Prepare for release v1.14.11

[aanm]

Summary of Changes

Bugfixes:

• Agent: add kubeconfigPath to initContainers (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR Agent: add kubeconfigPath to initContainers cilium/cilium#32008, @darox)
• dnsproxy: Fix bug where DNS request timed out too soon (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR dnsproxy: Fix bug where DNS request timed out too soon cilium/cilium#31999, @gandro)
• envoy: pass idle timeout configuration option to cilium configmap (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR envoy: pass idle timeout configuration option to cilium configmap cilium/cilium#32203, @mhofstetter)
• Fixes a bug where Cilium in chained mode removed the agent-not-ready taint too early if the primary network is slow in deploying. (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR daemon: don't go ready until CNI configuration has been written cilium/cilium#32168, @squeed)
• fqdn: fix memory leak in transparent mode when there was a moderately high number of parallel DNS requests (>100). (Backport PR v1.14 Backports 2024-04-22 cilium/cilium#32104, Upstream PR fqdn: Fix goroutine leak in transparent-mode cilium/cilium#31959, @marseel)
• ipam: retry netlink.LinkList call when setting up ENI devices (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR ipam: retry netlink.LinkList call when setting up ENI devices cilium/cilium#32099, @jasonaliyetti)
• operator: fix errors/warnings metric. (Backport PR v1.14 backports 2024-04-11 cilium/cilium#31907, Upstream PR operator: fix errors/warnings metric. cilium/cilium#31214, @tommyp1ckles)

CI Changes:

• alibabacloud/eni: avoid racing node mgr in test (Backport PR v1.14 Backports 2024-04-16 cilium/cilium#31987, Upstream PR alibabacloud/eni: avoid racing node mgr in test cilium/cilium#31877, @bimmlerd)
• ci: Increase timeout for images for l4lb test (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR ci: Increase timeout for images for l4lb test cilium/cilium#32201, @marseel)
• gha: configure fully-qualified DNS names as external targets (Backport PR v1.14 Backports 2024-04-22 cilium/cilium#32104, Upstream PR gha: configure fully-qualified DNS names as external targets cilium/cilium#31510, @giorio94)
• gha: drop double installation of Cilium CLI in conformance-eks (Backport PR v1.14 Backports 2024-04-22 cilium/cilium#32104, Upstream PR gha: drop double installation of Cilium CLI in conformance-eks cilium/cilium#32042, @giorio94)
• Miscellaneous improvements to the clustermesh upgrade/downgrade test (Backport PR v1.14 Backports 2024-04-22 cilium/cilium#32104, Upstream PR Miscellaneous improvements to the clustermesh upgrade/downgrade test cilium/cilium#31958, @giorio94)
• test: De-flake xds server_e2e_test (Backport PR v1.14 Backports 2024-04-22 cilium/cilium#32104, Upstream PR test: De-flake xds server_e2e_test cilium/cilium#32004, @jrajahalme)
• workflows: Fix CI jobs for push events on private forks (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR workflows: Fix CI jobs for push events on private forks cilium/cilium#32085, @pchaigno)

Misc Changes:

• build(deps): bump pydantic from 2.3.0 to 2.4.0 in /Documentation (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR build(deps): bump pydantic from 2.3.0 to 2.4.0 in /Documentation cilium/cilium#32176, @dependabot[bot])
• chore(deps): update all github action dependencies (v1.14) (chore(deps): update all github action dependencies (v1.14) cilium/cilium#31997, @renovate[bot])
• chore(deps): update all github action dependencies (v1.14) (chore(deps): update all github action dependencies (v1.14) cilium/cilium#32109, @renovate[bot])
• chore(deps): update cilium/cilium-cli action to v0.16.4 (v1.14) (chore(deps): update cilium/cilium-cli action to v0.16.4 (v1.14) cilium/cilium#32110, @renovate[bot])
• chore(deps): update docker.io/library/golang:1.21.9 docker digest to 81811f8 (v1.14) (chore(deps): update docker.io/library/golang:1.21.9 docker digest to 81811f8 (v1.14) cilium/cilium#31995, @renovate[bot])
• chore(deps): update hubble cli to v0.13.3 (v1.14) (chore(deps): update hubble cli to v0.13.3 (v1.14) cilium/cilium#32111, @renovate[bot])
• CI: bump default FQDN datapath timeout from 100 to 250ms (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR CI: bump default FQDN datapath timeout from 100 to 250ms cilium/cilium#31866, @squeed)
• docs: Fix prometheus port regex (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR docs: Fix prometheus port regex cilium/cilium#32030, @JBodkin-Amphora)
• Docs: mark Tetragon as Stable (Backport PR v1.14 Backports 2024-04-16 cilium/cilium#31987, Upstream PR Docs: mark Tetragon as Stable cilium/cilium#31886, @sharlns)
• Document Cluster Mesh global services limitations when KPR=false (Backport PR v1.14 Backports 2024-04-16 cilium/cilium#31987, Upstream PR clustermesh: document global services limitations with KPR=false cilium/cilium#31798, @giorio94)
• endpoint: Skip build queue warning log is context is canceled (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR endpoint: Skip build queue warning log is context is canceled cilium/cilium#32132, @jrajahalme)
• golangci: Enable errorlint (Backport PR [v1.14] golangci: Enable errorlint cilium/cilium#31793, Upstream PR golangci: Enable errorlint cilium/cilium#31458, @jrajahalme)
• Improve release organization page (Backport PR v1.14 Backports 2024-04-16 cilium/cilium#31987, Upstream PR Improve release organization page cilium/cilium#31970, @joestringer)
• install/kubernetes: update nodeinit image to latest version (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR install/kubernetes: update nodeinit image to latest version cilium/cilium#32181, @tklauser)
• l7 policy: add possibility to configure Envoy proxy xff-num-trusted-hops (Backport PR [v1.14] Author backport of #32200 cilium/cilium#32265, Upstream PR l7 policy: add possibility to configure Envoy proxy xff-num-trusted-hops cilium/cilium#32200, @mhofstetter)
• Remove aks-preview from AKS workflows (Backport PR v1.14 Backports 2024-04-30 cilium/cilium#32251, Upstream PR Remove aks-preview from AKS workflows cilium/cilium#32118, @marseel)
• Remove cilium/build from codeowners (Remove cilium/build from codeowners cilium/cilium#32146, @joestringer)

Other Changes:

• [v1.14-backport] Introduce fromEgressProxyRule ([v1.14-backport] Introduce fromEgressProxyRule cilium/cilium#31926, @jschwinger233)
• ci: no longer suppported v1.25 in GKE (ci: no longer suppported v1.25 in GKE cilium/cilium#32183, @marseel)
• envoy: Bump envoy version to v1.27.5 (envoy: Bump envoy version to v1.27.5 cilium/cilium#32078, @sayboras)
• fix k8s versions tested in CI (fix k8s versions tested in CI cilium/cilium#31969, @nbusseneau)
• install: Update image digests for v1.14.10 (install: Update image digests for v1.14.10 cilium/cilium#31914, @asauber)