Bump the k8s-deps group with 8 updates

[dependabot]

Bumps the k8s-deps group with 8 updates:

Package	From	To
k8s.io/apimachinery	0.34.3	0.35.0
k8s.io/apiserver	0.34.3	0.35.0
k8s.io/client-go	0.34.3	0.35.0
k8s.io/cloud-provider	0.34.3	0.35.0
k8s.io/component-base	0.34.3	0.35.0
k8s.io/controller-manager	0.34.3	0.35.0
k8s.io/utils	0.0.0-20250820121507-0af2bda4dd1d	0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/kind	0.30.0	0.31.0

Updates k8s.io/apimachinery from 0.34.3 to 0.35.0

Commits

• 72d71ea Merge remote-tracking branch 'origin/master' into release-1.35
• e2a2dbc Bump golang.org/x/crypto to v0.45.0
• 2e9c228 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• f274aac vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• 9445443 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• 52154f7 Update vendored dependencies
• 5a348c5 KEP-5471: Extend tolerations operators (#134665)
• 6f89492 Merge pull request #133648 from richabanker/merged-discovery
• c77dde2 util/sort: Add MergePreservingRelativeOrder for topological sorting
• 729c13d Merge pull request #134624 from yt2985/podcertificates-beta
• Additional commits viewable in compare view

Updates k8s.io/apiserver from 0.34.3 to 0.35.0

Commits

• 5c93bee Update dependencies to v0.35.0 tag
• 131539d Merge remote-tracking branch 'origin/master' into release-1.35
• 3e0a914 Merge pull request #135536 from dims/bump-x/crypto-to-v0.45.0
• f6430f6 Merge remote-tracking branch 'origin/master' into release-1.35
• 095ead6 Merge pull request #135560 from lalitc375/map-debug
• 60ad4b7 Remove TestWatchStreamSeparation from storage/cacher related tests
• 7dde12d Fix MAP failure on objects with duplicate list items
• db821a3 Bump golang.org/x/crypto to v0.45.0
• 6e94bf6 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• ea22028 Merge pull request #135359 from liggitt/vap-ns-latency
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.34.3 to 0.35.0

Commits

• 9bcb694 Update dependencies to v0.35.0 tag
• 2d83546 Merge remote-tracking branch 'origin/master' into release-1.35
• 56b4af2 Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-f...
• 891f94c Merge remote-tracking branch 'origin/master' into release-1.35
• 65ffe04 Merge pull request #135580 from serathius/client-go-transformer
• 2fe4ac2 downgrade reflector watchlist fallback log to V(4)
• 97256a6 Bump golang.org/x/crypto to v0.45.0
• 46360b5 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• 171ef8c Use transformer in consistency checker
• 3878a64 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• Additional commits viewable in compare view

Updates k8s.io/cloud-provider from 0.34.3 to 0.35.0

Commits

• f02e0a8 Update dependencies to v0.35.0 tag
• f3d67f2 Merge remote-tracking branch 'origin/master' into release-1.35
• 90ad0be Bump golang.org/x/crypto to v0.45.0
• c2f691d Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• 4630afe vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• edd386f Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• fb5887f Update vendored dependencies
• 080e91c Merge pull request #131220 from lukasmetzner/feat-ccm-watch-based-route-contr...
• 314e0e6 refactor: rename and suitable docstring
• 1f7c95a test: register kube features in unit tests
• Additional commits viewable in compare view

Updates k8s.io/component-base from 0.34.3 to 0.35.0

Commits

• 4e6b4eb Update dependencies to v0.35.0 tag
• 5e09e27 Merge remote-tracking branch 'origin/master' into release-1.35
• 518a1d0 Bump golang.org/x/crypto to v0.45.0
• dffb9df Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• 622fcbc vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• 4461559 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• 43140e8 Update vendored dependencies
• c1ad413 Merge pull request #134870 from pmengelbert/pmengelbert/kuberc/4
• 8209f50 Add client-go credential plugin to kuberc
• 09c454e Merge pull request #134995 from yongruilin/flagz-kk-structure
• Additional commits viewable in compare view

Updates k8s.io/controller-manager from 0.34.3 to 0.35.0

Commits

• 1ee9893 Update dependencies to v0.35.0 tag
• 721d33a Merge remote-tracking branch 'origin/master' into release-1.35
• eff0b85 Bump golang.org/x/crypto to v0.45.0
• 0fefa3d Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
• 04adaa1 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
• cc02220 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
• 11fac1e Update vendored dependencies
• 362c11f Merge pull request #131220 from lukasmetzner/feat-ccm-watch-based-route-contr...
• 7b94378 Merge pull request #134881 from pohly/e2e-slow-priority
• 7ac9423 dependencies: ginkgo v2.27.2, gomega v1.38.2
• Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20251002143259-bc988d571ff4

Commits

• See full diff in compare view

Updates sigs.k8s.io/kind from 0.30.0 to 0.31.0

Release notes

Sourced from sigs.k8s.io/kind's releases.

v0.31.0

This release contains dependency updates and defaults to Kubernetes 1.35.0.

