chore(deps): update dependency cilium-cli to v0.19.6

[bde-dev]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
cilium-cli	minor	0.18.8 → 0.19.6

---

Release Notes

cilium/cilium-cli (cilium-cli)

v0.19.6

Compare Source

Summary of Changes

Minor Changes:

• cilium-cli: bump minimum Cilium version to v1.16 (cilium/cilium#46803, @​julianwiedmann)
• cilium-dbg: add table-json format to bgp/peers and bgp/routes (cilium/cilium#45858, @​martonra)
• gatewayapi: add listenersets to sysdump (cilium/cilium#46851, @​asauber)

CI Changes:

• cilium-cli/connectivity: explain conn-disrupt restart on failure (cilium/cilium#46854, @​aanm)
• cilium-cli/connectivity: retry curl in echo-ingress-l7-named-port (cilium/cilium#46855, @​aanm)
• cilium-cli/connectivity: wait for realized policy revision per endpoint (cilium/cilium#46877, @​aanm)
• cilium-cli/connectivity: write JUnit report atomically (cilium/cilium#46835, @​aanm)
• cilium-cli: fix EGW perf node selection, and raise scale-egw masq thresholds (cilium/cilium#46866, @​aanm)
• cilium/json-mock is updated to v1.4.1 to resolve ci test flakes. (cilium/cilium#47058, @​jrajahalme)
• Improved cilium-cli connectivity test resilience to transient service synchronization delays and pod-exec transport errors. (cilium/cilium#46859, @​aanm)

Misc Changes:

• Add support for hybrid routing mode (routing-mode: hybrid), allowing Cilium to dynamically choose between native routing and tunnel encapsulation based on subnet topology. Traffic between pods in directly connected subnets is routed natively for improved throughput, while cross-subnet traffic is tunneled. (cilium/cilium#45001, @​vanessachammas)
• chore(deps): update all-dependencies (main) (cilium/cilium#47033, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#47107, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#46653, @​cilium-renovate[bot])
• chore(deps): update base-images to v1.26.5 (main) (cilium/cilium#46981, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang docker tag to v1.26.4 (main) (cilium/cilium#46903, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.26.5 docker digest to 079e598 (main) (cilium/cilium#47108, @​cilium-renovate[bot])
• cilium-cli/connectivity: tolerate transient leader-election lock-read timeouts (cilium/cilium#47023, @​aanm)
• cilium-cli: Exclude vendored leader election error (cilium/cilium#47090, @​jrajahalme)
• cilium-cli: retry cilium features status pod exec on transient API server exec-proxy failures (e.g. 502 Bad Gateway, or a truncated empty response) so CI post-steps are not failed by transient infrastructure blips. (cilium/cilium#46881, @​aanm)
• cilium-cli: retry transient exec errors in setup/teardown exec sites (cilium/cilium#47169, @​aanm)
• cli/connectivity: always write a JUnit report, including on early failures (cilium/cilium#46990, @​aanm)
• gateway-api: update TCPRoute and UDPRoute to v1 (cilium/cilium#46970, @​eminaktas)
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3259
• chore(deps): update actions/setup-go action to v6.5.0 by @​renovate[bot] in #​3262
• chore(deps): update docker.io/library/golang:1.26.4-alpine3.23 docker digest to 18b460d by @​renovate[bot] in #​3261
• chore(deps): update golangci/golangci-lint-action action to v9.3.0 by @​renovate[bot] in #​3263
• chore(deps): update docker/build-push-action action to v7.3.0 by @​renovate[bot] in #​3264
• chore(deps): update gcr.io/distroless/static:latest docker digest to d5f030c by @​renovate[bot] in #​3266
• chore(deps): update docker.io/library/golang docker tag to v1.26.4 by @​renovate[bot] in #​3267
• chore(deps): update docker/setup-buildx-action action to v4.2.0 by @​renovate[bot] in #​3265
• chore(deps): update gcr.io/distroless/static:latest docker digest to 9197324 by @​renovate[bot] in #​3268
• chore(deps): update softprops/action-gh-release digest to 3d0d988 by @​renovate[bot] in #​3269
• Prepare for v0.19.6 release by @​michi-covalent in #​3270

Full Changelog: cilium/cilium-cli@v0.19.5...v0.19.6

v0.19.5

Compare Source

Summary of Changes

Minor Changes:

• bgp: Bump GoBGP from v3 to v4.5.0 (cilium/cilium#45952, @​rastislavs)
• cilium-cli: don't enable nodeinit on AKS (cilium/cilium#46105, @​vipul-21)
• Replace boringcrypto with upstream Go crypto libraries (cilium/cilium#46092, @​HadrienPatte)

CI Changes:

• cilium-cli connectivity tests now test for policy-based Envoy listener redirects on the wildcard port. (cilium/cilium#46251, @​jrajahalme)
• cilium-cli: exclude non-Cilium nodes from perf node selection (cilium/cilium#46651, @​aanm)
• cilium-cli: Ignore additional known GoBGPv4 warnings in no-errors-in-logs (cilium/cilium#46200, @​ysksuzuki)
• cilium-cli: Remove partial JUnit file on error (cilium/cilium#46101, @​rastislavs)
• cilium-cli: support versioned scenarios (cilium/cilium#45570, @​rgo3)
• cilium-cli: tolerate config init-container restart and GC'd previous … (cilium/cilium#46648, @​aanm)
• cli: add exception for "local key already allocated" warning (cilium/cilium#46216, @​giorio94)

Misc Changes:

• chore(deps): update base-images (main) (cilium/cilium#46054, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 2d6c802 (main) (cilium/cilium#46163, @​cilium-renovate[bot])
• cli/sysdump: capture more operator and clustermesh-apiserver troubleshooting information (cilium/cilium#46503, @​giorio94)
• clustermesh: endpoint slices watch and kvstoremesh wiring (cilium/cilium#46506, @​MrFreezeex)
• ipam: Migrate IPAMSpec.PodCIDRs to ip.Prefix (cilium/cilium#46599, @​HadrienPatte)
• ipam: Migrate VirtualNetwork and IPAMCIDR to netip (cilium/cilium#46309, @​HadrienPatte)
• sysdump: add CRD CiliumGatewayClassConfig to sysdump (cilium/cilium#46247, @​mhofstetter)
• sysdump: add Gateway API BackendTLSPolicy to sysdump (cilium/cilium#46246, @​mhofstetter)
• chore(deps): update actions/stale action to v10.3.0 by @​renovate[bot] in #​3244
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 6df14f4 by @​renovate[bot] in #​3243
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3245
• Update stable release to v0.19.4 by @​tklauser in #​3242
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 2d6c802 by @​renovate[bot] in #​3246
• go.mod, vendor: update replace directives to match cilium's go.mod by @​tklauser in #​3247
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3250
• ci: fix unquoted expression in images-dev shell condition by @​immanuwell in #​3249
• chore(deps): update go to v1.26.4 by @​renovate[bot] in #​3251
• fix: select released CLI asset by runner platform by @​immanuwell in #​3252
• chore(deps): update cilium to v1.19.5 by @​renovate[bot] in #​3257
• chore(deps): update all github action dependencies to 718ea10 by @​renovate[bot] in #​3256
• Prepare for v0.19.5 release by @​michi-covalent in #​3260

