chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
alpine	stage	minor	3.20.3 -> 3.21.2
cilium/cilium-cli		patch	v0.16.22 -> v0.16.23
cloud.google.com/go	replace	minor	v0.100.2 -> v0.118.0
cloud.google.com/go/storage	require	minor	v1.49.0 -> v1.50.0
docker/dockerfile-upstream		minor	1.12.1-labs -> 1.13.0-labs
docker/dockerfile-upstream	syntax	minor	1.12.1-labs -> 1.13.0-labs
etcd-io/etcd		patch	v3.5.17 -> v3.5.18
github.com/Azure/azure-sdk-for-go/sdk/azcore	require	minor	v1.16.0 -> v1.17.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity	require	patch	v1.8.0 -> v1.8.1
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5	require	major	v5.7.0 -> v6.3.0
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob	require	minor	v1.5.0 -> v1.6.0
github.com/aws/aws-sdk-go-v2	require	minor	v1.32.7 -> v1.34.0
github.com/aws/aws-sdk-go-v2/config	require	minor	v1.28.7 -> v1.29.2
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	require	patch	v1.16.22 -> v1.16.25
github.com/aws/aws-sdk-go-v2/feature/s3/manager	require	patch	v1.17.44 -> v1.17.54
github.com/aws/aws-sdk-go-v2/service/ec2	require	minor	v1.198.1 -> v1.201.1
github.com/aws/aws-sdk-go-v2/service/kms	require	patch	v1.37.8 -> v1.37.14
github.com/aws/aws-sdk-go-v2/service/s3	require	minor	v1.71.1 -> v1.74.1
github.com/aws/smithy-go	require	patch	v1.22.1 -> v1.22.2
github.com/cenkalti/backoff/v4	require	major	v4.3.0 -> v5.0.1
github.com/containerd/go-cni	require	patch	v1.1.11 -> v1.1.12
github.com/containernetworking/plugins	require	patch	v1.6.1 -> v1.6.2
github.com/coredns/coredns	require	minor	v1.11.3 -> v1.12.0
github.com/cosi-project/runtime	require	minor	v0.8.1 -> v0.9.2
github.com/docker/cli	require	minor	v27.4.1+incompatible -> v27.5.1+incompatible
github.com/docker/docker	require	minor	v27.4.1+incompatible -> v27.5.1+incompatible
github.com/gdamore/tcell/v2	require	minor	v2.7.4 -> v2.8.1
github.com/golangci/golangci-lint		minor	v1.62.2 -> v1.63.4
github.com/google/cel-go	require	minor	v0.22.1 -> v0.23.0
github.com/google/go-containerregistry	require	patch	v0.20.2 -> v0.20.3
github.com/hetznercloud/hcloud-go/v2	require	minor	v2.17.1 -> v2.18.0
github.com/insomniacslk/dhcp	require	digest	a3a4c1f -> 8abf581
github.com/invopop/jsonschema	require	minor	v0.12.0 -> v0.13.0
github.com/jsimonetti/rtnetlink/v2	require	digest	2d6e9f8 -> 6935a57
github.com/miekg/dns	require	patch	v1.1.62 -> v1.1.63
github.com/rivo/tview	require	digest	c76f787 -> 17b7edb
github.com/santhosh-tekuri/jsonschema/v5	require	major	v5.3.1 -> v6.0.1
github.com/siderolabs/go-blockdevice	require	major	v0.4.8 -> v2.0.13
github.com/siderolabs/proto-codec	require	patch	v0.1.1 -> v0.1.2
github.com/siderolabs/protoenc	require	patch	v0.2.1 -> v0.2.2
github.com/siderolabs/siderolink	require	patch	v0.3.11 -> v0.3.12
github.com/smira/dhcp	replace	digest	31e9ef2 -> 7d93572
github.com/smira/kobject	replace	digest	49c8d46 -> 19ca174
github.com/unix4ever/yaml	replace	major	v0.0.0-20220527175918-f17b0f05cf2c -> v2.4.0
go.etcd.io/etcd/api/v3	require	patch	v3.5.17 -> v3.5.18
go.etcd.io/etcd/client/pkg/v3	require	patch	v3.5.17 -> v3.5.18
go.etcd.io/etcd/client/v3	require	patch	v3.5.17 -> v3.5.18
go.etcd.io/etcd/etcdutl/v3	require	patch	v3.5.17 -> v3.5.18
golang.org/x/net	require	minor	v0.33.0 -> v0.34.0
golang.org/x/oauth2	require	minor	v0.24.0 -> v0.25.0
golang.org/x/sys	require	minor	v0.28.0 -> v0.29.0
golang.org/x/term	require	minor	v0.27.0 -> v0.28.0
golang.org/x/time	require	minor	v0.8.0 -> v0.9.0
golang.org/x/tools		minor	v0.28.0 -> v0.29.0
golang.org/x/tools	require	minor	v0.28.0 -> v0.29.0
golang.zx2c4.com/wireguard/wgctrl	require	digest	925a1e7 -> a9ab227
google.golang.org/api	require	minor	v0.214.0 -> v0.218.0
google.golang.org/genproto/googleapis/api	require	digest	3abc09e -> 65684f5
google.golang.org/genproto/googleapis/rpc	require	digest	3abc09e -> 65684f5
google.golang.org/grpc	require	minor	v1.69.2 -> v1.70.0
google.golang.org/protobuf	require	patch	v1.36.1 -> v1.36.4
helm/helm		minor	v3.16.4 -> v3.17.0
k8s.io/code-generator		patch	v0.32.0 -> v0.32.1
kastenhq/kubestr		patch	v0.4.47 -> v0.4.48
klakegg/hugo		patch	0.111.3-ext-alpine -> 0.111.3
markdownlint-cli		minor	0.43.0 -> 0.44.0
rook-ceph		patch	v1.16.0 -> v1.16.2
sigs.k8s.io/hydrophone	require	digest	b92baf7 -> e8a92aa
textlint		patch	14.4.0 -> 14.4.2

---

Release Notes

cilium/cilium-cli (cilium/cilium-cli)

v0.16.23

Compare Source

What's Changed

Minor Changes:

• cli: aws mixed nodes install fix (cilium/cilium#36336, @​viktor-kurchenko)

Bugfixes:

• Cilium CLI fix for AWS ENI mode (cilium/cilium#36887, @​viktor-kurchenko)
• Restore the original flag semantics for --egress-masquerade-interfaces to the same as v1.17.0-pre.2 or earlier (cilium/cilium#36504, @​viktor-kurchenko)

CI Changes:

• Add --external-other-target parameter to cilium CLI connectivity tests. (cilium/cilium#36080, @​wedaly)
• Change client-egress-l7-tls tests to sequential because flaky (cilium/cilium#36568, @​youngnick)
• cilium-cli/connectivity: fix IPv6 feature check for 2ndary node IPv6 (cilium/cilium#36513, @​tklauser)
• cilium-cli: Add envoy log pattern in error check (cilium/cilium#36498, @​sayboras)
• Fix cilium CLI connectivity tests in IPv6-only clusters. (cilium/cilium#36026, @​wedaly)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#36706, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7003184 (main) (cilium/cilium#36604, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7ea4c9d (main) (cilium/cilium#36808, @​cilium-renovate[bot])
• ci/connectivity: Don't apply cnp to conn-disrupt pods in 1.15, 1.14 (cilium/cilium#36682, @​jschwinger233)
• cilium-cli: skip some IPv6 connectivity tests for Cilium<1.14 when IPsec is enabled (cilium/cilium#36664, @​jschwinger233)
• Isolate node-to-node encryption tests to wireguard (cilium/cilium#36556, @​ldelossa)
• chore(deps): update all github action dependencies (minor) by @​renovate in https://github.com/cilium/cilium-cli/pull/2887
• Update stable release to v0.16.22 by @​tklauser in https://github.com/cilium/cilium-cli/pull/2888
• chore(deps): update module golang.org/x/crypto to v0.31.0 [security] by @​renovate in https://github.com/cilium/cilium-cli/pull/2889
• chore(deps): update all github action dependencies (minor) by @​renovate in https://github.com/cilium/cilium-cli/pull/2890
• Dockerfile: drop syntax comment by @​tklauser in https://github.com/cilium/cilium-cli/pull/2893
• chore(deps): update dependency kubernetes-sigs/kind to v0.26.0 by @​renovate in [https://github.com/ci

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: gopkg.in/[email protected] (replaced by github.com/unix4ever/yaml/[email protected]): parsing go.mod:
	module declares its path as: gopkg.in/yaml.v2
	        but was required as: gopkg.in/yaml.v3

File name: hack/docgen/go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: gopkg.in/[email protected] (replaced by github.com/unix4ever/yaml/[email protected]): parsing go.mod:
	module declares its path as: gopkg.in/yaml.v2
	        but was required as: gopkg.in/yaml.v3

File name: pkg/machinery/go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: gopkg.in/[email protected] (replaced by github.com/unix4ever/yaml/[email protected]): parsing go.mod:
	module declares its path as: gopkg.in/yaml.v2
	        but was required as: gopkg.in/yaml.v3