Skip to content

chore(deps): update istio to v1.29.2#2587

Merged
chance-coleman merged 2 commits intomainfrom
renovate/istio
Apr 23, 2026
Merged

chore(deps): update istio to v1.29.2#2587
chance-coleman merged 2 commits intomainfrom
renovate/istio

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 13, 2026

This PR contains the following updates:

Package Update Change
base patch 1.29.11.29.2
cni patch 1.29.11.29.2
docker.io/istio/install-cni patch 1.29.1-distroless1.29.2-distroless
docker.io/istio/pilot patch 1.29.1-distroless1.29.2-distroless
docker.io/istio/proxyv2 patch 1.29.1-distroless1.29.2-distroless
docker.io/istio/ztunnel patch 1.29.1-distroless1.29.2-distroless
gateway patch 1.29.11.29.2
istio/istio patch 1.29.11.29.2
istiod patch 1.29.11.29.2
quay.io/rfcurated/istio/install-cni patch 1.29.1-jammy-fips-rfcurated-rfhardened1.29.2-jammy-fips-rfcurated-rfhardened
quay.io/rfcurated/istio/pilot patch 1.29.1-jammy-fips-rfcurated-rfhardened1.29.2-jammy-fips-rfcurated-rfhardened
quay.io/rfcurated/istio/proxyv2 patch 1.29.1-jammy-fips-rfcurated-rfhardened1.29.2-jammy-fips-rfcurated-rfhardened
quay.io/rfcurated/istio/ztunnel patch 1.29.1-jammy-scratch-fips-rfcurated1.29.2-jammy-scratch-fips-rfcurated
registry1.dso.mil/ironbank/tetrate/istio/install-cni (source) patch 1.29.1-fips1.29.2-fips
registry1.dso.mil/ironbank/tetrate/istio/pilot (source) patch 1.29.1-fips1.29.2-fips
registry1.dso.mil/ironbank/tetrate/istio/proxyv2 (source) patch 1.29.1-fips1.29.2-fips
registry1.dso.mil/ironbank/tetrate/istio/ztunnel (source) patch 1.29.1-fips1.29.2-fips
ztunnel patch 1.29.11.29.2

Release Notes

istio/istio (base)

v1.29.2: Istio 1.29.2

Compare Source

Artifacts
Release Notes


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner April 13, 2026 19:09
@github-actions github-actions Bot added waiting on ironbank This PR is waiting on an image update for ironbank waiting on rapidfort This PR is waiting on an image update for Rapidfort labels Apr 13, 2026
@renovate renovate Bot force-pushed the renovate/istio branch 2 times, most recently from 0b7bc0e to 41094a5 Compare April 16, 2026 19:38
@renovate renovate Bot force-pushed the renovate/istio branch from 41094a5 to daa89d0 Compare April 23, 2026 13:32
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lula Compliance Overview

Please review the changes to ensure they meet compliance standards.

Reviewed Changes

Lula reviewed 10 files changed that affect compliance.


File Lines Changed
src/istio/zarf.yaml 59–65

UUID: b4367e52-bef0-4463-a906-e5af6b4aa015
sha256: 2decc715c8ce8c702e234bca9ecfcf8e7c89bab3ca00d33da29ab50fec21e36a


Tip: Customize your compliance reviews with Lula.

@github-actions github-actions Bot removed the waiting on ironbank This PR is waiting on an image update for ironbank label Apr 23, 2026
| datasource  | package                                              | from   | to     |
| ----------- | ---------------------------------------------------- | ------ | ------ |
| helm        | base                                                 | 1.29.1 | 1.29.2 |
| helm        | cni                                                  | 1.29.1 | 1.29.2 |
| docker      | docker.io/istio/install-cni                          | 1.29.1 | 1.29.2 |
| docker      | docker.io/istio/pilot                                | 1.29.1 | 1.29.2 |
| docker      | docker.io/istio/proxyv2                              | 1.29.1 | 1.29.2 |
| docker      | docker.io/istio/ztunnel                              | 1.29.1 | 1.29.2 |
| helm        | gateway                                              | 1.29.1 | 1.29.2 |
| github-tags | istio/istio                                          | 1.29.1 | 1.29.2 |
| helm        | istiod                                               | 1.29.1 | 1.29.2 |
| docker      | quay.io/rfcurated/istio/install-cni                  | 1.29.1 | 1.29.2 |
| docker      | quay.io/rfcurated/istio/pilot                        | 1.29.1 | 1.29.2 |
| docker      | quay.io/rfcurated/istio/proxyv2                      | 1.29.1 | 1.29.2 |
| docker      | quay.io/rfcurated/istio/ztunnel                      | 1.29.1 | 1.29.2 |
| docker      | registry1.dso.mil/ironbank/tetrate/istio/install-cni | 1.29.1 | 1.29.2 |
| docker      | registry1.dso.mil/ironbank/tetrate/istio/pilot       | 1.29.1 | 1.29.2 |
| docker      | registry1.dso.mil/ironbank/tetrate/istio/proxyv2     | 1.29.1 | 1.29.2 |
| docker      | registry1.dso.mil/ironbank/tetrate/istio/ztunnel     | 1.29.1 | 1.29.2 |
| helm        | ztunnel                                              | 1.29.1 | 1.29.2 |
@renovate renovate Bot force-pushed the renovate/istio branch from daa89d0 to 468b9fe Compare April 23, 2026 17:43
@github-actions github-actions Bot dismissed their stale review April 23, 2026 17:43

Superseded by a new Lula compliance review.

@github-actions github-actions Bot removed the waiting on rapidfort This PR is waiting on an image update for Rapidfort label Apr 23, 2026
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lula Compliance Overview

Please review the changes to ensure they meet compliance standards.

Reviewed Changes

Lula reviewed 13 files changed that affect compliance.


File Lines Changed
src/istio/zarf.yaml 59–65
src/istio/zarf.yaml 83–89

UUID: b4367e52-bef0-4463-a906-e5af6b4aa015
sha256: 2decc715c8ce8c702e234bca9ecfcf8e7c89bab3ca00d33da29ab50fec21e36a

UUID: b4367e52-bef0-4463-a906-e5af6b4aa015
sha256: 6ccb6697c7b67a3711bfee3107e231a2d72d2c1525e8e1d4f3ef009195516052


Tip: Customize your compliance reviews with Lula.

@github-actions github-actions Bot added the needs-review Label used for Renovate PRs that are ready for review/test label Apr 23, 2026
@github-actions github-actions Bot dismissed their stale review April 23, 2026 19:04

Superseded by a new Lula compliance review.

Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lula Compliance Overview

Please review the changes to ensure they meet compliance standards.

Reviewed Changes

Lula reviewed 13 files changed that affect compliance.


File Lines Changed
src/istio/zarf.yaml 59–65
src/istio/zarf.yaml 83–89

UUID: b4367e52-bef0-4463-a906-e5af6b4aa015
sha256: 2decc715c8ce8c702e234bca9ecfcf8e7c89bab3ca00d33da29ab50fec21e36a

UUID: b4367e52-bef0-4463-a906-e5af6b4aa015
sha256: 6ccb6697c7b67a3711bfee3107e231a2d72d2c1525e8e1d4f3ef009195516052


Tip: Customize your compliance reviews with Lula.

@chance-coleman chance-coleman dismissed github-actions[bot]’s stale review April 23, 2026 19:05

Updating istio versions, does not affect compliance.

@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Apr 23, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@chance-coleman chance-coleman merged commit caddf35 into main Apr 23, 2026
28 checks passed
@chance-coleman chance-coleman deleted the renovate/istio branch April 23, 2026 19:30
jasonwashburn pushed a commit that referenced this pull request Apr 28, 2026
🤖 I have created a release *beep* *boop*
---


##
[1.3.0](v1.2.0...v1.3.0)
(2026-04-28)


### Features

* **CORE-27:** allow opt-in public clients
([#2598](#2598))
([9af5ca7](9af5ca7))
* cycle gateways when istio gatewayTopology proxyProtocol changes
([#2595](#2595))
([5eceba7](5eceba7))


### Bug Fixes

* **ci:** run istio gen-crds in autogenerated-check
([#2605](#2605))
([40a1a97](40a1a97))
* handle apply properly for keycloak client secret
([#2627](#2627))
([c227289](c227289))
* re-add keycloak client registration authpol
([#2614](#2614))
([ebed871](ebed871))
* restore original loki write service account name
([#2599](#2599))
([a5386e2](a5386e2))
* updating prometheus to use endpointslice
([#2594](#2594))
([ba319c8](ba319c8))


### Miscellaneous

* add retry to multi-arch manifest check
([#2602](#2602))
([4e8ba23](4e8ba23))
* **deps-dev:** bump postcss from 8.5.8 to 8.5.12 in /scripts/renovate
([#2615](#2615))
([0922090](0922090))
* **deps:** update identity-config to 0.26.1
([#2616](#2616))
([fd105a2](fd105a2))
* **deps:** update istio to v1.29.2
([#2587](#2587))
([caddf35](caddf35))
* **deps:** update pepr to v1.1.6
([#2607](#2607))
([d9f2ae9](d9f2ae9))
* **deps:** update pepr to v1.1.7
([#2611](#2611))
([fd43cc3](fd43cc3))
* **deps:** update prometheus-stack
([#2546](#2546))
([6812697](6812697))
* **deps:** update velero chart to v12.0.1
([#2613](#2613))
([1048ae9](1048ae9))
* swap bundles google idp saml signing cert
([#2609](#2609))
([57795b9](57795b9))
* update istio CRDs to use v1 API
([#2606](#2606))
([079c361](079c361))


### Documentation

* add 1.3.0 release notes
([#2633](#2633))
([00468ab](00468ab))
* add keycloak admin handling doc
([#2597](#2597))
([328d19c](328d19c))
* add troubleshooting for too many open files
([#2612](#2612))
([0b64a05](0b64a05))
* update release notes for 1.2.1
([#2603](#2603))
([bfa8124](bfa8124))
* update release notes to include newest patches
([#2629](#2629))
([d59ca81](d59ca81))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-review Label used for Renovate PRs that are ready for review/test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant