chore(deps): update cilium (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
cilium/cilium	patch	1.14.15 -> 1.14.16
cilium/cilium	patch	1.15.9 -> 1.15.10
cilium/cilium	patch	1.16.2 -> 1.16.3

---

Release Notes

cilium/cilium (cilium/cilium)

v1.14.16: 1.14.16

Compare Source

Summary of Changes

Bugfixes:

• datapath: Fix redirect from from L3 netdev to tunnel (Backport PR #​35265, Upstream PR #​33421, @​brb)
• Fixed bug in tracking policy changes that could have resulted in revert not woking in failure cases as expected. (Backport PR #​35279, Upstream PR #​35109, @​jrajahalme)
• Fixed bug where service id allocator would loop infinity when out of service ids (Backport PR #​35279, Upstream PR #​35033, @​WeeNews)
• Fixes startup fatal error when updating CiliumNode resource. (Backport PR #​34916, Upstream PR #​34862, @​harsimran-pabla)

CI Changes:

• .github/lint-build-commits: fix workflow for push events (Backport PR #​35279, Upstream PR #​35264, @​aanm)
• .github: create cache directories on cache miss (Backport PR #​35176, Upstream PR #​35088, @​aanm)
• .github: do not push floating tag from PRs (Backport PR #​35229, Upstream PR #​35227, @​aanm)
• .github: install golang action after checkout (Backport PR #​35176, Upstream PR #​34843, @​aanm)
• .github: re-enable configurations in e2e-upgrade (Backport PR #​35176, Upstream PR #​34800, @​aanm)
• .github: specify cache-dependency-path in lint-workflows (Backport PR #​35176, Upstream PR #​34845, @​aanm)
• ci: conformance-[gateway-api|ginkgo|ingress] wait for images before matrix generation (Backport PR #​34916, Upstream PR #​34820, @​aanm)
• fix: repository nil value handled on workflow_dispatch context for renovate updates (Backport PR #​34916, Upstream PR #​34902, @​Artyop)

Misc Changes:

• .github: add cache to cilium-cli and hubble-cli build workflows (Backport PR #​35176, Upstream PR #​34847, @​aanm)
• .github: clean up disk for lint-build workflow (Backport PR #​35176, Upstream PR #​35141, @​aanm)
• .github: fix build image process to commit changes (Backport PR #​35279, Upstream PR #​35262, @​aanm)
• .github: fix lvh-kind warnings (Backport PR #​35176, Upstream PR #​34811, @​aanm)
• .github: fix runtime image digests (Backport PR #​35119, Upstream PR #​35107, @​aanm)
• .github: push floating tag for push events for stable branches (#​35234, @​aanm)
• [v1.14] contrib/scripts: set 755 permissions for builder.sh (#​35266, @​aanm)
• Change GH runners to GH's default (Backport PR #​35176, Upstream PR #​33451, @​aanm)
• chart: define the envoy image variable in the makefile (Backport PR #​35113, Upstream PR #​27725, @​weizhoublue)
• chore(deps): update all github action dependencies (v1.14) (#​35029, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.14) (#​35087, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.14) (#​35252, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.14) (#​35028, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.18 (v1.14) (#​35001, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.19 (v1.14) (#​35204, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.16.2 (v1.14) (#​35242, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.22.7 docker digest to ddad330 (v1.14) (#​35093, @​cilium-renovate[bot])
• chore(deps): update go to v1.22.8 (v1.14) (#​35205, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1727272937-c0c0c5f38d338b330d891b304ab5ed6c6d7bcec4 (v1.14) (#​35085, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1727272937-c0c0c5f38d338b330d891b304ab5ed6c6d7bcec4 (v1.14) (#​35108, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1727997080-b094128ed01b784b63ada19b54f8c7fdc3042e6e (v1.14) (#​35220, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1728346947-0d05e48bfbb8c4737ec40d5781d970a550ed2bbd (v1.14) (#​35285, @​cilium-renovate[bot])
• helm: set key usages for hubble certificates with cert-manager (Backport PR #​35038, Upstream PR #​34946, @​kaworu)
• images/builder: get rid of annoying git ownership warnings (Backport PR #​35279, Upstream PR #​31538, @​ti-mo)
• Improve speed on lint commits GH workflow (Backport PR #​35176, Upstream PR #​34848, @​aanm)
• Re-write GitHub cache usages across workflows (Backport PR #​35176, Upstream PR #​34866, @​aanm)

Other Changes:

• [v1.14] image: Update runtime, builder images (#​35097, @​sayboras)
• install: Update image digests for v1.14.15 (#​35050, @​cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.16@​sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2
quay.io/cilium/cilium:v1.14.16@​sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.16@​sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186
quay.io/cilium/clustermesh-apiserver:v1.14.16@​sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186

docker-plugin

docker.io/cilium/docker-plugin:v1.14.16@​sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d
quay.io/cilium/docker-plugin:v1.14.16@​sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d

hubble-relay

docker.io/cilium/hubble-relay:v1.14.16@​sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9
quay.io/cilium/hubble-relay:v1.14.16@​sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.16@​sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0
quay.io/cilium/kvstoremesh:v1.14.16@​sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.16@​sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7
quay.io/cilium/operator-alibabacloud:v1.14.16@​sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7

operator-aws

docker.io/cilium/operator-aws:v1.14.16@​sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1
quay.io/cilium/operator-aws:v1.14.16@​sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1

operator-azure

docker.io/cilium/operator-azure:v1.14.16@​sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448
quay.io/cilium/operator-azure:v1.14.16@​sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448

operator-generic

docker.io/cilium/operator-generic:v1.14.16@​sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8
quay.io/cilium/operator-generic:v1.14.16@​sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8

operator

docker.io/cilium/operator:v1.14.16@​sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef
quay.io/cilium/operator:v1.14.16@​sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef

---

Configuration

📅 Schedule: Branch creation - "before 7am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.