Please take note of the breaking changes from Kubernetes 1.35, and how to prepare for future changes to move off of the deprecated kubeam v1beta3 in favor of v1beta4. We will include updated reminders for both again in subsequent releases.

The default node image is now kindest/node:v1.35.0@sha256:452d707d4862f52530247495d180205e029056831160e22870e37e3f6c1ac31f

Kubernetes will be removing cgroup v1 support, and therefore kind node images at those versions will also be dropping support.

You can read more about this change in the Kubernetes release blog: https://kubernetes.io/blog/2025/12/17/kubernetes-v1-35-release/#removal-of-cgroup-v1-support

If you must use kind on cgroup v1, we recommend using an older Kubernetes release for the immediate future, but we also strongly recommend migrating to cgroup v2.

In the near future as Kubernetes support dwindles, KIND will also clean up cgroup v1 workarounds and drop support in future kind releases and images, regardless of Kubernetes version.

Most stable linux distros should be on cgroupv2 out of the box.

This is a reminder to use pinned images by digest, see the note below about images for this release.

WARNING: Future kind releases will adopt kubeadm v1beta4 configuration, kubeadm v1beta4 has a breaking change to extraArgs: https://kubernetes.io/blog/2024/08/23/kubernetes-1-31-kubeadm-v1beta4/.

If you use the kubeadmConfigPatches feature then you may need to prepare for this change. We recommend that you use versioned config patches that explicitly match the version required.

KIND uses kubeadm v1beta3 for Kubernetes 1.23+, and will likely use v1beta4 for Kubernetes 1.36+ The exact version is TBD pending work to fix this but expected to be 1.36. It will definitely be an as-of-yet-unreleased Kubernetes version to avoid surprises, and it will not be on a patch-release boundary.

KIND may still work with older Kubernetes versions at v1beta2, but we no longer test or actively support these as Kubernetes only supports 1.32+ currently: https://kubernetes.io/releases/

You likely only need v1beta3 + v1beta4 patches, you can take your existing patches that work with v1beta3, explicitly set apiVersion: kubeadm.k8s.io/v1beta3 in the patch at the top level, and make another copy for v1beta4. The v1beta4 patch will need to move extraArgs from a map to a list, for examples see: https://kubernetes.io/docs/reference/config-api/kubeadm-config.v1beta4/

For a concrete example of kind config with kubeadm config patch targeting both v1beta3 and v1beta4, consider this simple kind config that sets verbosity of the apiserver logs:

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
kubeadmConfigPatches:
# patch for v1beta3 (1.23 ...)
- |
  kind: ClusterConfiguration
  apiVersion: kubeadm.k8s.io/v1beta3
  apiServer:
    extraArgs:
</tr></table> 

... (truncated)

Commits

• a323333 version v0.31.0
• 32124c6 Merge pull request #4077 from BenTheElder/135
• b088420 drop almalinux 8
• b1b15ed bump node image to 1.35.0
• c17c183 Merge pull request #4069 from BenTheElder/latest-images
• 36ee7a6 update node image to 1.34.3 with runc 1.2.x
• 1f8526c Merge pull request #4073 from aoxn/typo
• a47cf1e license typo
• 57ed4da use base image with runc 1.2.x
• 5e1c871 downgrade runc to 1.2.9 due to broken Kubernetes 1.33 tests
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign bentheelder for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[k8s-ci-robot]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[aojea]

hmmm, I do not like how this test failure smells

=== RUN   TestSyncHandler_Create
I0106 11:00:14.573699   14027 controller.go:107] Setting up event handlers for Ingress controller
I0106 11:00:14.575356   14027 controller.go:867] 'cloud-provider-kind' is now the default IngressClass
I0106 11:00:14.576876   14027 controller.go:877] 'cloud-provider-kind' is now the default IngressClass
I0106 11:00:14.576930   14027 controller.go:1023] Enqueuing all Ingresses due to IngressClass change
I0106 11:00:24.575867   14027 reflector.go:1159] "Warning: event bookmark expired" err="pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:289: awaiting required bookmark event for initial events stream, no events received for 10.001041573s"
I0106 11:00:24.575900   14027 reflector.go:1159] "Warning: event bookmark expired" err="pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:289: awaiting required bookmark event for initial events stream, no events received for 10.001110298s"
I0106 11:00:34.575867   14027 reflector.go:1159] "Warning: event bookmark expired" err="pkg/mod/k8s.io/client-go@v0.35.0/tools/cache/reflector.go:289: awaiting required bookmark event for initial events stream, no events received for 20.001091959s"
I0106 11:00:34.575951   14027 reflector.go:1159] "Warning: event bookmark expired" err="pkg/mod/k8s.io/client-

[aojea]

failure is kubernetes/kubernetes#135895

[k8s-ci-robot]

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.