chore(deps): upgrade proxy-init to v2.4.9 & cni-plugin to v1.6.8 (#15332)

Signed-off-by: --get <allison@buoyant.io>

Author: arichardet

Dockerfile.proxy

@@ -48,7 +48,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH go build -o /out/proxy-identity
 FROM --platform=$BUILDPLATFORM golang:1.25.10-alpine AS proxy-init
 WORKDIR /build
 ARG PROXY_INIT_REPO="linkerd/linkerd2-proxy-init"
-ARG PROXY_INIT_REF="proxy-init/v2.4.8"
+ARG PROXY_INIT_REF="proxy-init/v2.4.9"
 RUN apk add --no-cache ca-certificates git
 RUN --mount=type=secret,id=github \
     export GITHUB_TOKEN_FILE=/run/secrets/github; \

charts/linkerd2-cni/values.yaml

@@ -69,7 +69,7 @@ image:
   # -- Docker image for the CNI plugin
   name: "cr.l5d.io/linkerd/cni-plugin"
   # -- Tag for the CNI container Docker image
-  version: "v1.6.7"
+  version: "v1.6.8"
   # -- Pull policy for the linkerd-cni container
   pullPolicy: IfNotPresent
 

cli/cmd/testdata/install-cni-plugin_default.golden

@@ -2358,7 +2358,7 @@ spec:
       serviceAccountName: linkerd-cni
       containers:
       - name: install-cni
-        image: cr.l5d.io/linkerd/cni-plugin:v1.6.7
+        image: cr.l5d.io/linkerd/cni-plugin:v1.6.8
         env:
         - name: DEST_CNI_NET_DIR
           valueFrom:

cli/cmd/testdata/install-cni-plugin_skip_ports.golden

@@ -12,7 +12,7 @@ import (
 // DO NOT EDIT
 var Version = undefinedVersion
 
-var LinkerdCNIVersion = "v1.6.7"
+var LinkerdCNIVersion = "v1.6.8"
 
 const (
 	// undefinedVersion should take the form `channel-version` to conform to