skipper: Update to version v0.28.30

[k8s-on-aws-manager-app]

• test(kubernetes): add unit tests for addressesByZone in endpointslices zalando/skipper#4313
• build(deps): bump the all-go-mod-patch-and-minor group across 1 directory with 3 updates zalando/skipper#4309
• Use dummy AWS credentials for mock S3 decision logs zalando/skipper#4318
• Make tests pass on macOS and document Colima setup zalando/skipper#4317
• test(routing/testdataclient): add unit tests and achieve 100% coverage zalando/skipper#4310
• fix: Forwarded predicates ignore parameters whose names are not lower case zalando/skipper#4320
• build(deps): bump oss-fuzz-base/base-builder-go from db46af0 to 5bafe08 in /.clusterfuzzlite zalando/skipper#4322
• build(deps): bump amazonlinux from 2023.12.20260831.0 to 2023.12.20260918.0 in /fuzz zalando/skipper#4323
• feature: new filter tokenExchange() based on rfc-8693 zalando/skipper#4316
• proxy: avoid copying endpoints after fade-in zalando/skipper#4324
• fix: make background cache revalidation reliable in force and RFC mode zalando/skipper#4315
• test(kubernetes): add unit tests for ingressStatusAddressesFromService zalando/skipper#4314
• Remove field-map copying from default request access logs zalando/skipper#4326
• test(proxy): fix flaky TestShadow timing and counter assertions zalando/skipper#4327

[szuecs]

👍

[zalando-robot]

🤖 LLM Suggestions

[High] Use an approved production container registry

The updated images are still pulled from 926694233939.dkr.ecr.eu-central-1.amazonaws.com, an AWS ECR registry. Production images must use an approved Zalando registry, preferably container-registry.zalando.net; otherwise deployment can violate platform compliance or be blocked. Publish/promote v0.28.29 to the approved registry and update all three references.

Other non-critical findings

[Medium] Add release and rollout context to the PR description

The description only lists twelve related pull requests and does not explain what changed in Skipper v0.28.29, why the upgrade is needed, or how the validation webhook and master-node proxy/metrics containers are expected to behave after the rollout. Add a concise summary of the release contents, validation performed, and rollback/rollout considerations so the deployment change can be reviewed and operated safely.

Tokens Used: Input: 5,088 | Output: 2,360 | Cache Write: 1,613 | Cache Read: 3,472 | Total cost: $0.0036

[vlktna]

👍