Skip to content

fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1#1542

Draft
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x
Draft

fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1#1542
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Apr 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
sigs.k8s.io/controller-runtime v0.23.3v0.24.1 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.24.1

Compare Source

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

Compare Source

⚠️ Breaking Changes
🐛 Bug Fixes
  • Cache: Fix IndexField blocking until informer is synced (#​3445)
  • Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#​3425)
  • Client: Update typed ApplyConfigurations with server response (#​3475)
  • Fakeclient: Fix SSA status patch resource version check (#​3443)
  • Fakeclient: Fix panic when using CRs with embedded pointer structs (#​3431)
  • Fakeclient: Fix status apply if existing object has managedFields set (#​3430)
  • Fakeclient: Retry GenerateName on AlreadyExists collisions (#​3498)
  • HTTP servers: Wire up base context into http servers (#​3452)
🌱 Others
  • Builder/Webhooks: Remove deprecated custom path function (#​3465)
  • Cache: Test cache reader waits for cache sync (#​3434)
  • Certwatcher: Deflake certwatcher tests (#​3457)
  • Dependencies: Use forked version of btree (#​3449)
  • Envtest: Ensure envtest stops the whole process group (#​3447)
  • Logging: Add missing space in zap-log-level flag description (#​3492)
  • Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#​3489)
  • Owners: Cleanup (#​3453)
  • Recorder: Add logger into context for structured logging (#​3454)
  • Recorder: Switch to StartLogging for event debug logs (#​3451)
  • Scheme: Deprecate the scheme builder (#​3461)
  • Source/Kind: Improve logging for dynamic type kind source (#​3494)
  • Webhooks: Reduce memory usage of default webhooks (#​3463 #​3468)
🌱 CI & linters
  • Chore: Update golangci-lint version to v2.8.0 (#​3448)
  • Chore: Update golangci-lint version to v2.10.1 (#​3470)
  • Chore: Update golangci-lint version to v2.11.3 (#​3482)
  • Migrate away from custom GitHub action approval workflow (#​3491)
  • Release: Auto-create git tags for the tools/setup-envtest submodule (#​3476)

📖 Additionally, there has been 1 contribution to our documentation. (#​3477)

