Update Istio version to 1.24.6 in the OSSM 3 release.
Update it in the:

Sail operator:

• sail operator upstream repo; release-1.0 branch (by https://github.com/istio-ecosystem/sail-operator/pull/863)
• sail operator midstream repo; release-3.0 branch (PR is automatically created once ^ will be merged) (https://github.com/openshift-service-mesh/sail-operator/pull/347)
  • Once ^ will be merge, it is needed to generate helm charts in midstream
    • update `versions.ossm.yaml` file with newer istio values from `versions.yaml`, generate helm charts via `export BUILD_WITH_CONTAINER=0 make gen`;
      • PR: https://github.com/openshift-service-mesh/sail-operator/pull/348
    • after that, make sure go.mod is referencing the latest `github.com/openshift-service-mesh/istio` in https://github.com/openshift-service-mesh/sail-operator/blob/release-3.1/go.mod#L191C27-L191C66;
    • after that, generate `our packages` in https://github.com/openshift-service-mesh/istio-release;
      • PR: https://github.com/openshift-service-mesh/istio-release/pull/2 
    • after that, update `versions.ossm.yaml` to use our generated charts;
      • PR: https://github.com/openshift-service-mesh/sail-operator/pull/349 
    • after that, create new "placeholders" images in ossm/values.yaml for new istio version, and update previous version with `shas` of already released images (if there are any from previous istio update )
      • PR: https://github.com/openshift-service-mesh/sail-operator/pull/350 

Proxy:

• envoy-openssl repo; release/v1.32 branch (by https://github.com/envoyproxy/envoy-openssl/pull/316)
• proxy midstream repo; release-1.24 branch (by https://github.com/openshift-service-mesh/proxy/pull/22)

Istio:

• istio midstream repo; release-1.24 branch, update sha of proxy (PR is automatically created once ^ will be merged) (https://github.com/openshift-service-mesh/istio/pull/394)
• istio midstream repo; release-1.24 branch (by https://github.com/openshift-service-mesh/istio/pull/404 )
  • do not forget to add tide/merge-method-merge label

after that, we need to have new tags which are used in konflux.

• 1.24.6-redhat-rc tag was added to proxy/istio/ztunnel repos

after that when we will have a new build, the jenkins pipelines need to be updated as well:

• https://gitlab.cee.redhat.com/istio/servicemesh-qe/jenkins-csb-declaration/-/merge_requests/730