update stable release to v0.18.3 by @michi-covalent in #3004
• chore(deps): update go to v1.24.2 (patch) by @renovate in #3005
• github: Clean up kind workflow by @michi-covalent in #3008
• github: Remove cloud provider workflows by @michi-covalent in #3006
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to b51b7be by @renovate in #3010
• chore(deps): update golangci/golangci-lint docker tag to v2.1.0 by @renovate in #3012
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 1ecc479 by @renovate in #3011
• chore(deps): update golangci/golangci-lint docker tag to v2.1.1 by @renovate in #3013
• chore(deps): update dependency cilium/cilium to v1.17.3 by @renovate in #3014
• chore(deps): update docker/dockerfile docker tag to v1.15 by @renovate in #3015
• chore(deps): update golangci/golangci-lint docker tag to v2.1.2 by @renovate in #3016
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to d9db321 by @renovate in #3017
• chore(deps): update softprops/action-gh-release action to v2.2.2 by @renovate in #3018
• chore(deps): update docker/build-push-action action to v6.16.0 by @renovate in #3019
• chore(deps): update golangci/golangci-lint docker tag to v2.1.4 by @renovate in #3020
• chore(deps): update docker/dockerfile:1.15 docker digest to 9857836 by @renovate in #3021
• chore(deps): update docker.io/library/golang:1.24.2 docker digest to 30baaea by @renovate in #3022
• chore(deps): update golangci/golangci-lint-action action to v7.0.1 by @renovate in #3023
• chore(deps): update golangci/golangci-lint docker tag to v2.1.6 by @renovate in #3025
• chore(deps): update golangci/golangci-lint-action action to v8 by @renovate in #3024
• Dockerfile: do not specify syntax by @tklauser in #3026
• README.md: remove status badges for removed cloud provider workflows by @tklauser in #3027
• chore(deps): update golang docker tag to v1.24.3 by @renovate in #3028
• chore(deps): update actions/setup-go action to v5.5.0 by @renovate in #3029
• chore(deps): update go to v1.24.3 (patch) by @renovate in #3030
• chore(deps): update docker.io/library/golang:1.24.3 docker digest to 86b4cff by @renovate in #3033
• chore(deps): update docker/build-push-action action to v6.17.0 by @renovate in #3031
• chore(deps): update de...

Summary of Changes

Announcement

Cilium CLI releases are now available as Docker images here: https://quay.io/repository/cilium/cilium-cli?tab=tags&tag=latest

Minor Changes:

• Add support to capture kernel profiles during performance testing (cilium/cilium#38402, @giorio94)
• Make Cilium CLI performance tests not depend on Cilium (cilium/cilium#38245, @giorio94)
• Reject IPSec key rotation with mismatching key lengths to prevent IPv6 disruptions. (cilium/cilium#37936, @smagnani96)

Bugfixes:

• cilium-cli: Fix logger busy loop (cilium/cilium#38199, @jrajahalme)

CI Changes:

