Update module sigs.k8s.io/kustomize/kustomize/v5 to v5.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sigs.k8s.io/kustomize/kustomize/v5	v5.3.0 -> v5.8.0

---

Release Notes

kubernetes-sigs/kustomize (sigs.k8s.io/kustomize/kustomize/v5)

v5.8.0

Highlights

implements to replacements value in the structured data

Now, We can edit yaml/json in yaml manifests with replacements transformer.
See #​5679

For example

## source
apiVersion: v1
kind: ConfigMap
metadata:
  name: source-configmap
data:
  HOSTNAME: www.example.com
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: target-configmap
data:
  config.json: |-
    {"config": {
      "id": "42",
      "hostname": "REPLACE_TARGET_HOSTNAME"
    }}

## replacement
replacements:
- source:
    kind: ConfigMap
    name: source-configmap
    fieldPath: data.HOSTNAME
  targets:
  - select:
      kind: ConfigMap
      name: target-configmap
    fieldPaths:
    - data.config\.json.config.hostname

fix: Propagate Namespace correctly to Helm

The long-standing bug where kustomize's namespace transformer did not pass namespaces to helmCharts has been fixed.
See #​5940

For example

## define namespace
namespace: any-namespace

helmCharts:
- name: minecraft
  repo: https://kubernetes-charts.storage.googleapis.com
  version: v1.2.0
  # namespace: any-namespace   ## propagates without additional namespace specific
  valuesFile: values.yaml

Feature

#​5679: implements to replacements value in the structured data
#​5863: Add regex support for Replacement selectors
#​5930: feat: add PatchArgs API type to populate patch options

fix

#​5940: fix: Propagate Namespace correctly to Helm
#​5971: fix: performance recession when propagating namespace to helm
#​5942: fix fnplugin storagemounts validation
#​5958: fix: make AbsorbAll conflict error more verbose
#​5961: refactor: nested format string
#​5967: Fix infinite loop in HTTP client by validating URLs before requests
#​5985: fix(kyaml/yaml): minor nil safety fix for RNode.Content etc
#​5991: Fix duplicate key error when adding multiple labels with --without-selector

Dependencies

#​5962: chore: update dependencies from security alert
#​5959: update go 1.24.6

chore

#​6007: Update kyaml to v0.21.0
#​6008: Update cmd/config to v0.21.0
#​6009: Update api to v0.21.0

v5.7.1

This release introduces code to replace the shlex library used for parsing arguments in the exec plugin.
If any existing manifests become corrupted, please file an issue. discussion: kubernetes/kubernetes#132593 (comment)

Dependencies

#​5943: drop shlex dependency

Chore

#​5948: Update kyaml to v0.20.1
#​5949: Update cmd/config to v0.20.1
#​5950: Update api to v0.20.1

v5.7.0

Feature

#​5630: Add static value source for replacement
#​5921: feat: Add images suport for Image Volumes
#​5771: fix: Allow patches with empty files with multiple newlines or comments
#​5865: feat(helm): allow the use of devel alias for helmcharts

fix

#​5846: fix: Get version from the BuildInfo.Main.Version if not found in deps and build flag
#​5859: fix: Don't panic on multiple $patch: delete strategic merge patches in a single patch file
#​5877: fix: make private one field in replacements transformer struct that had a missing JSON tag

Dependencies

#​5847: replace deplecated package github.com/google/shlex with github.com/carapace-sh/carapace-shlex
#​5873: Bump to github.com/spf13/viper v1.20.0
#​5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3

chore

#​5882: Set Git messages to English for TestRemoteLoad_LocalProtocol
#​5934: Update kyaml to v0.20.0
#​5935: Update cmd/config to v0.20.0
#​5936: Update api to v0.20.0

v5.6.0

Announce

This release introduces a unified internal package version (v0.19.0) across the entire kustomize repository.
ref. #​5800

Chore

#​5809: fix: "edit add labels" make labels handle -f flag same as commonLabels

Dependencies

#​5825: Update to latest kube-opeapi to drop govalidator dependency
#​5830: downgrade go-difflib and go-spew to tagged releases
#​5837: Update kyaml to v0.19.0
#​5839: Update cmd/config to v0.19.0
#​5840: Update api to v0.19.0

v5.5.0

Breaking change

A starlark support for krm functions was removed to cleanup dependencies. #​5768
This feature was deprecated 3 years ago and removed because there was no desire to continue using it.
#​5768 (comment)

Feature

#​5751: Add --helm-debug Flag to Kustomize for Enhanced Helm Debugging

Fix Bugs

#​5458: Sort built-in Namespace kind before CRDs with the same name
#​5745: Add Annotation to Control Inline List Conversion in Kustomize Resources"

Dependencies

#​5763: Update go 1.22.7
#​5781: Update kyaml to v0.18.1
#​5782: Update cmd/config to v0.15.0
#​5783: Update api to v0.18.0

v5.4.3

Caution

The kustomize localize subcommand(this subcommand is now in the beta stage) now verifies the success of kustomize build when executed.
If you are using the missing manifests, maybe you failed to download them with the localize subcommand. Please use the --no-verify flag to skip validation steps.
#​5544: Run kustomize build with kustomize localize and add a no-verify flag.

Fix Bugs

#​5682: fix: include label in templates when adding by cli
#​5689: Fix sortOptions removal when running edit command

chore

#​5506: fix some comments
#​5718: fix lint error in kustomizationfile_test.go

Dependencies

#​5734: Update kyaml to v0.17.2
#​5735: Update cmd/config to v0.14.2
#​5736: Update api to v0.17.3

v5.4.2

Feature

#​5294: feat: localize absolute paths
#​5556: feat: support labels key in transformer configuration

chore

#​5671: refactor: string in slice is now part of stdlib
#​5681: chore: remove unused function
#​5688: refactor: function in stdlib now

Dependencies

#​5672: chore(deps): bump dependencies of kustomize + sync go workspace
#​5680: chore: restore version for github.com/asaskevich/govalidator
#​5702: Update kyaml to v0.17.1
#​5703: Update cmd/config to v0.14.1
#​5704: Update api to v0.17.2

v5.4.1

This is a patch of kustomize v5.4.0 and should fix the kustomize version subcommand issues in its assets.

kustomize v5.4.1

#​5644: fix version subcommand is not working after release build

kustomize v5.4.0

Breaking changes

#​5519: Fix null YAML values being replaced by "null"

kustomize requires Go 1.21 or higher at build

#​5567: fix 'golang.org/x/exp/slices' dependencies

Features

#​5411: Add --load-restrictor completion
#​5467: feat: edit set secret

More better error handling

• #​5539: Include exec plugin stderr with wrapped error
• #​5542: fix: improve accumulation failure message
• #​5550: use Strict unmarshal when read TransformerConfig

Bug fixes/performance improvements

#​5234: fix edit set image to parse both tag and digest
#​5621: Use require for Error and NoError

Dependencies

#​5479: Revert "Switch to json-patch v5"
#​5541: Use canonical json-patch v4 import
#​5615: update dependencies google.golang.org/protobuf@​v1.33.0

update internal Dependencies

#​5639: Update kyaml to v0.17.0
#​5640: Update cmd/config to v0.14.0
#​5641: Update api to v0.17.0

cleanup Dependencies

#​5044: Remove non-essential dependency imdario/mergo
#​5567: fix 'golang.org/x/exp/slices' dependencies
#​5627: Remove klog/v1 dependencies

chore

#​5495: chore: move removetest.go to the internal package
#​5518: Update owners file
#​5622: Pin tool versions with hack/go.mod

v5.4.0

Known issue: The kustomize version command was broken in this release. Please use more new releases.

Breaking changes

#​5519: Fix null YAML values being replaced by "null"

Features

#​5411: Add --load-restrictor completion
#​5467: feat: edit set secret

More better error handling

• #​5539: Include exec plugin stderr with wrapped error
• #​5542: fix: improve accumulation failure message
• #​5550: use Strict unmarshal when read TransformerConfig

Bug fixes/performance improvements

#​5234: fix edit set image to parse both tag and digest
#​5621: Use require for Error and NoError

Dependencies

#​5479: Revert "Switch to json-patch v5"
#​5541: Use canonical json-patch v4 import
#​5615: update dependencies google.golang.org/protobuf@​v1.33.0

update internal Dependencies

#​5639: Update kyaml to v0.17.0
#​5640: Update cmd/config to v0.14.0
#​5641: Update api to v0.17.0

cleanup Dependencies

#​5044: Remove non-essential dependency imdario/mergo
#​5567: fix 'golang.org/x/exp/slices' dependencies
#​5627: Remove klog/v1 dependencies

chore

#​5495: chore: move removetest.go to the internal package
#​5518: Update owners file
#​5622: Pin tool versions with hack/go.mod

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 20 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22 -> 1.22.7
github.com/go-logr/logr	v1.4.1 -> v1.4.2
github.com/stretchr/testify	v1.8.4 -> v1.10.0
k8s.io/utils	v0.0.0-20231127182322-b307cd553661 -> v0.0.0-20240711033017-18e509b52bc8
github.com/go-openapi/jsonpointer	v0.20.1 -> v0.21.0
github.com/go-openapi/swag	v0.22.5 -> v0.23.0
github.com/google/gnostic-models	v0.6.8 -> v0.6.9
github.com/spf13/pflag	v1.0.5 -> v1.0.6
golang.org/x/crypto	v0.19.0 -> v0.26.0
golang.org/x/sys	v0.17.0 -> v0.29.0
golang.org/x/term	v0.17.0 -> v0.23.0
golang.org/x/text	v0.14.0 -> v0.21.0
golang.org/x/tools	v0.16.1 -> v0.24.0
google.golang.org/protobuf	v1.31.0 -> v1.36.1
k8s.io/klog/v2	v2.110.1 -> v2.130.1
k8s.io/kube-openapi	v0.0.0-20231214164306-ab13479f8bf8 -> v0.0.0-20241212222426-2c72e554b1e7
sigs.k8s.io/kustomize/api	v0.16.0 -> v0.20.1
sigs.k8s.io/kustomize/cmd/config	v0.13.0 -> v0.20.1
sigs.k8s.io/kustomize/kyaml	v0.16.0 -> v0.20.1
sigs.k8s.io/structured-merge-diff/v4	v4.4.1 -> v4.4.2
sigs.k8s.io/yaml	v1.4.0 -> v1.5.0

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module sigs.k8s.io/kustomize/kustomize/[email protected] requires go >= 1.24.0; switching to go1.24.11
go: downloading go1.24.11 (linux/amd64)
go: download go1.24.11: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off