chore(deps): update helm release cilium to v1.19.0-pre.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
cilium (source)	HelmChart	patch	1.19.0-pre.2 -> 1.19.0-pre.3

---

Release Notes

cilium/cilium (cilium)

v1.19.0-pre.3: 1.19.0-pre.3

Compare Source

Summary of Changes

Major Changes:

• ztunnel: add xds control-plane (#​42169, @​rgo3)
• ztunnel: add ztunnel daemonset controller (#​42766, @​ldelossa)

Minor Changes:

• Add iptables rule to allow tunnel traffic egressing the node when tunnel routing mode is used (#​42356, @​bersoare)
• Add option externallyCreated for external creation of service for clustermesh apiserver. (#​42227, @​andrejvanderzee)
• Add support for hybrid routing in datapath (#​41868, @​anubhabMajumdar)
• bgp: Add SourceInterface configuration option into CiliumBGPTransport (#​42583, @​rastislavs)
• bgp: Introduce "Interface" BGP advertisement type allowing advertisement of arbitrary IPs assigned on local interfaces (#​42469, @​rastislavs)
• Change the sidecar etcd instance of the Cluster Mesh API Server listen on all IP addresses (#​42818, @​giorio94)
• clustermesh: add MCS-API CRDs auto-installation (#​40729, @​MrFreezeex)
• clustermesh: deprecate passing tls cert/keys in Helm values (#​42576, @​MrFreezeex)
• clustermesh: set tls authMode to migration by default (#​42866, @​MrFreezeex)
• Delays CiliumIdentity allocation for a short random period of time, which can help reduce duplicate identity creation. (#​42282, @​squeed)
• Enable PLPMTUD on endpoint netns (#​42012, @​tommyp1ckles)
• helm: Use named ports for container probes (#​39281, @​jcpunk)
• Hubble v1.Events drop message now supports displaying applied L4 network policies (#​41693, @​41ks)
• ingress: Replace Endpoint with EndpointSlice (#​42778, @​sayboras)
• Reduce memory usage on operator for large AWS environments with many resources (#​42529, @​liyihuang)
• Support for Configurable Hubble FlowLog Aggregation (CFP-37472) (#​42011, @​mereta)
• Support for FromRequires and ToRequires in Cilium Network Policies has been removed. (#​42615, @​TheBeeZee)
• The deprecated REST policy write API has been removed. (#​42705, @​squeed)

Bugfixes:

• allow missing verbs for cilium-agent cluster role when readSecretsOnlyFromSecretsNamespace is false (#​42790, @​kraashen)
• AWS EC2: Fix ENI attachment on multi-network card instances with high-performance networking (EFA) setups (#​42512, @​41ks)
• Cilium will now panic when no egress masquerade devices are presented and the IPAM mode is not ClusterPool or Kubernetes, when using IPTables masquerading. This configuration leads to broken IPTables masquerading rules. (#​42531, @​ldelossa)
• cilium-cni: Fix bootstrapping agent detection check (#​42584, @​pippolo84)
• Cleanup FQDNs that have leaked into the global FQDN cache (#​42485, @​sjohnsonpal)
• controller: avoid spurious errors when RemoveControllerAndWait is invoked when the controller does not exist (#​41384, @​asdfmi)
• Do not opt-out Endpoint ID 1 from dnsproxy transparent mode. (#​42887, @​jrajahalme)
• endpoint/api: wait until endpoints are restored (#​42597, @​mhofstetter)
• Ensure cilium-agent gracefully does fallbacks when etcd is in a bad state. (#​42977, @​odinuge)
• envoy: pass stream idle timeout from Helm to configmap (#​42499, @​mhofstetter)
• Fix a bug that would cause Cilium to not report L4 checksum update errors when the length attribute is missing in ICMP Error messages with TCP inner packets. (#​42426, @​yushoyamaguchi)
• Fix a bug that would cause IPsec logs to incorrectly report the XFRM rules being processed as "Ingress" rules. (#​42640, @​sjohnsonpal)
• Fix agent local identity leak (#​42662, @​odinuge)
• Fix bug that could cause the agent to fail to add XFRM states when IPsec is enabled, thus preventing a proper startup. (#​42666, @​pchaigno)
• Fix CiliumNetworkPolicy labels without explicit source field defaulting to empty string instead of "unspec", resolving issues in policy debugging and Hubble flow exports. (#​41168, @​pillai-ashwin)
• Fix ipcache issues causing severe issues with the fqdn subsystem (#​42815, @​odinuge)
• Fix issue where endpoints got stuck in "waiting-to-regenerate" (#​42856, @​odinuge)
• Fix issue where fqdn GC starts too early that results in potentially missed ips in the IPCache (#​42502, @​odinuge)
• Fix leak in the policy subsystem (#​42661, @​odinuge)
• Fix rare kvstore issue where cilium continues to use an expired lease causing kvstore operations to fail consistently (#​42709, @​odinuge)
• Fix trace aggregation for IPv4 Host Firewall, reducing the amount of generated events. (#​42595, @​smagnani96)
• In rare cases, the cilium-operator losing the lead of the HA deployment could continue acting as if leading for at most a minute, leading to split-brain problems such as double allocation of pod CIDRs. (#​42920, @​bimmlerd)
• KVStoreMesh now correctly respects the CA bundle setting when validating remote cluster certificates (#​42726, @​giorio94)
• policy: ensure matched policy order is deterministic to reduce cilium-agent cpu and memory usage (#​42416, @​odinuge)
• policy: Fix rare Endpoint Selector Policy Deadlock causing policies to not be updated with new identities (#​42306, @​odinuge)
• policy: prevent incorrect mutation of network policy when using policy-default-local-cluster (#​42668, @​MrFreezeex)
• redirectpolicy: Avoid recomputing on pod changes that do not change resulting redirect backends (#​42814, @​joamaki)

CI Changes:

• .github/workflows: Let verifier complexity test merge and diff (#​41861, @​dylandreimerink)
• .github/workflows: run post steps only if cilium was installed (#​42585, @​aanm)
• Add CI workflow for L7 performance testing (#​41394, @​fristonio)
• all: fix golangci-lint 2.6.0 govet errors (#​42520, @​tklauser)
• bgp: Enhance TestRoutePolicySoftReset unit test (#​42860, @​rastislavs)
• bpf/tests/scapy: break up pkt_defs.py per test (#​42957, @​msune)
• bpf: Add CLUSTER_AWARE_ADDR to bpf_host build / complexity tests (#​42568, @​brb)
• bpf: test: egressgw: fix up ENABLE_MASQUERADE (#​42912, @​julianwiedmann)
• bpf: tests: add BPF MASQ test for ICMP ECHOs (#​42656, @​julianwiedmann)
• bpf: tests: egressgw: enable HostFW (#​42955, @​julianwiedmann)
• bpf: tests: set ENABLE_MASQUERADE_IPV6 for EGW XDP test (#​42962, @​julianwiedmann)
• bpf:test: cover host endpoint case in tc_nodeport_l3_dev.h (#​42983, @​smagnani96)
• ci-ingress workflow now retains the failed namespaces in sysdumps. (#​42944, @​jrajahalme)
• ci: add k8s 1.34 for eks (#​42571, @​Artyop)
• ci: cleanup disk space in cilium-cli build workflow (#​42873, @​tklauser)
• ci: remove focus agent in ci-runtime (#​42917, @​mhofstetter)
• ci: Switch cosign action source to the base branch (#​42739, @​ferozsalam)
• conformance-aws-cni: disable l7 proxy with aws-cni (#​42578, @​aanm)
• Delete .github/workflows/build-images-hotfixes.yaml (#​42958, @​sekhar-isovalent)
• Enable extended IP protocols (VRRP, IGMP) for pod egress traffic (#​42109, @​pillai-ashwin)
• gh: conn-disrupt: fix XFRM error checks (#​42724, @​julianwiedmann)
• gh: e2e-upgrade: clean up skip-include-conn-disrupt-test-ns-traffic flag (#​42755, @​julianwiedmann)
• gh: ginkgo: fix focus for service hairpin test (#​42633, @​julianwiedmann)
• gh: ipsec-e2e: fix flaky connection disruptivity test (#​42780, @​julianwiedmann)
• gh: renovate: remove exception for RHEL 8.6 LVH image dependency (#​42629, @​julianwiedmann)
• gha: additionally cleanup disk space in clustermesh upgrade workflow (#​42862, @​giorio94)
• gha: allow configuring runner for workflows building Cilium binaries (#​42582, @​giorio94)
• gha: don't filter lint-build-commits steps when workflow is modified (#​42844, @​giorio94)
• gha: wait for cert-manager CRDs to be ready in conformance clustermesh (#​42947, @​giorio94)
• ginkgo:nodeport: Move from parallel go routines to sequential steps (#​42455, @​smagnani96)
• lb: trivial sessionAffinity cleanups (#​42630, @​julianwiedmann)
• Make EKS clusters available in a pool to be used (#​42610, @​aanm)
• makefile: More reliable update-helm-values (#​42736, @​devodev)
• More EKS-setup cluster related fixes (#​42925, @​aanm)
• Move the deprecated LRP helm values to the new way in tests (#​42722, @​liyihuang)
• test/helpers: drop support for manifests specific for integration/k8s version (#​42437, @​tklauser)
• test/k8s: remove unused manifests (#​42978, @​tklauser)
• test: improve cyclonous reliability (#​42581, @​aanm)
• Testing for RHEL8 compatibility now uses a RHEL8.10-compatible kernel (previously this was a RHEL8.6-compatible kernel). (#​41639, @​julianwiedmann)
• Testing: Replace reflect.DeepEqual with assert.Equal in pkg/hubble/container tests for better error messages (#​42324, @​pillai-ashwin)
• workflows/kpr: Reduce test concurrency to 2 (#​43016, @​aanm)
• workflows: consolidate AKS conformance test cleanup steps (#​42715, @​aanm)

Misc Changes:

• .gitattributes: mark datapath config files as autogenerated (#​42998, @​giorio94)
• .github/workflow: add missing workflow permissions (#​42963, @​aanm)
• .github/workflow: add missing workflow permissions (#​42975, @​aanm)
• .github/workflows: remove auto-requested reviewers (#​42952, @​aanm)
• verifier_diff: Enable comparison of any verifier statistics (#​42558, @​pchaigno)
• Add a global source to fqdn cache list command (#​42486, @​sjohnsonpal)
• Add an option to install crds using helm. (#​42825, @​sekhar-isovalent)
• Add IONX Networks Limited to USERS.md (#​42566, @​murali509)
• Add multipath support for route reconciler (#​42767, @​YutaroHayakawa)
• Add validation for HTTPRoute head modifier (#​42504, @​xtineskim)
• Add why to USERS.md (#​42149, @​xmulligan)
• allow disabling Cilium Node CRD (#​42345, @​jshr-w)
• bgp: Decouple GoBGP from BGP manager (#​42910, @​rastislavs)
• bgp: Extend route policy matching with match types (#​42714, @​rastislavs)
• bgp: Fix GoBGP policy prefix type conversion (#​42921, @​rastislavs)
• bgp: Fix invalid dereference in peerAddressesFromPolicy by empty neighbors (#​42831, @​rastislavs)
• bgp: remove remaining version references from logs (#​42723, @​hargrovee)
• bgp: Remove versions from bgp package names (#​42503, @​rastislavs)
• bpf, maps: update links to bpf headers (#​42852, @​tklauser)
• bpf/analyze: refactor branch evaluator, add struct and signed int support (#​42479, @​ti-mo)
• bpf: adding a speical case for service loopback IPv6 during icmp routing (#​42497, @​saiaunghlyanhtet)
• bpf: Align union v6addr old_daddr (#​42524, @​brb)
• bpf: conntrack: fix up ICMP_FRAG_NEEDED handling (#​42550, @​julianwiedmann)
• bpf: host: fix error handling for IPv6 L2 announcement (#​42554, @​julianwiedmann)
• bpf: host: streamline the lxc/host policy tailcall program (#​42548, @​julianwiedmann)
• bpf: host: use transferred source identity in lxc-to-host policy (#​42849, @​julianwiedmann)
• bpf: lb: misc cleanups (#​42986, @​julianwiedmann)
• bpf: lb: split up lb*_local() into backend selection / DNAT operation (#​42973, @​julianwiedmann)
• bpf: lxc: always set identity mark on forwarded egressing traffic (#​42551, @​julianwiedmann)
• bpf: lxc: cleanup delivery to host (#​42853, @​julianwiedmann)
• bpf: minor IPsec improvements (#​42579, @​julianwiedmann)
• bpf: nat: support egressing ICMP REDIRECTs (#​42637, @​julianwiedmann)
• bpf: nodeport: let tail_nodeport_nat_ingress_ipv*() use source identity (#​42895, @​julianwiedmann)
• bpf: nodeport: minor cleanups (#​42919, @​julianwiedmann)
• bpf: refactor classifiers and skip Overlay check for encrypted packets (#​42720, @​smagnani96)
• bpf: sock: prefer INADDR_LOOPBACK over magic number (#​42189, @​julianwiedmann)
• bpf: trivial cleanups (policy / header includes) (#​42549, @​julianwiedmann)
• bpf: untangle usage of common.h (#​42652, @​julianwiedmann)
• bpf: untangle usage of common.h (part 2) (#​42775, @​julianwiedmann)
• bpf: use explicit __be32 type for egress gateway policy IP fields (#​42616, @​gyutaeb)
• bpf:overlay: remove empty overlay_ingress_policy_hook infra (#​42989, @​smagnani96)
• bpf:overlay: set identity for ingressing IPv6 traffic to host (#​42891, @​smagnani96)
• Bug fix to HTTPRoute status update message (#​42575, @​xtineskim)
• chore(deps): update actions/upload-artifact action to v5 (main) (#​42675, @​cilium-renovate[bot])
• chore(deps): update actions/upload-artifact action to v5 (main) (#​42933, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (main) (#​42676, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (main) (#​42800, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (main) (#​42934, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (main) (#​43034, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (main) (patch) (#​42792, @​cilium-renovate[bot])
• chore(deps): update all lvh-images main (main) (patch) (#​42670, @​cilium-renovate[bot])
• chore(deps): update all lvh-images main (main) (patch) (#​42793, @​cilium-renovate[bot])
• chore(deps): update all lvh-images main (main) (patch) (#​42927, @​cilium-renovate[bot])
• chore(deps): update all lvh-images main (main) (patch) (#​43029, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (#​42677, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (#​43032, @​cilium-renovate[bot])
