Update dependency kubescape/operator to v0.2.46

This MR contains the following updates:

Package	Type	Update	Change
kubescape/operator	ironbank-github	patch	v0.2.6 -> v0.2.46

---

⚠ Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

kubescape/operator (kubescape/operator)

v0.2.46

Compare Source

• add registry id and registry scan id attributes
• export registry status

Overview

This MR fixes #

Signed Commits

• Yes, I signed my commits.

v0.2.45

Compare Source

Signed-off-by: refaelm refaelm@armosec.io

Overview

This MR fixes #

Signed Commits

• Yes, I signed my commits.

v0.2.42

Compare Source

• add check registry operator command
• support scanRegistryV2 command

Overview

This MR fixes #

Signed Commits

• Yes, I signed my commits.

v0.2.41

Compare Source

Signed-off-by: refaelm refaelm@armosec.io

Overview

This MR fixes #

Signed Commits

• Yes, I signed my commits.

v0.2.40

Compare Source

Bumps github.com/cilium/cilium from 1.16.0 to 1.16.1.

Release notes

Sourced from github.com/cilium/cilium's releases.

1.16.1

Security Advisories

This release addresses the following security vulnerabilities:

• https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
• https://github.com/cilium/cilium/security/advisories/GHSA-qcm3-7879-xcww

Summary of Changes

Minor Changes:

• Deprecate providing Hubble TLS secrets in helm values (Backport MR #​34297, Upstream MR #​34114, @​​chancez)
• gateway-api: Add required labels and annotations (Backport MR #​34215, Upstream MR #​33990, @​​sayboras)
• helm: add config for nat-map-stats-{interval, entries} config. (Backport MR #​34158, Upstream MR #​33847, @​​tommyp1ckles)
• Internal listener references are now properly qualified with namespace and CEC name. (Backport MR #​34158, Upstream MR #​34104, @​​jrajahalme)
• Support configuring imagePullSecrets for spire agent/server pods (Backport MR #​34158, Upstream MR #​33952, @​​chancez)

Bugfixes:

• auth: Fix data race in Upsert (Backport MR #​34158, Upstream MR #​33905, @​​chaunceyjiang)
• BGPv1 + BGPv2: Fix incorrect service reconciliation in setups with multiple BGP instances (virtual routers) (Backport MR #​34297, Upstream MR #​34177, @​​rastislavs)
• bgpv1: Fix data race in bgppSelection (Backport MR #​34158, Upstream MR #​33904, @​​chaunceyjiang)
• bgpv2: Avoid duplicate route policy naming (Backport MR #​34158, Upstream MR #​34031, @​​rastislavs)
• BGPv2: Fix Service advertisement selector: do not require matching CiliumLoadBalancerIPPool (Backport MR #​34201, Upstream MR #​34182, @​​rastislavs)
• Fix a nil dereference crash during cilium-agent initialization affecting setups with FQDN policies. The crash is triggered when a restored endpoint performs a DNS request just a the right time during early cilium-agent restoration. Problem is not expected to be persistent and the agent should get pass the problematic part of the initialization on restart. (Backport MR #​34158, Upstream MR #​34059, @​​joamaki)
• Fix appArmorProfile condition for CronJob helm template (Backport MR #​34297, Upstream MR #​34100, @​​sathieu)
• Fix bug causing etcd upsertion/deletion events to be potentially missed during the initial synchronization, when Cilium operates in KVStore mode, or Cluster Mesh is enabled. (Backport MR #​34181, Upstream MR #​34091, @​​giorio94)
• Fix issue in picking node IP addresses from the loopback device. This fixes a regression in v1.15 and v1.16 where VIPs assigned to the lo device were not considered by Cilium. Fix spurious updates node addresses to avoid unnecessary datapath reinitializations. (Backport MR #​34085, Upstream MR #​34012, @​​joamaki)
• Fix possible connection disruption on agent restart with WireGuard + kvstore (Backport MR #​34158, Upstream MR #​34062, @​​giorio94)
• Fixes DNS proxy "connect: cannot assign requested address" errors in transparent mode, which were due to opening multiple TCP connections to the upstream DNS server. (Backport MR #​34201, Upstream MR #​33989, @​​bimmlerd)
• gateway-api: Add HTTP method condition in sortable routes (Backport MR #​34158, Upstream MR #​34109, @​​sayboras)
• gateway-api: Enqueue gateway for Reference Grant changes (Backport MR #​34158, Upstream MR #​34032, @​​sayboras)
• lbipam: fixed bug in sharing key logic (Backport MR #​34158, Upstream MR #​34106, @​​dylandreimerink)
• cilium/cilium#34322@​​nathanjsweet)
• service: Relax protocol matching for L7 Service (Backport MR #​34195, Upstream MR #​34131, @​​sayboras)

CI Changes:

• .github: ginkgo: remove duplicate datapath ipv4only test in f09/f21. (Backport MR #​34297, Upstream MR #​34071, @​​tommyp1ckles)
• bpf: egressgw: don't install allow-all policy in to-netdev tests (Backport MR #​34201, Upstream MR #​34143, @​​julianwiedmann)
• ci: multi pool run tests concurrently (Backport MR #​34297, Upstream MR #​33945, @​​viktor-kurchenko)
• Fix workflow telemetry in ci-ipsec-upgrade (Backport MR #​34158, Upstream MR #​34097, @​​chancez)
• gha: Add extended features in gateway profile run (Backport MR #​34215, Upstream MR #​34098, @​​sayboras)
• gha: Free up Github runner disk space (Backport MR #​34297, Upstream MR #​34247, @​​sayboras)
• gha: lint absence of trailing spaces in workflow files (Backport MR #​34158, Upstream MR #​33908, @​​giorio94)
• gha: simplify the call-backport-label-updater workflow (Backport MR #​34158, Upstream MR #​33934, @​​giorio94)
• ginkgo-ci: split f09 into two groups to reduce timeouts & flakes (Backport MR #​34297, Upstream MR #​34038, @​​tommyp1ckles)
• test: use cgr.dev/chainguard/busybox:latest instead of docker.io image. (Backport MR #​34158, Upstream MR #​34004, @​​tommyp1ckles)
• tests-clustermesh-upgrade: Don't hardcode test namespace (Backport MR #​34158, Upstream MR #​34121, @​​michi-covalent)

... (truncated)

Changelog

Sourced from github.com/cilium/cilium's changelog.

v1.16.1

Summary of Changes

Minor Changes:

• Deprecate providing Hubble TLS secrets in helm values (Backport MR #​34297, Upstream MR #​34114, @​​chancez)
• gateway-api: Add required labels and annotations (Backport MR #​34215, Upstream MR #​33990, @​​sayboras)
• helm: add config for nat-map-stats-{interval, entries} config. (Backport MR #​34158, Upstream MR #​33847, @​​tommyp1ckles)
• Internal listener references are now properly qualified with namespace and CEC name. (Backport MR #​34158, Upstream MR #​34104, @​​jrajahalme)
• Support configuring imagePullSecrets for spire agent/server pods (Backport MR #​34158, Upstream MR #​33952, @​​chancez)

Bugfixes:

• auth: Fix data race in Upsert (Backport MR #​34158, Upstream MR #​33905, @​​chaunceyjiang)
• BGPv1 + BGPv2: Fix incorrect service reconciliation in setups with multiple BGP instances (virtual routers) (Backport MR #​34297, Upstream MR #​34177, @​​rastislavs)
• bgpv1: Fix data race in bgppSelection (Backport MR #​34158, Upstream MR #​33904, @​​chaunceyjiang)
• bgpv2: Avoid duplicate route policy naming (Backport MR #​34158, Upstream MR #​34031, @​​rastislavs)
• BGPv2: Fix Service advertisement selector: do not require matching CiliumLoadBalancerIPPool (Backport MR #​34201, Upstream MR #​34182, @​​rastislavs)
• Fix a nil dereference crash during cilium-agent initialization affecting setups with FQDN policies. The crash is triggered when a restored endpoint performs a DNS request just a the right time during early cilium-agent restoration. Problem is not expected to be persistent and the agent should get pass the problematic part of the initialization on restart. (Backport MR #​34158, Upstream MR #​34059, @​​joamaki)
• Fix appArmorProfile condition for CronJob helm template (Backport MR #​34297, Upstream MR #​34100, @​​sathieu)
• Fix bug causing etcd upsertion/deletion events to be potentially missed during the initial synchronization, when Cilium operates in KVStore mode, or Cluster Mesh is enabled. (Backport MR #​34181, Upstream MR #​34091, @​​giorio94)
• Fix issue in picking node IP addresses from the loopback device. This fixes a regression in v1.15 and v1.16 where VIPs assigned to the lo device were not considered by Cilium. Fix spurious updates node addresses to avoid unnecessary datapath reinitializations. (Backport MR #​34085, Upstream MR #​34012, @​​joamaki)
• Fix possible connection disruption on agent restart with WireGuard + kvstore (Backport MR #​34158, Upstream MR #​34062, @​​giorio94)
• Fixes DNS proxy "connect: cannot assign requested address" errors in transparent mode, which were due to opening multiple TCP connections to the upstream DNS server. (Backport MR #​34201, Upstream MR #​33989, @​​bimmlerd)
• gateway-api: Add HTTP method condition in sortable routes (Backport MR #​34158, Upstream MR #​34109, @​​sayboras)
• gateway-api: Enqueue gateway for Reference Grant changes (Backport MR #​34158, Upstream MR #​34032, @​​sayboras)
• lbipam: fixed bug in sharing key logic (Backport MR #​34158, Upstream MR #​34106, @​​dylandreimerink)
• cilium/cilium#34322@​​nathanjsweet)
• service: Relax protocol matching for L7 Service (Backport MR #​34195, Upstream MR #​34131, @​​sayboras)

CI Changes:

• .github: ginkgo: remove duplicate datapath ipv4only test in f09/f21. (Backport MR #​34297, Upstream MR #​34071, @​​tommyp1ckles)
• bpf: egressgw: don't install allow-all policy in to-netdev tests (Backport MR #​34201, Upstream MR #​34143, @​​julianwiedmann)
• ci: multi pool run tests concurrently (Backport MR #​34297, Upstream MR #​33945, @​​viktor-kurchenko)
• Fix workflow telemetry in ci-ipsec-upgrade (Backport MR #​34158, Upstream MR #​34097, @​​chancez)
• gha: Add extended features in gateway profile run (Backport MR #​34215, Upstream MR #​34098, @​​sayboras)
• gha: Free up Github runner disk space (Backport MR #​34297, Upstream MR #​34247, @​​sayboras)
• gha: lint absence of trailing spaces in workflow files (Backport MR #​34158, Upstream MR #​33908, @​​giorio94)
• gha: simplify the call-backport-label-updater workflow (Backport MR #​34158, Upstream MR #​33934, @​​giorio94)
• ginkgo-ci: split f09 into two groups to reduce timeouts & flakes (Backport MR #​34297, Upstream MR #​34038, @​​tommyp1ckles)
• test: use cgr.dev/chainguard/busybox:latest instead of docker.io image. (Backport MR #​34158, Upstream MR #​34004, @​​tommyp1ckles)
• tests-clustermesh-upgrade: Don't hardcode test namespace (Backport MR #​34158, Upstream MR #​34121, @​​michi-covalent)

Misc Changes:

• cilium/cilium#34008@​​pippolo84)
• Add source IP visibility info to Ingress and Gateway API docs (Backport MR #​34297, Upstream MR #​34137, @​​youngnick)
• bgpv1: Reconcile with retry in BGP Controller (Backport MR #​34158, Upstream MR #​33971, @​​rastislavs)
• bgpv2: deprecate local port setting in transport config (Backport MR #​34209, Upstream MR #​33438, @​​harsimran-pabla)
• bgpv2: use correct path key in path reconciler (Backport MR #​34158, Upstream MR #​33947, @​​harsimran-pabla)
• bitlpm: Avoid allocs in CIDR trie lookups (Backport MR #​34158, Upstream MR #​33518, @​​jrajahalme)

... (truncated)

Commits

• 6857905 Prepare for release v1.16.1
• 17426bc policy: Add Port Range Precedence Tests
• 1992c02 policy: Port Range Match Label Fix
• d458088 ci: update docs-builder
• 77ba95c ci: update docs-builder
• 96ef822 Documentation: Add support for redirects for moved/renamed pages
• f0ff5f3 Documentation: Fix update-requirements
• 0cb3777 gha: Free up Github runner disk space
• 7d8b60b Remove appArmorProfile from CronJob helm template
• 642f47f bgpv1: Fix DiffStore to work with multiple server instances
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this MR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this MR:

• @dependabot rebase will rebase this MR
• @dependabot recreate will recreate this MR, overwriting any edits that have been made to it
• @dependabot merge will merge this MR after your CI passes on it
• @dependabot squash and merge will squash and merge this MR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this MR if it is closed
• @dependabot close will close this MR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this MR and stop Dependabot creating any more for this major version (unless you reopen the MR or upgrade to it yourself)
• @dependabot ignore this minor version will close this MR and stop Dependabot creating any more for this minor version (unless you reopen the MR or upgrade to it yourself)
• @dependabot ignore this dependency will close this MR and stop Dependabot creating any more for this dependency (unless you reopen the MR or upgrade to it yourself) You can disable automated security fix MRs for this repo from the Security Alerts page.

v0.2.34

Compare Source

v0.2.32

Compare Source

v0.2.31

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.