Skip to content

fix(deps): bump the k8s-deps group with 7 updates#1905

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/k8s-deps-e4ffe3262f
Open

fix(deps): bump the k8s-deps group with 7 updates#1905
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/k8s-deps-e4ffe3262f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2026

Bumps the k8s-deps group with 7 updates:

Package From To
k8s.io/api 0.30.14 0.35.3
k8s.io/apiextensions-apiserver 0.30.14 0.35.3
k8s.io/apimachinery 0.30.14 0.35.3
k8s.io/autoscaler/vertical-pod-autoscaler 1.2.2 1.6.0
k8s.io/client-go 0.30.14 0.35.3
k8s.io/utils 0.0.0-20250820121507-0af2bda4dd1d 0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/controller-runtime 0.18.7 0.23.3

Updates k8s.io/api from 0.30.14 to 0.35.3

Commits
  • 3897036 Update dependencies to v0.35.3 tag
  • bbcbaa8 Merge remote-tracking branch 'origin/master' into release-1.35
  • 5bced61 Bump golang.org/x/crypto to v0.45.0
  • 39e2e26 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • c22b4a1 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • e3b1f3d Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • 3da327c Update vendored dependencies
  • c764b44 Merge pull request #132919 from ndixita/pod-level-in-place-pod-resize
  • aced136 Generated files from API changes
  • 02d790d Adding Resources and AllocatedResoures fields to the list of expected fields ...
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.30.14 to 0.35.3

Commits

Updates k8s.io/apimachinery from 0.30.14 to 0.35.3

Commits
  • 72d71ea Merge remote-tracking branch 'origin/master' into release-1.35
  • e2a2dbc Bump golang.org/x/crypto to v0.45.0
  • 2e9c228 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • f274aac vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • 9445443 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • 52154f7 Update vendored dependencies
  • 5a348c5 KEP-5471: Extend tolerations operators (#134665)
  • 6f89492 Merge pull request #133648 from richabanker/merged-discovery
  • c77dde2 util/sort: Add MergePreservingRelativeOrder for topological sorting
  • 729c13d Merge pull request #134624 from yt2985/podcertificates-beta
  • Additional commits viewable in compare view

Updates k8s.io/autoscaler/vertical-pod-autoscaler from 1.2.2 to 1.6.0

Release notes

Sourced from k8s.io/autoscaler/vertical-pod-autoscaler's releases.

vertical-pod-autoscaler-1.6.0

Changes by Kind

API Change

  • Correctly mark the VPA UpdateMode "Auto" as deprecated, that was deprecated in VPA 1.5 (#9073, @​adrianmoisey)

Feature

  • Adds --in-place-skip-disruption-budget flag that skips disruption budget checks for in-place pod updates when all containers have NotRequired resize policy (#8987, @​omerap12)
  • Promote InPlaceOrRecreate feature to GA, defaulted to enabled (#9082, @​adrianmoisey)

Bug or Regression

  • Avoid returning error when annotation patch for InPlaceOrResize fails, that would cause Pods to get unnecessarily evicted after resize (#9115, @​adrianmoisey)
  • Optimize memory usage in VPA components by scoping informers to configured namespaces. (#9122, @​adrianmoisey)
  • Vertical-pod-autoscaler: Fix the version of the k8s.io/client-go module. (#8579, @​ialidzhikov)
  • Vpa-updater and vpa-admission-controller no longer excessively log fail to get pod controller: (...) last error node is not a valid owner (#8611, @​adrianmoisey)
  • VPA: Fix recommender race conditions for vpa Conditions and Recommendations (#8967, @​jkyros)

Other (Cleanup or Flake)

vertical-pod-autoscaler-1.5.1

What's Changed

Full Changelog: kubernetes/autoscaler@vertical-pod-autoscaler-1.5.0...vertical-pod-autoscaler-1.5.1

vertical-pod-autoscaler-1.5.0

What's Changed

... (truncated)

