feat(github-release): update aqua:cilium/cilium-cli to v0.19.0

[homebot-0]

This PR contains the following updates:

Package	Update	Change
aqua:cilium/cilium-cli	minor	0.18.8 → 0.19.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

⚠️ Critical Infrastructure: This update affects core cluster components. Review changelog carefully.

🔧 CNI/Networking: Critical cluster networking. Test pod-to-pod and multi-VLAN connectivity.

🐄 Talos CATTLE: Major/minor version requires manual approval. Full VM rebuild via Terraform.

---

Release Notes

cilium/cilium-cli (aqua:cilium/cilium-cli)

v0.19.0

Compare Source

Summary of Changes

CI Changes:

• Add L7 policy traffic disruption tests (cilium/cilium#42150, @​fristonio)
• Cilium-cli SNI connectivity tests now retry expected successful operations to recover from failures due to external upstream issues. (cilium/cilium#42980, @​jrajahalme)
• cli: connectivity: fix typo in L7 LB tests (cilium/cilium#43610, @​julianwiedmann)
• Fix intermittent NodePort connectivity test timeouts in dual-stack clusters by validating NodePort readiness on all node IP addresses during test setup. (cilium/cilium#40812, @​pillai-ashwin)
• tests: remove identity manager from ignored error messages (cilium/cilium#42982, @​odinuge)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#43169, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43456, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#43508, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43457, @​cilium-renovate[bot])
• chore(deps): update base-images (main) (cilium/cilium#43538, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 (main) (cilium/cilium#43303, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.5 (main) (cilium/cilium#43173, @​cilium-renovate[bot])
• cilium-cli/connectivity: remove matcher for bpf/init.sh errors (cilium/cilium#43109, @​tklauser)
• cilium-cli: convert net.IP to netip.Addr (cilium/cilium#42371, @​phuhung273)
• cli: Update network-perf image ref (cilium/cilium#43297, @​HadrienPatte)
• chore(deps): update golangci/golangci-lint-action action to v9.2.0 by @​renovate[bot] in #​3148
• Update stable release to v0.18.9 by @​michi-covalent in #​3149
• chore(deps): update golangci/golangci-lint docker tag to v2.7.0 by @​renovate[bot] in #​3151
• chore(deps): update go to v1.25.5 by @​renovate[bot] in #​3153
• ci: clean up disk space in release workflow by @​tklauser in #​3154
• chore(deps): update actions/stale action to v10.1.1 by @​renovate[bot] in #​3150
• chore(deps): update gcr.io/distroless/static:latest docker digest to 4b2a093 by @​renovate[bot] in #​3152
• chore(deps): update golangci/golangci-lint docker tag to v2.7.2 by @​renovate[bot] in #​3155
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to a22b2e6 by @​renovate[bot] in #​3156
• chore(deps): update actions/upload-artifact action to v6 by @​renovate[bot] in #​3157
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 36b4f45 by @​renovate[bot] in #​3160
• chore(deps): update dependency cilium/cilium to v1.18.5 by @​renovate[bot] in #​3159
• chore(deps): update dependency kubernetes-sigs/kind to v0.31.0 by @​renovate[bot] in #​3158
• chore(deps): update docker/setup-buildx-action action to v3.12.0 by @​renovate[bot] in #​3162
• chore(deps): update golangci/golangci-lint docker tag to v2.8.0 by @​renovate[bot] in #​3163
• chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 by @​renovate[bot] in #​3164
• chore(deps): update gcr.io/distroless/static:latest docker digest to cd64bec by @​renovate[bot] in #​3165
• chore(deps): update actions/setup-go action to v6.2.0 by @​renovate[bot] in #​3166
• Prepare for v0.19.0 release by @​tklauser in #​3167

Full Changelog: cilium/cilium-cli@v0.18.9...v0.19.0

v0.18.9

Compare Source

Summary of Changes

Major Changes:

• Operator prometheus support TLS/mTLS using existing secret (cilium/cilium#42077, @​phuhung273)

Minor Changes:

• CLI: Allow users to set the default Cilium namespace via the CILIUM_NAMESPACE environment variable (cilium/cilium#41557, @​td0ne)
• Removed deprecated CiliumBGPPeeringPolicy CRD and its agent implementation. Use cilium.io/v2 CRDs (CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfigOverride) for configuring BGP. (cilium/cilium#42278, @​rastislavs)

CI Changes:

• Add CCNP cilium connectivity tests (cilium/cilium#42051, @​karina-ranadive)
• Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity (cilium/cilium#42984, @​rptaylor)

Misc Changes:

• bgp: Correct misleading error message in GetPeeringState (cilium/cilium#42945, @​hargrovee)
• bgp: Remove versions from bgp package names (cilium/cilium#42503, @​rastislavs)
• cilium-cli: add own type for root command parameters (cilium/cilium#42609, @​tklauser)
• cli: cleanups for pre-v1.15 removal (cilium/cilium#42757, @​julianwiedmann)
• cli: require Cilium v1.15 (cilium/cilium#41538, @​julianwiedmann)
• go.mod, vendor: bump github.com/google/go-github to v79 (cilium/cilium#42857, @​tklauser)
• Update lrp frontend IP address to avoid IMDS conflict in the cloud environment in cilium-cli (cilium/cilium#42737, @​liyihuang)
• Use modern Go constructs (cilium/cilium#42525, @​HadrienPatte)
• Update stable release to v0.18.8 by @​michi-covalent in #​3121
• chore(deps): update actions/upload-artifact action to v5 by @​renovate[bot] in #​3124
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 8c945d3 by @​renovate[bot] in #​3122
• chore(deps): update dependency cilium/cilium to v1.18.3 by @​renovate[bot] in #​3123
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6bac879 by @​renovate[bot] in #​3125
• renovate: try to group dependency updates by @​tklauser in #​3126
• chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by @​renovate[bot] in #​3127
• chore(deps): update helm/kind-action action to v1.13.0 by @​renovate[bot] in #​3128
• chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by @​renovate[bot] in #​3129
• chore(deps): update golang docker tag to v1.25.4 by @​renovate[bot] in #​3130
• chore(deps): update go to v1.25.4 by @​renovate[bot] in #​3131
• chore(deps): update golang:1.25.4-alpine3.21 docker digest to 3289aac by @​renovate[bot] in #​3132
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to e68f6a0 by @​renovate[bot] in #​3135
• chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by @​renovate[bot] in #​3136
• chore(deps): update golangci/golangci-lint-action action to v9 by @​renovate[bot] in #​3133
• chore(deps): update dependency cilium/cilium to v1.18.4 by @​renovate[bot] in #​3134
• chore(deps): update all github action dependencies by @​renovate[bot] in #​3137
• chore(deps): update actions/setup-go action to v6.1.0 by @​renovate[bot] in #​3138
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​3139
• chore(deps): update golangci/golangci-lint-action action to v9.1.0 by @​renovate[bot] in #​3141
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to f60eaa8 by @​renovate[bot] in #​3140
• chore(deps): update docker.io/library/golang:1.25.4 docker digest to 6981837 by @​renovate[bot] in #​3143
• chore(deps): update softprops/action-gh-release action to v2.5.0 by @​renovate[bot] in #​3144
• chore(deps): update golang docker tag to v1.25.5 by @​renovate[bot] in #​3147
• chore(deps): update actions/checkout action to v6.0.1 by @​renovate[bot] in #​3146
• Prepare for v0.18.9 release by @​michi-covalent in #​3145

Full Changelog: cilium/cilium-cli@v0.18.8...v0.18.9

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[homebot-0]

ℹ️ SOPS Encryption Check

No SOPS files detected in this pull request.

Check	Status
SOPS files in PR	✅ None detected

No encryption validation required for this PR.

[coderabbitai]

Walkthrough

Cilium-cli tool version bumped from 0.18.8 to 0.19.0 in .mise.toml. Single-line change in developer tooling configuration; no code, manifests, or Talos/Kubernetes production infra files modified.

Changes

Cohort / File(s)	Summary
Tool Version Bump \.mise.toml	Updated aqua:cilium/cilium-cli version from 0.18.8 → 0.19.0 in the [tools] section (single-line change)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	Title accurately matches the changeset: updating cilium-cli from 0.18.8 to 0.19.0 in .mise.toml is the only change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/aqua-cilium-cilium-cli-0.x

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[homebot-0]

✅ Gitleaks Secret Scan Passed

No secrets detected in this pull request.

Check	Status
Secret patterns	✅ Clean
Sensitive files	✅ None detected