New Contributors

• @​immanuwell made their first contribution in #​3249

Full Changelog: cilium/cilium-cli@v0.19.4...v0.19.5

v0.19.4

Compare Source

Summary of Changes

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#45725, @​cilium-renovate[bot])
• Fix incorrect 'skipping test' reason messages (cilium/cilium#46043, @​atykhyy)
• Fix new golangci-lint findings (cilium/cilium#45894, @​HadrienPatte)
• chore(deps): update gcr.io/distroless/static:latest docker digest to 3592aa8 by @​renovate[bot] in #​3235
• chore(deps): update docker.io/library/golang:1.26.3 docker digest to 313faae by @​renovate[bot] in #​3234
• chore(deps): update cilium/cilium digest to 08329ad by @​renovate[bot] in #​3231
• chore(deps): update cilium by @​renovate[bot] in #​3236
• renovate: add dependency cooldown, don't pin digests for cilium/cilium GitHub actions by @​tklauser in #​3238
• chore(deps): update cilium/cilium digest to b72d04b by @​renovate[bot] in #​3237
• ci: add write permissions to release workflow by @​tklauser in #​3233
• ci: pin cilium/cilium actions to v1.19.4, avoid digest updates by @​tklauser in #​3240
• Prepare for v0.19.4 release by @​tklauser in #​3241

Full Changelog: cilium/cilium-cli@v0.19.3...v0.19.4

v0.19.3

Compare Source

[!NOTE]
This release doesn't contain binary artifacts. Please use cilium-cli v0.19.4 instead if you require these binaries.

Summary of Changes

Minor Changes:

• A new parameter, --log-check-only-test-time, has been added to Cilium CLI connectivity tests. When set to true, only the logs written after the point in time where the tests have been started get checked. This aims at avoiding false positive. (cilium/cilium#44988, @​fgiloux)
• Additionally collect Cluster Mesh certificate generation artifacts in sysdumps (cilium/cilium#44773, @​giorio94)
• cilium-cli: add --cleanup flag for connectivity test artifacts (cilium/cilium#44075, @​harshakumar25)
• encryption: remove deprecated enable-encryption-strict-mode encryption-strict-mode-cidr and encryption-strict-mode-allow-remote-node-identities options (cilium/cilium#45452, @​smagnani96)
• Remove deprecated v2alpha1 CiliumNodeConfig API that was promoted to v2 in cilium 1.16. (cilium/cilium#44739, @​HadrienPatte)

Bugfixes:

• envoy: Fix xds server npds listeners accounting (cilium/cilium#44830, @​fristonio)
• Fix cilium-cli crash when using corrupted Helm values for clustermesh (cilium/cilium#45095, @​Aprazor)

CI Changes:

• ci:tcpdump: harden sniffer startup with retries (cilium/cilium#45421, @​smagnani96)
• cilium-cli/connectivity: fix static route setup/teardown (cilium/cilium#45388, @​tklauser)
• cilium-cli/connectivity: require static routes only on kind (cilium/cilium#45824, @​tklauser)
• cilium-cli: Add log-check-extra-exceptions flag for connectivity test (cilium/cilium#45443, @​rastislavs)
• cilium-cli: Deploy FRR daemonset only once per node (cilium/cilium#45523, @​rastislavs)
• cilium-cli: Fix port conflict for echo-external-node (cilium/cilium#45530, @​pchaigno)
• cilium-cli: Ignore gobgp tcp close error in log checks (cilium/cilium#45010, @​ysksuzuki)
• cilium-cli: introduce dedicated connectivity test skip condition helpers (cilium/cilium#45200, @​tklauser)
• connectivity: make conn-disrupt sub-tests independently deployable (cilium/cilium#45382, @​ysksuzuki)
• Fix cilium connectivity test namespace setup so configured namespace labels also apply to CCNP test namespaces. (cilium/cilium#45101, @​Synte-Peng)
• Fix wildcard egress tls sni policy connectivity tests (cilium/cilium#44505, @​fristonio)
• Remove sequential and only use concurrent tests (cilium/cilium#40103, @​aanm)
• Use fake external targets on nodes without Cilium in GKE CI workflows for better stability. (cilium/cilium#41713, @​gentoo-root)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#44565, @​cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44667, @​cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44948, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44566, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44663, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44781, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#44923, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45460, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45611, @​cilium-renovate[bot])

• chore(deps): update base-images (main) (cilium/cilium#45726, @​cilium-renovate[bot])

• chore(deps): update base-images to v1.26.2 (main) (cilium/cilium#45297, @​cilium-renovate[bot])

• cilium-cli/connectivity: add --exit-zero-on-failure flag (cilium/cilium#44433, @​darox)

• cilium-cli/connectivity: use WithCiliumVersion to skip tests per Cilium version (cilium/cilium#44765, @​tklauser)

• cilium-cli/sysdump: collect Cilium L2 Announcement Policies (cilium/cilium#45353, @​tklauser)

• cilium-cli: Disable Helm Server Side Apply (cilium/cilium#44546, @​YutaroHayakawa)

• cilium-cli: Fix panic parsing IPv6 URL in connectivity tests (cilium/cilium#45337, @​HadrienPatte)

• modernize: Enable waitgroup analyzer (cilium/cilium#44660, @​HadrienPatte)

• renovate: Add support to manage echo-advanced image (cilium/cilium#44623, @​HadrienPatte)

• Update release instructions by @​tklauser in #​3192

• Update stable release to v0.19.2 by @​tklauser in #​3193

• chore(deps): update actions/setup-go action to v6.3.0 by @​renovate[bot] in #​3194

• chore(deps): update gcr.io/distroless/static:latest docker digest to eca24e6 by @​renovate[bot] in #​3195

• chore(deps): update docker.io/library/golang:1.26.0 docker digest to 9edf713 by @​renovate[bot] in #​3196

• RELEASE: confirm that CLI release works for optional Cloud environments by @​julianwiedmann in #​3200

• chore(deps): update gcr.io/distroless/static:latest docker digest to 28efbe9 by @​renovate[bot] in #​3198

• chore(deps): update go by @​renovate[bot] in #​3201

• chore(deps): update all github action dependencies by @​renovate[bot] in #​3199

• chore(deps): update docker.io/library/golang docker tag to v1.26.1 by @​renovate[bot] in #​3202

• chore(deps): update all github action dependencies by @​renovate[bot] in #​3203

• chore(deps): update golangci-lint by @​renovate[bot] in #​3204

• chore(deps): update golangci/golangci-lint docker tag to v2.11.2 by @​renovate[bot] in #​3205

• chore(deps): update golangci/golangci-lint docker tag to v2.11.3 by @​renovate[bot] in #​3206

• chore(deps): update actions/download-artifact action to v8.0.1 by @​renovate[bot] in #​3207

• chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72 by @​renovate[bot] in #​3211

• chore(deps): update softprops/action-gh-release action to v2.5.1 by @​renovate[bot] in #​3210

• chore(deps): update docker.io/library/golang:1.26.1 docker digest to c7e98cc by @​renovate[bot] in #​3208

• chore(deps): update softprops/action-gh-release action to v2.6.1 by @​renovate[bot] in #​3212

• chore(deps): update golangci/golangci-lint docker tag to v2.11.4 by @​renovate[bot] in #​3214

• chore(deps): update docker.io/library/golang:1.26.1 docker digest to 595c784 by @​renovate[bot] in #​3213

• chore(deps): update dependency cilium/cilium to v1.19.2 by @​renovate[bot] in #​3215

• chore(deps): update actions/setup-go action to v6.4.0 by @​renovate[bot] in #​3217

• chore(deps): pin cilium/cilium action to 0f7ddbf by @​renovate[bot] in #​3216

• chore(deps): update go to v1.26.2 by @​renovate[bot] in #​3218

• chore(deps): update cilium/cilium digest to 143928b by @​renovate[bot] in #​3219

• chore(deps): update docker/build-push-action action to v7.1.0 by @​renovate[bot] in #​3220

• chore(deps): update all github action dependencies by @​renovate[bot] in #​3223

• chore(deps): update cilium by @​renovate[bot] in #​3222

• chore(deps): update cilium/cilium digest to 41774fc by @​renovate[bot] in #​3224

• chore(deps): update golangci/golangci-lint docker tag to v2.12.0 by @​renovate[bot] in #​3225

• chore(deps): update docker.io/library/golang:1.26.2 docker digest to 5f3787b by @​renovate[bot] in #​3221

• chore(deps): update cilium/cilium digest to 71eacde by @​renovate[bot] in #​3226

• chore(deps): update golangci/golangci-lint docker tag to v2.12.1 by @​renovate[bot] in #​3227

• chore(deps): update dependency golangci/golangci-lint to v2.12.2 by @​renovate[bot] in #​3229

• chore(deps): update go to v1.26.3 by @​renovate[bot] in #​3230

• chore(deps): update cilium/cilium digest to 3188dcd by @​renovate[bot] in #​3228

• Prepare for v0.19.3 release by @​tklauser in #​3232

Full Changelog: cilium/cilium-cli@v0.19.2...v0.19.3

v0.19.2

Compare Source

Summary of Changes

CI Changes:

• cilium-cli/connectivity: remove allowlist entry for deleting no longer present service (cilium/cilium#44423, @​tklauser)
• cilium-cli: add gke specific configmaps to cilium sysdump (cilium/cilium#44422, @​kamilWyszynski1)
• Connectivity tests for service loopback to catch regressions (cilium/cilium#42590, @​saiaunghlyanhtet)
• tests: Ignore identity manager related error in versions < 1.18 (cilium/cilium#44327, @​christarazi)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#44353, @​cilium-renovate[bot])

• chore(deps): update all-dependencies (main) (cilium/cilium#44465, @​cilium-renovate[bot])

• chore(deps): update base-images to v1.26.0 (main) (cilium/cilium#44360, @​cilium-renovate[bot])

• cli: Add failed to retrieve cluster cfg to exclusion list (cilium/cilium#44332, @​brb)

• deps: update helm to v4.1.1 (cilium/cilium#44390, @​aanm)

• modernize: Enable rangeint analyzer (cilium/cilium#44457, @​HadrienPatte)

• Fix multiple tag error on main and release builds by @​ferozsalam in #​3186

• chore(deps): update gcr.io/distroless/static:latest docker digest to d90359c by @​renovate[bot] in #​3185

• chore(deps): update actions/stale action to v10.2.0 by @​renovate[bot] in #​3187

• chore(deps): update dependency cilium/cilium to v1.19.0 by @​renovate[bot] in #​3177

• chore(deps): update golangci/golangci-lint docker tag to v2.10.1 by @​renovate[bot] in #​3189

• chore(deps): update dependency cilium/cilium to v1.19.1 by @​renovate[bot] in #​3188

• chore(deps): update helm/kind-action action to v1.14.0 by @​renovate[bot] in #​3190

• Prepare for v0.19.2 release by @​tklauser in #​3191

Full Changelog: cilium/cilium-cli@v0.19.1...v0.19.2

v0.19.1

Compare Source

Summary of Changes

Minor Changes:

• cli: clustermesh: use ca bundle to connect clusters (cilium/cilium#42833, @​MrFreezeex)

Bugfixes:

• cilium-cli: Fix NodePort deployment check in dual-stack clusters (cilium/cilium#43888, @​gandro)
• Fix GKE conformance test NodePort timeouts by skipping unreachable external IP validation on GKE (cilium/cilium#44014, @​pillai-ashwin)

CI Changes:

