Merge branch 'kubeovn:master' into fix-netpol-block

Author: SkalaNetworks

.github/workflows/build-windows.yaml

@@ -25,7 +25,7 @@ concurrency:
 env:
   GO_VERSION: ''
   # renovate: datasource=github-releases depName=gosec packageName=securego/gosec
-  GOSEC_VERSION: 2.22.8
+  GOSEC_VERSION: 2.22.9
 
 jobs:
   filter:

.github/workflows/build-x86-image.yaml

@@ -24,7 +24,7 @@ env:
   # renovate: datasource=github-releases depName=kind packageName=kubernetes-sigs/kind
   KIND_VERSION: v0.30.0
   # renovate: datasource=github-releases depName=golangci-lint packageName=golangci/golangci-lint
-  GOLANGCI_LINT_VERSION: v2.4.0
+  GOLANGCI_LINT_VERSION: v2.5.0
   # renovate: datasource=github-releases depName=helm packageName=helm/helm
   HELM_VERSION: v3.19.0
   # renovate: datasource=github-releases depName=submariner packageName=submariner-io/submariner

.github/workflows/codeql-analysis.yml

@@ -52,7 +52,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -78,4 +78,4 @@ jobs:
         make build-go-windows
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4

CHANGELOG.md

@@ -1,5 +1,55 @@
 # Changelog
 
+## v1.14.11 (2025-10-11)
+
+ * [879c670ea](https://github.com/kubeovn/kube-ovn/commit/879c670ea5f5bf9cccefd9b03f64307193c2122f) release v1.14.11
+ * [f9c8743da](https://github.com/kubeovn/kube-ovn/commit/f9c8743da113fa2b58988bc12c9b3c9bc1d8b2fb) fix sometimes e2e metallb err (#5761)
+ * [7be12912a](https://github.com/kubeovn/kube-ovn/commit/7be12912a92734696a04961d73b58ce3e380747d) bump k8s to v1.32.9 (#5780)
+ * [fc113898e](https://github.com/kubeovn/kube-ovn/commit/fc113898e1a22ba363917a20aeeec452a4183cdd) change the route offset to increase the priority of dst routes (#5781)
+ * [16df110ef](https://github.com/kubeovn/kube-ovn/commit/16df110ef996b5562896b56b1a3e35e72cadd457) fix(deps): update golang (#5774)
+ * [8921d8864](https://github.com/kubeovn/kube-ovn/commit/8921d886444f8749d41df5d130f5a3b96dc652c0) prepare for next release
+
+### Contributors
+
+ * Mengxin Liu
+ * changluyi
+ * renovate[bot]
+ * 张祖建
+
+## v1.14.10 (2025-09-29)
+
+ * [3b2bee7d0](https://github.com/kubeovn/kube-ovn/commit/3b2bee7d02ff49c381d743ac6d6ae1f59ea990d8) release v1.14.10
+ * [8cb0a7875](https://github.com/kubeovn/kube-ovn/commit/8cb0a7875c07189ce1a5fd4107983dda93ff8d31) Increase timeout
+ * [144b772ae](https://github.com/kubeovn/kube-ovn/commit/144b772ae7f780412471ea4338261a354a145b5a) fix gabage u2o openflow (#5757)
+ * [74ca5981f](https://github.com/kubeovn/kube-ovn/commit/74ca5981fbbf63b6d4eedae01a0fe4591c62dca1) prepare for next release
+
+### Contributors
+
+ * Mengxin Liu
+ * changluyi
+
+## v1.14.9 (2025-09-23)
+
+ * [238d0ef8b](https://github.com/kubeovn/kube-ovn/commit/238d0ef8b6dd49992f389bafea4ac378b617f287) release v1.14.9
+ * [244e28268](https://github.com/kubeovn/kube-ovn/commit/244e2826835623c8fbde8ba91b406acf435da9e4) check ovn0 mac should be set expected (#5749)
+ * [c85a490db](https://github.com/kubeovn/kube-ovn/commit/c85a490db05758d5e743915cd95353bbcf625de4) prepare for next release
+
+### Contributors
+
+ * Mengxin Liu
+ * changluyi
+
+## v1.14.8 (2025-09-22)
+
+ * [12c136b8e](https://github.com/kubeovn/kube-ovn/commit/12c136b8e1ea149e7b73fa64d83a8b7b1412676b) release v1.14.8
+ * [75a1eac11](https://github.com/kubeovn/kube-ovn/commit/75a1eac11164b6e782903bea698728403094a793) controller: fix lsp not deleted in gc (#5735)
+ * [e33b6d386](https://github.com/kubeovn/kube-ovn/commit/e33b6d3869a45ede9d0b4d00a83e6eb5d3546718) prepare for next release
+
+### Contributors
+
+ * Mengxin Liu
+ * 张祖建
+
 ## v1.14.7 (2025-09-18)
 
  * [7f2af0a97](https://github.com/kubeovn/kube-ovn/commit/7f2af0a97f0d0c8fa0ad8f2f1dac4284a98d726d) release v1.14.7

Makefile

@@ -34,7 +34,7 @@ METALLB_CONTROLLER_IMAGE = quay.io/metallb/controller:$(METALLB_VERSION)
 METALLB_SPEAKER_IMAGE = quay.io/metallb/speaker:$(METALLB_VERSION)
 
 # renovate: datasource=github-releases depName=kubevirt packageName=kubevirt/kubevirt
-KUBEVIRT_VERSION = v1.6.0
+KUBEVIRT_VERSION = v1.6.2
 KUBEVIRT_OPERATOR_IMAGE = quay.io/kubevirt/virt-operator:$(KUBEVIRT_VERSION)
 KUBEVIRT_API_IMAGE = quay.io/kubevirt/virt-api:$(KUBEVIRT_VERSION)
 KUBEVIRT_CONTROLLER_IMAGE = quay.io/kubevirt/virt-controller:$(KUBEVIRT_VERSION)
@@ -48,7 +48,7 @@ CILIUM_VERSION = v1.18.2
 CILIUM_IMAGE_REPO = quay.io/cilium
 
 # renovate: datasource=github-releases depName=cert-manager packageName=cert-manager/cert-manager
-CERT_MANAGER_VERSION = v1.18.2
+CERT_MANAGER_VERSION = v1.19.0
 CERT_MANAGER_CONTROLLER = quay.io/jetstack/cert-manager-controller:$(CERT_MANAGER_VERSION)
 CERT_MANAGER_CAINJECTOR = quay.io/jetstack/cert-manager-cainjector:$(CERT_MANAGER_VERSION)
 CERT_MANAGER_WEBHOOK = quay.io/jetstack/cert-manager-webhook:$(CERT_MANAGER_VERSION)

cmd/daemon/cniserver.go

@@ -222,7 +222,7 @@ func Retry(attempts, sleep int, f func(configuration *daemon.Configuration) erro
 	for i := 0; ; i++ {
 		err = f(ctrl)
 		if err == nil {
-			return
+			return err
 		}
 		if i >= (attempts - 1) {
 			break

dist/images/Dockerfile.base

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:experimental
 # renovate: datasource=golang-version depName=go
-ARG GO_VERSION=1.25.1
+ARG GO_VERSION=1.25.2
 
 FROM ubuntu:24.04 AS openssl-builder