Skip to content

chore(deps): Bump the kubernetes group across 1 directory with 6 updates - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/kubernetes-199d52aed8
Closed

chore(deps): Bump the kubernetes group across 1 directory with 6 updates#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/kubernetes-199d52aed8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the kubernetes group with 3 updates in the / directory: k8s.io/api, k8s.io/apiextensions-apiserver and sigs.k8s.io/controller-runtime.

Updates k8s.io/api from 0.30.1 to 0.36.1

Commits
  • 25001c8 Update dependencies to v0.36.1 tag
  • 879d396 Merge remote-tracking branch 'origin/master' into release-1.36
  • 030d81f Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • aef6eb6 Add granular authorization for DRA ResourceClaim status updates
  • 91061ea Merge pull request #136589 from tosi3k/preemption-mode
  • e6b81e2 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  • f8fce2e Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
  • b928f5e Workload API: PodGroup ResourceClaims (KEP-5729)
  • 61bd78e Merge pull request #137190 from everpeace/KEP-5491-alpha
  • 6bf46eb Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.30.1 to 0.36.1

Commits
  • 5b822b1 Update dependencies to v0.36.1 tag
  • 4cd8c3d Merge remote-tracking branch 'origin/master' into release-1.36
  • c2fd557 Merge pull request #138346 from dashpole/update_otel_prop
  • 1daa309 Merge remote-tracking branch 'origin/master' into release-1.36
  • 1551264 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 6c97d2b update go.opentelemetry.io/otel to v1.41.0
  • 862c52a update google.golang.org/grpc to v1.79.3
  • abac065 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 7acee75 Merge pull request #137843 from pacoxu/cobra-v1.10.2
  • 612f1d8 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.30.1 to 0.36.1

Commits
  • 7af103a Update dependencies to v0.36.1 tag
  • efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
  • d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
  • a8822f7 Add slice and map union member support with tests
  • 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
  • d95710f Fix union validation ratcheting when oldObj is nil
  • 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 13b12e6 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • 27f4670 Merge pull request #136657 from Jefftree/sharding-test
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.30.1 to 0.36.1

Commits
  • 55ef15a Update dependencies to v0.36.1 tag
  • f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
  • a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  • df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
  • 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
  • 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
  • 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
  • ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
  • 4a9c878 Add ResourcePoolStatusRequest API types and generated code
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.18.4 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

⚠️ Breaking Changes

🐛 Bug Fixes

  • Cache: Fix IndexField blocking until informer is synced (#3445)
  • Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
  • Client: Update typed ApplyConfigurations with server response (#3475)
  • Fakeclient: Fix SSA status patch resource version check (#3443)
  • Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
  • Fakeclient: Fix status apply if existing object has managedFields set (#3430)
  • Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
  • HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

  • Builder/Webhooks: Remove deprecated custom path function (#3465)
  • Cache: Test cache reader waits for cache sync (#3434)
  • Certwatcher: Deflake certwatcher tests (#3457)
  • Dependencies: Use forked version of btree (#3449)
  • Envtest: Ensure envtest stops the whole process group (#3447)
  • Logging: Add missing space in zap-log-level flag description (#3492)
  • Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
  • Owners: Cleanup (#3453)
  • Recorder: Add logger into context for structured logging (#3454)
  • Recorder: Switch to StartLogging for event debug logs (#3451)
  • Scheme: Deprecate the scheme builder (#3461)
  • Source/Kind: Improve logging for dynamic type kind source (#3494)
  • Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

  • Chore: Update golangci-lint version to v2.8.0 (#3448)
  • Chore: Update golangci-lint version to v2.10.1 (#3470)
  • Chore: Update golangci-lint version to v2.11.3 (#3482)
  • Migrate away from custom GitHub action approval workflow (#3491)
  • Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

... (truncated)

Commits
  • 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
  • 0f7b33d Fix regression in Apply typed error handling
  • d3eaef3 Merge pull request #3475 from alvaroaleman/fixfix
  • 3296f32 🐛 Update typed Applyconfigurations with server response
  • c8b4b9d Merge pull request #3506 from troy0820/troy0820/update-deps-k8s
  • 557c314 update to k8s.io v1.36.0
  • e4a998c Merge pull request #3499 from kubernetes-sigs/dependabot/github_actions/all-g...
  • 1a31c56 Merge pull request #3498 from vieux/fix-fake-client-generatename-retry
  • 80bc294 fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...
  • 77b730a 🌱 Bump the all-github-actions group with 2 updates
  • Additional commits viewable in compare view

Updates sigs.k8s.io/yaml from 1.3.0 to 1.6.0

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.6.0

What's Changed

v1.5.0

Full Changelog: kubernetes-sigs/yaml@v1.4.0...v1.5.0

v1.4.0

  • Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0
  • Adds a goyaml.v3 subpackage containing a fork of gopkg.in/yaml.v3 at v3.0.1
  • Adds an Encoder#CompactSeqIndent() encoder option to sigs.k8.io/goyaml.v3 to allow opting into indentation compatible with gopkg.in/yaml.v2
Commits
  • 048d724 Merge pull request #132 from thockin/master
  • 23c836c Bolster tests, mostly in error-handling
  • 2e3340b Add compact output tests
  • 4a4f539 Add test case for tabs in multi-line strings
  • 13509ad Change which methods get a newline and fix tests
  • 59c2c43 Add compact mode so KYAML can be used in more places
  • abc1add kyaml: Implement escaping closer to YAML spec
  • 7749171 Add a yamlfmt cmd
  • a932007 Add KYAML support
  • 0f318dc Merge pull request #134 from kubernetes-sigs/forgot-to-add-redirects-for-cons...
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from stubbi as a code owner May 13, 2026 06:26
@stubbi

stubbi commented May 13, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

Bumps the kubernetes group with 3 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime).


Updates `k8s.io/api` from 0.30.1 to 0.36.1
- [Commits](kubernetes/api@v0.30.1...v0.36.1)

Updates `k8s.io/apiextensions-apiserver` from 0.30.1 to 0.36.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.30.1...v0.36.1)

Updates `k8s.io/apimachinery` from 0.30.1 to 0.36.1
- [Commits](kubernetes/apimachinery@v0.30.1...v0.36.1)

Updates `k8s.io/client-go` from 0.30.1 to 0.36.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.30.1...v0.36.1)

Updates `sigs.k8s.io/controller-runtime` from 0.18.4 to 0.24.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.4...v0.24.1)

Updates `sigs.k8s.io/yaml` from 1.3.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.3.0...v1.6.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): Bump the kubernetes group with 6 updates chore(deps): Bump the kubernetes group across 1 directory with 6 updates May 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/kubernetes-199d52aed8 branch from bf9eca3 to d55695a Compare May 13, 2026 07:15
@stubbi
stubbi enabled auto-merge (squash) May 13, 2026 07:16
@stubbi

stubbi commented May 13, 2026

Copy link
Copy Markdown
Collaborator

Closing: this bump breaks ctrl.NewWebhookManagedBy() (sigs.k8s.io/controller-runtime changed the signature). Needs a manual upgrade PR with the matching API call adjustments.

@stubbi stubbi closed this May 13, 2026
auto-merge was automatically disabled May 13, 2026 07:24

Pull request was closed

@dependabot @github

dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@stubbi
stubbi deleted the dependabot/go_modules/kubernetes-199d52aed8 branch May 13, 2026 07:24
stubbi added a commit that referenced this pull request May 13, 2026
….24.1 (#17)

## Summary

Manually performs the bump that Dependabot's auto-PR (#7) couldn't
auto-merge because controller-runtime made `NewWebhookManagedBy`
generic, breaking compilation.

- `k8s.io/{api,apiextensions-apiserver,apimachinery,client-go}` 0.30.1 →
0.36.1
- `sigs.k8s.io/controller-runtime` 0.18.4 → 0.24.1
- `sigs.k8s.io/yaml` 1.3.0 → 1.6.0
- Migrated all three webhook registrations from
`NewWebhookManagedBy(mgr).For(&T{}).WithDefaulter(d).WithValidator(v)`
to `NewWebhookManagedBy(mgr,
&T{}).WithCustomDefaulter(d).WithCustomValidator(v)`. (`WithCustom*`
still accepts the untyped `admission.CustomDefaulter` /
`admission.CustomValidator` — those types are now aliases for
`Defaulter[runtime.Object]` / `Validator[runtime.Object]`.)
- Regenerated `config/crd/bases/hermes.agent_hermesinstances.yaml` to
pick up new HPAv2 schema fields (`tolerance`, scaling-policy defaults).

## Test plan

- [x] `make test` green locally (all envtest suites pass)
- [ ] CI green

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant