Cilium - v1.11.12

Summary of Changes

Bugfixes:
* Fix bug that could lead to inconsistent pod IP information between agents, sometimes leading to a failure to decrypt IPsec traffic. (Backport PR #22309, Upstream PR #22127, @aanm)
* Fix bug where configuring the API rate limiter options could fail when providing multiple options (Backport PR #22752, Upstream PR #22299, @thorn3r)
* Fix forwarding of the security identity by the DNS proxy which could cause random policy denials (Backport PR #22456, Upstream PR #22361, @aspsk)
* Fix GC of CEPs that were not GCed by kube-apiserver (Backport PR #22309, Upstream PR #22213, @aanm)

CI Changes:
* .github: Explicitly set build-commits job runner image version and install libtinfo5 (Backport PR #22329, Upstream PR #22315, @chancez)
* .github: fix bpf-checks on ubuntu-latest runner (Backport PR #22329, Upstream PR #22322, @julianwiedmann)
* Fix CODEOWNERS (#22293, @michi-covalent)

Misc Changes:
* .github/workflows: split the image tag update in two steps (Backport PR #22261, Upstream PR #22268, @aanm)
* Add automatic creation of Cilium base images (Backport PR #22261, Upstream PR #22179, @aanm)
* bpf: Remove FIB lookup for IPsec (Backport PR #22309, Upstream PR #22069, @pchaigno)
* build(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (#22485, @dependabot[bot])
* build(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#22713, @dependabot[bot])
* build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 (#22305, @dependabot[bot])
* build(deps): bump github/codeql-action from 2.1.32 to 2.1.35 (#22495, @dependabot[bot])
* build(deps): bump github/codeql-action from 2.1.35 to 2.1.36 (#22631, @dependabot[bot])
* build(deps): bump github/codeql-action from 2.1.36 to 2.1.37 (#22760, @dependabot[bot])
* build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 (#22714, @dependabot[bot])
* build(deps): bump KyleMayes/install-llvm-action from 1.6.0 to 1.6.1 (#22594, @dependabot[bot])
* chore(deps): update base-images (v1.11) (#22123, @renovate[bot])
* gha: Pin ubuntu-20.04 for conformance-test-ipv6 (Backport PR #22329, Upstream PR #22324, @sayboras)

Other Changes:
* .github/workflows: install promtool from binary release (#22331, @tklauser)
* install: Update image digests for v1.11.11 (#22239, @michi-covalent)

Docker Manifests

cilium

docker.io/cilium/cilium:v1.11.12@sha256:67e6af41d4711bf3514ee1055b6b5b9a83b048c6224da78e7824550b3ec28940
quay.io/cilium/cilium:v1.11.12@sha256:67e6af41d4711bf3514ee1055b6b5b9a83b048c6224da78e7824550b3ec28940

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.11.12@sha256:48e41910b6ee3c5bfbefc99a868df7e358b5a9cfeea704d4bf5610b77e20fdd4
quay.io/cilium/clustermesh-apiserver:v1.11.12@sha256:48e41910b6ee3c5bfbefc99a868df7e358b5a9cfeea704d4bf5610b77e20fdd4

docker-plugin

docker.io/cilium/docker-plugin:v1.11.12@sha256:f2cb764c6f013982ef1f122155a0e97a36abbbbe03f375de913ce2a6e26286fb
quay.io/cilium/docker-plugin:v1.11.12@sha256:f2cb764c6f013982ef1f122155a0e97a36abbbbe03f375de913ce2a6e26286fb

hubble-relay

docker.io/cilium/hubble-relay:v1.11.12@sha256:db78c879e19708239c83f028def0fecd6a543abaaf2a58bd17a14d8582628448
quay.io/cilium/hubble-relay:v1.11.12@sha256:db78c879e19708239c83f028def0fecd6a543abaaf2a58bd17a14d8582628448

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.11.12@sha256:87d1aadb9682bf34e218c197f4491d7a45fc3cb370674dc91da19cb07ec666dd
quay.io/cilium/operator-alibabacloud:v1.11.12@sha256:87d1aadb9682bf34e218c197f4491d7a45fc3cb370674dc91da19cb07ec666dd

operator-aws

docker.io/cilium/operator-aws:v1.11.12@sha256:e8a757da651280c116b04ccf7e096e0f456ac2c54bdf1979b45309429d327057
quay.io/cilium/operator-aws:v1.11.12@sha256:e8a757da651280c116b04ccf7e096e0f456ac2c54bdf1979b45309429d327057

operator-azure

docker.io/cilium/operator-azure:v1.11.12@sha256:0a0d733cb01dcb7e397b6a00a6b195f9721d711ddb3385e122c50712c2a25efb
quay.io/cilium/operator-azure:v1.11.12@sha256:0a0d733cb01dcb7e397b6a00a6b195f9721d711ddb3385e122c50712c2a25efb

operator-generic

docker.io/cilium/operator-generic:v1.11.12@sha256:4a036edd5afce506dc5e0ed340902c017c166f16f0a9ab37d59031f26c88a9d0
quay.io/cilium/operator-generic:v1.11.12@sha256:4a036edd5afce506dc5e0ed340902c017c166f16f0a9ab37d59031f26c88a9d0

operator

docker.io/cilium/operator:v1.11.12@sha256:1d9c408c48d88faea6766ce012829560cd905ac3a9f40397a571dd580c6e6381
quay.io/cilium/operator:v1.11.12@sha256:1d9c408c48d88faea6766ce012829560cd905ac3a9f40397a571dd580c6e6381