• chore(deps): update cilium/cilium-cli action to v0.18.8 (main) (#​42671, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/little-vm-helper to v0.0.28 (main) (#​42770, @​cilium-renovate[bot])
• chore(deps): update dependency protocolbuffers/protobuf to v33.1 (main) (#​42798, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to 6ca9eb0 (main) (#​42669, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to e68f6a0 (main) (#​42791, @​cilium-renovate[bot])
• chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.6.6 (main) (#​42928, @​cilium-renovate[bot])
• chore(deps): update github artifact actions (main) (#​43035, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.4 (main) (#​42619, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.4 (main) (#​42929, @​cilium-renovate[bot])
• chore(deps): update golangci/golangci-lint docker tag to v2.6.0 (main) (#​42514, @​cilium-renovate[bot])
• chore(deps): update golangci/golangci-lint docker tag to v2.6.1 (main) (#​42620, @​cilium-renovate[bot])
• chore(deps): update golangci/golangci-lint docker tag to v2.6.2 (main) (#​42794, @​cilium-renovate[bot])
• chore(deps): update module github.com/containerd/containerd to v1.7.29 [security] (main) (#​42638, @​cilium-renovate[bot])
• chore(deps): update renovate dependencies to v42 (main) (#​42678, @​cilium-renovate[bot])
• chore(deps): update renovate dependencies to v42.11.0 (main) (#​42799, @​cilium-renovate[bot])
• chore(deps): update renovate dependencies to v42.19.3 (main) (#​42931, @​cilium-renovate[bot])
• chore(deps): update renovate dependencies to v42.2.0 (main) (#​42691, @​cilium-renovate[bot])
• chore(deps): update renovate dependencies to v42.26.11 (main) (#​43033, @​cilium-renovate[bot])
• chore(deps): update renovate dependencies to v42.27.0 (main) (#​43043, @​cilium-renovate[bot])
• ci: Enable modernize golangci-lint linter (#​42642, @​HadrienPatte)
• CI: set maxPodsPerNode for eks nodegroups in ci (#​42894, @​bersoare)
• ci: Setup CodeQL (#​42586, @​kyle-c-simmons)
• Clean up leftovers after fromRequires/toRequires removal (#​42759, @​tklauser)
• CODEOWNERS: let sig-policy own pkg/maps/policymap (#​42701, @​julianwiedmann)
• codeowners: Make cilium/gke responsible for GKE workflows (#​42380, @​jrife)
• CODEOWNERS: Remove sig-k8s from Helm charts (#​42710, @​gandro)
• contrib: update suggested command to fix testdata divergences (#​42624, @​giorio94)
• daemon: extract ctmap GC initialization (#​42493, @​mhofstetter)
• daemon: extract daemonconfig modification/validation code (#​42625, @​mhofstetter)
• daemon: remove daemonCleanup (#​42612, @​mhofstetter)
• daemon: remove startDaemon (#​42754, @​mhofstetter)
• daemon: Remove deprecated egress-multi-home-ip-rule-compat flag (#​42627, @​gandro)
• daemon: remove ENI datapath migration (#​42618, @​mhofstetter)
• daemon: remove unnecessary error handling/logging (#​42779, @​mhofstetter)
• daemon: use hive job for startDaemon (#​42516, @​mhofstetter)
• datapath: fix up description text for host_ep_id config value (#​42886, @​julianwiedmann)
• datapath: policy: switch ICMP options to runtime configs (#​42635, @​julianwiedmann)
• datapath: remove unused ReinitializeXDP method (#​42748, @​tklauser)
• datapath: switch l2-announcement to runtime configs (#​42587, @​julianwiedmann)
• deps: Bump GoBGP to latest v3.37 fork version (#​42824, @​rastislavs)
• docs/multi-pool: Fix guide to update in use pools (#​42598, @​pippolo84)
• docs: Add guidance for displaying file creation in documentation style guide (#​42128, @​pillai-ashwin)
• docs: Add limitation about LB to same backend via multiple VIPs (#​42632, @​brb)
• docs: Small enhancement to eBPF testing documentation (#​42749, @​lconnery)
• docs: tuning: remove some references to old kernels (#​42601, @​julianwiedmann)
• Documentation: host firewall: document emergency recovery (#​42776, @​squeed)
• EKS Cluster Management Fixes (#​42914, @​aanm)
• endpoint/cleanup: add missing errorhandling when waiting for endpoint restoration (#​42602, @​mhofstetter)
• endpoint: endpoint bpf-prog watchdog waits for endpoint restoration (#​42557, @​mhofstetter)
• envoy: use Hive Job Group instead of Registry (#​42702, @​mhofstetter)
• envoy: use hive jobs for long-running xDS- and accesslog server (#​42606, @​mhofstetter)
• feat(sdp): Dockerfile for standalone dns proxy (#​42647, @​vipul-21)
• feat(sdp): Updating the ip to endpoint table for sdp (#​41548, @​vipul-21)
• Fix two file descriptor leaks (#​42713, @​bimmlerd)
• fix(deps): update all go dependencies main (main) (#​42672, @​cilium-renovate[bot])
• fix(deps): update aws-sdk-go-v2 monorepo (main) (#​42673, @​cilium-renovate[bot])
• fix(deps): update aws-sdk-go-v2 monorepo (main) (#​42690, @​cilium-renovate[bot])
• fix(deps): update aws-sdk-go-v2 monorepo (main) (#​42932, @​cilium-renovate[bot])
• fix(deps): update azure-sdk-for-go monorepo (main) (#​42795, @​cilium-renovate[bot])
• fix(deps): update go-openapi packages (main) (#​42692, @​cilium-renovate[bot])
• fix(deps): update go-openapi packages (main) (#​42796, @​cilium-renovate[bot])
• fix(deps): update kubernetes packages to v0.34.2 (main) (#​42797, @​cilium-renovate[bot])
• fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/azcore to v1.20.0 (main) (#​42674, @​cilium-renovate[bot])
• fix(deps): update module github.com/go-openapi/swag to v0.25.3 (main) (#​42930, @​cilium-renovate[bot])
• fix(deps): update module golang.org/x/crypto to v0.45.0 [security] (main) (#​42881, @​cilium-renovate[bot])
• fix:monitor: misaligned file indexing in metrics (#​42663, @​smagnani96)
• fqdn: rewrite name manager test to use real ipcache (#​42820, @​odinuge)
• go.mod, vendor: bump github.com/google/go-github to v79 (#​42857, @​tklauser)
• health: inline process launcher (#​42603, @​tklauser)
• hive: add metrics for hive jobs (total, errors, duration) (#​42762, @​mhofstetter)
• hive: prefer injected job.Group over job.Registry (#​42774, @​mhofstetter)
• identity: init reserved identity metrics in hive cell (#​42845, @​mhofstetter)
• ipam: register ipam as status object in hive cell (#​42522, @​mhofstetter)
• iptables: add ACCEPT rule before NOTRACK rule for tunnel traffic (#​42660, @​bersoare)
• k8s: remove unused functionality to disable client programmatically (#​42911, @​mhofstetter)
• Log proxy instance creation at debug level (#​42319, @​sjohnsonpal)
• Make sure the datapath builds with LLVM 21. (#​42588, @​ti-mo)
• maps/lxcmap: use netip.Addr (#​42761, @​tklauser)
• Metrics package cleanup and logging hook fixes (#​42613, @​fristonio)
• metrics: add flush command for bpf map (#​42644, @​smagnani96)
• Minor improvements around certificate validation in etcd/clustermesh troubleshoot commands (#​42782, @​giorio94)
• Move aws operator fetch vpc id logic to the start up (#​42718, @​liyihuang)
• node: move local node sync cell from daemon/cmd to pkg/node/sync (#​42657, @​mhofstetter)
• pkg/bpf: re-enable errors for unused maps unless ErrRestrictedKernel (#​42611, @​dylandreimerink)
• policy: init policy api layer with cluster info in hive cell (#​42846, @​mhofstetter)
• policy: Marshal L4Filter marshalling errors into json (#​42834, @​joestringer)
• Policy: Only compare exported fields in unit tests (#​42106, @​jrajahalme)
• policy: Small fixes and improvements (#​42607, @​jrajahalme)
• Prepare for release v1.19.0-pre.2 (#​42555, @​cilium-release-bot[bot])
• README: Update releases (#​42740, @​gentoo-root)
• Remove mention of Umbrella Chart in Helm value namespaceOverride description (#​42707, @​pmatulis)
• Remove Tetragon users from USERS.md (#​42913, @​xmulligan)
• renovate: add generated files after changing documentation (#​42889, @​aanm)
• renovate: Allow only patch version for go-control-plane (#​42954, @​sayboras)
• renovate: disable all etcd updates on v1.16 and v1.17 (#​42847, @​giorio94)
• renovate: disable helm v4 until third party license is checked (#​42817, @​aanm)
• renovate: disable helm v4 until third party license is checked (#​42869, @​aanm)
• renovate: enable certgen and patch updates in Makefile.values for stable branches (#​43050, @​giorio94)
• renovate: Re-enable major updates for go-github (#​42903, @​HadrienPatte)
• Revert operator: policy: use ApplyStatus when setting network policy status (#​42563, @​squeed)
• Revert "chore: enable installation of crds through helm chart" (#​42839, @​sekhar-isovalent)
• Support RTA_VIA in route reconciler (#​42750, @​YutaroHayakawa)
• test:verifier: ensure output directory exists (#​42645, @​smagnani96)
• Update new fragment metrics documentation. (#​42614, @​tommyp1ckles)
• update README with new releases (#​42560, @​aanm)
• Use modern Go constructs (#​42525, @​HadrienPatte)
• vendor: Bump to StateDB v0.5.6 (#​42758, @​joamaki)
• vendor: Update go-licenses to v2 (#​42829, @​HadrienPatte)
• ztunnel: rename protobuf files to avoid potential conflicts (#​42836, @​ldelossa)

Docker Manifests

cilium

quay.io/cilium/cilium:v1.19.0-pre.3@​sha256:9ba932dcafcb30f44ae4835edb83081423ae4139b2a8e8b8c7245f47a60de925

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.19.0-pre.3@​sha256:2fd75dc3b7235d8d4fb747a299d1e7f621540902dcfc0e96456a47a8bcab41b6

docker-plugin

quay.io/cilium/docker-plugin:v1.19.0-pre.3@​sha256:2be3e9534fd90640bf767be2e0dee07dc383599409fd48195281d6c54e379ea4

hubble-relay

quay.io/cilium/hubble-relay:v1.19.0-pre.3@​sha256:6771ceb69dbe96e91950c474b146e3e9dc74c64340b6a87dea28be20ed6566fc

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.19.0-pre.3@​sha256:c2ef3382a52118caa5e7bcd3523c49dd34238c719de129add8b8823c1553b2fb

operator-aws

quay.io/cilium/operator-aws:v1.19.0-pre.3@​sha256:cc236ae77239ba6fe87150875549be1028a9c8bf8181386b5e357b8e7a830389

operator-azure

quay.io/cilium/operator-azure:v1.19.0-pre.3@​sha256:cd8355d8fdd5758ff5c8d84bc5d2d4edf516c9ba210fff66f63364d710c5b05e

operator-generic

quay.io/cilium/operator-generic:v1.19.0-pre.3@​sha256:c2796566b40cfdc4b59cc1d460d91b86436ded0b447ef82d4e3663f745db6671

operator

quay.io/cilium/operator:v1.19.0-pre.3@​sha256:f222f725ed0c4dd73f091b59a251ab1f39ec38e0534c0f4355be45689895df7c

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.