Commits
  • 9196162 Update VPA default version to 1.6.0
  • 9e62173 Merge pull request #9206 from walidghallab/target-size
  • 19477c7 Merge pull request #9210 from adrianmoisey/vpa-deps
  • 4de27b2 Bump VPA deps to 1.35.1
  • bd02f22 Merge pull request #9180 from adrianmoisey/adrian-skip-minreplicas
  • a060930 Update target size calculation for GCE.
  • 81327e3 Merge pull request #9198 from Choraden/ca_e2e_presubmit_conf
  • d525c8f Merge pull request #9204 from Hargeek/fix/no-provider-id-for-huaweicloud
  • d5249cb Return nil for missing provider ID instead of error
  • b474ff4 Merge pull request #9203 from kubernetes/dependabot/docker/vertical-pod-autos...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.30.14 to 0.35.3

Commits
  • 4f1f0a2 Update dependencies to v0.35.3 tag
  • f80003c Merge pull request #136903pohly/automated-cherry-pick-of-#136455
  • 8b41556 fake client-go: un-deprecate NewSimpleClientset
  • 2d83546 Merge remote-tracking branch 'origin/master' into release-1.35
  • 56b4af2 Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-f...
  • 891f94c Merge remote-tracking branch 'origin/master' into release-1.35
  • 65ffe04 Merge pull request #135580 from serathius/client-go-transformer
  • 2fe4ac2 downgrade reflector watchlist fallback log to V(4)
  • 97256a6 Bump golang.org/x/crypto to v0.45.0
  • 46360b5 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20260210185600-b8788abfbbc2

Commits

Updates sigs.k8s.io/controller-runtime from 0.18.7 to 0.23.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.23.3

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

v0.23.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

v0.23.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

... (truncated)

Commits
  • f9589b9 Merge pull request #3469 from k8s-infra-cherrypick-robot/cherry-pick-3468-to-...
  • 25615ad Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if object...
  • 8122a62 Merge pull request #3467 from k8s-infra-cherrypick-robot/cherry-pick-3463-to-...
  • 35093c6 Reduce memory usage of default webhooks
  • 4dbfa5c [release-0.23] 🐛 Fix fake client's SSA status patch resource version check (#...
  • f52bbb8 Merge pull request #3437 from k8s-infra-cherrypick-robot/cherry-pick-3430-to-...
  • 4f41337 Merge pull request #3438 from k8s-infra-cherrypick-robot/cherry-pick-3434-to-...
  • e29a1b9 seedling: Test cache reader waits for cache sync
  • 83c8dc3 bug: Fakeclient: Fix status apply if existing object has managedFields set
  • bf6bcd5 Merge pull request #3436 from k8s-infra-cherrypick-robot/cherry-pick-3431-to-...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the k8s-deps group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.30.14` | `0.35.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.30.14` | `0.35.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.30.14` | `0.35.3` |
| [k8s.io/autoscaler/vertical-pod-autoscaler](https://github.com/kubernetes/autoscaler) | `1.2.2` | `1.6.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.14` | `0.35.3` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20250820121507-0af2bda4dd1d` | `0.0.0-20260210185600-b8788abfbbc2` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.18.7` | `0.23.3` |


Updates `k8s.io/api` from 0.30.14 to 0.35.3
- [Commits](kubernetes/api@v0.30.14...v0.35.3)

Updates `k8s.io/apiextensions-apiserver` from 0.30.14 to 0.35.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.30.14...v0.35.3)

Updates `k8s.io/apimachinery` from 0.30.14 to 0.35.3
- [Commits](kubernetes/apimachinery@v0.30.14...v0.35.3)

Updates `k8s.io/autoscaler/vertical-pod-autoscaler` from 1.2.2 to 1.6.0
- [Release notes](https://github.com/kubernetes/autoscaler/releases)
- [Commits](kubernetes/autoscaler@cluster-autoscaler-1.2.2...vertical-pod-autoscaler-1.6.0)

Updates `k8s.io/client-go` from 0.30.14 to 0.35.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.30.14...v0.35.3)

Updates `k8s.io/utils` from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20260210185600-b8788abfbbc2
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `sigs.k8s.io/controller-runtime` from 0.18.7 to 0.23.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.7...v0.23.3)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-deps
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-deps
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-deps
- dependency-name: k8s.io/autoscaler/vertical-pod-autoscaler
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-deps
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-deps
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20260210185600-b8788abfbbc2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-deps
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.23.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants