chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/download-artifact	action	major	v4 -> v6
actions/github-script	action	major	v7 -> v8
actions/stale	action	major	v9 -> v10
actions/upload-artifact	action	major	v4 -> v5
cilium/cilium-cli		patch	v0.18.7 -> v0.18.8
cloud.google.com/go	replace	minor	v0.100.2 -> v0.123.0
cloud.google.com/go/storage	require	patch	v1.57.0 -> v1.57.1
github.com/anchore/grype	indirect	minor	v0.101.1 -> v0.103.0
github.com/anchore/syft	indirect	minor	v1.34.2 -> v1.37.0
github.com/aws/aws-sdk-go-v2	require	patch	v1.39.3 -> v1.39.6
github.com/aws/aws-sdk-go-v2/config	require	patch	v1.31.13 -> v1.31.17
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	require	patch	v1.18.10 -> v1.18.13
github.com/aws/aws-sdk-go-v2/feature/s3/manager	require	minor	v1.19.13 -> v1.20.4
github.com/aws/aws-sdk-go-v2/service/ec2	require	minor	v1.257.2 -> v1.262.0
github.com/aws/aws-sdk-go-v2/service/kms	require	minor	v1.46.0 -> v1.47.1
github.com/aws/aws-sdk-go-v2/service/s3	require	minor	v1.88.5 -> v1.90.0
github.com/aws/smithy-go	require	patch	v1.23.1 -> v1.23.2
github.com/cenkalti/backoff/v4	require	major	v4.3.0 -> v5.0.3
github.com/containerd/cgroups/v3	require	minor	v3.0.5 -> v3.1.1
github.com/containerd/containerd/api	require	minor	v1.9.0 -> v1.10.0
github.com/containerd/platforms	require	patch	v1.0.0-rc.1 -> v1.0.0-rc.2
github.com/coredns/coredns	require	minor	v1.12.3 -> v1.13.1
github.com/docker/cli	require	patch	v28.5.1+incompatible -> v28.5.2+incompatible
github.com/docker/docker	require	patch	v28.5.1+incompatible -> v28.5.2+incompatible
github.com/dsseng/grype	replace	digest	2197792 -> 9b7e8e2
github.com/dsseng/syft	replace	minor	v1.26.2-0.20250703101014-f39c35d156d9 -> v1.28.0
github.com/golangci/golangci-lint/v2	indirect	minor	v2.5.0 -> v2.6.1
github.com/gomodule/redigo	replace	major	v0.0.0-20150301180006-535138d7bcd7 -> v1.9.3
github.com/gopacket/gopacket	require	minor	v1.4.0 -> v1.5.0
github.com/grpc-ecosystem/go-grpc-middleware/v2	require	patch	v2.3.2 -> v2.3.3
github.com/hetznercloud/hcloud-go/v2	require	minor	v2.28.0 -> v2.29.0
github.com/jsimonetti/rtnetlink/v2	require	minor	v2.0.5 -> v2.1.0
github.com/mdlayher/ethtool	require	minor	v0.4.0 -> v0.5.0
github.com/opencontainers/runtime-spec	require	minor	v1.2.1 -> v1.3.0
github.com/planetscale/vtprotobuf	indirect	digest	0393e58 -> ba97887
github.com/planetscale/vtprotobuf	require	digest	79df5c4 -> ba97887
github.com/prometheus/procfs	require	minor	v0.17.0 -> v0.19.2
github.com/santhosh-tekuri/jsonschema/v5	require	major	v5.3.1 -> v6.0.2
github.com/siderolabs/gen	require	patch	v0.8.5 -> v0.8.6
github.com/siderolabs/go-api-signature	require	patch	v0.3.9 -> v0.3.12
github.com/siderolabs/talos/tools/docgen	indirect	digest	6c98f4c -> 54b93af
github.com/siderolabs/talos/tools/gotagsrewrite	indirect	digest	6c98f4c -> 54b93af
github.com/siderolabs/talos/tools/structprotogen	indirect	digest	6c98f4c -> 54b93af
github.com/smira/containerd/v2	replace	digest	dcf2fc8 -> ddf6594
github.com/smira/kobject	replace	digest	49c8d46 -> 19ca174
github.com/unix4ever/yaml	replace	major	v0.0.0-20220527175918-f17b0f05cf2c -> v2.4.0
google.golang.org/api	require	minor	v0.252.0 -> v0.255.0
google.golang.org/genproto/googleapis/api	require	digest	88f65dc -> f26f940
google.golang.org/genproto/googleapis/rpc	require	digest	88f65dc -> f26f940
k8s.io/client-go	require	major	v0.35.0-alpha.2 -> v11.0.0+incompatible
kernel.org/pub/linux/libs/security/libcap/cap	require	patch	v1.2.76 -> v1.2.77
kubernetes/kubernetes		patch	1.35.0-alpha.2 -> 1.35.0-alpha.3
kubernetes/kubernetes		patch	v1.35.0-alpha.2 -> v1.35.0-alpha.3
registry.k8s.io/coredns/coredns		patch	v1.13.0 -> v1.13.1
rook-ceph		patch	v1.18.4 -> v1.18.6

---

Release Notes

actions/download-artifact (actions/download-artifact)

v6

Compare Source

v5

Compare Source

actions/github-script (actions/github-script)

v8: .0.0

Compare Source

What's Changed

• Update Node.js version support to 24.x by @​salmanmkc in #​637
• README for updating actions/github-script from v7 to v8 by @​sneha-krip in #​653

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

• @​salmanmkc made their first contribution in #​637
• @​sneha-krip made their first contribution in #​653

Full Changelog: actions/github-script@v7.1.0...v8.0.0

actions/stale (actions/stale)

v10

Compare Source

actions/upload-artifact (actions/upload-artifact)

v5

Compare Source

cilium/cilium-cli (cilium/cilium-cli)

v0.18.8

Compare Source

Summary of Changes

Minor Changes:

• clustermesh: add endpoints metrics and change global service (and MCS ServiceExport) metrics to report per cluster metrics instead of a global count (cilium/cilium#41323, @​MrFreezeex)

Bugfixes:

• cilium-cli: Fix CNI config file collection in sysdump (cilium/cilium#42111, @​pillai-ashwin)
• cilium-cli: Prevent panic in node-to-node-encryption connectivity test (cilium/cilium#41600, @​HadrienPatte)
• connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 (cilium/cilium#42148, @​julianwiedmann)
• Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (cilium/cilium#42080, @​tklauser)

CI Changes:

• Add integration test to validate IPsec key derivation consistency across nodes, ensuring tunnel keys are properly derived and identical between Cilium pods. (cilium/cilium#40808, @​pillai-ashwin)
• ci: enable copyloopvar linter (cilium/cilium#41893, @​tklauser)
• cilium-cli, netns: fix golangci-lint 2.5.0 errors (cilium/cilium#41856, @​tklauser)
• cilium-cli: Bring back NodePort Acceleration feature detection (cilium/cilium#41812, @​brb)
• cilium-cli: Reenable L7 IPv6 tests (cilium/cilium#39662, @​gentoo-root)
• cilium-cli: Specify TARGET for building release binaries (cilium/cilium#42177, @​michi-covalent)
• cilium_cli: Override GO_BUILD Make variable (cilium/cilium#42162, @​michi-covalent)
• cli, ipsec: Fix bidirectional IPsec tunnel check (cilium/cilium#42047, @​pchaigno)
• cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (cilium/cilium#42146, @​fristonio)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#41611, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#42018, @​cilium-renovate[bot])
• chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to 0ce60b5 (main) (cilium/cilium#41558, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f (main) (cilium/cilium#41649, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d709837 (main) (cilium/cilium#42019, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 (main) (cilium/cilium#42252, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.1 (main) (cilium/cilium#41560, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.3 (main) (cilium/cilium#42061, @​cilium-renovate[bot])
• cilium-cli/features: use common cmd metric list command (cilium/cilium#41630, @​aanm)
• cilium-cli: drop disabled IP cache check from connectivity tests (cilium/cilium#42240, @​tklauser)
• cli/clustermesh: remove leftover global services status info (cilium/cilium#41727, @​giorio94)
• Refactor policy engine to use PolicyEntry as the internal representation of policies, as described in CFP-39646. (cilium/cilium#40213, @​TheBeeZee)
• sysdump: add resource usage of nodes and pods (cilium/cilium#41415, @​darox)
• chore(deps): update go to v1.25.1 (patch) by @​renovate[bot] in #​3097
• chore(deps): update actions/setup-go action to v6 by @​renovate[bot] in #​3094
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d6bdb04 by @​renovate[bot] in #​3096
• chore(deps): update gcr.io/distroless/static:latest docker digest to 87bce11 by @​renovate[bot] in #​3099
• chore(deps): update softprops/action-gh-release action to v2.3.3 by @​renovate[bot] in #​3098
• chore(deps): update golang docker tag to v1.25.1 by @​renovate[bot] in #​3093
• chore(deps): update actions/stale action to v10 by @​renovate[bot] in #​3095
• chore(deps): update golang:1.25.1-alpine3.21 docker digest to 331bde4 by @​renovate[bot] in #​3100
• chore(deps): update dependency cilium/cilium to v1.18.2 by @​renovate[bot] in #​3102
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f by @​renovate[bot] in #​3103
• chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by @​renovate[bot] in #​3104
• chore(deps): update docker/login-action action to v3.6.0 by @​renovate[bot] in #​3105
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to ab1f5c4 by @​renovate[bot] in #​3106
• chore(deps): update actions/stale action to v10.1.0 by @​renovate[bot] in #​3108
• chore(deps): update softprops/action-gh-release action to v2.3.4 by @​renovate[bot] in #​3107
• chore(deps): update softprops/action-gh-release action to v2.4.0 by @​renovate[bot] in #​3109
• chore(deps): update golang docker tag to v1.25.2 by @​renovate[bot] in #​3110
• chore(deps): update go to v1.25.2 (patch) by @​renovate[bot] in #​3112
• chore(deps): update golang:1.25.2-alpine3.21 docker digest to 0134653 by @​renovate[bot] in #​3113
• RELEASE: also look for release-blockers in cilium/cilium by @​julianwiedmann in #​3116
• chore(deps): update golang docker tag to v1.25.3 by [@​renovate](https://redire

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: errors parsing go.mod:
go.mod:28: replace github.com/smira/containerd/v2: version "v2.0.0-20210309150730-ddf6594fbeed" invalid: go.mod has non-.../v2 module path "github.com/containerd/containerd" (and .../v2/go.mod does not exist) at revision ddf6594fbeed

File name: hack/cloud-image-uploader/go.sum

Command failed: install-tool golang 1.25.0

File name: tools/docgen/go.sum

Command failed: install-tool golang 1.25.0

File name: tools/go.sum

Command failed: install-tool golang 1.25.0