Update gardener to v1.140.1 (minor) by gardener-ci-robot · Pull Request #33 · gardener/gardener-extension-shoot-traefik

gardener-ci-robot · 2026-04-13T16:00:10Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener	`v1.135.4` → `v1.140.1`
github.com/gardener/gardener	`v1.138.2` → `v1.140.1`
github.com/gardener/gardener/pkg/apis	`v1.139.2` → `v1.140.1`

Release Notes

gardener/gardener (github.com/gardener/gardener)

`v1.140.1`

Compare Source

[github.com/gardener/gardener:v1.140.1]

🐛 Bug Fixes

[DEPENDENCY] The golangci-lint makefile install recipe can be used in Gardener extensions again. by @timebertt [#14564]

🏃 Others

[DEPENDENCY] The following dependencies have been updated:
- gardener/etcd-druid from v0.36.1 to v0.36.2. Release Notes
- github.com/gardener/etcd-druid/api from v0.36.1 to v0.36.2. by @gardener-ci-robot [#14581]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.140.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.140.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.140.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.140.1

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.140.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.140.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.140.1
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.140.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.140.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.140.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.140.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.140.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.140.1

`v1.140.0`

Compare Source

[github.com/gardener/gardener:v1.140.0]

⚠️ Breaking Changes

[OPERATOR] The UseUnifiedHTTPProxyPort feature gate has been promoted to Beta and is enabled by default. If using the Gardener ACL Extension you need make sure that at least version v1.15.0 is installed and all Shoots are reconciled before the upgrade. by @jamand [#14422]
[DEVELOPER] The generate-admin-kubeconf.sh script has been renamed to generate-kubeconfig.sh. It now supports generating both admin (default) and viewer kubeconfigs. by @timuthy [#14464]
[DEVELOPER] The gardenadm machine pods have their state persisted in a unified PVC. Existing local gardenadm setups need to be recreated. To reset a local machine pod, delete both the pod and its corresponding PVC. by @LucaBernstein [#14359]
[DEVELOPER] GEN_CRD_API_REFERENCE_DOCS make command has been replaced with CRD_REF_DOCS. by @acumino [#14324]
[DEPENDENCY] The pkg/utils/time package is now removed. Use k8s.io/utils/clock.Clock instead. by @shafeeqes [#14515]

📰 Noteworthy

[OPERATOR] The SeedAuthorizer now enforces field/label selectors for gardenlet list/watch requests on ControllerInstallation, Bastion, Gardenlet, Seed, Shoot, and ManagedSeed resources, restricting each gardenlet to only observe resources belonging to its own seed. by @rfranzke [#14452]
[OPERATOR] The gardener-resource-manager's NetworkPolicy controller now only creates policies in namespaces that have pods with matching to-* labels, significantly reducing the number of NetworkPolicy objects on seeds. by @rfranzke [#14410]
[OPERATOR] RemoveVali FeatureGate has been introduced. When enabled, every Vali instance will be removed. This feature gate is available for both the gardenlet and the gardener-operator. by @rrhubenov [#14279]
[DEVELOPER] The sast and sast-report checks have been removed from verify and verify-extended make targets. Please call them explicitly when required. by @oliver-goetz [#14443]

✨ New Features

[OPERATOR] The Project API now has a .status.conditions field for allowing controllers to report conditions on Project objects. by @jamand [#14403]
[DEVELOPER] The local setup has been augmented to make the self-hosted shoot's API server directly accessible from the host machine without kubectl port-forward. A new unified hack/usage/generate-admin-kubeconfig-local.sh script supports generating kubeconfigs for both the virtual garden and the self-hosted shoot. by @rfranzke [#14370]

🐛 Bug Fixes

[OPERATOR] The formatting of event-logger logs when the OpenTelemetryCollector feature gate is enabled is now partially fixed. The event-logger logs are now properly structured with fields as attributes, but to make them searchable with the unpack feature a change in the fluent-bit output plugin is required. by @iypetrov [#14423]
[OPERATOR] The gardenlet reconciler in the gardener-operator now uses the virtual cluster client to fetch the pull secret and CA bundle secret. It was wrongly using the runtime cluster client earlier. by @shafeeqes [#14331]
[OPERATOR] Fix a bug where the shoot-care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and updated DNS credentials, i.e. shoot.spec.dns.providers[].credentialsRef, until the shoot is reconciled. by @vpnachev [#14397]
[USER] Fixed EveryNodeReady shoot condition incorrectly reporting NodeAgentUnhealthy for nodes not managed by MCM. by @acumino [#14509]
[DEVELOPER] Pull secrets in the remote setup are labeled correctly to be automatically propagated by @matthias-horne [#14502]
[DEPENDENCY] Extension shoot webhook configs are now always produced even when mergeShootWebhooksIntoSeedWebhooks is true, so that a self-hosted Shoot promoted to a Seed has the correct shoot webhooks registered. by @rfranzke [#14389]

🏃 Others

[OPERATOR] Fix KubePodNotReadyControlPlane alert to not trigger for pods in Completed state. by @adenitiu [#14404]
[OPERATOR] Create pull secret in garden namespace of virtual garden for remote setup. by @DockToFuture [#14449]
[OPERATOR] Introduce seed reconciliation alerts. by @adenitiu [#14441]
[OPERATOR] Enable notification flexibility of EtcdDbSizeLimitApproaching and EtcdDbSizeLimitCrossed alert for seeds by @adenitiu [#14384]
[OPERATOR] The following dependencies have been updated:
- gardener/autoscaler from v1.34.0 to v1.34.1. Release Notes
- gardener/autoscaler from v1.33.0 to v1.33.1. Release Notes
- gardener/autoscaler from v1.32.2 to v1.32.3. Release Notes
- gardener/autoscaler from v1.31.0 to v1.31.1. Release Notes
- gardener/autoscaler from v1.30.2 to v1.30.3. Release Notes by @aaronfern [#14479]
[OPERATOR] There is now maxConnectionDuration of 1 day for connections to kube-apiserver endpoints. Their maxConnections limit has been removed. by @oliver-goetz [#14463]
[DEVELOPER] The default shoot for test machinery tests was adjusted to work with Kubernetes 1.35. by @timuthy [#14439]
[DEVELOPER] In the remote setup Kyverno now always adds imagePullSecret for images in the remote registry. by @matthias-horne [#14478]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/autoscaling/vpa-admission-controller from 1.5.1 to 1.6.0.
- registry.k8s.io/autoscaling/vpa-recommender from 1.5.1 to 1.6.0.
- registry.k8s.io/autoscaling/vpa-updater from 1.5.1 to 1.6.0. by @gardener-ci-robot [#14036]
[DEPENDENCY] The following dependencies have been updated:
- gardener/machine-controller-manager from v0.61.2 to v0.61.3. Release Notes
- github.com/gardener/machine-controller-manager from v0.61.2 to v0.61.3. by @gardener-ci-robot [#14453]
[DEPENDENCY] Istio charts and images are updated to v1.29.1 by @axel7born [#14454]
[DEPENDENCY] The following dependencies have been updated:
- gardener/gardener-metrics-exporter from 0.43.0 to 0.44.0. Release Notes by @gardener-ci-robot [#14486]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 2.5.0 to 2.5.5. by @gardener-ci-robot [#14480]
[DEPENDENCY] The following dependencies have been updated:
- gardener/coredns-config-adapter from v0.4.0 to v0.5.0. Release Notes by @DockToFuture [#14490]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.140.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.140.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.140.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.140.0

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.140.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.140.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.140.0
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.140.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.140.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.140.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.140.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.140.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.140.0

`v1.139.2`

Compare Source

[github.com/gardener/gardener:v1.139.2]

🐛 Bug Fixes

[DEPENDENCY] The golangci-lint makefile install recipe can be used in Gardener extensions again. by @timebertt [#14565]

🏃 Others

[DEPENDENCY] The following dependencies have been updated:
- gardener/etcd-druid from v0.36.1 to v0.36.2. Release Notes
- github.com/gardener/etcd-druid/api from v0.36.1 to v0.36.2. by @gardener-ci-robot [#14584]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.139.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.139.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.139.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.139.2

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.139.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.139.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.139.2
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.139.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.139.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.139.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.139.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.139.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.139.2

`v1.139.1`

Compare Source

[github.com/gardener/gardener:v1.139.1]

🐛 Bug Fixes

[OPERATOR] Fix a bug where the shoot-care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and updated DNS credentials, i.e. shoot.spec.dns.providers[].credentialsRef, until the shoot is reconciled. by @vpnachev [#14444]

🏃 Others

[OPERATOR] There is now maxConnectionDuration of 1 day for connections to kube-apiserver endpoints. Their maxConnections limit has been removed. by @oliver-goetz [#14471]
[OPERATOR] The following dependencies have been updated:
- gardener/autoscaler from v1.34.0 to v1.34.1. Release Notes
- gardener/autoscaler from v1.33.0 to v1.33.1. Release Notes
- gardener/autoscaler from v1.32.2 to v1.32.3. Release Notes
- gardener/autoscaler from v1.31.0 to v1.31.1. Release Notes
- gardener/autoscaler from v1.30.2 to v1.30.3. Release Notes by @aaronfern [#14500]
[DEPENDENCY] The following dependencies have been updated:
- gardener/machine-controller-manager from v0.61.2 to v0.61.3. Release Notes
- github.com/gardener/machine-controller-manager from v0.61.2 to v0.61.3. by @gardener-ci-robot [#14485]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.139.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.139.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.139.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.139.1

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.139.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.139.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.139.1
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.139.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.139.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.139.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.139.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.139.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.139.1

`v1.139.0`

Compare Source

[github.com/gardener/gardener:v1.139.0]

⚠️ Breaking Changes

[OPERATOR] The type of the Gardenlet's configuration field .controllers.tokenRequestorWorkloadIdentity.tokenExpirationDuration has been changed from time.Duration to k8s.io/apimachinery/pkg/apis/meta/v1.Duration. by @vpnachev [#14333]
[OPERATOR] Garden .status.encryptedResources field is removed, use Garden .status.credentials.encryptionAtRest.resources instead. by @iypetrov [#14354]
[OPERATOR] The raise-spec-limits verb has been removed for NamespacedCloudProfiles because it is no-longer needed. by @mimiteto [#14344]
[USER] ⚠️ The Shoot field .spec.dns.providers[].secretName has been forbidden for clusters running on Kubernetes version v1.35.0 or higher. Please, use .spec.dns.providers[].credentialsRef instead. by @vpnachev [#14309]
[USER] Shoot .status.encryptedResources field is removed, use Shoot .status.credentials.encryptionAtRest.resources instead. by @iypetrov [#14354]
[DEVELOPER] ⚠️ A default reconciliation timeout of 3 minutes has been set for the extension controllers:
- github.com/gardener/gardener/extensions/pkg/controller/backupbucket
- github.com/gardener/gardener/extensions/pkg/controller/backupentry
- github.com/gardener/gardener/extensions/pkg/controller/containerruntime
- github.com/gardener/gardener/extensions/pkg/controller/controlplane
- github.com/gardener/gardener/extensions/pkg/controller/dnsrecord
- github.com/gardener/gardener/extensions/pkg/controller/extension
- github.com/gardener/gardener/extensions/pkg/controller/healthcheck
- github.com/gardener/gardener/extensions/pkg/controller/heartbeat
- github.com/gardener/gardener/extensions/pkg/controller/network
- github.com/gardener/gardener/extensions/pkg/controller/operatingsystemconfig
  A default reconciliation timeout of 20 minutes has been set for the extension controllers:
- github.com/gardener/gardener/extensions/pkg/controller/bastion
- github.com/gardener/gardener/extensions/pkg/controller/infrastructure
- github.com/gardener/gardener/extensions/pkg/controller/worker
  Extension developers can define own reconciliation timeout via the sigs.k8s.io/controller-runtime/pkg/controller.Options provided to the respective controller. by @vpnachev [#14105]
[DEVELOPER] ⚠️ The deprecated Seed field secretRef in spec.dns.provider has been removed, use credentialsRef instead. by @vpnachev [#14308]

📰 Noteworthy

[OPERATOR] AdminKubeconfigRequest now uses the static username prefix gardener.cloud:admin:, and ViewerKubeconfigRequest uses gardener.cloud:viewer: to generate the username for the resulting kubeconfig. Previously, this prefix was randomized." by @timuthy [#14252]
[DEVELOPER] gardenadm bootstrap etcd version is updated from v3.4.34 to v3.5.27. by @LucaBernstein [#14352]
[DEPENDENCY] During the Shoot reconciliation, control plane and extension readiness is waited for before further system components are reconciled. by @LucaBernstein [#14338]

✨ New Features

[OPERATOR] Deletion of the Garden CRD installed via the gardener-operator Helm chart is now prevented unless annotated with confirmation.gardener.cloud/deletion=true by @maboehm [#14373]
[OPERATOR] A new spec.settings.zoneSelection field on Seed resources allows operators to configure whether the control plane namespace of non-HA Shoots (or those with failure tolerance type node) is placed in the same availability zone as the shoot's worker nodes (Prefer) or strictly required to match (Enforce). by @rfranzke [#14238]
[OPERATOR] The istio-ingressgateway now uses a dual autoscaling approach with both VPA (VerticalPodAutoscaler) and HPA (HorizontalPodAutoscaler) working together without causing pod-thrashing. by @oliver-goetz [#14313]
[OPERATOR] The Gardener Dashboard RBAC now allows listing and watching ManagedSeeds to support newer dashboard functionality around ManagedSeed-related Shoot information. by @petersutter [#14321]
[DEVELOPER] gardener-node-agent can now resolve .spec.files[].content.secretRef from Secrets in kube-system, enabling OperatingSystemConfig files to reference secrets instead of requiring inlined content. by @rfranzke [#14319]

🐛 Bug Fixes

[OPERATOR] A bug causing the nil pointer panic in gardenlet config validation when staleExtensionHealthChecks.threshold is nil is fixed. by @acumino [#14317]
[OPERATOR] An issue preventing the shootstate-controller of gardenlet to populate all required states to the ShootState for a self-hosted Shoot is now fixed. by @ialidzhikov [#14339]
[OPERATOR] An issue causing gardener-operator to fail to create resource events in API group events.k8s.io is now fixed. by @shafeeqes [#14327]
[OPERATOR] A bug causing the gardenlet to crash during startup was fixed. Earlier, the startup procedure occasionally failed on large-scale seed clusters due to cache sync timeouts. by @timuthy [#14408]
[DEVELOPER] The nodePort auto-remediation in the local setup service controller no longer incorrectly targets ClusterIP services. by @rfranzke [#14390]

🏃 Others

[OPERATOR] The .spec.trafficDistribution field of the topology-aware etcd-{events,main}-client Services will be automatically switched from the deprecated PreferClose to the new PreferSameZone option for Kubernetes 1.34+. by @ialidzhikov [#14278]
[OPERATOR] The following dependencies have been updated:
- gardener/etcd-druid from v0.35.1 to v0.36.1. Release Notes
- github.com/gardener/etcd-druid/api from v0.35.1 to v0.36.1. by @Shreyas-s14 [#14341]
[OPERATOR] Status updates for Shoot resources during reconciliation are now minimized when the associated Seed is not ready. Previously, this could lead to excessive growth of the gardener's etcd key space. by @timuthy [#14377]
[OPERATOR] Opentelemetry collector migration implemented in gardener - v1.136.0 is no longer needed. by @nickytd [#14138]
[OPERATOR] During the restore phase of control plane migration, Machines and MachineSets are now deployed in parallel across 10 go routines. Additionally, the restoration logic now checks if a Machine or MachineSet already exists, and if that is the case, it does not attempt to create it. This should speed up the restoration of the Worker resource. by @plkokanov [#14219]
[OPERATOR] Now victorialogs streams follow opentelemetry semantic convention fields. by @nickytd [#14381]
[OPERATOR] victoria-logs pods are now labeled according oidc-apps semantic. by @nickytd [#14325]
[OPERATOR] Unused bootstrap secrets from the gardener-resource-manager are cleaned up properly. Earlier, the shoot reconciliation left a considerable amount of unused secrets in the control-plane, if the GRM bootstrap procedure was stuck. by @timuthy [#14343]
[OPERATOR] Fix Istio Gateway metric retention and reenable metric scraping. by @Bobi-Wan [#14337]
[OPERATOR] apiserver-proxy connection for shoots with legacy single-dash namespace format has been fixed. by @axel7born [#14406]
[OPERATOR] Timeout for credentials renewal during rotation of Garden secrets was increased to 10 minutes. by @dimityrmirchev [#14433]
[OPERATOR] The v1alpha1 perses CRDs are deleted and replaced with v1alpha2 versions during reconciliation. by @rickardsjp [#14264]
[USER] VPN Dashboard now displays the pod name in the legend for the VPN Shoot Network I/O panel by @domdom82 [#14393]
[DEVELOPER] The remote local setup has been updated to the latest changes in Gardener. by @vicwicker [#14289]
[DEVELOPER] Added hack/generate-renovate-ignore-deps.sh to generate the renovate ignoreDeps section from the intersection of a downstream repo's go.mod and gardener/gardener's go.mod. Downstream repos can now remove their local copies and call the script from $GARDENER_HACK_DIR. by @LucaBernstein [#14425]
[DEVELOPER] Remote setup garden template has been updated with gardenerDiscoveryServer configuration by @domdom82 [#14306]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.15.0 to v1.15.1. by @gardener-ci-robot [#14363]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.14.3 to v1.15.0. by @gardener-ci-robot [#14267]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/coredns/coredns from v1.14.1 to v1.14.2. by @gardener-ci-robot [#14290]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.83.8 to 1.83.9. Release Notes by @gardener-ci-robot [#14312]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/brancz/kube-rbac-proxy from v0.21.0 to v0.21.1. by @gardener-ci-robot [#14332]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.83.9 to 1.83.10. Release Notes by @gardener-ci-robot [#14380]
[DEPENDENCY] The following dependencies have been updated:
- europe-docker.pkg.dev/gardener-project/releases/gardener/fluent-bit-plugin from v1.2.0 to v1.4.0. by @nickytd [#14357]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/brancz/kube-rbac-proxy from v0.21.1 to v0.21.2. by @gardener-ci-robot [#14382]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.14.4 to v1.14.5. by @gardener-ci-robot [#14362]
[DEPENDENCY] The following dependencies have been updated:
- gardener/vpn2 from 0.47.0 to 0.48.0. Release Notes by @gardener-ci-robot [#14374]
[DEPENDENCY] The following dependencies have been updated:
- perses/perses from v0.53.0 to v0.53.1. Release Notes by @gardener-ci-robot [#14307]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.83.10 to 1.83.11. Release Notes by @gardener-ci-robot [#14438]
[DEPENDENCY] The following dependencies have been updated:
- gcr.io/istio-release/pilot from 1.27.7 to 1.27.8.
- gcr.io/istio-release/proxyv2 from 1.27.7 to 1.27.8.
- istio.io/api from v1.27.7 to v1.27.8. by @gardener-ci-robot [#14280]

📖 Documentation

[DEPENDENCY] Extension admission components deployed via gardener-operator should set the --webhook-config-owner-namespace flag to prevent ValidatingWebhookConfiguration resources from leaking in the virtual garden cluster upon uninstall. by @theoddora [#14360]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.139.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.139.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.139.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.139.0

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.139.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.139.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.139.0
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.139.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.139.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.139.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.139.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.139.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.139.0

`v1.138.2`

Compare Source

[github.com/gardener/gardener:v1.138.2]

🐛 Bug Fixes

[OPERATOR] Fix a bug where the shoot-care controller cannot reconcile shoots with spec.maintenance.confineSpecUpdateRollout=true and updated DNS credentials, i.e. shoot.spec.dns.providers[].credentialsRef, until the shoot is reconciled. by @vpnachev [#14446]

🏃 Others

[OPERATOR] The following dependencies have been updated:
- gardener/autoscaler from v1.34.0 to v1.34.1. Release Notes
- gardener/autoscaler from v1.33.0 to v1.33.1. Release Notes
- gardener/autoscaler from v1.32.2 to v1.32.3. Release Notes
- gardener/autoscaler from v1.31.0 to v1.31.1. Release Notes
- gardener/autoscaler from v1.30.2 to v1.30.3. Release Notes by @aaronfern [#14499]
[OPERATOR] There is now maxConnectionDuration of 1 day for connections to kube-apiserver endpoints. Their maxConnections limit has been removed. by @oliver-goetz [#14470]
[DEPENDENCY] The following dependencies have been updated:
- gardener/machine-controller-manager from v0.61.2 to v0.61.3. Release Notes
- github.com/gardener/machine-controller-manager from v0.61.2 to v0.61.3. by @gardener-ci-robot [#14489]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.138.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.138.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.138.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.138.2

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.138.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.138.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.138.2
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.138.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.138.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.138.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.138.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.138.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.138.2

`v1.138.1`

Compare Source

[github.com/gardener/gardener:v1.138.1]

🐛 Bug Fixes

[OPERATOR] A bug causing the gardenlet to crash during startup was fixed. Earlier, the startup procedure occasionally failed on large-scale seed clusters due to cache sync timeouts. by @timuthy [#14416]
[OPERATOR] An issue causing gardener-operator to fail to create resource events in API group events.k8s.io is now fixed. by @shafeeqes [#14356]

🏃 Others

[OPERATOR] Timeout for credentials renewal during rotation of Garden secrets was increased to 10 minutes. by @dimityrmirchev [#14432]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/ingress-nginx/controller-chroot from v1.14.3 to v1.14.5. by @oliver-goetz [#14398]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.83.10 to 1.83.11. Release Notes by @gardener-ci-robot [#14437]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.83.8 to 1.83.10. Release Notes by @oliver-goetz [#14386]

Helm Charts

controlplane: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.138.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.138.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.138.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.138.1

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.138.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.138.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.138.1
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.138.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.138.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.138.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.138.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.138.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.138.1

`v1.138.0`

Compare Source

[github.com/gardener/gardener:v1.138.0]

⚠️ Breaking Changes

[DEVELOPER] provider-extensions setup has been replaced by remote setup which is gardener-operator based. by @oliver-goetz [#13994]
[DEVELOPER] Makefile target make check-vulnerabilities and GO_VULN_CHECK has been removed. by @acumino [#14143]
[DEVELOPER] The local setup no longer requires manipulating the /etc/hosts file manually. Instead, a bind9 hosts the local.gardener.cloud DNS zone (accessible via 172.18.255.53 or fd00:ff::53).

Manual actions:
- Cleanup your /etc/hosts file by removing all entries for local.gardener.cloud
- If you are neither using macOS nor systemd-resolved you must manually configure the resolution of the local.gardener.cloud DNS zone via the local bind9 server. by @timebertt [#14062]
[DEVELOPER] The kubeconfig of the runtime cluster in local setup was moved from ./example/gardener-local/kind/multi-zone/kubeconfig to ./dev-setup/kubeconfigs/runtime/kubeconfig. by @oliver-goetz [#13994]

📰 Noteworthy

[OPERATOR] Garden.spec.virtualCluster.gardener.gardenerDiscoveryServer now accepts optional domain and tlsSecretName fields. Operators can use these to expose the OIDC discovery endpoint under a custom domain and optionally with a non-wildcard certificate. Additionally, validation now prevents disabling the discovery server once it is enabled, protecting already-issued tokens. The default behaviour is unchanged. by @jamand [#14126]
[OPERATOR] prometheus-garden aggregates volume usage metrics from all seeds by @Kostov6 [#13818]
[OPERATOR] Hard limits on nodelocaldns node cache have been removed. by @domdom82 [#14200]
[OPERATOR] Hard memory limit on istio-ingress has been removed. Memory is managed by VPA in all cases now. by @domdom82 [#14197]
[OPERATOR] The VPAInPlaceUpdates feature gate has been promoted to Beta and is enabled by default. by @vitanovs [#14145]

✨ New Features

[USER] gardenadm init/join now supports --zone / -z flag to specify the node's availability zone. by @acumino [#14081]
[DEVELOPER] Added optional DisplayName field to ShootAdvertisedAddress allowing UI friendly names for advertised endpoints via the endpoint.shoot.gardener.cloud/displayName Ingress label. by @nickytd [#14140]
[DEVELOPER] gardener-node-agent can optionally coordinate OperatingSystemConfig reconciliation amongst other instances. This is helpful if you want to ensure that only one instance reconciles at a time. Read all about it here. by @rfranzke [#14129]

🐛 Bug Fixes

[OPERATOR] Fixed a race condition in the ControllerInstallation reconciler that could create duplicate installations due to reading from a stale informer cache instead of the API server. by @rickardsjp [#14274]
[OPERATOR] Add a network policy label for allowing communication from the OpenTelemetryCollector in the control plane to the Shoot Kubernetes API Server. by @rrhubenov [#14196]
[OPERATOR] The per-worker-pool node-local-dns Daemonsets now also include the name of the worker in their label selector and in their Pods' labels. This resolves an issue where each of the corresponding VPAs targeted all node-cache containers from all of these Daemonsets resulting in incorrect resource recommendations. by @plkokanov [#14294]
[OPERATOR] An issues has been fixed causing gardener-resource-manager crash loops in large clusters. by @timuthy [#14212]
[USER] The machines of a deleted worker pool are able to join back cluster in healthy state. by @aniruddha2000 [#13715]
[DEVELOPER] The healthcheck controller now supports the seed extension class. by @hown3d [#14162]
[DEPENDENCY] Fixing an issue where CA scale-downs were getting stuck when MCD replicas was updated with stale cache value of worker-controller by @r4mek [#14291]

🏃 Others

[OPERATOR] The dependency-watchdog component no longer defines resource limits. by @ashwani2k [#14193]
[OPERATOR] Fluent-bit resource limits are increased. by @nickytd [#14205]
[OPERATOR] CoreDNS memory limit has been removed. by @domdom82 [#14163]
[OPERATOR] The following dependency has been updated:
- golang.org/x/net from v0.50.0 to v0.51.0. by @ScheererJ [#14234]
[OPERATOR] Fix CRD conversion webhook metric name by @chrkl [#14209]
[OPERATOR] Following logging stack components are updated fluent-bit to v4.2.3, fluent-bit-plugin to v1.2.0 and fluent-operator to v3.7.0 by @nickytd [#14256]
[OPERATOR] A regression in Gardener Node Agent that can occur on Debian based OS images and that prevents it to successfully reconcile nodes that run a containerd version that contains - according to semver - invalid characters in its version number was fixed. by @MrBatschner [#14177]
[OPERATOR] The UseUnifiedHTTPProxyPort (part of GEP-30) can be disabled without disruption to shoots already using the unified HTTP proxy port. by @maboehm [#14169]
[OPERATOR] Add startup probe to gardener-metrics-exporter by @chrkl [#14207]
[OPERATOR] Added nodeCIDRMaskSizeIPv6 field to KubeControllerManagerConfig to allow configuring the IPv6 node CIDR mask size (defaults to 64). This enables more flexible IPv6 network configurations in both dual-stack and IPv6-only clusters. by @axel7born [#13955]
[DEVELOPER] A new supported-kubernetes-versions.yaml file is introduced in the root of the project. It describes the supported Kubernetes versions by Gardener in a machine-readable format. A machinery can use this file to build automation for the supported Kubernetes versions in a CloudProfile. by @ialidzhikov [#14191]
[DEVELOPER] The RBAC for fluent-operator is allowing watching pods and namespaces resources, required by gardener-otelcol-extension scenario. by [@nickytd](https://redirect.github

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

gardener-ci-robot · 2026-04-13T16:00:14Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: internal/tools/go.sum

Command failed: go mod tidy
go: downloading k8s.io/code-generator v0.36.0-rc.1
go: downloading github.com/elastic/crd-ref-docs v0.3.0
go: downloading github.com/incu6us/goimports-reviser/v3 v3.12.6
go: downloading github.com/golangci/golangci-lint/v2 v2.11.4
go: downloading github.com/mikefarah/yq/v4 v4.52.5
go: downloading github.com/yannh/kubeconform v0.7.0
go: downloading golang.org/x/vuln v1.2.0
go: downloading sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20260405152528-6210f847b2c1
go: downloading sigs.k8s.io/kustomize/kustomize/v5 v5.8.1
go: downloading github.com/google/addlicense v1.2.0
go: downloading helm.sh/helm/v4 v4.1.4
go: downloading k8s.io/gengo/v2 v2.0.0-20251215205346-5ee0d033ba5b
go: downloading github.com/gardener/gardener/pkg/apis v0.0.0
go: downloading k8s.io/apimachinery v0.36.0-rc.1
go: downloading golang.org/x/mod v0.35.0
go: downloading golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa
go: downloading github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786
go: downloading golang.org/x/tools v0.44.0
go: downloading sigs.k8s.io/controller-tools v0.20.1
go: downloading golang.org/x/text v0.36.0
go: downloading gopkg.in/op/go-logging.v1 v1.0.0-20160211212156-b2cb9fa56473
go: downloading github.com/charmbracelet/lipgloss v1.1.0
go: downloading github.com/fatih/color v1.19.0
go: downloading github.com/gofrs/flock v0.13.0
go: downloading github.com/hashicorp/go-version v1.8.0
go: downloading github.com/ldez/grignotin v0.10.1
go: downloading github.com/pelletier/go-toml/v2 v2.2.4
go: downloading github.com/spf13/viper v1.21.0
go: downloading golang.org/x/sys v0.43.0
go: downloading sigs.k8s.io/kustomize/api v0.21.1
go: downloading sigs.k8s.io/kustomize/cmd/config v0.21.1
go: downloading sigs.k8s.io/kustomize/kyaml v0.21.1
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/gosuri/uitable v0.0.4
go: downloading github.com/moby/term v0.5.2
go: downloading golang.org/x/term v0.42.0
go: downloading k8s.io/kubectl v0.35.1
go: downloading github.com/mattn/go-shellwords v1.0.12
go: downloading github.com/fluxcd/cli-utils v0.37.2-flux.1
go: downloading k8s.io/cli-runtime v0.35.3
go: downloading golang.org/x/crypto v0.50.0
go: downloading github.com/google/renameio v0.1.0
go: downloading github.com/gobuffalo/flect v1.0.3
go: downloading golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated
go: downloading github.com/a8m/envsubst v1.4.3
go: downloading github.com/alecthomas/participle/v2 v2.1.4
go: downloading github.com/dimchansky/utfbom v1.1.1
go: downloading github.com/elliotchance/orderedmap v1.8.0
go: downloading github.com/go-ini/ini v1.67.0
go: downloading github.com/goccy/go-json v0.10.5
go: downloading github.com/hashicorp/hcl/v2 v2.24.0
go: downloading github.com/jinzhu/copier v0.4.0
go: downloading github.com/magiconair/properties v1.8.10
go: downloading github.com/yuin/gopher-lua v1.1.1
go: downloading github.com/zclconf/go-cty v1.18.0
go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.3
go: downloading golang.org/x/net v0.53.0
go: downloading github.com/alecthomas/repr v0.5.2
go: downloading github.com/charmbracelet/x/ansi v0.10.1
go: downloading github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
go: downloading github.com/muesli/termenv v0.16.0
go: downloading github.com/rivo/uniseg v0.4.7
go: downloading github.com/mitchellh/go-homedir v1.1.0
go: downloading github.com/alecthomas/chroma/v2 v2.23.1
go: downloading github.com/golangci/plugin-module-register v0.1.2
go: downloading github.com/go-xmlfmt/xmlfmt v1.1.3
go: downloading github.com/golangci/revgrep v0.8.0
go: downloading github.com/dlclark/regexp2 v1.11.5
go: downloading github.com/sagikazarmark/locafero v0.11.0
go: downloading github.com/hashicorp/go-retryablehttp v0.7.7
go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.7
go: downloading github.com/creack/pty v1.1.18
go: downloading github.com/ProtonMail/go-crypto v1.3.0
go: downloading github.com/extism/go-sdk v1.7.1
go: downloading github.com/tetratelabs/wazero v1.11.0
go: downloading github.com/Masterminds/vcs v1.13.3
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading oras.land/oras-go/v2 v2.6.0
go: downloading github.com/distribution/distribution/v3 v3.1.0
go: downloading github.com/foxcpp/go-mockdns v1.2.0
go: downloading github.com/Masterminds/squirrel v1.5.4
go: downloading github.com/jmoiron/sqlx v1.4.0
go: downloading github.com/lib/pq v1.11.2
go: downloading github.com/rubenv/sql-migrate v1.8.1
go: downloading github.com/DATA-DOG/go-sqlmock v1.5.2
go: downloading github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de
go: downloading github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f
go: downloading golang.org/x/tools/go/expect v0.1.1-deprecated
go: downloading github.com/alecthomas/assert/v2 v2.11.0
go: downloading github.com/agext/levenshtein v1.2.1
go: downloading github.com/apparentlymart/go-textseg/v15 v15.0.0
go: downloading github.com/mitchellh/go-wordwrap v1.0.1
go: downloading github.com/go-test/deep v1.1.0
go: downloading github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940
go: downloading github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e
go: downloading github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
go: downloading github.com/charmbracelet/x/term v0.2.1
go: downloading github.com/mattn/go-runewidth v0.0.16
go: downloading github.com/lucasb-eyer/go-colorful v1.2.0
go: downloading github.com/aymanbagabas/go-osc52/v2 v2.0.1
go: downloading github.com/daixiang0/gci v0.13.7
go: downloading github.com/golangci/gofmt v0.0.0-20250106114630-d62b90e6713d
go: downloading mvdan.cc/gofumpt v0.9.2
go: downloading github.com/golangci/golines v0.15.0
go: downloading github.com/sourcegraph/go-diff v0.7.0
go: downloading github.com/golangci/swaggoswag v0.0.0-20250504205917-77f2aca3143e
go: downloading go.augendre.info/arangolint v0.4.0
go: downloading github.com/alingse/asasalint v0.0.11
go: downloading github.com/golangci/asciicheck v0.5.0
go: downloading github.com/breml/bidichk v0.3.3
go: downloading github.com/timakin/bodyclose v0.0.0-20241222091800-1db5c5ca4d67
go: downloading github.com/lasiar/canonicalheader v1.1.2
go: downloading github.com/sivchari/containedctx v1.0.3
go: downloading github.com/kkHAIKE/contextcheck v1.1.6
go: downloading github.com/karamaru-alpha/copyloopvar v1.2.2
go: downloading github.com/bkielbasa/cyclop v1.2.3
go: downloading gitlab.com/bosi/decorder v0.4.2
go: downloading github.com/OpenPeeDeeP/depguard/v2 v2.2.1
go: downloading github.com/golangci/dupl v0.0.0-20250308024227-f665c8d69b32
go: downloading github.com/Abirdcfly/dupword v0.1.7
go: downloading github.com/charithe/durationcheck v0.0.11
go: downloading github.com/manuelarte/embeddedstructfieldcheck v0.4.0
go: downloading github.com/Djarvur/go-err113 v0.1.1
go: downloading github.com/kisielk/errcheck v1.10.0
go: downloading github.com/breml/errchkjson v0.4.1
go: downloading github.com/Antonboom/errname v1.1.1
go: downloading codeberg.org/polyfloyd/go-errorlint v1.9.0
go: downloading github.com/nishanths/exhaustive v0.12.0
go: downloading dev.gaijin.team/go/exhaustruct/v4 v4.0.0
go: downloading github.com/ldez/exptostd v0.4.5
go: downloading go.augendre.info/fatcontext v0.9.0
go: downloading github.com/ashanbrown/forbidigo/v2 v2.3.0
go: downloading github.com/gostaticanalysis/forcetypeassert v0.2.0
go: downloading github.com/manuelarte/funcorder v0.5.0
go: downloading github.com/ultraware/funlen v0.2.0
go: downloading github.com/nunnatsa/ginkgolinter v0.23.0
go: downloading 4d63.com/gocheckcompilerdirectives v1.3.0
go: downloading 4d63.com/gochecknoglobals v0.2.2
go: downloading github.com/alecthomas/go-check-sumtype v0.3.1
go: downloading github.com/uudashr/gocognit v1.2.1
go: downloading github.com/jgautheron/goconst v1.8.2
go: downloading github.com/go-critic/go-critic v0.14.3
go: downloading github.com/quasilyte/go-ruleguard/dsl v0.3.23
go: downloading github.com/fzipp/gocyclo v0.6.0
go: downloading github.com/quasilyte/go-ruleguard v0.4.5
go: downloading github.com/godoc-lint/godoc-lint v0.11.2
go: downloading github.com/tetafro/godot v1.5.4
go: downloading github.com/matoous/godox v1.1.0
go: downloading github.com/denis-tingaikin/go-header v0.5.0
go: downloading github.com/ldez/gomoddirectives v0.8.0
go: downloading github.com/ryancurrah/gomodguard v1.4.1
go: downloading github.com/golangci/go-printf-func-name v0.1.1
go: downloading github.com/securego/gosec/v2 v2.24.8-0.20260309165252-619ce2117e08
go: downloading github.com/xen0n/gosmopolitan v1.3.0
go: downloading github.com/leonklingele/grouper v1.1.2
go: downloading github.com/uudashr/iface v1.4.1
go: downloading github.com/julz/importas v0.2.0
go: downloading github.com/macabu/inamedparam v0.2.0
go: downloading github.com/gordonklaus/ineffassign v0.2.0
go: downloading github.com/sashamelentyev/interfacebloat v1.1.0
go: downloading github.com/ckaznocha/intrange v0.3.1
go: downloading github.com/AdminBenni/iota-mixing v1.0.0
go: downloading github.com/butuzov/ireturn v0.4.0
go: downloading github.com/timonwong/loggercheck v0.11.0
go: downloading github.com/yagipy/maintidx v1.0.0
go: downloading github.com/ashanbrown/makezero/v2 v2.1.0
go: downloading github.com/butuzov/mirror v1.3.0
go: downloading github.com/golangci/misspell v0.8.0
go: downloading github.com/tommy-muehle/go-mnd/v2 v2.5.1
go: downloading go-simpler.org/musttag v0.14.0
go: downloading github.com/alexkohler/nakedret/v2 v2.0.6
go: downloading github.com/nakabonne/nestif v0.3.1
go: downloading github.com/gostaticanalysis/nilerr v0.1.2
go: downloading github.com/alingse/nilnesserr v0.2.0
go: downloading github.com/Antonboom/nilnil v1.1.1
go: downloading github.com/ssgreg/nlreturn/v2 v2.2.1
go: downloading github.com/sonatard/noctx v0.5.1
go: downloading github.com/AlwxSin/noinlineerr v1.0.5
go: downloading github.com/firefart/nonamedreturns v1.0.6
go: downloading github.com/stbenjam/no-sprintf-host-port v0.3.1
go: downloading github.com/kunwardeep/paralleltest v1.0.15
go: downloading github.com/catenacyber/perfsprint v0.10.1
go: downloading github.com/alexkohler/prealloc v1.1.0
go: downloading github.com/nishanths/predeclared v0.2.2
go: downloading github.com/yeya24/promlinter v0.3.0
go: downloading github.com/ghostiam/protogetter v0.3.20
go: downloading github.com/curioswitch/go-reassign v0.3.0
go: downloading github.com/raeperd/recvcheck v0.2.0
go: downloading github.com/mgechev/revive v1.15.0
go: downloading github.com/jingyugao/rowserrcheck v1.1.1
go: downloading go-simpler.org/sloglint v0.11.1
go: downloading github.com/jjti/go-spancheck v0.6.5
go: downloading github.com/ryanrolds/sqlclosecheck v0.6.0
go: downloading honnef.co/go/tools v0.7.0
go: downloading github.com/4meepo/tagalign v1.4.3
go: downloading github.com/maratori/testableexamples v1.0.1
go: downloading github.com/Antonboom/testifylint v1.6.4
go: downloading github.com/ldez/tagliatelle v0.7.2
go: downloading github.com/maratori/testpackage v1.1.2
go: downloading github.com/kulti/thelper v0.7.1
go: downloading github.com/moricho/tparallel v0.3.2
go: downloading github.com/golangci/unconvert v0.0.0-20250410112200-a129a6e6413e
go: downloading mvdan.cc/unparam v0.0.0-20251027182757-5beb8c8f8f15
go: downloading github.com/MirrexOne/unqueryvet v1.5.4
go: downloading github.com/sashamelentyev/usestdlibvars v1.29.0
go: downloading github.com/ldez/usetesting v0.5.0
go: downloading github.com/blizzy78/varnamelen v0.8.0
go: downloading github.com/sanposhiho/wastedassign/v2 v2.1.0
go: downloading github.com/ultraware/whitespace v0.2.0
go: downloading github.com/tomarrell/wrapcheck/v2 v2.12.0
go: downloading github.com/bombsimon/wsl/v4 v4.7.0
go: downloading github.com/bombsimon/wsl/v5 v5.6.0
go: downloading github.com/ykadowak/zerologlint v0.1.5
go: downloading github.com/stretchr/objx v0.5.2
go: downloading github.com/subosito/gotenv v1.6.0
go: downloading github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8
go: downloading github.com/go-errors/errors v1.5.1
go: downloading github.com/sergi/go-diff v1.4.0
go: downloading github.com/russross/blackfriday/v2 v2.1.0
go: downloading github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00
go: downloading github.com/xlab/treeprint v1.2.0
go: downloading github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a
go: downloading github.com/bshuster-repo/logrus-logstash-hook v1.1.0
go: downloading github.com/docker/go-metrics v0.0.1
go: downloading github.com/gorilla/handlers v1.5.2
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0
go: downloading github.com/go-sql-driver/mysql v1.8.1
go: downloading github.com/mattn/go-sqlite3 v1.14.22
go: downloading github.com/miekg/dns v1.1.72
go: downloading github.com/lann/builder v0.0.0-20180802200727-47ae307949d0
go: downloading github.com/go-gorp/gorp/v3 v3.1.0
go: downloading github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible
go: downloading github.com/chai2010/gettext-go v1.0.2
go: downloading github.com/MakeNowJust/heredoc v1.0.0
go: downloading github.com/nxadm/tail v1.4.8
go: downloading go.opentelemetry.io/otel/trace v1.42.0
go: downloading github.com/hexops/gotextdiff v1.0.3
go: downloading github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
go: downloading github.com/go-quicktest/qt v1.101.0
go: downloading go.opentelemetry.io/otel v1.42.0
go: downloading github.com/dave/dst v0.27.3
go: downloading github.com/gostaticanalysis/analysisutil v0.7.1
go: downloading github.com/gostaticanalysis/testutil v0.5.0
go: downloading github.com/go-toolsmith/astcast v1.1.0
go: downloading dev.gaijin.team/go/golib v0.6.0
go: downloading github.com/go-toolsmith/astcopy v1.1.0
go: downloading github.com/go-toolsmith/astequal v1.2.0
go: downloading github.com/go-toolsmith/astfmt v1.1.0
go: downloading github.com/go-toolsmith/astp v1.1.0
go: downloading github.com/go-toolsmith/strparse v1.1.0
go: downloading github.com/go-toolsmith/typep v1.1.0
go: downloading github.com/quasilyte/regex/syntax v0.0.0-20210819130434-b3f0c404a727
go: downloading github.com/ccojocar/zxcvbn-go v1.0.4
go: downloading go-simpler.org/assert v0.9.0
go: downloading github.com/gostaticanalysis/comment v1.5.0
go: downloading github.com/fatih/structtag v1.2.0
go: downloading github.com/ettle/strcase v0.2.0
go: downloading github.com/hashicorp/go-immutable-radix/v2 v2.1.0
go: downloading github.com/alfatraining/structtag v1.0.0
go: downloading github.com/matryer/is v1.4.0
go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
go: downloading github.com/cloudflare/circl v1.6.3
go: downloading github.com/gorilla/mux v1.8.1
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-events v0.0.0-20250808211157-605354379745
go: downloading github.com/redis/go-redis/extra/redisotel/v9 v9.0.5
go: downloading github.com/redis/go-redis/v9 v9.7.3
go: downloading go.opentelemetry.io/contrib/exporters/autoexport v0.67.0
go: downloading go.opentelemetry.io/otel/sdk v1.42.0
go: downloading github.com/ianlancetaylor/demangle v0.0.0-20240805132620-81f5be970eca
go: downloading github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.42.0
go: downloading filippo.io/edwards25519 v1.1.0
go: downloading github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0
go: downloading github.com/poy/onpar v1.1.2
go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
go: downloading google.golang.org/grpc v1.79.3
go: downloading sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.33.0
go: downloading github.com/ldez/structtags v0.6.1
go: downloading golang.org/x/exp/typeparams v0.0.0-20260209203927-2842357ff358
go: downloading github.com/quasilyte/gogrep v0.5.0
go: downloading github.com/quasilyte/stdinfo v0.0.0-20220114132959-f7386bf02567
go: downloading github.com/go-toolsmith/pkgload v1.2.2
go: downloading github.com/otiai10/copy v1.14.0
go: downloading github.com/tenntenn/modver v1.0.1
go: downloading github.com/tenntenn/text/transform v0.0.0-20200319021203-7eef512accb3
go: downloading codeberg.org/chavacava/garif v0.2.0
go: downloading github.com/hashicorp/golang-lru/v2 v2.0.7
go: downloading github.com/hashicorp/go-uuid v1.0.3
go: downloading github.com/docker/docker-credential-helpers v0.9.5
go: downloading github.com/hashicorp/golang-lru/arc/v2 v2.0.5
go: downloading github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5
go: downloading github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f
go: downloading go.opentelemetry.io/contrib/bridges/prometheus v0.67.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.42.0
go: downloading github.com/dave/jennifer v1.7.1
go: github.com/gardener/gardener/hack/tools/extension-generator imports
	github.com/gardener/gardener/pkg/apis/core/v1: reading github.com/gardener/gardener/pkg/apis/go.mod at revision pkg/apis/v0.0.0: unknown revision pkg/apis/v0.0.0
go: github.com/gardener/gardener/hack/tools/extension-generator imports
	github.com/gardener/gardener/pkg/apis/core/v1beta1: reading github.com/gardener/gardener/pkg/apis/go.mod at revision pkg/apis/v0.0.0: unknown revision pkg/apis/v0.0.0
go: github.com/gardener/gardener/hack/tools/extension-generator imports
	github.com/gardener/gardener/pkg/apis/extensions/v1alpha1: reading github.com/gardener/gardener/pkg/apis/go.mod at revision pkg/apis/v0.0.0: unknown revision pkg/apis/v0.0.0
go: github.com/gardener/gardener/hack/tools/extension-generator imports
	github.com/gardener/gardener/pkg/apis/operator/v1alpha1: reading github.com/gardener/gardener/pkg/apis/go.mod at revision pkg/apis/v0.0.0: unknown revision pkg/apis/v0.0.0

gardener-prow · 2026-04-13T16:00:17Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign domdom82 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

gardener-ci-robot · 2026-04-13T16:27:54Z

/label skip-review

gardener-ci-robot added the kind/enhancement Enhancement, improvement, extension label Apr 13, 2026

gardener-prow bot added cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Apr 13, 2026

gardener-ci-robot changed the title ~~Update gardener to v1.140.0 (minor)~~ Update module github.com/gardener/gardener to v1.140.0 Apr 13, 2026

gardener-prow bot added the skip-review Indicates a PR is trusted, used by tide for auto-merging PRs. label Apr 13, 2026

gardener-ci-robot changed the title ~~Update module github.com/gardener/gardener to v1.140.0~~ Update gardener to v1.140.0 (minor) Apr 13, 2026

gardener-ci-robot changed the title ~~Update gardener to v1.140.0 (minor)~~ Update module github.com/gardener/gardener to v1.140.0 Apr 14, 2026

gardener-ci-robot changed the title ~~Update module github.com/gardener/gardener to v1.140.0~~ Update gardener to v1.140.0 (minor) Apr 14, 2026

gardener-ci-robot changed the title ~~Update gardener to v1.140.0 (minor)~~ Update module github.com/gardener/gardener to v1.140.0 Apr 14, 2026

gardener-ci-robot changed the title ~~Update module github.com/gardener/gardener to v1.140.0~~ Update gardener to v1.140.0 (minor) Apr 14, 2026

gardener-ci-robot changed the title ~~Update gardener to v1.140.0 (minor)~~ Update module github.com/gardener/gardener to v1.140.0 Apr 14, 2026

gardener-ci-robot changed the title ~~Update module github.com/gardener/gardener to v1.140.0~~ Update gardener to v1.140.0 (minor) Apr 14, 2026

gardener-ci-robot changed the title ~~Update gardener to v1.140.0 (minor)~~ Update module github.com/gardener/gardener to v1.140.0 Apr 14, 2026

gardener-ci-robot changed the title ~~Update module github.com/gardener/gardener to v1.140.0~~ Update gardener to v1.140.0 (minor) Apr 14, 2026

gardener-ci-robot force-pushed the renovate/gardener branch from e03b7ee to f7ed133 Compare April 14, 2026 18:02

gardener-ci-robot changed the title ~~Update gardener to v1.140.0 (minor)~~ Update gardener to v1.140.1 (minor) Apr 14, 2026

gardener-ci-robot force-pushed the renovate/gardener branch from f7ed133 to 3040ec6 Compare April 14, 2026 18:40

gardener-ci-robot changed the title ~~Update gardener to v1.140.1 (minor)~~ Update module github.com/gardener/gardener to v1.140.1 Apr 14, 2026

gardener-ci-robot force-pushed the renovate/gardener branch from 3040ec6 to bce395b Compare April 14, 2026 19:59

gardener-ci-robot changed the title ~~Update module github.com/gardener/gardener to v1.140.1~~ Update gardener to v1.140.1 (minor) Apr 14, 2026