Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: Bump github.com/cilium/cilium from 1.15.1 to 1.15.2 #37

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 14, 2024

Bumps github.com/cilium/cilium from 1.15.1 to 1.15.2.

Release notes

Sourced from github.com/cilium/cilium's releases.

1.15.2

We are pleased to release Cilium v1.15.2. This release contains various bug fixes and improvements.

Summary of Changes

Minor Changes:

Bugfixes:

  • Cilium allows selecting 'lo' as a device again. (Backport PR #31206, Upstream PR #31200, @​bimmlerd)
  • endpoint: fix inability to create endpoint with labels in a single API call (Backport PR #30997, Upstream PR #30170, @​oblazek)
  • Fix bug in the VTEP feature which caused all traffic from the VTEP to be dropped with "Incorrect VNI from VTEP" (Backport PR #31154, Upstream PR #31039, @​joestringer)
  • Fix bug prevented endpoints from sending or receiving network traffic due to the 'reserved:init' label persisting after initialization. (Backport PR #31047, Upstream PR #30909, @​aanm)
  • Fix GC interval calculation by taking into account the actual time passed between GC runs. (Backport PR #31154, Upstream PR #28657, @​gentoo-root)
  • Fix host firewall policy enforcement for pod to node traffic when tunneling is enabled and KPR is disabled (Backport PR #30997, Upstream PR #30818, @​giorio94)
  • Fix the referenced interface in iptables rules (eni+ instead of lxc+) when --enable-endpoint-routes=true and --cni-chaining-mode="aws-cni" (Backport PR #31154, Upstream PR #30766, @​pippolo84)
  • Fixes an IPv6 issue that cilium doesn't respond to Neighbor Solicitation targeting the pods on same node. (Backport PR #31155, Upstream PR #30837, @​jschwinger233)
  • Fixes proxy issues by opting out from SNAT for L7 + Tunnel. (Backport PR #31158, Upstream PR #29594, @​jschwinger233)
  • Fixes proxy issues in egress direction (Backport PR #31158, Upstream PR #30095, @​jschwinger233)
  • Fixes some valid GC entries being removed at agent restart (Backport PR #30863, Upstream PR #29696, @​rsafonseca)
  • gateway-api: Correct the null check for GRPRRoute Match (Backport PR #31154, Upstream PR #31052, @​sayboras)
  • helm: Probe Envoy DaemonSet localhost IP directly (Backport PR #30997, Upstream PR #30970, @​iandrewt)
  • hubble: fix parsing of invalid HTTP URLs (Backport PR #31154, Upstream PR #31100, @​kaworu)
  • srv6: Fix packet drop with GSO type mismatch (Backport PR #30799, Upstream PR #30732, @​YutaroHayakawa)
  • statedb: Fix race between Observable and DB stopping (Backport PR #30863, Upstream PR #30816, @​joamaki)
  • xds: Avoid xds timeout due to agent restart in envoy DS mode (Backport PR #31154, Upstream PR #31061, @​sayboras)

CI Changes:

  • ci/ipsec: Fix downgrade version retrieval (Backport PR #31047, Upstream PR #30742, @​qmonnet)
  • ci: Enhance test execution security by restricting permissions to the 'organization-members' team (Backport PR #30863, Upstream PR #30790, @​brlbil)
  • CI: Update tested K8S versions across all cloud providers (Backport PR #30863, Upstream PR #30795, @​brlbil)
  • Fix datapath mode in Network Performance CI test (Backport PR #30863, Upstream PR #30756, @​marseel)
  • Prevent E2E tests from failing on a known-ok warning log of temporary CRD failure (Backport PR #31154, Upstream PR #30778, @​learnitall)

Misc Changes:

... (truncated)

Changelog

Sourced from github.com/cilium/cilium's changelog.

v1.15.2

Summary of Changes

Minor Changes:

Bugfixes:

  • Cilium allows selecting 'lo' as a device again. (Backport PR #31206, Upstream PR #31200, @​bimmlerd)
  • endpoint: fix inability to create endpoint with labels in a single API call (Backport PR #30997, Upstream PR #30170, @​oblazek)
  • Fix bug in the VTEP feature which caused all traffic from the VTEP to be dropped with "Incorrect VNI from VTEP" (Backport PR #31154, Upstream PR #31039, @​joestringer)
  • Fix bug prevented endpoints from sending or receiving network traffic due to the 'reserved:init' label persisting after initialization. (Backport PR #31047, Upstream PR #30909, @​aanm)
  • Fix GC interval calculation by taking into account the actual time passed between GC runs. (Backport PR #31154, Upstream PR #28657, @​gentoo-root)
  • Fix host firewall policy enforcement for pod to node traffic when tunneling is enabled and KPR is disabled (Backport PR #30997, Upstream PR #30818, @​giorio94)
  • Fix the referenced interface in iptables rules (eni+ instead of lxc+) when --enable-endpoint-routes=true and --cni-chaining-mode="aws-cni" (Backport PR #31154, Upstream PR #30766, @​pippolo84)
  • Fixes an IPv6 issue that cilium doesn't respond to Neighbor Solicitation targeting the pods on same node. (Backport PR #31155, Upstream PR #30837, @​jschwinger233)
  • Fixes proxy issues by opting out from SNAT for L7 + Tunnel. (Backport PR #31158, Upstream PR #29594, @​jschwinger233)
  • Fixes proxy issues in egress direction (Backport PR #31158, Upstream PR #30095, @​jschwinger233)
  • Fixes some valid GC entries being removed at agent restart (Backport PR #30863, Upstream PR #29696, @​rsafonseca)
  • gateway-api: Correct the null check for GRPRRoute Match (Backport PR #31154, Upstream PR #31052, @​sayboras)
  • helm: Probe Envoy DaemonSet localhost IP directly (Backport PR #30997, Upstream PR #30970, @​iandrewt)
  • hubble: fix parsing of invalid HTTP URLs (Backport PR #31154, Upstream PR #31100, @​kaworu)
  • srv6: Fix packet drop with GSO type mismatch (Backport PR #30799, Upstream PR #30732, @​YutaroHayakawa)
  • statedb: Fix race between Observable and DB stopping (Backport PR #30863, Upstream PR #30816, @​joamaki)
  • xds: Avoid xds timeout due to agent restart in envoy DS mode (Backport PR #31154, Upstream PR #31061, @​sayboras)

CI Changes:

  • ci/ipsec: Fix downgrade version retrieval (Backport PR #31047, Upstream PR #30742, @​qmonnet)
  • ci: Enhance test execution security by restricting permissions to the 'organization-members' team (Backport PR #30863, Upstream PR #30790, @​brlbil)
  • CI: Update tested K8S versions across all cloud providers (Backport PR #30863, Upstream PR #30795, @​brlbil)
  • Fix datapath mode in Network Performance CI test (Backport PR #30863, Upstream PR #30756, @​marseel)
  • Prevent E2E tests from failing on a known-ok warning log of temporary CRD failure (Backport PR #31154, Upstream PR #30778, @​learnitall)

Misc Changes:

... (truncated)

Commits
  • 7cf5782 Prepare for release v1.15.2
  • 8c7376f bgpv1: Disable PodCIDR Reconciler for unsupported IPAM modes
  • 7f1f662 images: update cilium-{runtime,builder}
  • 83c5a50 images: bump cni plugins to v1.4.1
  • 1324446 wireguard: Improve L7 proxy traffic detection
  • 036e458 wireguard: Encrypt L7 proxy pkts to remote pods
  • 3353173 wireguard: unconditionally add NodeInternalIPs to allowed IPs
  • d34d0f2 chore(deps): update hubble cli to v0.13.2
  • 71f2723 Bump google.golang.org/protobuf (v1.15)
  • ec3e2a6 fqdn: prevent conntrack GC from reaping newly-added IPs
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner March 14, 2024 13:37
@dependabot dependabot bot added area/dependencies Pull requests that update a dependency file lang/go The Go Programming Language labels Mar 14, 2024
Bumps [github.com/cilium/cilium](https://github.com/cilium/cilium) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/cilium/cilium/releases)
- [Changelog](https://github.com/cilium/cilium/blob/1.15.2/CHANGELOG.md)
- [Commits](cilium/cilium@1.15.1...1.15.2)

---
updated-dependencies:
- dependency-name: github.com/cilium/cilium
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@rbtr rbtr force-pushed the dependabot/go_modules/github.com/cilium/cilium-1.15.2 branch from 98d6b4e to 6f1178c Compare March 15, 2024 23:20
@rbtr rbtr enabled auto-merge (squash) March 15, 2024 23:20
@rbtr rbtr merged commit 57b9504 into main Mar 18, 2024
18 checks passed
@rbtr rbtr deleted the dependabot/go_modules/github.com/cilium/cilium-1.15.2 branch March 18, 2024 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/dependencies Pull requests that update a dependency file lang/go The Go Programming Language
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant