chore(deps): update module github.com/cilium/cilium to v1.15.14 (main)

[cilium-renovate]

This PR contains the following updates:

Package	Update	Change
github.com/cilium/cilium	patch	v1.15.13 -> v1.15.14

---

Release Notes

cilium/cilium (github.com/cilium/cilium)

v1.15.14: 1.15.14

Compare Source

Summary of Changes

Bugfixes:

• Fix bug potentially causing newly added endpoints to remain stuck in waiting-to-regenerate state forever, causing traffic from/to that endpoint to be incorrectly dropped. (Backport PR #​37281, Upstream PR #​37086, @​giorio94)
• Fix specifying multiple interfaces for egress masquerade with enable-masquerade-to-route-source=false (Backport PR #​37281, Upstream PR #​36103, @​viktor-kurchenko)
• Restore the original flag semantics for --egress-masquerade-interfaces to the same as v1.17.0-pre.2 or earlier (Backport PR #​37281, Upstream PR #​36504, @​viktor-kurchenko)

CI Changes:

• [v1.16] ctmap/gc: don't clamp conntrack scan timeout in CI (Backport PR #​37646, Upstream PR #​37380, @​giorio94)
• gh: harmonize lvh kernel naming scheme (Backport PR #​37376, Upstream PR #​37322, @​julianwiedmann)
• gh: update removed --loglevel option for kind (Backport PR #​37173, Upstream PR #​36935, @​julianwiedmann)
• gha: fix retrieval of DNS server in conformance external workloads (Backport PR #​37376, Upstream PR #​37361, @​giorio94)
• gha: Retrieve eks supported version via aws cli (Backport PR #​37224, Upstream PR #​37210, @​sayboras)
• Modify bpftrace script in CI to ignore proxy traffic if destination is outside pod CIDRs. (Backport PR #​37173, Upstream PR #​36364, @​smagnani96)
• Skip tracking unmarked plain-text TCP RST packets generated from proxy timeouts in the CI bpftrace script. (Backport PR #​37173, Upstream PR #​36962, @​smagnani96)
• test: Move demo-httpd from Docker to Quay (Backport PR #​37173, Upstream PR #​37149, @​joestringer)
• test: Move the dind image to Quay to avoid rate-limiting (Backport PR #​37442, Upstream PR #​37388, @​pchaigno)

Misc Changes:

• [v1.15] deps: bump grpc-go to v1.64.1 (#​37628, @​ferozsalam)
• [v1.15] docs: Update requirements.txt dependencies (#​37619, @​joestringer)
• chore(deps): update actions/setup-go action to v5.3.0 (v1.15) (#​37118, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.15) (#​37101, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.15) (#​37245, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.15) (#​37508, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.15) (#​37034, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.15) (#​37344, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.15) (#​37665, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.24 (v1.15) (#​37339, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.16.6 (v1.15) (#​37216, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.17.0 (v1.15) (#​37507, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.17.1 (v1.15) (#​37590, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/little-vm-helper to v0.0.20 (v1.15) (#​37217, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/little-vm-helper to v0.0.23 (v1.15) (#​37506, @​cilium-renovate[bot])
• chore(deps): update dependency protocolbuffers/protobuf to v29 (v1.15) (#​37509, @​cilium-renovate[bot])
• chore(deps): update go to v1.22.11 (v1.15) (#​37046, @​cilium-renovate[bot])
• chore(deps): update go to v1.23.6 (v1.15) (#​37498, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/certgen docker tag to v0.1.17 (v1.15) (#​37100, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1737535524-fe8efeb16a7d233bffd05af9ea53599340d3f18e (v1.15) (#​37202, @​cilium-renovate[bot])
• doc(glossary): Geneve as final RFC (Backport PR #​37376, Upstream PR #​37316, @​alagoutte)
• doc: eks cluster restriction removed (Backport PR #​37281, Upstream PR #​37043, @​viktor-kurchenko)
• doc: Removed nodeinit from aks byocni install (Backport PR #​37173, Upstream PR #​37048, @​PhilipSchmid)
• docs: Add SNI policy example (Backport PR #​37281, Upstream PR #​37234, @​sayboras)
• docs: pass current_version to html_context (Backport PR #​37173, Upstream PR #​37008, @​ayuspin)
• Fix API generation and add trusted dependencies to renovate config (Backport PR #​37646, Upstream PR #​36957, @​aanm)
• images/builder: let renovate update protoc and proto plugins (Backport PR #​37281, Upstream PR #​32739, @​rolinh)
• images: don't assume Dockerfile directory in builder/runtime update scripts (Backport PR #​37376, Upstream PR #​34488, @​tklauser)
• Remove outdated roadmap matrix and links to it (Backport PR #​37281, Upstream PR #​37170, @​xmulligan)
• renovate: add fix grpc-go autodetection (Backport PR #​37281, Upstream PR #​33570, @​aanm)

Other Changes:

• [v1.15] envoy: Bump envoy version to v1.31.x (#​37161, @​sayboras)
• [v1.15] gha: Retrieve eks supported version via aws cli (#​37230, @​sayboras)
• chore(deps): update go to v1.23.5 (v1.15) (#​37197, @​sayboras)
• Cilium avoids running out of space in policy maps by cleaning up entries in specific cases previously missed. (#​36884, @​bimmlerd)
• gha: Fix feature test artifact upload (#​37205, @​sayboras)
• install: Update image digests for v1.15.13 (#​37153, @​cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.15.14@​sha256:f9599990748b0065990154dce0fc0ebec6baef55fd2125c9b710e03f61c7f4e6

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.15.14@​sha256:1821eaa3597c3ec24fbc5b50e3dfb48358bc15e9104c3e3422da474052821f5b

docker-plugin

quay.io/cilium/docker-plugin:v1.15.14@​sha256:ba840a1c16a0989b74f1bc4057c5630be9a290c64d6cfc00664ef39142da88b4

hubble-relay

quay.io/cilium/hubble-relay:v1.15.14@​sha256:e0445a89ca8e9089637c0914aa85f6f3305a80be3ddc68ad8bf4262e284654e7

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.15.14@​sha256:4434a0b36f558f5bb30b997b1c73e8cd9bce8dcc3fb27b86f43860cbab4aa12d

operator-aws

quay.io/cilium/operator-aws:v1.15.14@​sha256:642dd93c60dd8e161ab5c523a13b872cbfee80b092029ae62b55979ac5639231

operator-azure

quay.io/cilium/operator-azure:v1.15.14@​sha256:f6537984cce9df702ea6bc7acc37ccdc19e7c50d88eb716fb217dc2ab65a7081

operator-generic

quay.io/cilium/operator-generic:v1.15.14@​sha256:f4a23024a6eb3cba7f1f4b65c79bc9e1e675787d04a12253df22dbf623b76825

operator

quay.io/cilium/operator:v1.15.14@​sha256:ccdeb2b56005e565fd4bff895b80803a28029077bd27e1c4bbc05143dbc82925

---

Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.