fix(deps): update kubernetes dependencies (minor) by renovate[bot] · Pull Request #1527 · kedacore/http-add-on

renovate · 2026-03-09T00:39:42Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cert-manager/cert-manager	`v1.19.6` → `v1.21.1`
k8s.io/api	`v0.34.10` → `v0.36.3`
k8s.io/apimachinery	`v0.34.10` → `v0.36.3`
k8s.io/apiserver	`v0.34.10` → `v0.36.3`
k8s.io/client-go	`v0.34.10` → `v0.36.3`
sigs.k8s.io/controller-runtime	`v0.22.5` → `v0.24.1`
sigs.k8s.io/controller-tools	`v0.19.0` → `v0.21.0`
sigs.k8s.io/e2e-framework	`v0.6.0` → `v0.7.0`

Release Notes

cert-manager/cert-manager (github.com/cert-manager/cert-manager)

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.20.2 fixes invalid YAML generated in the Helm chart when both webhook.config
and webhook.volumes are defined, and bumps Go to 1.26.2 along with dependencies
to address reported vulnerabilities.

Changes by Kind

Bug or Regression

Helm: Fix invalid YAML generated when both webhook.config and webhook.volumes are defined. (#8665, @cert-manager-bot)

Other (Cleanup or Flake)

Bump go dependencies with reported vulnerabilities (#8704, @erikgb)
Bump go to 1.26.2 (#8703, @erikgb)

`v1.20.1`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate parentRef bug when both issuer config and annotations are present (Gateway API).

Bug or Regression

Fixed duplicate parentRef bug when both issuer config and annotations are present. (#8658, @hjoshi123)
Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. (#8655, @erikgb)
Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. (#8657, @erikgb)

`v1.20.0`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.20.0 adds alpha support for the new ListenerSet resource, adds support for Azure Private DNS; parentRefs are no longer required when using ACME with Gateway API, and OtherNames was promoted to Beta.

Changes by Kind

Feature

Added a set of flags to permit setting NetworkPolicy across all deployed containers. Remove redundant global IP ranges from example policies. (#8370, @jcpunk)
Added selectable fields to custom resource definitions for .spec.issuerRef.{group, kind, name} (#8256, @tareksha)
Added support for specifying imagePullSecrets in the startupapicheck-job Helm template to enable pulling images from private registries. (#8186, @mathieu-clnk)
Added 'extraContainers' helm chart value, allowing the deployment of arbitrary sidecar containers within the cert-manager operator pod. This can be used to support, for e.g., AWS IAM Roles Anywhere for Route53 DNS01 verification. (#8355, @dancmeyers)
Added parentRef override annotations on the Certificate resource. (#8518, @hjoshi123)
Added support for azure private zones for dns01 issuer. (#8494, @hjoshi123)
Added support for configuring PEM decoding size limits, allowing operators to handle larger certificates and keys. (#7642, @robertlestak)
Added support for unhealthyPodEvictionPolicy in PodDisruptionBudget (#7728, @jcpunk)
For Venafi provider, read venafi.cert-manager.io/custom-fields annotation on Issuer/ClusterIssuer and use it as base with override/append capabilities on Certificate level. (#8301, @k0da)
Improve error message when CA issuers are misconfigured to use a clashing secret name (#8374, @majiayu000)
Introduce a new Ingress annotation acme.cert-manager.io/http01-ingress-ingressclassname to override http01.ingress.ingressClassName field in HTTP-01 challenge solvers. (#8244, @lunarwhite)
Update global.nodeSelector to helm chart to perform a merge and allow for a single nodeSelector to be set across all services. (#8195, @StingRayZA)
Vault issuers will now include the Vault server address as one of the default audiences on generated service account tokens. (#8228, @terinjokes)
Added experimental XListenerSets feature gate (#8394, @hjoshi123)

Documentation

Add GWAPI documentation to NOTES.TXT in helm chart (#8353, @jaxels10)

Bug or Regression

Adds logs for cases when acme server returns us a fatal error in the order controller (#8199, @Peac36)
Fixed an issue where kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed (#8160, @inteon)
Changes to the Duration and RenewBefore annotations on ingress and gateway-api resources will now trigger certificate updates. (#8232, @eleanor-merry)
Fix an issue where ACME challenge TXT records are not cleaned up when there are many resource records in CloudDNS. (#8456, @tkna)
Fix unregulated retries with the DigitalOcean DNS-01 solver
Add full detailed DNS-01 errors to the events attached to the Challenge, for easier debugging (#8221, @wallrj-cyberark)
Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. (#8403, @calm329)
Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. (#8424, @SlashNephy)
Fixed the HTTP-01 Gateway solver creating invalid HTTPRoutes by not setting spec.hostnames when the challenge DNSName is an IP address. (#8443, @alviss7)
Revert API defaults for issuer reference kind and group introduced in 0.19.0 (#8173, @erikgb)
Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. (#8469, @SgtCoDFish)
Update Go to v1.25.5 to fix CVE-2025-61727 and CVE-2025-61729 (#8290, @octo-sts[bot])
When Prometheus monitoring is enabled, the metrics label is now set to the intended value of cert-manager. Previously, it was set depending on various factors (namespace cert-manager is installed in and/or Helm release name). (#8162, @LiquidPL)

Other (Cleanup or Flake)

Promoted the OtherNames feature to Beta and enabled it by default (#8288, @wallrj-cyberark)
Promoting XListenerSets feature gate to ListenerSets (#8501, @hjoshi123)
Rebranding of the Venafi Issuer to CyberArk (#8215, @iossifbenbassat123)
Switched to SSA for challenge finalizer updates (#8519, @inteon)
The default container user (UID) is now 65532 (previously 1000) and the default container group (GID) is now 65532 (previously 0) (#8408, @wallrj-cyberark)
The feature-gate DefaultPrivateKeyRotationPolicyAlways moved from Beta to GA and can no longer be disabled. (#8287, @wallrj-cyberark)
Update cert-manager's ACME client, forked from golang/x/crypto (#8268, @SgtCoDFish)
Use the latest version of Kyverno (1.16.2) in the best-practice installation tests (#8389, @wallrj-cyberark)
We stopped testing with Coutour due to it not supporting the new XListenerSet resource, and moved to kgateway. (#8426, @hjoshi123)

kubernetes/api (k8s.io/api)

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.7`

Compare Source

`v0.35.6`

Compare Source

`v0.35.5`

Compare Source

`v0.35.4`

Compare Source

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

`v0.35.0`

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.7`

Compare Source

`v0.35.6`

Compare Source

`v0.35.5`

Compare Source

`v0.35.4`

Compare Source

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

`v0.35.0`

Compare Source

kubernetes/apiserver (k8s.io/apiserver)

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.7`

Compare Source

`v0.35.6`

Compare Source

`v0.35.5`

Compare Source

`v0.35.4`

Compare Source

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

`v0.35.0`

Compare Source

kubernetes/client-go (k8s.io/client-go)

`v0.36.3`

Compare Source

`v0.36.2`

Compare Source

`v0.36.1`

Compare Source

`v0.36.0`

Compare Source

`v0.35.7`

Compare Source

`v0.35.6`

Compare Source

`v0.35.5`

Compare Source

`v0.35.4`

Compare Source

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

`v0.35.0`

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

`v0.24.1`

Compare Source

What's Changed

[release-0.24] 🐛 Fix regression in Apply typed error handling by @k8s-infra-cherrypick-robot in #3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

`v0.24.0`

Compare Source

⚠️ Breaking Changes

Dependencies: Update to k8s.io/* v1.36 (#3506 #3462 #3486 #3450)

🐛 Bug Fixes

Cache: Fix IndexField blocking until informer is synced (#3445)
Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
Client: Update typed ApplyConfigurations with server response (#3475)
Fakeclient: Fix SSA status patch resource version check (#3443)
Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
Fakeclient: Fix status apply if existing object has managedFields set (#3430)
Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

Builder/Webhooks: Remove deprecated custom path function (#3465)
Cache: Test cache reader waits for cache sync (#3434)
Certwatcher: Deflake certwatcher tests (#3457)
Dependencies: Use forked version of btree (#3449)
Envtest: Ensure envtest stops the whole process group (#3447)
Logging: Add missing space in zap-log-level flag description (#3492)
Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
Owners: Cleanup (#3453)
Recorder: Add logger into context for structured logging (#3454)
Recorder: Switch to StartLogging for event debug logs (#3451)
Scheme: Deprecate the scheme builder (#3461)
Source/Kind: Improve logging for dynamic type kind source (#3494)
Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

Chore: Update golangci-lint version to v2.8.0 (#3448)
Chore: Update golangci-lint version to v2.10.1 (#3470)
Chore: Update golangci-lint version to v2.11.3 (#3482)
Migrate away from custom GitHub action approval workflow (#3491)
Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

Added

github.com/cenkalti/backoff/v5: v5.0.3
gonum.org/v1/gonum: v0.16.0
k8s.io/streaming: v0.36.0

Changed

cel.dev/expr: v0.24.0 → v0.25.1
cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.30.0
github.com/alecthomas/units: b94a6e3 → 0f3dac3
github.com/cncf/xds/go: 2f00578 → ee656c7
github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
github.com/coreos/go-systemd/v22: v22.5.0 → v22.7.0
github.com/davecgh/go-spew: v1.1.1 → d8f796a
github.com/emicklei/go-restful/v3: v3.12.2 → v3.13.0
github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
github.com/golang/glog: v1.2.4 → v1.2.5
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.7
github.com/moby/spdystream: v0.5.0 → v0.5.1
github.com/onsi/ginkgo/v2: v2.27.2 → v2.27.4
github.com/onsi/gomega: v1.38.2 → v1.39.0
github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
github.com/prometheus/common: v0.66.1 → v0.67.5
github.com/prometheus/procfs: v0.16.1 → v0.19.2
github.com/spf13/cobra: v1.10.0 → v1.10.2
github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
go.etcd.io/etcd/api/v3: v3.6.5 → v3.6.8
go.etcd.io/etcd/client/pkg/v3: v3.6.5 → v3.6.8
go.etcd.io/etcd/client/v3: v3.6.5 → v3.6.8
go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 → v0.65.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0
go.opentelemetry.io/otel/metric: v1.36.0 → v1.41.0
go.opentelemetry.io/otel/sdk/metric: v1.36.0 → v1.40.0
go.opentelemetry.io/otel/sdk: v1.36.0 → v1.40.0
go.opentelemetry.io/otel/trace: v1.36.0 → v1.41.0
go.opentelemetry.io/otel: v1.36.0 → v1.41.0
go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
go.uber.org/zap: v1.27.0 → v1.27.1
golang.org/x/crypto: v0.45.0 → v0.47.0
golang.org/x/exp: 8a7402a → 944ab1f
golang.org/x/mod: v0.29.0 → v0.32.0
golang.org/x/net: v0.47.0 → v0.49.0
golang.org/x/oauth2: v0.30.0 → v0.34.0
golang.org/x/sync: v0.18.0 → v0.19.0
golang.org/x/sys: v0.38.0 → v0.40.0
golang.org/x/telemetry: 078029d → bd525da
golang.org/x/term: v0.37.0 → v0.39.0
golang.org/x/text: v0.31.0 → v0.33.0
golang.org/x/time: v0.9.0 → v0.14.0
golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated
golang.org/x/tools: v0.38.0 → v0.41.0
google.golang.org/genproto/googleapis/api: a0af3ef → 8636f87
google.golang.org/genproto/googleapis/rpc: 200df99 → 8636f87
google.golang.org/grpc: v1.72.2 → v1.79.3
google.golang.org/protobuf: v1.36.8 → f2248ac
k8s.io/api: v0.35.0 → v0.36.0
k8s.io/apiextensions-apiserver: v0.35.0 → v0.36.0
k8s.io/apimachinery: v0.35.0 → v0.36.0
k8s.io/apiserver: v0.35.0 → v0.36.0
k8s.io/client-go: v0.35.0 → v0.36.0
k8s.io/code-generator: v0.35.0 → v0.36.0
k8s.io/component-base: v0.35.0 → v0.36.0
k8s.io/klog/v2: v2.130.1 → v2.140.0
k8s.io/kms: v0.35.0 → v0.36.0
k8s.io/kube-openapi: 589584f → 43fb72c
k8s.io/utils: bc988d5 → b8788ab
sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0
sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2

Removed

github.com/cenkalti/backoff/v4: v4.3.0
github.com/gregjones/httpcache: 901d907
github.com/grpc-ecosystem/go-grpc-prometheus: v1.2.0
github.com/zeebo/errs: v1.4.0
golang.org/x/xerrors: 9bdfabe

Thanks to all our contributors! 😊

`v0.23.3`

Compare Source

What's Changed

🐛 Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if objects are equal by @k8s-infra-cherrypick-robot in #3469

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

`v0.23.2`

Compare Source

What's Changed

🐛 Fix fake client's SSA status patch resource version check by @k8s-infra-cherrypick-robot in #3446
✨ Reduce memory usage of default webhooks by @k8s-infra-cherrypick-robot in #3467

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

`v0.23.1`

Compare Source

What's Changed

[release-0.23] 🐛 Cache reader: Wait for cache sync when ReaderFailOnMissingInformer is true by @k8s-infra-cherrypick-robot in #3433
[release-0.23] 🐛 Fix panic when using CRs with embedded pointer structs by @k8s-infra-cherrypick-robot in #3436
[release-0.23] 🌱 Test cache reader waits for cache sync by @k8s-infra-cherrypick-robot in #3438
[release-0.23] 🐛 Fakeclient: Fix status apply if existing object has managedFields set by @k8s-infra-cherrypick-robot in #3437

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

`v0.23.0`

Compare Source

🔆 Highlights

Client: Add subresource Apply support by @alvaroaleman in #3321
Conversion: Enable implementation of conversion outside of API packages by @sbueringer in #3335
Priorityqueue: Various improvements, bug fixes and now enabled per default
Webhooks: Generic Validator and Defaulter by @alvaroaleman in #3360

⚠️ Breaking changes

Dependencies: Update to k8s.io/* v1.35 by @alvaroaleman @dongjiang1989 @kannon92 (#3316, #3349, #3386, #3391, #3401)
Client: Add subresource Apply support by @alvaroaleman in #3321
Events: Migration to the new events API by @clebs in #3262
- Using the new GetEventRecorderFor requires updating your rbac for events to use the events.k8s.io apiGroup rather than the `` (core) apiGroup
Fakeclient: Set ResourceVersion for SSA Create by @alvaroaleman in #3311
Webhooks: Generic Validator and Defaulter by @alvaroaleman in #3360
- Existing code of the form builder.WebhookManagedBy(mgr).For(&corev1.Deployment{}) has to be changed to builder.WebhookManagedBy(mgr, &appsv1.Deployment{})
- Existing webhook implementations have to be changed to take the concrete object rather than runtime.Object, for example from ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) to ValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)

✨ Features

Cache: Allow fine-granular SyncPeriod configuration by @sbueringer in #3376
Client: Add FieldOwner option to client.Options by @aerfio in #3389
Client: Add FieldValidation option to client.Options by @aerfio in #3393
Conversion: Enable implementation of conversion outside of API packages by @sbueringer in #3335
Metrics: Add controller_runtime_reconcile_timeouts_total metric to track ReconciliationTimeout timeouts by @godwinpang in #3382
Priorityqueue: Add optional Priority field to reconcile.Result by @sbueringer in #3333
Priorityqueue: Enable per default by @sbueringer in #3332
Priorityqueue: Use a buffer to optimize priority queue AddWithOpts performance by @zach593 in #3415
Source/Kind: Delay reconciliation until handlers sync by @GonzaloLuminary in #3406
Webhooks: Add WithContextFunc to WebhookBuilder by @dmvolod in #3324

🐛 Bugfixes

Client: Allow SSA after normal resource creation by @filipcirtog in #3346
Client: Fix List in namespaced client to list objects that are cluster scoped by @troy0820 in #3351 #3353
Envtest: Respect pre-configured binary paths in ControlPlane by @mzhaom in #3372
Fakeclient: Fix a number of bugs when updating through apply by @alvaroaleman in #3319
FakeClient: Fix Apply with Unstructured ApplyConfiguration and resourceVersion unset by @sbueringer in #3403
Fakeclient: Fix SSA after List with non-list kind by @sbueringer in #3364
Fakeclient: Panic when trying to build more than one instance of fake.ClientBuilder by @troy0820 in #3314
Leaderelection: Copy all parent context values to leader elector's context by @msudheendra-cflt in #3327
Metrics: Adding missing exponential buckets on webhook native histogram by @brito-rafa in #3411
Priorityqueue: Do FIFO ordering within priorities and not across by @zach593 in #3408
Priorityqueue: Don't block on Get when queue is shutdown (2nd try) by @sbueringer in #3337
Priorityqueue: Ensure priority queue always returns high-priority items first by @moritzmoe in #3330
Priorityqueue: Fix TestWhenAddingMultipleItemsWithRatelimitTrueTheyDontAffectEachOther by @zach593 in #3395
Priorityqueue: Limit depthWithPriorityMetric cardinality to 25 by @alvaroaleman #3419
Priorityqueue: Properly sync the waiter manipulation by @fossedihelm in #3368
setup-envtest: Select the newest Kubernetes by default by @cbandy in #3380
testing/addr: Prevent possible leak by avoiding defer in loop by @s-z-z in #3367

🌱 Other

Dependencies: Update controller-tools to 0.20.0 and fix lint by @dongjiang1989 in #3405
Linter: Add depguard golangci-linter for forbid sort pkg by @dongjiang1989 in #3374
Linter: Modernize finalizer utils by @tbavelier in #3329
Linter: Update golangci-lint version and modernize lint by @dongjiang1989 in #3384
Linter: Update golangci-lint version to v2.4.0 by @dongjiang1989 in #3318
Linter: Update golangci-lint version to v2.5.0 by @dongjiang1989 in #3323
Linter: Update golangci-lint version to v2.7.2 by @dongjiang1989 in #3399
Manager: Deflake should execute the Warmup function test when Warmup group is started by @alvaroaleman in #3356
Misc: Add CreateOrPatch function in alias.go by @tisonkun in #3375
Misc: Change sort to slices package by @dongjiang1989 in #3370
Misc: Fix typo in unit test name by @s-z-z in #3304
Misc: Revert deprecation of client.Apply by @sbueringer in #3307
Priorityqueue: Add and use newQueueWithTimeForwarder by @alvaroaleman in #3336
Priorityqueue: Add some more tests to the priorityqueue by @alvaroaleman in #3387
Priorityqueue: Use separate b-trees for ready and non-ready items by @alvaroaleman in #3416
Priorityqueue: Use synctest by @alvaroaleman in #3350

📖 Documentation

Add a design for supporting warm replicas by @godwinpang in #3121
Remove latest from setupenvtest docs by @troy0820 in #3359
pkg/client/config: Remove outdated doc comments by @haoqixu in #3306
Update client.Apply example by @aerfio in #3390
Update README.md's compatibility matrix for v0.22.x. by @renormalize in #3392

Dependencies

Added

github.com/Masterminds/semver/v3: v3.4.0
github.com/gkampitakis/ciinfo: v0.3.2
github.com/gkampitakis/go-diff: v1.3.2
github.com/gkampitakis/go-snaps: v0.5.15
github.com/goccy/go-yaml: v1.18.0
github.com/joshdk/go-junit: v1.0.0
github.com/maruel/natural: v1.1.1
github.com/mfridman/tparse: v0.18.0
github.com/tidwall/gjson: v1.18.0
github.com/tidwall/match: v1.1.1
github.com/tidwall/pretty: v1.2.1
github.com/tidwall/sjson: v1.2.5
go.uber.org/automaxprocs: v1.6.0
golang.org/x/tools/go/expect: v0.1.0-deprecated
golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated

Changed

github.com/go-logr/logr: v1.4.2 → v1.4.3
github.com/google/pprof: d1b30fe → 27863c8
github.com/onsi/ginkgo/v2: v2.22.0 → v2.27.2
github.com/onsi/gomega

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-03-09T00:39:44Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

17 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.6` -> `1.26.0`
`k8s.io/component-base`	`v0.34.10` -> `v0.36.3`
`sigs.k8s.io/apiserver-network-proxy/konnectivity-client`	`v0.33.0` -> `v0.34.0`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.1` -> `v6.4.0`
`github.com/fatih/color`	`v1.18.0` -> `v1.19.0`
`github.com/fsnotify/fsnotify`	`v1.9.0` -> `v1.10.0`
`github.com/fxamacker/cbor/v2`	`v2.9.0` -> `v2.9.1`
`github.com/go-openapi/jsonpointer`	`v0.22.4` -> `v0.23.1`
`github.com/go-openapi/jsonreference`	`v0.21.4` -> `v0.21.5`
`github.com/go-openapi/swag`	`v0.23.1` -> `v0.26.0`
`github.com/go-openapi/swag/jsonname`	`v0.25.4` -> `v0.26.0`
`golang.org/x/time`	`v0.14.0` -> `v0.15.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260526163538-3dc84a4a5aaa` -> `v0.0.0-20260610212136-7ab31c22f7ad`
`k8s.io/apiextensions-apiserver`	`v0.34.3` -> `v0.36.2`
`k8s.io/code-generator`	`v0.34.3` -> `v0.36.2`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`k8s.io/kube-openapi`	`v0.0.0-20251125145642-4e65d59e963e` -> `v0.0.0-20260501160325-927ab1f70cd6`
`sigs.k8s.io/gateway-api`	`v1.4.1` -> `v1.6.0`

snyk-io · 2026-03-09T00:40:10Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

linkvt · 2026-03-10T10:38:13Z

CI fails as keda 2.18 doesn't seem to be compatible with the updated k8s deps. There is also #1528 (review) "blocking" the keda 2.19 update PR.

Then also: we should consider the k8s versions supported by 0.35.x vs 0.34.x - IMO nothing that should be merged and released with a patch release.

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

| datasource | package | from | to | | ---------- | ------------------------------------ | -------- | ------- | | go | github.com/cert-manager/cert-manager | v1.19.6 | v1.21.1 | | go | k8s.io/api | v0.34.10 | v0.36.3 | | go | k8s.io/apimachinery | v0.34.10 | v0.36.3 | | go | k8s.io/apiserver | v0.34.10 | v0.36.3 | | go | k8s.io/client-go | v0.34.10 | v0.36.3 | | go | sigs.k8s.io/controller-runtime | v0.22.5 | v0.24.1 | | go | sigs.k8s.io/controller-tools | v0.19.0 | v0.21.0 | | go | sigs.k8s.io/e2e-framework | v0.6.0 | v0.7.0 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot added the dependencies label Mar 9, 2026

renovate Bot requested a review from a team as a code owner March 9, 2026 00:39

keda-automation requested a review from a team March 9, 2026 00:39

renovate Bot force-pushed the renovate/kubernetes-dependencies branch 3 times, most recently from 1cb280c to 02001d8 Compare March 14, 2026 17:03

renovate Bot force-pushed the renovate/kubernetes-dependencies branch 2 times, most recently from 4f3cda0 to e168430 Compare March 23, 2026 07:53

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from e168430 to ab565cc Compare March 30, 2026 16:27

renovate Bot changed the title ~~fix(deps): update kubernetes dependencies~~ fix(deps): update kubernetes dependencies (minor) Mar 30, 2026

renovate Bot force-pushed the renovate/kubernetes-dependencies branch 2 times, most recently from d91e73c to cb632d0 Compare April 7, 2026 08:04

renovate Bot requested review from Copilot and removed request for Copilot April 7, 2026 08:04

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from cb632d0 to da5eec2 Compare April 11, 2026 16:52

renovate Bot requested review from Copilot and removed request for Copilot April 11, 2026 16:52

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from da5eec2 to 2b5f538 Compare April 16, 2026 10:14

renovate Bot removed the request for review from Copilot April 16, 2026 10:14

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from 2b5f538 to e231cbe Compare April 20, 2026 09:13

renovate Bot requested review from Copilot and removed request for Copilot April 20, 2026 09:13

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from e231cbe to b00c1e5 Compare April 21, 2026 10:03

renovate Bot requested review from Copilot and removed request for Copilot April 21, 2026 10:03

renovate Bot requested review from Copilot and removed request for Copilot April 30, 2026 15:30

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from 40fcbab to cda82b4 Compare May 4, 2026 07:50

Copilot AI review requested due to automatic review settings May 4, 2026 16:48

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from cda82b4 to 8f211fc Compare May 4, 2026 16:48

renovate Bot requested review from Copilot and removed request for Copilot May 4, 2026 16:48

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from 8f211fc to 9cfa4d0 Compare May 4, 2026 16:51

renovate Bot requested review from Copilot and removed request for Copilot May 4, 2026 16:51

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from 9cfa4d0 to eaff2d0 Compare May 6, 2026 14:01

renovate Bot requested review from Copilot and removed request for Copilot May 6, 2026 14:01

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from eaff2d0 to fbfeb91 Compare May 6, 2026 14:18

renovate Bot removed the request for review from Copilot May 6, 2026 14:18

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from fbfeb91 to 1d81b73 Compare May 11, 2026 07:13

renovate Bot requested review from Copilot and removed request for Copilot May 11, 2026 07:13

renovate Bot force-pushed the renovate/kubernetes-dependencies branch from 1d81b73 to ebb7461 Compare May 12, 2026 17:50

Copilot AI reviewed May 12, 2026

renovate Bot force-pushed the renovate/kubernetes-dependencies branch 8 times, most recently from 2a56fb2 to 3923987 Compare May 18, 2026 09:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update kubernetes dependencies (minor) - #1527

fix(deps): update kubernetes dependencies (minor)#1527
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/kubernetes-dependencies

renovate Bot commented Mar 9, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Mar 9, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Mar 9, 2026 •

edited

Loading

Uh oh!

linkvt commented Mar 10, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

Bug or Regression

Changes by Kind

Feature

Documentation

Bug or Regression

Other (Cleanup or Flake)

What's Changed

⚠️ Breaking Changes

🐛 Bug Fixes

🌱 Others

🌱 CI & linters

Dependencies

Added

Changed

Removed

What's Changed

What's Changed

What's Changed

🔆 Highlights

⚠️ Breaking changes

✨ Features

🐛 Bugfixes

🌱 Other

📖 Documentation

Dependencies

Added

Changed

Configuration

Uh oh!

renovate Bot commented Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

snyk-io Bot commented Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

linkvt commented Mar 10, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Mar 9, 2026 •

edited

Loading

renovate Bot commented Mar 9, 2026 •

edited

Loading

snyk-io Bot commented Mar 9, 2026 •

edited

Loading