Release v0.18.2

What's Changed

Minor Changes:

• cilium-cli/sysdump: relax extra-label-selectors to target all namespaces (cilium/cilium#37715, @giorio94)
• Extend cilium-cli connectivity perf to allow testing egress gateway performance (cilium/cilium#37748, @giorio94)

CI Changes:

• Add explicit IPv6 testing to PodToService cilium-cli connectivity test (cilium/cilium#37544, @saiaunghlyanhtet)
• cilium-cli/connectivity: Fix output for LRP tests (cilium/cilium#37893, @pchaigno)
• cilium-cli/connectivity: only check container restarts on v1.17+ (cilium/cilium#37823, @giorio94)
• cli: Attribute test failures outside of action failures (cilium/cilium#37757, @joestringer)
• cli: Clean up Makefile (cilium/cilium#37911, @michi-covalent)
• cli: connectivity: Log tcpdump cmd on error (cilium/cilium#37822, @jschwinger233)
• connectivity tests: keep tcpdump alive by printing to stdout (cilium/cilium#37984, @asauber)
• Egress Gateway performance testing (cilium/cilium#37753, @giorio94)
• Fix egress device computation in cli connectivity pod-to-pod-encryption-v2 tests for AWS chaining mode. (cilium/cilium#37680, @smagnani96)
• Miscellaneous improvements to the Egress Gateway scale test (cilium/cilium#37611, @giorio94)

Misc Changes:

• Add sloglint and fix issues (cilium/cilium#37851, @aanm)
• bpf: tolerate dropped ICMPv6 messages with ICMPv6 payload (cilium/cilium#38068, @julianwiedmann)
• chore(deps): update docker.io/library/golang:1.24.0 docker digest to 3f74443 (main) (cilium/cilium#37938, @cilium-renovate[bot])
• cilium-cli: Ignore k8s client network error warning (cilium/cilium#37773, @jrajahalme)
• cilium-cli: Only use --curl-parallel when expecting success (cilium/cilium#37803, @jrajahalme)
• cli: Added parameter to print used images (cilium/cilium#37390, @PhilipSchmid)
• cli: Support filtering --log-code-owners (cilium/cilium#37905, @joestringer)
• k8s: move portforward functionality to separate sub-package (cilium/cilium#38060, @tklauser)
• Update connectivity tests to correctly detect TLS Interception (cilium/cilium#37796, @youngnick)
• chore(deps): update dependency go to v1.24.1 by @renovate in #2969
• Update stable release to v0.18.1 by @michi-covalent in #2968
• Prepare for v0.18.2 release by @michi-covalent in #2964

Release v0.18.1

What's Changed

• Update stable release to v0.18.0 by @michi-covalent in #2959
• chore(deps): update golangci/golangci-lint docker tag to v1.64.6 by @renovate in #2960
• gh: add option to specify kubeconfig by @marseel in #2965
• Prepare for v0.18.1 release by @michi-covalent in #2967

Full Changelog: v0.18.0...v0.18.1

Release v0.18.0

⚠️ A Breaking Change ⚠️

Cilium CLI GitHub Action now defaults to using the top-level go.mod file to determine Go version to build Cilium CLI when skip-build parameter is set to false (#2956).

What's Changed

• chore(deps): update actions/upload-artifact action to v4.6.1 by @renovate in #2949
• Always update github.com/cilium/cilium from main by @tklauser in #2951
• chore(deps): update actions/download-artifact action to v4.1.9 by @renovate in #2952
• renovate: clean up configuration by @tklauser in #2954
• chore(deps): update all github action dependencies (minor) by @renovate in #2955
• chore(deps): update dependency go to v1.24.0 by @renovate in #2957
• action: Clean up the logic to handle go-mod-directory by @michi-covalent in #2956
• Prepare for v0.18.0 release by @michi-covalent in #2958

Full Changelog: v0.17.0...v0.18.0

Release v0.17.0

⚠️ A Breaking Change ⚠️

Cilium CLI removes the External workloads feature in this release (cilium/cilium#37418). More specifically, it removes:

• cilium clustermesh external-workload command.
• --enable-external-workloads flag in cilium clustermesh enable command.
• Connectivity tests related to external workloads.
• Sysdump support for external workloads.

Cilium community plans to stop maintaining the external workload feature in all the stable release branches (v1.15, v1.16, and v1.17), and the feature will be removed in v1.18 release.

What's Changed

Minor Changes:

• Cilium CLI IPsec fixes (cilium/cilium#37018, @viktor-kurchenko)
• cli: Improve fetching of Cilium component logs in failure scenarios (cilium/cilium#37160, @joestringer)
• Remove external-workload feature from Cilium and cilium-cli. Use previous version of cilium-cli if needed to provision unsupported external-workload clusters. (cilium/cilium#37418, @brb)

CI Changes:

• cilium-cli/connectivity: additionally check for container restarts (cilium/cilium#36299, @giorio94)
• cilium-cli: add explicit IPv6 testing to PodToK8sLocal (cilium/cilium#37461, @saiaunghlyanhtet)
• cilium-cli: extend no-interrupted-connections to test NodePort from outside (cilium/cilium#37294, @ysksuzuki)
• cilium-cli: Fix GITHUB_WORKFLOW_REF parsing (cilium/cilium#37686, @joestringer)
• CLI: Attribute tests to codeowners (cilium/cilium#37027, @joestringer)
• Update stable release to v0.16.24 by @michi-covalent in #2921
• chore(deps): update all github action dependencies (patch) by @renovate in #2922
• chore(deps): update ubuntu:24.04 docker digest to 7229784 by @renovate in #2923
• chore(deps): update golangci/golangci-lint-action action to v6.3.0 by @renovate in #2925
• Remove v0.15.22 from the release list by @michi-covalent in #2930
• chore(deps): update docker/setup-buildx-action action to v3.9.0 by @renovate in #2928
• chore(deps): update golangci/golangci-lint-action action to v6.3.1 by @renovate in #2929
• chore(deps): update dependency go to v1.23.6 by @renovate in #2927
• chore(deps): update aws-actions/configure-aws-credentials action to v4.1.0 by @renovate in #2932
• chore(deps): update golangci/golangci-lint-action action to v6.3.2 by @renovate in #2931
• chore(deps): update golangci/golangci-lint docker tag to v1.64.2 by @renovate in #2933
• .github: Pass through GITHUB_WORKFLOW_REF by @joestringer in #2936
• chore(deps): update golangci/golangci-lint-action action to v6.4.0 by @renovate in #2938
• ci: avoid using deprecated tls.secretsBackend flag by @tklauser in #2934
• chore(deps): update golangci/golangci-lint docker tag to v1.64.4 by @renovate in #2935
• chore(deps): update golangci/golangci-lint docker tag to v1.64.5 by @renovate in #2940
• chore(deps): update dependency cilium/cilium to v1.16.7 by @renovate in #2943
• chore(deps): update all github action dependencies (patch) - autoclosed by @renovate in #2937
• chore(deps): update dependency kubernetes-sigs/kind to v0.27.0 by @renovate in #2941
• github: Remove externalworkloads.yaml by @michi-covalent in #2944
• chore(deps): update golangci/golangci-lint-action action to v6.5.0 by @renovate in #2945
• chore(deps): update docker/build-push-action action to v6.14.0 by @renovate in #2946
• Prepare for v0.17.0 release by @michi-covalent in #2947

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#37341, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#37660, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang docker tag to v1.24.0 (main) (cilium/cilium#37603, @cilium-renovate[bot])
• chore(deps): update go to v1.23.6 (main) (cilium/cilium#37495, @cilium-renovate[bot])
• cilium-cli/connectivity: ignore hubble-ui warning in no-errors-in-logs test (cilium/cilium#37563, @tklauser)
• cilium-cli/sysdump: drop obsolete CiliumEgressNATPolicy entry (cilium/cilium#37584, @giorio94)
• cilium-cli: enable websockets for k8s exec (cilium/cilium#37538, @asauber)
• cilium-cli: re-fix GITHUB_WORKFLOW_REF parsing (cilium/cilium#37707, @kaworu)
• cli: Ensure EGW tests trigger failures via actions (cilium/cilium#37649, @joestringer)
• connectivity: Add curl retry params for TLS inspection test (cilium/cilium#37424, @sayboras)
• connectivity: Avoid hard-coded external target in warning log (cilium/cilium#37443, @sayboras)
• Preparation to test IPv4 and IPv6 explicitly in connectivity tests (cilium/cilium#37468, @gentoo-root)
• Revert "cli: Use error def of github.com/cilium/ebpf" (cilium/cilium#37687, @joestringer)
• test: Update negative test case for TLS SNI (cilium/cilium#37386, @sayboras)
• wireguard: introduce v2 pod-to-pod connectivity tests (cilium/cilium#37533, @ldelossa)

Release v0.16.24

What's Changed

Summary of Changes

Minor Changes:

• Cilium CLI now captures Tetragon helm data when performing cilium sysdump. (cilium/cilium#36749, @f1ko)
• cilium-cli: collect Cilium Agent logs from crashing / not ready / restarted pods (cilium/cilium#37013, @marseel)
• cli: Add support for helm --max-history command line flag (cilium/cilium#36677, @marcofranssen)
• cli: restrict conn test to ip families (cilium/cilium#37000, @viktor-kurchenko)
• Significantly reduce memory usage during cilium-cli sysdump collection (cilium/cilium#36987, @giorio94)

CI Changes:

• connectivity: Add retry all error for L7 header related test (cilium/cilium#37010, @sayboras)
• test: Add negative test case for TLS SNI (cilium/cilium#37122, @sayboras)
• connectivity: Add test for update TLS secret (cilium/cilium#36812, @sayboras)

Misc Changes:

• .github: generate feature summary report from CI (cilium/cilium#36933, @aanm)
• chore(deps): update all-dependencies (main) (cilium/cilium#37199, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.5 docker digest to 8c10f21 (main) (cilium/cilium#37178, @cilium-renovate[bot])
• chore(deps): update go to v1.23.5 (main) (cilium/cilium#37064, @cilium-renovate[bot])
• Cilium CLI: Trim EKS cluster ARN to extract valid cluster name (cilium/cilium#36952, @jaehanbyun)
• cilium-cli: do not print checkmarks for non-binary values (cilium/cilium#36890, @aanm)
• Remove always-nil error returns (cilium/cilium#36910, @tklauser)
• Update stable release to v0.16.23 by @michi-covalent in #2907
• chore(deps): update docker/build-push-action action to v6.11.0 by @renovate in #2906
• chore(deps): update actions/upload-artifact action to v4.6.0 by @renovate in #2908
• chore(deps): update docker/build-push-action action to v6.12.0 by @renovate in #2909
• chore(deps): update golangci/golangci-lint-action action to v6.2.0 by @renovate in #2911
• chore(deps): update dependency go to v1.23.5 by @renovate in #2910
• chore(deps): update all github action dependencies (minor) by @renovate in #2912
• chore(deps): update dependency cilium/cilium to v1.16.6 by @renovate in #2914
• renovate config migration remake by @bimmlerd in #2915
• chore(deps): update docker/build-push-action action to v6.13.0 by @renovate in #2916
• chore(deps): update aws-actions/configure-aws-credentials action to v4.0.3 by @renovate in #2917
• Prepare for v0.16.24 release by @michi-covalent in #2920

Full Changelog: v0.16.23...v0.16.24

Release v0.16.23

What's Changed

Minor Changes:

• cli: aws mixed nodes install fix (cilium/cilium#36336, @viktor-kurchenko)

Bugfixes:

• Cilium CLI fix for AWS ENI mode (cilium/cilium#36887, @viktor-kurchenko)
• Restore the original flag semantics for --egress-masquerade-interfaces to the same as v1.17.0-pre.2 or earlier (cilium/cilium#36504, @viktor-kurchenko)

CI Changes:

• Add --external-other-target parameter to cilium CLI connectivity tests. (cilium/cilium#36080, @wedaly)
• Change client-egress-l7-tls tests to sequential because flaky (cilium/cilium#36568, @youngnick)
• cilium-cli/connectivity: fix IPv6 feature check for 2ndary node IPv6 (cilium/cilium#36513, @tklauser)
• cilium-cli: Add envoy log pattern in error check (cilium/cilium#36498, @sayboras)
• Fix cilium CLI connectivity tests in IPv6-only clusters. (cilium/cilium#36026, @wedaly)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#36706, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7003184 (main) (cilium/cilium#36604, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7ea4c9d (main) (cilium/cilium#36808, @cilium-renovate[bot])
• ci/connectivity: Don't apply cnp to conn-disrupt pods in 1.15, 1.14 (cilium/cilium#36682, @jschwinger233)
• cilium-cli: skip some IPv6 connectivity tests for Cilium<1.14 when IPsec is enabled (cilium/cilium#36664, @jschwinger233)
• Isolate node-to-node encryption tests to wireguard (cilium/cilium#36556, @ldelossa)
• chore(deps): update all github action dependencies (minor) by @renovate in #2887
• Update stable release to v0.16.22 by @tklauser in #2888
• chore(deps): update module golang.org/x/crypto to v0.31.0 [security] by @renovate in #2889
• chore(deps): update all github action dependencies (minor) by @renovate in #2890
• Dockerfile: drop syntax comment by @tklauser in #2893
• chore(deps): update dependency kubernetes-sigs/kind to v0.26.0 by @renovate in #2892
• chore(deps): update dependency cilium/cilium to v1.16.5 by @renovate in #2894
• chore(deps): update actions/upload-artifact action to v4.5.0 by @renovate in #2896
• chore(deps): update module golang.org/x/net to v0.33.0 [security] by @renovate in #2895
• chore(deps): update golangci/golangci-lint docker tag to v1.63.0 by @renovate in #2899
• chore(deps): update golangci/golangci-lint docker tag to v1.63.4 by @renovate in #2902
• chore(deps): update helm/kind-action action to v1.12.0 by @renovate in #2901
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #2905
• Prepare for v0.16.23 release by @michi-covalent in #2903

Full Changelog: v0.16.22...v0.16.23

Release v0.16.22

Important

The default behavior for cilium upgrade has changed such that Helm values will be reset and then reused. This behavior can be reverted to the previous behavior by setting --reset-then-reuse-values=false or by explicitly specifying --reuse-values or --reset-values which always take precedence over --reset-then-reuse-values. See cilium/cilium#36347 for details.

What's Changed

• chore(deps): update golang:1.23.4-alpine3.19 docker digest to 5f33368 by @renovate in #2879
• Update stable release to v0.16.21 by @tklauser in #2880
• Pick up the latest cilium/cilium by @michi-covalent in #2883
• Makefile: Remove CILIUM_VERSION variable by @michi-covalent in #2884
• Prepare for v0.16.22 release by @tklauser in #2886

Full Changelog: v0.16.21...v0.16.22

Release v0.16.21

Tip

Cilium CLI now derives the default Cilium version to install from the source instead of injecting it at compile time. You no longer need to set github.com/cilium/cilium/cilium-cli/defaults.CLIVersion using -ldflags while compiling Cilium CLI. See cilium/cilium#36344 for details.

What's Changed

Minor Changes:

• Add cli support for impersonation --as and --as-group flags (cilium/cilium#35240, @cnmcavoy)
• AWS AL2023 support (cilium/cilium#36076, @viktor-kurchenko)
• cilium-cli: Derive the default version from cilium/charts (cilium/cilium#36344, @michi-covalent)
• Disable deprecated support for running the Cilium KVStore in pod network (cilium/cilium#35741, @giorio94)
• introducing a new CLI option to display ipcache information by labels or cidr (cilium/cilium#35275, @vasu-dasari)
• sysdump: respect worker count and collect Cilium profiling data as first task (cilium/cilium#35897, @giorio94)

Bugfixes:

• cilium-cli/connectivity: fix nil-pointer dereference if minimum version can't be detected (cilium/cilium#35802, @tklauser)
• Fix: cilium-cli install --repository flag respects repository even with cached versions. (cilium/cilium#35670, @renyunkang)

CI Changes:

• cilium-cli/connectivity: allow to specify log levels to check (cilium/cilium#36231, @tklauser)
• cilium-cli/connectivity: disable warning log checks before v1.17 (cilium/cilium#36358, @giorio94)
• cilium-cli: Improve tcpdump termination timeout handling (cilium/cilium#36021, @liyihuang)
• cilium-cli: retry exec-in-pod requests in case of transient errors (cilium/cilium#35961, @tklauser)
• cilium-cli: Run BGP tests sequentially (cilium/cilium#35727, @rastislavs)
• cli/connectivity: Check for unexpected warning logs (cilium/cilium#35723, @pchaigno)
• cli: Don't ignore datapath bug packet drops (cilium/cilium#36105, @pchaigno)
• Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test for v1.15 and v1.16. (cilium/cilium#35742, @smagnani96)
• test, cli/connectivity: Remove stale error log exceptions (cilium/cilium#35848, @pchaigno)

Misc Changes:

• Add coverage for SNI enforcement in cilium-cli connectivity tests. (cilium/cilium#35887, @jrajahalme)
• Cilium-cli connectivity test now supports use of parallel requests with curl (cilium/cilium#35949, @jrajahalme)
• cilium-cli/install: remove deprecated no-op --disable-check flag (cilium/cilium#36110, @tklauser)
• cilium-cli: apply network policies to no-conn-disrupt test (cilium/cilium#35685, @giorio94)
• cilium-cli: Skip nil details for Service error in check-log-errors (cilium/cilium#35671, @rastislavs)
• cilium-cli: Use unique CNP names (cilium/cilium#36064, @jrajahalme)
• Miscellaneous improvements to DNS introspection policies in connectivity tests (cilium/cilium#36193, @giorio94)
• Revert "sysdump: collect Cilium profiling data as first task" (cilium/cilium#35771, @giorio94)
• sysdump: Collect crashed pod logs in cilium-test namespaces (cilium/cilium#35612, @jschwinger233)
• Update stable release to v0.16.20 by @michi-covalent in #2851
• .github: use netcat to check hubble port-forward success by @devodev in #2850
• chore(deps): update go to v1.23.3 (patch) by @renovate in #2854
• chore(deps): update golang docker tag to v1.23.3 by @renovate in #2853
• chore(deps): update golangci/golangci-lint docker tag to v1.62.0 by @renovate in #2858
• chore(deps): update dependency kubernetes-sigs/kind to v0.25.0 by @renovate in #2857
• Improve cacheability of Docker layers and add ca-certs to scratch image by @marcofranssen in #2842
• chore(deps): update docker/dockerfile:1.11 docker digest to 10c699f by @renovate in #2855
• chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #2860
• chore(deps): update docker.io/library/golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2863
• chore(deps): update dependency cilium/cilium to v1.16.4 by @renovate in #2864
• chore(deps): update golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2862
• chore(deps): update ubuntu:24.04 docker digest to 278628f by @renovate in #2865
• chore(deps): update docker/build-push-action action to v6.10.0 by @renovate in #2867
• chore(deps): update docker/dockerfile docker tag to v1.12 by @renovate in #2868
• chore(deps): update golangci/golangci-lint docker tag to v1.62.2 by @renovate in #2866
• action: Explicitly set go-version by @michi-covalent in #2871
• .github/workflows: add validation of renovate config by @tklauser in #2873
• renovate: update Go version in action.yaml by @tklauser in #2872
• chore(deps): update golang docker tag to v1.23.4 by @renovate in #2876
• chore(deps): update ubuntu:24.04 docker digest to 80dd3c3 by @renovate in #2875
• chore(deps): update go to v1.23.4 (patch) by @renovate in #2877
• Prepare for v0.16.21 release by @tklauser in #2869

New Contributors

• @marcofranssen made their first contribution in #2842

Full Changelog: v0.16.20...v0.16.21

Release v0.16.20

What's Changed

Minor Changes:

• Add CLI flag to specify --kubeconfig (cilium/cilium#34573, @ldlb9527)
• Add support for automatic port-forwarding in Hubble CLI Replace kubectl-based port-forwarding with native implementation in Cilium CLI (cilium/cilium#35483, @devodev)
• cilium-cli status: fail fast on terminal error (cilium/cilium#35048, @nimishamehta5)
• feat(clustermesh): Deploy in parallel the connections (cilium/cilium#35021, @littlejo)
• Miscellaneous improvements to the sysdump collection (cilium/cilium#35610, @giorio94)

Bugfixes:

• Fix packet drops for pod-to-pod connections that pass through ingress & egress proxy when using IPsec, caused by MTU misconfiguration. (cilium/cilium#35173, @smagnani96)
• Fixed Cilium CLI fatal error: concurrent map read and map write (cilium/cilium#35311, @chaunceyjiang)

CI Changes:

• Add concurrency to test-ipsec-upgrade (cilium/cilium#35362, @aanm)
• cilium-cli: Ignore "No egress gateway found" drops (cilium/cilium#35609, @pchaigno)
• cli/connectivity: Test strict mode encryption (cilium/cilium#35231, @jschwinger233)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#35221, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#35376, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#35490, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.2 docker digest to a7f2fc9 (main) (cilium/cilium#35373, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.2 docker digest to ad5c126 (main) (cilium/cilium#35568, @cilium-renovate[bot])
• chore(deps): update go to v1.23.2 (main) (cilium/cilium#35199, @cilium-renovate[bot])
• cilium-cli: account for opt out labels in node to node encryption tests (cilium/cilium#35585, @giorio94)
• cilium-cli: connectivity test: support every kind of resource for tests (cilium/cilium#35314, @squeed)
• cilium-cli: Show config.cilium.io annotations on configmap (cilium/cilium#35020, @joamaki)
• connectivity: Introdue Multicast connectivity test (cilium/cilium#34530, @yushoyamaguchi)
• Enable testifylint to lint test files, and mechanically fix reported issues (cilium/cilium#35237, @giorio94)
• Fixed Cilium CLI fatal error: concurrent map read and map write (cilium/cilium#35396, @chaunceyjiang)
• refactor: Use error definition in github.com/cilium/ebpf instead of using hard-corded error message (cilium/cilium#35389, @yushoyamaguchi)
• Replace inctimer package with time.After (cilium/cilium#35653, @tklauser)
• Revert "Fixed Cilium CLI fatal error: concurrent map read and map write" (cilium/cilium#35391, @pchaigno)
• Strip quotes from modifier arg in all Dockerfiles (cilium/cilium#35427, @hemanthmalla)
• multicluster: Increase hubble-event-queue-size by @michi-covalent in #2823
• chore(deps): update golang docker tag to v1.23.2 by @renovate in #2825
• chore(deps): update ubuntu:24.04 docker digest to b359f10 by @renovate in #2826
• chore(deps): update google-github-actions/auth action to v2.1.6 - autoclosed by @renovate in #2821
• Update stable release to v0.16.19 by @michi-covalent in #2824
• chore(deps): update golangci/golangci-lint-action action to v6.1.1 by @renovate in #2827
• chore(deps): update docker/setup-buildx-action action to v3.7.0 by @renovate in #2828
• chore(deps): update docker/setup-buildx-action action to v3.7.1 by @renovate in #2830
• chore(deps): update all github action dependencies (patch) by @renovate in #2831
• chore(deps): update docker.io/library/golang docker tag to v1.23.2 by @renovate in #2829
• chore(deps): update actions/upload-artifact action to v4.4.2 by @renovate in #2832
• chore(deps): update actions/upload-artifact action to v4.4.3 by @renovate in #2833
• chore(deps): update ubuntu:24.04 docker digest to ee6860a by @renovate in #2834
• chore(deps): update ubuntu:24.04 docker digest to ab64a83 by @renovate in #2835
• chore(deps): update ubuntu:24.04 docker digest to d4f6f70 by @renovate in #2837
• chore(deps): update dependency cilium/cilium to v1.16.3 by @renovate in #2836
• chore(deps): update ubuntu:24.04 docker digest to 99c3519 by @renovate in #2838
• chore(deps): update actions/setup-go action to v5.1.0 by @renovate in #2841
• chore(deps): update actions/checkout action to v4.2.2 by @renovate in #2840
• action: allow to configure image repo for CI installs by @rgo3 in #2844
• chore(deps): update docker/dockerfile docker tag to v1.11 by @renovate in #2845
• chore(deps): update all github action dependencies (patch) by @renovate in #2843
• .github: support native hubble port-forwarding by @devodev in #2848
• chore(deps): update softprops/action-gh-release action to v2.0.9 by @renovate in #2846
• Prepare for v0.16.20 release by @michi-covalent in #2847

New Contributors

• @rgo3 made their first contribution in #2844
• @devodev made their first contribution in #2848

Full Changelog: v0.16.19...v0.16.20

Release v0.16.19

What's Changed

Minor Changes:

• cilium-cli: Deprecate --disable-check flag (cilium/cilium#34953, @michi-covalent)
• feat(cilium-cli-clustermesh): Improve --destination-context option for connecting multiple remote contexts (cilium/cilium#34510, @littlejo)
• version: Don't create k8s client if --client is specified (cilium/cilium#34914, @michi-covalent)

Bugfixes:

• cli: fix a case when connectivity perf command was hanging if LRP was enabled in the cluster (cilium/cilium#35063, @marseel)
• Correctly format cilium status -o json CLI output for errors and warnings (cilium/cilium#34654, @nimishamehta5)
• Fix missing Helm chart version for status command (cilium/cilium#34748, @pgils)
• fix(clustermesh): mesh connection mode (cilium/cilium#34932, @littlejo)

CI Changes:

• cilium-cli: connectivity: fix the local-redirect-policy flow validation (cilium/cilium#34919, @ysksuzuki)
• cilium-cli: Define CLI_MAIN_DIR Make variable (cilium/cilium#34910, @michi-covalent)

Misc Changes:

• .github: add cache to cilium-cli and hubble-cli build workflows (cilium/cilium#34847, @aanm)
• chore(deps): update all-dependencies (main) (cilium/cilium#34872, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#34969, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.1 docker digest to 4f063a2 (main) (cilium/cilium#35075, @cilium-renovate[bot])
• chore(deps): update go to v1.23.1 (main) (cilium/cilium#34732, @cilium-renovate[bot])
• cilium-cli/status: sort status lines (cilium/cilium#34927, @tklauser)
• cilium-cli/sysdump: export SubmitMetricsSubtask (cilium/cilium#34864, @tklauser)
• cilium-cli: collect BGPv2 CRD resources in sysdump (cilium/cilium#34684, @rastislavs)
• cilium-cli: remove copying of loop variables (cilium/cilium#34944, @tklauser)
• cli/connectivity: improvements for echo-ingress-l7-via-hostport test (cilium/cilium#34502, @julianwiedmann)
• go: Replace x/maps package by respective standard libraries (cilium/cilium#34649, @sayboras)
• Use Go standard library slices package more extensively (cilium/cilium#34796, @tklauser)

Other Changes:

• Update stable release to v0.16.18 by @michi-covalent in #2807
• multicluster: correctly specify the dst context to clustermes connect by @giorio94 in #2810
• github: Increase hubble-event-queue-size by @michi-covalent in #2815
• chore(deps): update dependency ubuntu to v24 by @renovate in #2814
• github: Add a workflow to close stale issues and PRs by @michi-covalent in #2813
• chore(deps): update all github action dependencies (minor) by @renovate in #2811
• chore(deps): update dependency cilium/cilium to v1.16.2 by @renovate in #2812
• Prepare for #2755 - Dockerfile only by @leppeK in #2817
• go.mod: pick up github.com/cilium/cilium v1.17.0-pre.1 by @tklauser in #2818
• chore(deps): update docker/build-push-action action to v6.9.0 by @renovate in #2816
• chore(deps): update dependency go to v1.23.2 by @renovate in #2820
• Prepare for v0.16.19 release by @michi-covalent in #2822

New Contributors

• @leppeK made their first contribution in #2817

Full Changelog: v0.16.18...v0.16.19