chore(deps): update cilium (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
cilium/cilium	patch	1.15.16 -> 1.15.17
cilium/cilium	patch	1.16.9 -> 1.16.10

---

Release Notes

cilium/cilium (cilium/cilium)

v1.15.17: 1.15.17

Compare Source

Summary of Changes

Minor Changes:

• Update kafka apiKey helm chart value to true (Backport PR #​39216, Upstream PR #​38963, @​kyle-c-simmons)

Bugfixes:

• Fix a deadlock when a host has no IPv4 address. (Backport PR #​39078, Upstream PR #​38938, @​EmilyShepherd)
• Fix bug that would cause the cilium-dbg encrypt status command to not list any decryption interfaces when KPR is enabled. (Backport PR #​39216, Upstream PR #​39170, @​pchaigno)
• k8s: Fixed a case when delete event for service endpointslices might have been missed if connectivity to k8s apiserver was broken causing stale service cache for service. (Backport PR #​38952, Upstream PR #​38779, @​marseel)

CI Changes:

• [v1.15] .github: provide correct env variables to api/v1 Makefile (#​39286, @​ferozsalam)
• [v1.15] go.mod, vendor: update github.com/cilium/linters to v0.20.0 (#​39394, @​tklauser)
• [v1.15] l4lb: Support environments with existing veth (#​39410, @​joestringer)

Misc Changes:

• Add the doc for multi-pool ipam about how to update the existing ip pool (Backport PR #​38952, Upstream PR #​38539, @​liyihuang)
• chore(deps): update all github action dependencies (v1.15) (#​39055, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.15) (#​39189, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.15) (#​39277, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.17.3 (v1.15) (#​39321, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.8 docker digest to 87bb940 (v1.15) (#​38915, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.8 docker digest to e54daaa (v1.15) (#​39052, @​cilium-renovate[bot])
• chore(deps): update go to v1.24.3 (v1.15) (#​39188, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1744679528-43b5c0ea620b5fa8c2e32ed79f113aef89f30e6b (v1.15) (#​38941, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1744798797-f7456c0c30336bbd437eff7743374370e415fc44 (v1.15) (#​39053, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1745916268-e485bbc0c95e30aa233cb06a753789375b12ad18 (v1.15) (#​39228, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1746661844-0f602c28cb2aa57b29078195049fb257d5b5246c (v1.15) (#​39415, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.15) (patch) (#​38972, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.15) (patch) (#​39186, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.15) (patch) (#​39478, @​cilium-renovate[bot])
• chore: remove retention-days param in build-images-releases.yaml (Backport PR #​39437, Upstream PR #​39431, @​sekhar-isovalent)
• contrib: Remove kind.sh dependency on git (Backport PR #​39406, Upstream PR #​39154, @​joestringer)
• docs: Add good kernel versions for the L7 policy IPv6 bug (Backport PR #​39406, Upstream PR #​39212, @​gentoo-root)
• docs: Document L7 policy IPv6 bug (Backport PR #​38952, Upstream PR #​38591, @​gentoo-root)
• docs: Fix casing and formatting in L3 examples section (Backport PR #​39406, Upstream PR #​39065, @​mikejoh)
• docs: The Installation on OpenShift OKD document has been updated to link to maintained operators for Cilium (Isovalent Enterprise for Cilium). This operator is validated on all current versions of OpenShift. (Backport PR #​39406, Upstream PR #​38886, @​auriaave)
• Documentation : Modification of eks-clustermesh-prep.rst (Backport PR #​39406, Upstream PR #​39025, @​rwinieski)
• documentation: fix get deployment cmd (Backport PR #​39216, Upstream PR #​39155, @​g0gn)
• k8s/resource: Don't Add to WaitGroup asynchronously (Backport PR #​38952, Upstream PR #​38692, @​joamaki)
• make: fix golangci-lint version detection (Backport PR #​39078, Upstream PR #​38996, @​mhofstetter)
• workflows: fix lint-workflows (Backport PR #​39401, Upstream PR #​39398, @​aanm)

Other Changes:

• [v1.15] deps: bump golang-jwt to 4.5.2 (#​39496, @​ferozsalam)
• [v1.15] integration: Regenerate consul certs (#​39350, @​sayboras)
• install: Update image digests for v1.15.16 (#​38935, @​cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.15.17@​sha256:8824313a6f17d934b4e63902fee71e6ca36be6f69d68ae174df28f1b0705e587

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.15.17@​sha256:b5ed33d4a9b006ee3ef367a1b3b23468aa6b32c028557e2c1a47dd2659f100a4

docker-plugin

quay.io/cilium/docker-plugin:v1.15.17@​sha256:9910861a1d7d82a81f416d6d2f776d4195e1c3671999be14d44b12316fd22724

hubble-relay

quay.io/cilium/hubble-relay:v1.15.17@​sha256:f46adc030903f2804e7c29d8da7cc9e9c4ef846de5eb84ba76cf74f2c483872e

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.15.17@​sha256:74b07708a934fcf335a743d11296e98b32d32d7a79d0940eaba3652ca248960f

operator-aws

quay.io/cilium/operator-aws:v1.15.17@​sha256:7a0fee345e04e99768269ec63511070a8cf0202a5c5ca723d1b2ab4fe4118276

operator-azure

quay.io/cilium/operator-azure:v1.15.17@​sha256:d710a965d783c4294ac07f86ad3044ab1321cdafdec681b5d26b9ca3cfffabd7

operator-generic

quay.io/cilium/operator-generic:v1.15.17@​sha256:a0f5b5dc8cecd4e5ead7d3bddb3756e4b34beba8e7aa089e7e2fb761725defe1

operator

quay.io/cilium/operator:v1.15.17@​sha256:182e44c2533c6b18af64d914c3f7587940c091bb9fb360dacea6430b071b22de

---

Configuration

📅 Schedule: Branch creation - "before 7am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.