fix(deps): update dependency aqua:cilium/cilium-cli ( 0.18.7 ➔ 0.18.8 )

[unsc-oni-ancilla]

This PR contains the following updates:

Package	Update	Change
aqua:cilium/cilium-cli	patch	0.18.7 -> 0.18.8

---

Release Notes

cilium/cilium-cli (aqua:cilium/cilium-cli)

v0.18.8

Compare Source

Summary of Changes

Minor Changes:

• clustermesh: add endpoints metrics and change global service (and MCS ServiceExport) metrics to report per cluster metrics instead of a global count (cilium/cilium#41323, @​MrFreezeex)

Bugfixes:

• cilium-cli: Fix CNI config file collection in sysdump (cilium/cilium#42111, @​pillai-ashwin)
• cilium-cli: Prevent panic in node-to-node-encryption connectivity test (cilium/cilium#41600, @​HadrienPatte)
• connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 (cilium/cilium#42148, @​julianwiedmann)
• Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (cilium/cilium#42080, @​tklauser)

CI Changes:

• Add integration test to validate IPsec key derivation consistency across nodes, ensuring tunnel keys are properly derived and identical between Cilium pods. (cilium/cilium#40808, @​pillai-ashwin)
• ci: enable copyloopvar linter (cilium/cilium#41893, @​tklauser)
• cilium-cli, netns: fix golangci-lint 2.5.0 errors (cilium/cilium#41856, @​tklauser)
• cilium-cli: Bring back NodePort Acceleration feature detection (cilium/cilium#41812, @​brb)
• cilium-cli: Reenable L7 IPv6 tests (cilium/cilium#39662, @​gentoo-root)
• cilium-cli: Specify TARGET for building release binaries (cilium/cilium#42177, @​michi-covalent)
• cilium_cli: Override GO_BUILD Make variable (cilium/cilium#42162, @​michi-covalent)
• cli, ipsec: Fix bidirectional IPsec tunnel check (cilium/cilium#42047, @​pchaigno)
• cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (cilium/cilium#42146, @​fristonio)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#41611, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#42018, @​cilium-renovate[bot])
• chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to 0ce60b5 (main) (cilium/cilium#41558, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f (main) (cilium/cilium#41649, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d709837 (main) (cilium/cilium#42019, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 (main) (cilium/cilium#42252, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.1 (main) (cilium/cilium#41560, @​cilium-renovate[bot])
• chore(deps): update go to v1.25.3 (main) (cilium/cilium#42061, @​cilium-renovate[bot])
• cilium-cli/features: use common cmd metric list command (cilium/cilium#41630, @​aanm)
• cilium-cli: drop disabled IP cache check from connectivity tests (cilium/cilium#42240, @​tklauser)
• cli/clustermesh: remove leftover global services status info (cilium/cilium#41727, @​giorio94)
• Refactor policy engine to use PolicyEntry as the internal representation of policies, as described in CFP-39646. (cilium/cilium#40213, @​TheBeeZee)
• sysdump: add resource usage of nodes and pods (cilium/cilium#41415, @​darox)
• chore(deps): update go to v1.25.1 (patch) by @​renovate[bot] in #​3097
• chore(deps): update actions/setup-go action to v6 by @​renovate[bot] in #​3094
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to d6bdb04 by @​renovate[bot] in #​3096
• chore(deps): update gcr.io/distroless/static:latest docker digest to 87bce11 by @​renovate[bot] in #​3099
• chore(deps): update softprops/action-gh-release action to v2.3.3 by @​renovate[bot] in #​3098
• chore(deps): update golang docker tag to v1.25.1 by @​renovate[bot] in #​3093
• chore(deps): update actions/stale action to v10 by @​renovate[bot] in #​3095
• chore(deps): update golang:1.25.1-alpine3.21 docker digest to 331bde4 by @​renovate[bot] in #​3100
• chore(deps): update dependency cilium/cilium to v1.18.2 by @​renovate[bot] in #​3102
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f by @​renovate[bot] in #​3103
• chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by @​renovate[bot] in #​3104
• chore(deps): update docker/login-action action to v3.6.0 by @​renovate[bot] in #​3105
• chore(deps): update docker.io/library/golang:1.25.1 docker digest to ab1f5c4 by @​renovate[bot] in #​3106
• chore(deps): update actions/stale action to v10.1.0 by @​renovate[bot] in #​3108
• chore(deps): update softprops/action-gh-release action to v2.3.4 by @​renovate[bot] in #​3107
• chore(deps): update softprops/action-gh-release action to v2.4.0 by @​renovate[bot] in #​3109
• chore(deps): update golang docker tag to v1.25.2 by @​renovate[bot] in #​3110
• chore(deps): update go to v1.25.2 (patch) by @​renovate[bot] in #​3112
• chore(deps): update golang:1.25.2-alpine3.21 docker digest to 0134653 by @​renovate[bot] in #​3113
• RELEASE: also look for release-blockers in cilium/cilium by @​julianwiedmann in #​3116
• chore(deps): update golang docker tag to v1.25.3 by @​renovate[bot] in #​3117
• chore(deps): update softprops/action-gh-release action to v2.4.1 by @​renovate[bot] in #​3114
• chore(deps): update go to v1.25.3 (patch) by @​renovate[bot] in #​3118
• chore(deps): update golang:1.25.3-alpine3.21 docker digest to 0c9f3e0 by @​renovate[bot] in #​3115
• Makefile: fix renovate depname for GO_IMAGE_* updates by @​tklauser in #​3119
• chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 by @​renovate[bot] in #​3111
• Prepare for v0.18.8 release by @​michi-covalent in #​3120

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.