🔄 Release Tracking: v1.8.11

[github-actions]

🚀 Release Cycle: v1.8.11

Branch: master
Run: https://github.com/Azure/azure-container-networking/actions/runs/29602936218

Tags to be created:

• v1.8.11 (CNI/CNS/NPM)
• dropgz/v0.2.1
• azure-ipam/v0.4.2
• azure-iptables-monitor/v0.0.6
• azure-ip-masq-merger/v0.0.2
• cilium-log-collector/v0.0.3

⏳ Pending PRs — Dependabot (22) + Go Upgrade (3):

• deps: bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 #4333 — deps: bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0
• ci: bump actions/upload-artifact from 7.0.0 to 7.0.1 #4361 — ci: bump actions/upload-artifact from 7.0.0 to 7.0.1
• deps: bump go.uber.org/zap from 1.27.1 to 1.28.0 in /zapai in the all-go-minor-and-patch group across 1 directory #4399 — deps: bump go.uber.org/zap from 1.27.1 to 1.28.0 in /zapai in the all-go-minor-and-patch group across 1 directory
• deps: bump go.uber.org/zap from 1.27.1 to 1.28.0 in /dropgz in the all-go-minor-and-patch group across 1 directory #4400 — deps: bump go.uber.org/zap from 1.27.1 to 1.28.0 in /dropgz in the all-go-minor-and-patch group across 1 directory
• deps: bump the all-go-minor-and-patch group across 1 directory with 3 updates #4401 — deps: bump the all-go-minor-and-patch group across 1 directory with 3 updates
• deps: bump the all-go-minor-and-patch group across 1 directory with 22 updates #4453 — deps: bump the all-go-minor-and-patch group across 1 directory with 22 updates
• ci: bump github/codeql-action from 4.36.0 to 4.36.2 #4457 — ci: bump github/codeql-action from 4.36.0 to 4.36.2
• deps: bump go.mongodb.org/mongo-driver from 1.17.6 to 1.17.7 #4468 — deps: bump go.mongodb.org/mongo-driver from 1.14.0 to 1.17.7
• ci: bump actions/checkout from 4.3.1 to 7.0.0 #4474 — ci: bump actions/checkout from 4.3.1 to 7.0.0
• chore: upgrade library versions and base images to latest #4483 — chore: upgrade library versions and base images to latest
• ci: bump github/codeql-action/analyze from 4.36.0 to 4.36.2 #4484 — ci: bump github/codeql-action/analyze from 4.36.0 to 4.36.2
• ci: bump github/codeql-action/init from 4.36.0 to 4.36.2 #4485 — ci: bump github/codeql-action/init from 4.36.0 to 4.36.2
• ci: bump github/codeql-action/autobuild from 4.36.0 to 4.36.2 #4486 — ci: bump github/codeql-action/autobuild from 4.36.0 to 4.36.2
• ci: bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 #4488 — ci: bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
• ci: bump actions/setup-go from 6.3.0 to 6.5.0 #4492 — ci: bump actions/setup-go from 6.3.0 to 6.5.0
• chore: upgrade Go 1.24 → 1.26.4 #4494 — chore: upgrade Go 1.24 → 1.26.4
• ci: bump actions/stale from db5d06a4c82d5e94513c09c406638111df61f63e to 9461cb10066d1553762bac6a02599ab8c26b14dd #4496 — ci: bump actions/stale from db5d06a4c82d5e94513c09c406638111df61f63e to 9461cb10066d1553762bac6a02599ab8c26b14dd
• deps: bump golang.org/x/net from 0.48.0 to 0.55.0 in /azure-ipam #4504 — deps: bump golang.org/x/net from 0.48.0 to 0.55.0 in /azure-ipam
• ci: bump the go_modules group across 3 directories with 1 update #4505 — ci: bump the go_modules group across 3 directories with 1 update
• deps: bump golang.org/x/net from 0.48.0 to 0.55.0 #4506 — deps: bump golang.org/x/net from 0.48.0 to 0.55.0
• ci: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 #4507 — ci: bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
• deps: bump github.com/cilium/cilium from 1.17.15 to 1.17.16 #4509 — deps: bump github.com/cilium/cilium from 1.17.15 to 1.17.16
• fix(azure-iptables-monitor): build with Go 1.25 to remediate CVE-2026-39825 #4514 — fix(azure-iptables-monitor): build with Go 1.25 to remediate CVE-2026-39825
• deps: bump golang.org/x/crypto from 0.46.0 to 0.52.0 in /azure-ipam #4519 — deps: bump golang.org/x/crypto from 0.46.0 to 0.52.0 in /azure-ipam
• deps: bump golang.org/x/crypto from 0.46.0 to 0.52.0 #4520 — deps: bump golang.org/x/crypto from 0.46.0 to 0.52.0

---

Skip Instructions

To skip a specific PR, comment on this issue:

skip #<PR_NUMBER>

To skip ALL remaining dependency PRs (dependabot + Go upgrade):

skip all

Pause for a non-dependabot PR

To hold the release until a specific PR merges (any PR, not just dependabot):

pause #<PR_NUMBER>

To remove the hold:

unpause #<PR_NUMBER>

Pause the release entirely

To freeze the release (e.g. waiting for an unrelated fix, discussion, etc.):

pause

To unfreeze and let it continue:

resume

---

This issue is managed by the Scheduled Release workflow. It will close automatically when the release completes.

[behzad-mir]

skip all

[behzad-mir]

skip all

[github-actions]

This issue is stale because it has been open for 2 weeks with no activity. Remove stale label or comment to keep it open.