🤖 Update module github.com/gardener/gardener-extension-networking-calico to v1.59.0

[ske-renovate-operator]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener-extension-networking-calico	v1.58.0 → v1.59.0

---

Release Notes

gardener/gardener-extension-networking-calico (github.com/gardener/gardener-extension-networking-calico)

v1.59.0

Compare Source

[github.com/gardener/gardener-extension-networking-calico:v1.59.0]

⚠️ Breaking Changes

• [OPERATOR] ⚠️ This extension no longer supports Kubernetes versions <= 1.31. Please make sure to upgrade all Garden, Seed and Shoot clusters to at least version 1.32 before deploying this extension version. by @​timuthy [#​834]

📰 Noteworthy

• [USER] Support Calico NFTables mode by @​hown3d [#​824]

🏃 Others

• [OPERATOR] Calico charts are update to version v1.31.5 by @​axel7born [#​831]
• [OPERATOR] Support admissionregistration.k8s.io/v1beta1 runtime config for MutatingAdmissionPolicy detection by @​DockToFuture [#​827]
• [OPERATOR] Disable Felix IP-in-IP when overlay is explicitly disabled to prevent unnecessary tunnel device creation and incorrect MTU overhead. by @​axel7born [#​843]
• [OPERATOR] Calico calico-node and multus DaemonSets now use revisionHistoryLimit=2 to comply with the gardener component checklist. by @​alliasgher [#​835]
• [OPERATOR] Seamless overlay switch activation is aligned with the MutatingAdmissionPolicy admission API availability across Kubernetes versions: >= 1.36 (GA) activates automatically, < 1.36 (alpha or beta, off by default per KEP-3136) requires explicit feature gate + runtimeConfig opt-in. by @​DockToFuture [#​829]

application/spdx+json

• cni-plugins-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/cni-plugins@sha256:4a3a3fa29a6b5c48ba70fe0a7df3371dfcdd47a3634367764dc04f81379ec4e3
• cni-plugins-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/cni-plugins@sha256:dca348d64aab8584427382a6d8450ed34c62cf56c7d43385fa0080aa7445dfea
• gardener-extension-admission-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-calico@sha256:a24ebbcea37d09ac9a06efde7923f49c5bba3ecfa4d569ec35e331c403734ec7
• gardener-extension-admission-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-calico@sha256:d42b2ceadd6432ba8cf8ae06cb8e603218d189411abfca5d6f7e068b7190286e
• gardener-extension-networking-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-calico@sha256:6620e19ffc78fb5ae0cabfb40d31351a7e8a9d6cc585badae366a47801269122
• gardener-extension-networking-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-calico@sha256:d2eaae1bc8b9f71671e3a4efccc4210bb59fa049d28de964e95bd1092ca86bbf

application/vnd.cyclonedx+json

• cni-plugins-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/cni-plugins@sha256:62200434226656fcb99d0cffd93c1c1ed2743d181dac39d9a5c6cf71d390755e
• cni-plugins-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/cni-plugins@sha256:93922efce9551ea6c97650dc3422415c0a7aa1481e4093e3c895f2d028f82189
• gardener-extension-admission-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-calico@sha256:1e5c2fa6581aabbb0d5255ab2002e434a61793c1f3e6faf81b9af32b4385baab
• gardener-extension-admission-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-calico@sha256:e878e24df982e5d7b750c9679e6167c4d9a39ffc53a290ae47510b1ba8724ad6
• gardener-extension-networking-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-calico@sha256:593896d862a4d46b0df51a4cbfbfe9f7f753f507e7e7f935ccd4aa239124a66a
• gardener-extension-networking-calico-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-calico@sha256:cdbf1198bbb01221de4e57284fc689bd6828176ca32c38ca0144856f6c4b6b1f

Helm Charts

• admission-calico-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-calico-application:v1.59.0
• admission-calico-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-calico-runtime:v1.59.0
• networking-calico: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/networking-calico:v1.59.0

Container (OCI) Images

• cni-plugins: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/cni-plugins:v1.59.0
• gardener-extension-admission-calico: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-calico:v1.59.0
• gardener-extension-networking-calico: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-calico:v1.59.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[ske-renovate-operator]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/gardener/gardener v1.145.0
go: downloading github.com/gardener/gardener/pkg/apis v1.145.0
go: downloading github.com/onsi/ginkgo/v2 v2.31.0
go: downloading github.com/gardener/gardener-extension-networking-calico v1.59.0
go: downloading github.com/open-telemetry/opentelemetry-operator/apis v0.153.0
go: downloading github.com/open-telemetry/opentelemetry-operator v0.143.0
go: downloading github.com/prometheus/client_golang v1.23.3-0.20260602051030-3537b20ac86b
go: downloading istio.io/api v1.29.4
go: downloading github.com/gardener/cert-management v0.23.0
go: downloading github.com/prometheus/common v0.68.1
go: downloading github.com/mattn/go-isatty v0.0.22
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading go.opentelemetry.io/otel/trace v1.44.0
go: downloading github.com/aws/aws-sdk-go-v2 v1.41.7
go: downloading go.opentelemetry.io/otel v1.44.0
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.17
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.16
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.42.1
go: downloading github.com/go-openapi/swag/conv v0.26.0
go: downloading github.com/go-openapi/swag/fileutils v0.26.0
go: downloading github.com/go-openapi/swag/jsonutils v0.26.0
go: downloading github.com/go-openapi/swag/stringutils v0.26.0
go: downloading github.com/go-openapi/swag/typeutils v0.26.0
go: downloading github.com/aws/smithy-go v1.25.1
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23
go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.0.11
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.30.17
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.21
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23
go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23
go: downloading golang.org/x/exp v0.0.0-20260527015227-08cc5374adb3
go: downloading github.com/open-telemetry/opentelemetry-operator v1.51.0
go: github.com/stackitcloud/gardener-extension-provider-stackit/v2/pkg/controller/controlplane tested by
	github.com/stackitcloud/gardener-extension-provider-stackit/v2/pkg/controller/controlplane.test imports
	github.com/gardener/gardener/third_party/mock/controller-runtime/client: cannot find module providing package github.com/gardener/gardener/third_party/mock/controller-runtime/client

[ske-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ftl for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ske-prow]

@ske-renovate-operator[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-gardener-extension-provider-stackit-verify	eb5fffe	link	true	/test pull-gardener-extension-provider-stackit-verify
pull-gardener-extension-provider-stackit-integration-tests	eb5fffe	link	true	/test pull-gardener-extension-provider-stackit-integration-tests

Full PR test history. Your PR dashboard. Command help for this repository.
Please help us cut down on flakes by linking this test failure to an open flake report or filing a new flake report if you can't find an existing one. Also see the gardener testing guideline for how to avoid and hunt flakes.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[dergeberl]

/hold
requires gardener upgrade first #170