• Add parallel streams throughput tests, and enable them in the EGW workflow (cilium/cilium#38027, @giorio94)
• ci: use custom kubeconfig for cilium-cli cloud provider tests (cilium/cilium#37970, @marseel)
• cilium-cli: Add strict-mode-test v2 (cilium/cilium#38566, @pippolo84)
• cilium-cli: connectivity: clean up any leftover egw routes. (cilium/cilium#36651, @tommyp1ckles)
• cilium-cli: extend no-interrupted-connections to test Egress Gateway (cilium/cilium#38193, @ysksuzuki)
• cilium-cli: run IPv6 test with skipRedirectFromBackend=true on >=v1.17.3 (cilium/cilium#38630, @ysksuzuki)
• cilium-cli: Use distroless (cilium/cilium#38189, @michi-covalent)
• cli: Reduce the flood of the terminal with logs on failure during tests (cilium/cilium#38240, @roman-kiselenko)
• cli: reverse finalizers of connectivity test (cilium/cilium#38232, @marseel)
• connectivity: Add test for source egress in Ingress (cilium/cilium#38053, @sayboras)
• test: Add negative test case for TLS SNI + Inception (cilium/cilium#38194, @sayboras)
• workflows/e2e: Cover IPv6-only (cilium/cilium#38235, @pchaigno)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#38603, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.24.1 docker digest to 52ff1b3 (main) (cilium/cilium#38421, @cilium-renovate[bot])
• chore(deps): update go to v1.24.1 (main) (cilium/cilium#38092, @cilium-renovate[bot])
• cilium-cli: add IPv6 connectivity test for LocalRedirectPolicy (cilium/cilium#37192, @saiaunghlyanhtet)
• cilium-cli: add test owners as part of junit files (cilium/cilium#38269, @aanm)
• cilium-cli: Allow running outside the Cilium tree (cilium/cilium#38133, @joestringer)
• cli: Load code owners dynamically via --code-owners (cilium/cilium#38044, @joestringer)
• Enable new testifylint checks, and mechanically fix reported issues (cilium/cilium#38485, @giorio94)
• Fix cli disconnect error message (cilium/cilium#38545, @samsonkolge)
• Modernize Go map and slice operations (cilium/cilium#38126, @tklauser)
• Standardize hubble and cilium CLIs makefile (cilium/cilium#37716, @HadrienPatte)
• Test IPv4 and IPv6 explicitly in PodToWorld and PodToWorld2 connectivity tests (cilium/cilium#37435, @gentoo-root)
• Use slices.Sorted(maps.Keys(...)) to get sorted list of map keys (cilium/cilium#38519, @tklauser)
• Use more efficient SplitSeq instead of Split (cilium/cilium#38157, @tklauser)
• Update stable release to v0.18.2 by @michi-covalent in #2972
• chore(deps): update golang docker tag to v1.24.1 by @renovate in #2971
• chore(deps): update docker.io/library/golang docker tag to v1.24.1 by @renovate in #2970
• chore(deps): update golangci/golangci-lint docker tag to v1.64.7 by @renovate in #2974
• action: Only install a single version by @joestringer in #2973
• chore(deps): update golangci/golangci-lint-action action to v6.5.1 by @renovate in #2975
• chore(deps): update golangci/golangci-lint-action action to v6.5.2 by @renovate in #2979
• chore(deps): update golangci/golangci-lint docker tag to v1.64.8 by @renovate in #2978
• chore(deps): update dependency cilium/cilium to v1.16.8 by @renovate in #2977
• chore(deps): update docker/login-action action to v3.4.0 by @renovate in #2976
• github: Remove multicluster.yaml by @michi-covalent in #2983
• chore(deps): update actions/upload-artifact action to v4.6.2 by @renovate in #2981
• Simplify Dockerfile and clean up docker image workflow by @michi-covalent in #2980
• chore(deps): update docker/login-action action to v3.4.0 by @renovate in #2982
• chore(deps): update golangci/golangci-lint{-action} by @michi-covalent in #2988
• Optimize image layers by @marcofranssen in #2782
• chore(deps): update golangci/golangci-lint docker tag to v2.0.2 by @renovate in #2989
• chore(deps): update docker.io/library/golang:1.24.1 docker digest to 52ff1b3 by @renovate in #2990
• chore(deps): update gcr.io/distroless/static:latest docker digest to 3d0f463 by @renovate in #2991
• chore(deps): update golang docker tag to v1.24.2 by @renovate in #2995
• chore(deps): update cilium (minor) by @renovate in #2924
• chore(deps): update azure/login action to v2.3.0 by @renovate in #2998
• chore(deps): update cilium/cilium digest to 67fbabc by @renovate in #3000
• chore(deps): update cilium/cilium digest to 20f0e00 by @renovate in #3002
• Prepare for v0.18.3 release by @michi-covalent in #2993

Full Changelog: v0.18.2...v0.18.3

What's Changed

Minor Changes:

• cilium-cli/sysdump: relax extra-label-selectors to target all namespaces (cilium/cilium#37715, @giorio94)
• Extend cilium-cli connectivity perf to allow testing egress gateway performance (cilium/cilium#37748, @giorio94)

CI Changes:

• Add explicit IPv6 testing to PodToService cilium-cli connectivity test (cilium/cilium#37544, @saiaunghlyanhtet)
• cilium-cli/connectivity: Fix output for LRP tests (cilium/cilium#37893, @pchaigno)
• cilium-cli/connectivity: only check container restarts on v1.17+ (cilium/cilium#37823, @giorio94)
• cli: Attribute test failures outside of action failures (cilium/cilium#37757, @joestringer)
• cli: Clean up Makefile (cilium/cilium#37911, @michi-covalent)
• cli: connectivity: Log tcpdump cmd on error (cilium/cilium#37822, @jschwinger233)
• connectivity tests: keep tcpdump alive by printing to stdout (cilium/cilium#37984, @asauber)
• Egress Gateway performance testing (cilium/cilium#37753, @giorio94)
• Fix egress device computation in cli connectivity pod-to-pod-encryption-v2 tests for AWS chaining mode. (cilium/cilium#37680, @smagnani96)
• Miscellaneous improvements to the Egress Gateway scale test (cilium/cilium#37611, @giorio94)

Misc Changes:

• Add sloglint and fix issues (cilium/cilium#37851, @aanm)
• bpf: tolerate dropped ICMPv6 messages with ICMPv6 payload (cilium/cilium#38068, @julianwiedmann)
• chore(deps): update docker.io/library/golang:1.24.0 docker digest to 3f74443 (main) (cilium/cilium#37938, @cilium-renovate[bot])
• cilium-cli: Ignore k8s client network error warning (cilium/cilium#37773, @jrajahalme)
• cilium-cli: Only use --curl-parallel when expecting success (cilium/cilium#37803, @jrajahalme)
• cli: Added parameter to print used images (cilium/cilium#37390, @PhilipSchmid)
• cli: Support filtering --log-code-owners (cilium/cilium#37905, @joestringer)
• k8s: move portforward functionality to separate sub-package (cilium/cilium#38060, @tklauser)
• Update connectivity tests to correctly detect TLS Interception (cilium/cilium#37796, @youngnick)
• chore(deps): update dependency go to v1.24.1 by @renovate in #2969
• Update stable release to v0.18.1 by @michi-covalent in #2968
• Prepare for v0.18.2 release by @michi-covalent in #2964

What's Changed

• Update stable release to v0.18.0 by @michi-covalent in #2959
• chore(deps): update golangci/golangci-lint docker tag to v1.64.6 by @renovate in #2960
• gh: add option to specify kubeconfig by @marseel in #2965
• Prepare for v0.18.1 release by @michi-covalent in #2967

Full Changelog: v0.18.0...v0.18.1

⚠️ A Breaking Change ⚠️

Cilium CLI GitHub Action now defaults to using the top-level go.mod file to determine Go version to build Cilium CLI when skip-build parameter is set to false (#2956).

What's Changed

• chore(deps): update actions/upload-artifact action to v4.6.1 by @renovate in #2949
• Always update github.com/cilium/cilium from main by @tklauser in #2951
• chore(deps): update actions/download-artifact action to v4.1.9 by @renovate in #2952
• renovate: clean up configuration by @tklauser in #2954
• chore(deps): update all github action dependencies (minor) by @renovate in #2955
• chore(deps): update dependency go to v1.24.0 by @renovate in #2957
• action: Clean up the logic to handle go-mod-directory by @michi-covalent in #2956
• Prepare for v0.18.0 release by @michi-covalent in #2958

Full Changelog: v0.17.0...v0.18.0

⚠️ A Breaking Change ⚠️

Cilium CLI removes the External workloads feature in this release (cilium/cilium#37418). More specifically, it removes:

• cilium clustermesh external-workload command.
• --enable-external-workloads flag in cilium clustermesh enable command.
• Connectivity tests related to external workloads.
• Sysdump support for external workloads.

Cilium community plans to stop maintaining the external workload feature in all the stable release branches (v1.15, v1.16, and v1.17), and the feature will be removed in v1.18 release.

What's Changed

Minor Changes:

• Cilium CLI IPsec fixes (cilium/cilium#37018, @viktor-kurchenko)
• cli: Improve fetching of Cilium component logs in failure scenarios (cilium/cilium#37160, @joestringer)
• Remove external-workload feature from Cilium and cilium-cli. Use previous version of cilium-cli if needed to provision unsupported external-workload clusters. (cilium/cilium#37418, @brb)

CI Changes:

• cilium-cli/connectivity: additionally check for container restarts (cilium/cilium#36299, @giorio94)
• cilium-cli: add explicit IPv6 testing to PodToK8sLocal (cilium/cilium#37461, @saiaunghlyanhtet)
• cilium-cli: extend no-interrupted-connections to test NodePort from outside (cilium/cilium#37294, @ysksuzuki)
• cilium-cli: Fix GITHUB_WORKFLOW_REF parsing (cilium/cilium#37686, @joestringer)
• CLI: Attribute tests to codeowners (cilium/cilium#37027, @joestringer)
• Update stable release to v0.16.24 by @michi-covalent in #2921
• chore(deps): update all github action dependencies (patch) by @renovate in #2922
• chore(deps): update ubuntu:24.04 docker digest to 7229784 by @renovate in #2923
• chore(deps): update golangci/golangci-lint-action action to v6.3.0 by @renovate in #2925
• Remove v0.15.22 from the release list by @michi-covalent in #2930
• chore(deps): update docker/setup-buildx-action action to v3.9.0 by @renovate in #2928
• chore(deps): update golangci/golangci-lint-action action to v6.3.1 by @renovate in #2929
• chore(deps): update dependency go to v1.23.6 by @renovate in #2927
• chore(deps): update aws-actions/configure-aws-credentials action to v4.1.0 by @renovate in #2932
• chore(deps): update golangci/golangci-lint-action action to v6.3.2 by @renovate in #2931
• chore(deps): update golangci/golangci-lint docker tag to v1.64.2 by @renovate in #2933
• .github: Pass through GITHUB_WORKFLOW_REF by @joestringer in #2936
• chore(deps): update golangci/golangci-lint-action action to v6.4.0 by @renovate in #2938
• ci: avoid using deprecated tls.secretsBackend flag by @tklauser in #2934
• chore(deps): update golangci/golangci-lint docker tag to v1.64.4 by @renovate in #2935
• chore(deps): update golangci/golangci-lint docker tag to v1.64.5 by @renovate in #2940
• chore(deps): update dependency cilium/cilium to v1.16.7 by @renovate in #2943
• chore(deps): update all github action dependencies (patch) - autoclosed by @renovate in #2937
• chore(deps): update dependency kubernetes-sigs/kind to v0.27.0 by @renovate in #2941
• github: Remove externalworkloads.yaml by @michi-covalent in #2944
• chore(deps): update golangci/golangci-lint-action action to v6.5.0 by @renovate in #2945
• chore(deps): update docker/build-push-action action to v6.14.0 by @renovate in #2946
• Prepare for v0.17.0 release by @michi-covalent in #2947

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#37341, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#37660, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang docker tag to v1.24.0 (main) (cilium/cilium#37603, @cilium-renovate[bot])
• chore(deps): update go to v1.23.6 (main) (cilium/cilium#37495, @cilium-renovate[bot])
• cilium-cli/connectivity: ignore hubble-ui warning in no-errors-in-logs test (cilium/cilium#37563, @tklauser)
• cilium-cli/sysdump: drop obsolete CiliumEgressNATPolicy entry (cilium/cilium#37584, @giorio94)
• cilium-cli: enable websockets for k8s exec (cilium/cilium#37538, @asauber)
• cilium-cli: re-fix GITHUB_WORKFLOW_REF parsing (cilium/cilium#37707, @kaworu)
• cli: Ensure EGW tests trigger failures via actions (cilium/cilium#37649, @joestringer)
• connectivity: Add curl retry params for TLS inspection test (cilium/cilium#37424, @sayboras)
• connectivity: Avoid hard-coded external target in warning log (cilium/cilium#37443, @sayboras)
• Preparation to test IPv4 and IPv6 explicitly in connectivity tests (cilium/cilium#37468, @gentoo-root)
• Revert "cli: Use error def of github.com/cilium/ebpf" (cilium/cilium#37687, @joestringer)
• test: Update negative test case for TLS SNI (cilium/cilium#37386, @sayboras)
• wireguard: introduce v2 pod-to-pod connectivity tests (cilium/cilium#37533, @ldelossa)

What's Changed

Summary of Changes

Minor Changes:

• Cilium CLI now captures Tetragon helm data when performing cilium sysdump. (cilium/cilium#36749, @f1ko)
• cilium-cli: collect Cilium Agent logs from crashing / not ready / restarted pods (cilium/cilium#37013, @marseel)
• cli: Add support for helm --max-history command line flag (cilium/cilium#36677, @marcofranssen)
• cli: restrict conn test to ip families (cilium/cilium#37000, @viktor-kurchenko)
• Significantly reduce memory usage during cilium-cli sysdump collection (cilium/cilium#36987, @giorio94)

CI Changes:

• connectivity: Add retry all error for L7 header related test (cilium/cilium#37010, @sayboras)
• test: Add negative test case for TLS SNI (cilium/cilium#37122, @sayboras)
• connectivity: Add test for update TLS secret (cilium/cilium#36812, @sayboras)

Misc Changes:

• .github: generate feature summary report from CI (cilium/cilium#36933, @aanm)
• chore(deps): update all-dependencies (main) (cilium/cilium#37199, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.5 docker digest to 8c10f21 (main) (cilium/cilium#37178, @cilium-renovate[bot])
• chore(deps): update go to v1.23.5 (main) (cilium/cilium#37064, @cilium-renovate[bot])
• Cilium CLI: Trim EKS cluster ARN to extract valid cluster name (cilium/cilium#36952, @jaehanbyun)
• cilium-cli: do not print checkmarks for non-binary values (cilium/cilium#36890, @aanm)
• Remove always-nil error returns (cilium/cilium#36910, @tklauser)
• Update stable release to v0.16.23 by @michi-covalent in #2907
• chore(deps): update docker/build-push-action action to v6.11.0 by @renovate in #2906
• chore(deps): update actions/upload-artifact action to v4.6.0 by @renovate in #2908
• chore(deps): update docker/build-push-action action to v6.12.0 by @renovate in #2909
• chore(deps): update golangci/golangci-lint-action action to v6.2.0 by @renovate in #2911
• chore(deps): update dependency go to v1.23.5 by @renovate in #2910
• chore(deps): update all github action dependencies (minor) by @renovate in #2912
• chore(deps): update dependency cilium/cilium to v1.16.6 by @renovate in #2914
• renovate config migration remake by @bimmlerd in #2915
• chore(deps): update docker/build-push-action action to v6.13.0 by @renovate in #2916
• chore(deps): update aws-actions/configure-aws-credentials action to v4.0.3 by @renovate in #2917
• Prepare for v0.16.24 release by @michi-covalent in #2920

Full Changelog: v0.16.23...v0.16.24

What's Changed

Minor Changes:

• cli: aws mixed nodes install fix (cilium/cilium#36336, @viktor-kurchenko)

Bugfixes:

• Cilium CLI fix for AWS ENI mode (cilium/cilium#36887, @viktor-kurchenko)
• Restore the original flag semantics for --egress-masquerade-interfaces to the same as v1.17.0-pre.2 or earlier (cilium/cilium#36504, @viktor-kurchenko)

CI Changes:

• Add --external-other-target parameter to cilium CLI connectivity tests. (cilium/cilium#36080, @wedaly)
• Change client-egress-l7-tls tests to sequential because flaky (cilium/cilium#36568, @youngnick)
• cilium-cli/connectivity: fix IPv6 feature check for 2ndary node IPv6 (cilium/cilium#36513, @tklauser)
• cilium-cli: Add envoy log pattern in error check (cilium/cilium#36498, @sayboras)
• Fix cilium CLI connectivity tests in IPv6-only clusters. (cilium/cilium#36026, @wedaly)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#36706, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7003184 (main) (cilium/cilium#36604, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7ea4c9d (main) (cilium/cilium#36808, @cilium-renovate[bot])
• ci/connectivity: Don't apply cnp to conn-disrupt pods in 1.15, 1.14 (cilium/cilium#36682, @jschwinger233)
• cilium-cli: skip some IPv6 connectivity tests for Cilium<1.14 when IPsec is enabled (cilium/cilium#36664, @jschwinger233)
• Isolate node-to-node encryption tests to wireguard (cilium/cilium#36556, @ldelossa)
• chore(deps): update all github action dependencies (minor) by @renovate in #2887
• Update stable release to v0.16.22 by @tklauser in #2888
• chore(deps): update module golang.org/x/crypto to v0.31.0 [security] by @renovate in #2889
• chore(deps): update all github action dependencies (minor) by @renovate in #2890
• Dockerfile: drop syntax comment by @tklauser in #2893
• chore(deps): update dependency kubernetes-sigs/kind to v0.26.0 by @renovate in #2892
• chore(deps): update dependency cilium/cilium to v1.16.5 by @renovate in #2894
• chore(deps): update actions/upload-artifact action to v4.5.0 by @renovate in #2896
• chore(deps): update module golang.org/x/net to v0.33.0 [security] by @renovate in #2895
• chore(deps): update golangci/golangci-lint docker tag to v1.63.0 by @renovate in #2899
• chore(deps): update golangci/golangci-lint docker tag to v1.63.4 by @renovate in #2902
• chore(deps): update helm/kind-action action to v1.12.0 by @renovate in #2901
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #2905
• Prepare for v0.16.23 release by @michi-covalent in #2903

Full Changelog: v0.16.22...v0.16.23