• cli: Relax warning exclusion for "unable to find key in local cache" (cilium/cilium#44149, @​brb)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43700, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43824, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43965, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#44090, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#44235, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43827, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43969, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#44239, @​cilium-renovate[bot])
• cilium-cli: Fix container name in connectivity test logs (cilium/cilium#44076, @​HadrienPatte)
• docs: fix typos in comments (cilium/cilium#43821, @​NAM-MAN)
• feat(cilium-cli): Add -r(estart) parameter to cilium upgrade (cilium/cilium#43722, @​alagoutte)
• Introduce end-to-end tests for Cilium's ZTunnel integration. (cilium/cilium#43166, @​ldelossa)
• Replace Index{,Byte} with Cut,Contains (cilium/cilium#43708, @​joestringer)
• sysdump: Use label selectors for Hubble UI/Relay deployment collection (cilium/cilium#44227, @​darox)
• chore(deps): update dependency cilium/cilium to v1.18.6 by @​renovate[bot] in #​3168
• Update stable release to v0.19.0 by @​tklauser in #​3169
• chore(deps): update go to v1.25.6 by @​renovate[bot] in #​3170
• chore(deps): update docker.io/library/golang:1.25.6 docker digest to ce63a16 by @​renovate[bot] in #​3172
• chore(deps): update actions/checkout action to v6.0.2 by @​renovate[bot] in #​3171
• ci: Harden the image build process by @​ferozsalam in #​3174
• chore(deps): update gcr.io/distroless/static:latest docker digest to 972618c by @​renovate[bot] in #​3176
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3175
• chore(deps): update go to v1.25.7 by @​renovate[bot] in #​3178
• chore(deps): update golangci/golangci-lint docker tag to v2.9.0 by @​renovate[bot] in #​3179
• chore(deps): update go to v1.26.0 by @​renovate[bot] in #​3181
• chore(deps): update docker/build-push-action action to v6.19.0 by @​renovate[bot] in #​3180
• chore(deps): update docker/build-push-action action to v6.19.2 by @​renovate[bot] in #​3183
• Prepare for v0.19.1 release by @​tklauser in #​3184

New Contributors

• @​ferozsalam made their first contribution in #​3174

Full Changelog: cilium/cilium-cli@v0.19.0...v0.19.1

v0.19.0

Compare Source

Summary of Changes

CI Changes:

• Add L7 policy traffic disruption tests (cilium/cilium#42150, @​fristonio)
• Cilium-cli SNI connectivity tests now retry expected successful operations to recover from failures due to external upstream issues. (cilium/cilium#42980, @​jrajahalme)
• cli: connectivity: fix typo in L7 LB tests (cilium/cilium#43610, @​julianwiedmann)
• Fix intermittent NodePort connectivity test timeouts in dual-stack clusters by validating NodePort readiness on all node IP addresses during test setup. (cilium/cilium#40812, @​pillai-ashwin)
• tests: remove identity manager from ignored error messages (cilium/cilium#42982, @​odinuge)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43169, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43456, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43508, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43457, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43538, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 (main) (cilium/cilium#43303, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.5 (main) (cilium/cilium#43173, @​cilium-renovate[bot])
• cilium-cli/connectivity: remove matcher for bpf/init.sh errors (cilium/cilium#43109, @​tklauser)
• cilium-cli: convert net.IP to netip.Addr (cilium/cilium#42371, @​phuhung273)
• cli: Update network-perf image ref (cilium/cilium#43297, @​HadrienPatte)
• chore(deps): update golangci/golangci-lint-action action to v9.2.0 by @​renovate[bot] in #​3148
• Update stable release to v0.18.9 by @​michi-covalent in #​3149
• chore(deps): update golangci/golangci-lint docker tag to v2.7.0 by @​renovate[bot] in #​3151
• chore(deps): update go to v1.25.5 by @​renovate[bot] in #​3153
• ci: clean up disk space in release workflow by @​tklauser in #​3154
• chore(deps): update actions/stale action to v10.1.1 by @​renovate[bot] in #​3150
• chore(deps): update gcr.io/distroless/static:latest docker digest to 4b2a093 by @​renovate[bot] in #​3152
• chore(deps): update golangci/golangci-lint docker tag to v2.7.2 by @​renovate[bot] in #​3155
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 by @​renovate[bot] in #​3156
• chore(deps): update actions/upload-artifact action to v6 by @​renovate[bot] in #​3157
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 36b4f45 by @​renovate[bot] in #​3160
• chore(deps): update dependency cilium/cilium to v1.18.5 by @​renovate[bot] in #​3159
• chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 by @​renovate[bot] in #​3158
• chore(deps): update docker/setup-buildx-action action to v3.12.0 by @​renovate[bot] in #​3162
• chore(deps): update golangci/golangci-lint docker tag to v2.8.0 by @​renovate[bot] in #​3163
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 by @​renovate[bot] in #​3164
• chore(deps): update gcr.io/distroless/static:latest docker digest to cd64bec by @​renovate[bot] in #​3165
• chore(deps): update actions/setup-go action to v6.2.0 by @​renovate[bot] in #​3166
• Prepare for v0.19.0 release by @​tklauser in #​3167

Full Changelog: cilium/cilium-cli@v0.18.9...v0.19.0

v0.18.9

Compare Source

Summary of Changes

Major Changes:

• Operator prometheus support TLS/mTLS using existing secret (cilium/cilium#42077, @​phuhung273)

Minor Changes:

• CLI: Allow users to set the default Cilium namespace via the CILIUM_NAMESPACE environment variable (cilium/cilium#41557, @​td0ne)
• Removed deprecated CiliumBGPPeeringPolicy CRD and its agent implementation. Use cilium.io/v2 CRDs (CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfigOverride) for configuring BGP. (cilium/cilium#42278, @​rastislavs)

CI Changes:

• Add CCNP cilium connectivity tests (cilium/cilium#42051, @​karina-ranadive)
• Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity (cilium/cilium#42984, @​rptaylor)

Misc Changes:

• bgp: Correct misleading error message in GetPeeringState (cilium/cilium#42945, @​hargrovee)
• bgp: Remove versions from bgp package names (cilium/cilium#42503, @​rastislavs)
• cilium-cli: add own type for root command parameters (cilium/cilium#42609, @​tklauser)
• cli: cleanups for pre-v1.15 removal (cilium/cilium#42757, @​julianwiedmann)
• cli: require Cilium v1.15 (cilium/cilium#41538, @​julianwiedmann)
• go.mod, vendor: bump github.com/google/go-github to v79 (cilium/cilium#42857, @​tklauser)
• Update lrp frontend IP address to avoid IMDS conflict in the cloud environment in cilium-cli (cilium/cilium#42737, @​liyihuang)
• Use modern Go constructs (cilium/cilium#42525, @​HadrienPatte)
• Update stable release to v

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[bde-dev]

AI Assessment

Field	Value
Decision	NEEDS_REVIEW
Risk Level	MEDIUM
Update Type	MINOR
Component	cilium-cli
Version	0.18.8 -> 0.19.4
Breaking Changes	true

Analysis

Cilium CLI is a core infrastructure component for a Kubernetes homelab. While this is a minor version update with improvements and bug fixes, it contains breaking changes due to removal of deprecated APIs and configuration options. The update spans multiple versions (v0.19.0-v0.19.4) with significant changes to connectivity tests, new feature additions (--log-check-only-test-time flag, --cleanup flag), and API removals. Compatibility with the deployed Cilium core version must be verified before merging. The homelab environment needs manual validation that no deprecated configurations are in use.

Recommendation

NEEDS_REVIEW: Before merging, verify: (1) Current Cilium core version matches v1.15+ requirement, (2) No cluster configurations use deprecated v2alpha1 CiliumNodeConfig API, (3) No deprecated encryption-related options are configured, (4) Test cilium-cli connectivity tests in non-production environment if possible. Review the detailed changelog for v0.19.0-v0.19.4 changes. Consider merging after confirming compatibility and running connectivity tests.

---

Analyzed by n8n AI Agent using Claude