Dependencies
Added
  • github.com/cenkalti/backoff/v5: v5.0.3
  • gonum.org/v1/gonum: v0.16.0
  • k8s.io/streaming: v0.36.0
Changed
  • cel.dev/expr: v0.24.0 → v0.25.1
  • cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
  • github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.30.0
  • github.com/alecthomas/units: b94a6e3 → 0f3dac3
  • github.com/cncf/xds/go: 2f00578 → ee656c7
  • github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
  • github.com/coreos/go-systemd/v22: v22.5.0 → v22.7.0
  • github.com/davecgh/go-spew: v1.1.1 → d8f796a
  • github.com/emicklei/go-restful/v3: v3.12.2 → v3.13.0
  • github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
  • github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
  • github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
  • github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
  • github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
  • github.com/golang/glog: v1.2.4 → v1.2.5
  • github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
  • github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
  • github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.7
  • github.com/moby/spdystream: v0.5.0 → v0.5.1
  • github.com/onsi/ginkgo/v2: v2.27.2 → v2.27.4
  • github.com/onsi/gomega: v1.38.2 → v1.39.0
  • github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
  • github.com/prometheus/common: v0.66.1 → v0.67.5
  • github.com/prometheus/procfs: v0.16.1 → v0.19.2
  • github.com/spf13/cobra: v1.10.0 → v1.10.2
  • github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
  • go.etcd.io/etcd/api/v3: v3.6.5 → v3.6.8
  • go.etcd.io/etcd/client/pkg/v3: v3.6.5 → v3.6.8
  • go.etcd.io/etcd/client/v3: v3.6.5 → v3.6.8
  • go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
  • go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
  • go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
  • go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 → v0.65.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0
  • go.opentelemetry.io/otel/metric: v1.36.0 → v1.41.0
  • go.opentelemetry.io/otel/sdk/metric: v1.36.0 → v1.40.0
  • go.opentelemetry.io/otel/sdk: v1.36.0 → v1.40.0
  • go.opentelemetry.io/otel/trace: v1.36.0 → v1.41.0
  • go.opentelemetry.io/otel: v1.36.0 → v1.41.0
  • go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
  • go.uber.org/zap: v1.27.0 → v1.27.1
  • golang.org/x/crypto: v0.45.0 → v0.47.0
  • golang.org/x/exp: 8a7402a944ab1f
  • golang.org/x/mod: v0.29.0 → v0.32.0
  • golang.org/x/net: v0.47.0 → v0.49.0
  • golang.org/x/oauth2: v0.30.0 → v0.34.0
  • golang.org/x/sync: v0.18.0 → v0.19.0
  • golang.org/x/sys: v0.38.0 → v0.40.0
  • golang.org/x/telemetry: 078029dbd525da
  • golang.org/x/term: v0.37.0 → v0.39.0
  • golang.org/x/text: v0.31.0 → v0.33.0
  • golang.org/x/time: v0.9.0 → v0.14.0
  • golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated
  • golang.org/x/tools: v0.38.0 → v0.41.0
  • google.golang.org/genproto/googleapis/api: a0af3ef8636f87
  • google.golang.org/genproto/googleapis/rpc: 200df998636f87
  • google.golang.org/grpc: v1.72.2 → v1.79.3
  • google.golang.org/protobuf: v1.36.8 → f2248ac
  • k8s.io/api: v0.35.0 → v0.36.0
  • k8s.io/apiextensions-apiserver: v0.35.0 → v0.36.0
  • k8s.io/apimachinery: v0.35.0 → v0.36.0
  • k8s.io/apiserver: v0.35.0 → v0.36.0
  • k8s.io/client-go: v0.35.0 → v0.36.0
  • k8s.io/code-generator: v0.35.0 → v0.36.0
  • k8s.io/component-base: v0.35.0 → v0.36.0
  • k8s.io/klog/v2: v2.130.1 → v2.140.0
  • k8s.io/kms: v0.35.0 → v0.36.0
  • k8s.io/kube-openapi: 589584f43fb72c
  • k8s.io/utils: bc988d5b8788ab
  • sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0
  • sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2
Removed
  • github.com/cenkalti/backoff/v4: v4.3.0
  • github.com/gregjones/httpcache: 901d907
  • github.com/grpc-ecosystem/go-grpc-prometheus: v1.2.0
  • github.com/zeebo/errs: v1.4.0
  • golang.org/x/xerrors: 9bdfabe

Thanks to all our contributors! 😊


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux

red-hat-konflux Bot commented Apr 30, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading k8s.io/api v0.36.0
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading k8s.io/apiextensions-apiserver v0.36.0
go: downloading k8s.io/apiserver v0.36.0
go: downloading k8s.io/component-base v0.36.0
go: github.com/konflux-ci/release-service imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/autoscaling/v2beta1: cannot find module providing package k8s.io/api/autoscaling/v2beta1
go: github.com/konflux-ci/release-service imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/autoscaling/v2beta2: cannot find module providing package k8s.io/api/autoscaling/v2beta2
go: github.com/konflux-ci/release-service imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1

@seanconroy2021

Copy link
Copy Markdown
Member

Go Test on Pull Requests / Check docker build (pull_request)
Go Test on Pull Requests / Check docker build (pull_request)Failing after 23s
Required
Go Test on Pull Requests / Check sources (pull_request)
Go Test on Pull Requests / Check sources (pull_request)Failing after 57s

@seanconroy2021 seanconroy2021 marked this pull request as draft May 1, 2026 09:32
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x branch from 4327b6c to 7cb0545 Compare May 1, 2026 14:38
@red-hat-konflux red-hat-konflux Bot changed the title fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.0 fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.0 - autoclosed May 4, 2026
@red-hat-konflux red-hat-konflux Bot closed this May 4, 2026
@red-hat-konflux red-hat-konflux Bot deleted the konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x branch May 4, 2026 11:51
@red-hat-konflux red-hat-konflux Bot changed the title fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.0 - autoclosed fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.0 May 5, 2026
@red-hat-konflux red-hat-konflux Bot reopened this May 5, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x branch 12 times, most recently from c7c506d to f02eba4 Compare May 12, 2026 02:22
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x branch 2 times, most recently from 946dfb9 to fcd872a Compare May 12, 2026 16:47
@red-hat-konflux red-hat-konflux Bot changed the title fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.0 fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1 May 12, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/sigs.k8s.io-controller-runtime-0.x branch 4 times, most recently from c2ab09d to 7bbeff0 Compare May 14, 2026 02:46
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 22, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:45 PM UTC · Completed 2:51 PM UTC
Commit: 7acff03 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 22, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:08 PM UTC · Completed 8:14 PM UTC
Commit: 0d0162a · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 1:16 PM UTC · Completed 1:22 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:58 PM UTC · Completed 9:05 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 24, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:30 PM UTC · Completed 8:37 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:00 PM UTC · Completed 2:07 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 5:46 PM UTC · Completed 5:53 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-retro

fullsend-ai-retro Bot commented Jun 28, 2026

Copy link
Copy Markdown

🤖 Finished Retro · ✅ Success · Started 1:21 AM UTC · Completed 1:26 AM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-retro

Copy link
Copy Markdown

Retro: PR #1542 — Repeated review agent runs on broken bot dependency bump

This PR was a single-line go.mod bump of controller-runtime from v0.23.3 to v0.24.1, authored by red-hat-konflux[bot]. It was broken from creation (k8s.io version skew made go mod tidy impossible) and was never going to merge without significant manual intervention.

What happened: Over 59 days, the review agent ran 17 times with essentially identical findings each time, plus 2 retro runs. The PR was eventually autoclosed without being merged. A previous retro on June 22 already identified all root causes.

No new proposals. Every improvement opportunity from this workflow is already tracked by open issues in fullsend-ai/fullsend:

  • #1271 — Filter bot-triggered review events to prevent self-triggering loop
  • #1452 — Deduplicate review dispatches for the same HEAD SHA
  • #963 — Skip review when HEAD SHA was already reviewed
  • #1371 — Skip review dispatch for bot-authored PRs
  • #1358 — Lightweight review path for trivial bot dependency bumps
  • #902 — Circuit breaker for review-fix feedback loop
  • #2587 — Hard cap on total review dispatches per PR
  • #2599 — Per-PR review budget
  • #2461 — Skip retro dispatch for autoclosed bot-authored PRs
  • #2401 — Deduplicate retro runs on the same PR
  • #2586 — Review agent should recommend closing unfixable dependency-bot PRs
  • #1980 — Review agent should support a CLOSE verdict

This PR is a strong motivating example for prioritizing the circuit breaker (#902) and per-PR review budget (#2587/#2599) issues — any one of those would have prevented most of the 17 redundant review runs.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 28, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 5:26 AM UTC · Completed 5:36 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 29, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 11:25 AM UTC · Completed 11:33 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 29, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:34 PM UTC · Completed 3:41 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 30, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 10:45 AM UTC · Completed 10:54 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 30, 2026

Copy link
Copy Markdown

🤖 Finished Review · ❌ Failure · Started 4:38 PM UTC · Completed 4:45 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 1, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:29 PM UTC · Completed 2:39 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 2, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 1:35 AM UTC · Completed 1:39 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 2, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:40 PM UTC · Completed 2:46 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

Comment thread go.mod
k8s.io/client-go v11.0.0+incompatible
knative.dev/pkg v0.0.0-20260622140654-39ebae2ee2dc
sigs.k8s.io/controller-runtime v0.23.3
sigs.k8s.io/controller-runtime v0.24.1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] API contract violation

controller-runtime v0.24.1 is a minor version bump from v0.23.3. The project imports controller-runtime across 60+ source files. Since the PR is labeled breaking-change and is a draft, compilation and test verification are essential before merge.

Suggested fix: Ensure CI passes (compilation + tests) before merging. If compilation fails, update call sites to match the new controller-runtime API.

Comment thread go.mod
k8s.io/client-go v11.0.0+incompatible
knative.dev/pkg v0.0.0-20260622140654-39ebae2ee2dc
sigs.k8s.io/controller-runtime v0.23.3
sigs.k8s.io/controller-runtime v0.24.1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] scope-creep-risk

Minor version bump (0.23 to 0.24) of core Kubernetes controller framework may introduce API changes or behavioral differences beyond a simple patch-level fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking-change When a pull request introduces a breaking change dependencies Pull requests that update a dependency file go Pull requests that update Go code needs testing requires-manual-review Review requires human judgment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants