Renovate: Update External dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
ghcr.io/sapcc/git-cert-shim	Kustomization	minor	v2.1.8 → v2.2.1
github.com/hashicorp/vault/api	require	minor	v1.20.0 → v1.22.0
github.com/onsi/ginkgo/v2	require	minor	v2.23.4 → v2.28.1
github.com/onsi/gomega	require	minor	v1.38.0 → v1.39.1
github.com/prometheus/client_golang	require	patch	v1.23.0 → v1.23.2
go.uber.org/zap	require	patch	v1.27.0 → v1.27.1
k8s.io/api	require	patch	v0.33.4 → v0.33.7
k8s.io/apimachinery	require	patch	v0.33.4 → v0.33.7
k8s.io/client-go	require	patch	v0.33.4 → v0.33.7
sigs.k8s.io/controller-runtime	require	minor	v0.21.0 → v0.23.1

---

Release Notes

sapcc/git-cert-shim (ghcr.io/sapcc/git-cert-shim)

v2.2.1

Compare Source

• Fix suppress any errors on git rebase --abort

v2.2.0

Compare Source

• Fix suppress error if no rebase in progress
• Fix go-makefile-maker config
• Bump github.com/onci/gomega to v1.37.0
• Bump github.com/hashicorp/vault/api to v1.20.0
• Bump go to 1.24
• Bump k8s.io/api to v0.32.4
• Bump k8s.io/apiextensions-apiserver to v0.32.4
• Bump k8s.io/apimachinery to v0.32.5
• Bump k8s.io/client-go to v0.32.4
• Bump sigs.k8s.io/controller-runtime to v0.20.4
• Bump github.com/prometheus/client_golang to v1.22.0
• Bump cert-manager to v1.17.2
• Bump ginkgo to v2.23.4
• Bump gomega to v1.36.3

hashicorp/vault (github.com/hashicorp/vault/api)

v1.21.0

Compare Source

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.28.1

Compare Source

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v2.28.0

Compare Source

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

v2.27.5

Compare Source

2.27.5

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

v2.27.4

Compare Source

2.27.4

Fixes

• CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

v2.27.3

Compare Source

2.27.3

Fixes

report exit result in case of failure [1c9f356]
fix data race [ece19c8]

v2.27.2

Compare Source

2.27.2

Fixes

• inline automaxprocs to simplify dependencies; this will be removed when Go 1.26 comes out [a69113a]

Maintenance

• Fix syntax errors and typo [a99c6e0]
• Fix paragraph position error [f993df5]

v2.27.1

Compare Source

2.27.1

Fixes

• Fix Ginkgo Reporter slice-bounds panic [606c1cb]
• Bug Fix: Add GinkoTBWrapper.Attr() and GinkoTBWrapper.Output() [a6463b3]

v2.27.0

Compare Source

2.27.0

Features

Transforming Nodes during Tree Construction

This release adds support for NodeArgsTransformers that can be registered with AddTreeConstructionNodeArgsTransformer.

These are called during the tree construction phase as nodes are constructed and can modify the node strings and decorators. This enables frameworks built on top of Ginkgo to modify Ginkgo nodes and enforce conventions.

Learn more here.

Spec Prioritization

A new SpecPriority(int) decorator has been added. Ginkgo will honor priority when ordering specs, ensuring that higher priority specs start running before lower priority specs

Learn more here.

Maintenance

• Bump rexml from 3.4.0 to 3.4.2 in /docs (#​1595) [1333dae]
• Bump github.com/gkampitakis/go-snaps from 0.5.14 to 0.5.15 (#​1600) [17ae63e]

v2.26.0

Compare Source

2.26.0

Features

Ginkgo can now generate json-formatted reports that are compatible with the go test json format. Use ginkgo --gojson-report=report.go.json. This is not intended to be a replacement for Ginkgo's native json format which is more information rich and better models Ginkgo's test structure semantics.

v2.25.3

Compare Source

2.25.3

Fixes

• emit --github-output group only for progress report itself [f01aed1]

v2.25.2

Compare Source

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

v2.25.1

Compare Source

2.25.1

Fixes

• fix(types): ignore nameless nodes on FullText() [10866d3]
• chore: fix some CodeQL warnings [2e42cff]

v2.25.0

Compare Source

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

• AroundNode(func()) - func will be called before the node is run.
• AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
• AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

Compare Source

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the PR.

Fixes

• remove -o from run command [3f5d379]. fixes #​1582

Maintenance

Numerous dependency bumps and documentation fixes

onsi/gomega (github.com/onsi/gomega)

v1.39.1

Compare Source

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v1.39.0

Compare Source

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

v1.38.3

Compare Source

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

v1.38.2

Compare Source

1.38.2

• roll back to go 1.23.0 [c404969]

v1.38.1

Compare Source

1.38.1

Fixes

Numerous minor fixes and dependency bumps

prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

• [release-1.23] Upgrade to prometheus/common@​v0.66.1 by @​aknuds1 in #​1869
• [release-1.23] Cut v1.23.2 by @​aknuds1 in #​1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

• [release-1.23] Upgrade to prometheus/common v0.66 by @​aknuds1 in #​1866
• [release-1.23] Cut v1.23.1 by @​aknuds1 in #​1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

uber-go/zap (go.uber.org/zap)

v1.27.1

Compare Source

Enhancements:

• #​1501: prevent Object from panicking on nils
• #​1511: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

kubernetes/api (k8s.io/api)

v0.33.7

Compare Source

v0.33.6

Compare Source

v0.33.5

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.33.7

Compare Source

v0.33.6

Compare Source

v0.33.5

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.33.7

Compare Source

v0.33.6

Compare Source

v0.33.5

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.23.1

Compare Source

What's Changed

• [release-0.23] 🐛 Cache reader: Wait for cache sync when ReaderFailOnMissingInformer is true by @​k8s-infra-cherrypick-robot in #​3433
• [release-0.23] 🐛 Fix panic when using CRs with embedded pointer structs by @​k8s-infra-cherrypick-robot in #​3436
• [release-0.23] 🌱 Test cache reader waits for cache sync by @​k8s-infra-cherrypick-robot in #​3438
• [release-0.23] 🐛 Fakeclient: Fix status apply if existing object has managedFields set by @​k8s-infra-cherrypick-robot in #​3437

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

Compare Source

🔆 Highlights

• Client: Add subresource Apply support by @​alvaroaleman in #​3321
• Conversion: Enable implementation of conversion outside of API packages by @​sbueringer in #​3335
• Priorityqueue: Various improvements, bug fixes and now enabled per default
• Webhooks: Generic Validator and Defaulter by @​alvaroaleman in #​3360

⚠️ Breaking changes

• Dependencies: Update to k8s.io/* v1.35 by @​alvaroaleman @​dongjiang1989 @​kannon92 (#​3316, #​3349, #​3386, #​3391, #​3401)
• Client: Add subresource Apply support by @​alvaroaleman in #​3321
• Events: Migration to the new events API by @​clebs in #​3262
  • Using the new GetEventRecorderFor requires updating your rbac for events to use the events.k8s.io apiGroup rather than the `` (core) apiGroup
• Fakeclient: Set ResourceVersion for SSA Create by @​alvaroaleman in #​3311
• Webhooks: Generic Validator and Defaulter by @​alvaroaleman in #​3360
  • Existing code of the form builder.WebhookManagedBy(mgr).For(&corev1.Deployment{}) has to be changed to builder.WebhookManagedBy(mgr, &appsv1.Deployment{})
  • Existing webhook implementations have to be changed to take the concrete object rather than runtime.Object, for example from ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) to ValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)

✨ Features

• Cache: Allow fine-granular SyncPeriod configuration by @​sbueringer in #​3376
• Client: Add FieldOwner option to client.Options by @​aerfio in #​3389
• Client: Add FieldValidation option to client.Options by @​aerfio in #​3393
• Conversion: Enable implementation of conversion outside of API packages by @​sbueringer in #​3335
• Metrics: Add controller_runtime_reconcile_timeouts_total metric to track ReconciliationTimeout timeouts by @​godwinpang in #​3382
• Priorityqueue: Add optional Priority field to reconcile.Result by @​sbueringer in #​3333
• Priorityqueue: Enable per default by @​sbueringer in #​3332
• Priorityqueue: Use a buffer to optimize priority queue AddWithOpts performance by @​zach593 in #​3415
• Source/Kind: Delay reconciliation until handlers sync by @​GonzaloLuminary in #​3406
• Webhooks: Add WithContextFunc to WebhookBuilder by @​dmvolod in #​3324

🐛 Bugfixes

• Client: Allow SSA after normal resource creation by @​filipcirtog in #​3346
• Client: Fix List in namespaced client to list objects that are cluster scoped by @​troy0820 in #​3351 #​3353
• Envtest: Respect pre-configured binary paths in ControlPlane by @​mzhaom in #​3372
• Fakeclient: Fix a number of bugs when updating through apply by @​alvaroaleman in #​3319
• FakeClient: Fix Apply with Unstructured ApplyConfiguration and resourceVersion unset by @​sbueringer in #​3403
• Fakeclient: Fix SSA after List with non-list kind by @​sbueringer in #​3364
• Fakeclient: Panic when trying to build more than one instance of fake.ClientBuilder by @​troy0820 in #​3314
• Leaderelection: Copy all parent context values to leader elector's context by @​msudheendra-cflt in #​3327
• Metrics: Adding missing exponential buckets on webhook native histogram by @​brito-rafa in #​3411
• Priorityqueue: Do FIFO ordering within priorities and not across by @​zach593 in #​3408
• Priorityqueue: Don't block on Get when queue is shutdown (2nd try) by @​sbueringer in #​3337
• Priorityqueue: Ensure priority queue always returns high-priority items first by @​moritzmoe in #​3330
• Priorityqueue: Fix TestWhenAddingMultipleItemsWithRatelimitTrueTheyDontAffectEachOther by @​zach593 in #​3395
• Priorityqueue: Limit depthWithPriorityMetric cardinality to 25 by @​alvaroaleman #​3419
• Priorityqueue: Properly sync the waiter manipulation by @​fossedihelm in #​3368
• setup-envtest: Select the newest Kubernetes by default by @​cbandy in #​3380
• testing/addr: Prevent possible leak by avoiding defer in loop by @​s-z-z in #​3367

🌱 Other

• Dependencies: Update controller-tools to 0.20.0 and fix lint by @​dongjiang1989 in #​3405
• Linter: Add depguard golangci-linter for forbid sort pkg by @​dongjiang1989 in #​3374
• Linter: Modernize finalizer utils by @​tbavelier in #​3329
• Linter: Update golangci-lint version and modernize lint by @​dongjiang1989 in #​3384
• Linter: Update golangci-lint version to v2.4.0 by @​dongjiang1989 in #​3318
• Linter: Update golangci-lint version to v2.5.0 by @​dongjiang1989 in #​3323
• Linter: Update golangci-lint version to v2.7.2 by @​dongjiang1989 in #​3399
• Manager: Deflake should execute the Warmup function test when Warmup group is started by @​alvaroaleman in #​3356
• Misc: Add CreateOrPatch function in alias.go by @​tisonkun in #​3375
• Misc: Change sort to slices package by @​dongjiang1989 in #​3370
• Misc: Fix typo in unit test name by @​s-z-z in #​3304
• Misc: Revert deprecation of client.Apply by @​sbueringer in #​3307
• Priorityqueue: Add and use newQueueWithTimeForwarder by @​alvaroaleman in #​3336
• Priorityqueue: Add some more tests to the priorityqueue by @​alvaroaleman in #​3387
• Priorityqueue: Use separate b-trees for ready and non-ready items by @​alvaroaleman in #​3416
• Priorityqueue: Use synctest by @​alvaroaleman in #​3350

📖 Documentation

• Add a design for supporting warm replicas by @​godwinpang in #​3121
• Remove latest from setupenvtest docs by @​troy0820 in #​3359
• pkg/client/config: Remove outdated doc comments by @​haoqixu in #​3306
• Update client.Apply example by @​aerfio in #​3390
• Update README.md's compatibility matrix for v0.22.x. by @​renormalize in #​3392

Dependencies

Added

• github.com/Masterminds/semver/v3: v3.4.0
• github.com/gkampitakis/ciinfo: v0.3.2
• github.com/gkampitakis/go-diff: v1.3.2
• github.com/gkampitakis/go-snaps: v0.5.15
• github.com/goccy/go-yaml: v1.18.0
• github.com/joshdk/go-junit: v1.0.0
• github.com/maruel/natural: v1.1.1
• github.com/mfridman/tparse: v0.18.0
• github.com/tidwall/gjson: v1.18.0
• github.com/tidwall/match: v1.1.1
• github.com/tidwall/pretty: v1.2.1
• github.com/tidwall/sjson: v1.2.5
• go.uber.org/automaxprocs: v1.6.0
• golang.org/x/tools/go/expect: v0.1.0-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated

Changed

• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/google/pprof: d1b30fe → 27863c8
• github.com/onsi/ginkgo/v2: v2.22.0 → v2.27.2
• github.com/onsi/gomega: v1.36.1 → v1.38.2
• github.com/prometheus/client_golang: v1.22.0 → v1.23.2
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.66.1
• github.com/prometheus/procfs: v0.15.1 → v0.16.1
• github.com/rogpeppe/go-internal: v1.13.1 → v1.14.1
• github.com/spf13/cobra: v1.9.1 → v1.10.0
• github.com/spf13/pflag: v1.0.6 → v1.0.9
• github.com/stretchr/testify: v1.10.0 → v1.11.1
• go.etcd.io/bbolt: v1.4.2 → v1.4.3
• go.etcd.io/etcd/api/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/client/pkg/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/client/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/pkg/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/server/v3: v3.6.4 → v3.6.5
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.61.0
• go.opentelemetry.io/otel/metric: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.36.0
• go.opentelemetry.io/otel/sdk: v1.34.0 → v1.36.0
• go.opentelemetry.io/otel/trace: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel: v1.35.0 → v1.36.0
• go.yaml.in/yaml/v2: v2.4.2 → v2.4.3
• golang.org/x/crypto: v0.36.0 → v0.45.0
• golang.org/x/mod: v0.21.0 → v0.29.0
• golang.org/x/net: v0.38.0 → v0.47.0
• golang.org/x/oauth2: v0.27.0 → v0.30.0
• golang.org/x/sync: v0.12.0 → v0.18.0
• golang.org/x/sys: v0.31.0 → v0.38.0
• golang.org/x/telemetry: bda5523 → 078029d
• golang.org/x/term: v0.30.0 → v0.37.0
• golang.org/x/text: v0.23.0 → v0.31.0
• golang.org/x/tools: v0.26.0 → v0.38.0
• golang.org/x/xerrors: 5ec99f8 → 9bdfabe
• google.golang.org/genproto/googleapis/rpc: a0af3ef → 200df99
• google.golang.org/grpc: v1.72.1 → v1.72.2
• google.golang.org/protobuf: v1.36.5 → v1.36.8
• gopkg.in/evanphx/json-patch.v4: v4.12.0 → v4.13.0
• k8s.io/api: v0.34.0 → v0.35.0
• k8s.io/apiextensions-apiserver: v0.34.0 → v0.35.0
• k8s.io/apimachinery: v0.34.0 → v0.35.0
• k8s.io/apiserver: v0.34.0 → v0.35.0
• k8s.io/client-go: v0.34.0 → v0.35.0
• k8s.io/code-generator: v0.34.0 → v0.35.0
• k8s.io/component-base: v0.34.0 → v0.35.0
• k8s.io/gengo/v2: 85fd79d → ec3ebc5
• k8s.io/kms: v0.34.0 → v0.35.0
• k8s.io/kube-openapi: f3f2b99 → 589584f
• k8s.io/utils: 4c0f3b2 → bc988d5
• sigs.k8s.io/json: cfa47c3 → 2d32026

Removed

• github.com/kisielk/errcheck: v1.5.0
• github.com/kisielk/gotool: v1.0.0
• gopkg.in/yaml.v2: v2.4.0

New Contributors

• @​haoqixu made their first contribution in #​3306
• @​msudheendra-cflt made their first contribution in #​3327
• @​tbavelier made their first contribution in #​3329
• @​moritzmoe made their first contribution in #​3330
• @​filipcirtog made their first contribution in #​3346
• @​fossedihelm made their first contribution in #​3368
• @​mzhaom made their first contribution in #​3372
• @​tisonkun made their first contribution in #​3375
• @​renormalize made their first contribution in #​3392
• @​brito-rafa made their first contribution in #​3411
• @​GonzaloLuminary made their first contribution in #​3406

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.23.0

Thanks to all our contributors! 😊

v0.22.5

Compare Source

What's Changed

• 🌱 Bump k8s.io/* to v0.34.3 by @​sbueringer in #​3420

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.4...v0.22.5

v0.22.4

Compare Source

What's Changed

• ✨ cache: Allow fine-granular SyncPeriod configuration by @​k8s-infra-cherrypick-robot in #​3378
• 🐛 Update List in namespaced client to list objects that are cluster scoped by @​k8s-infra-cherrypick-robot in #​3352 #​3357
• 🐛 priority queue: properly sync the waiter manipulation by @​alvaroaleman in #​3371
• 🐛 envtest: respect pre-configured binary paths in ControlPlane by @​k8s-infra-cherrypick-robot in #​3377

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.3...v0.22.4

v0.22.3

Compare Source

What's Changed

• [release-0.22] 🐛 Allow SSA after normal resource creation by @​k8s-infra-cherrypick-robot in #​3348

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3

v0.22.2

Compare Source

What's Changed

• 🐛 Panic when trying to build more than one instance of fake.ClientBuilder by @​k8s-infra-cherrypick-robot in #​3315
• 🌱 Bump to k8s.io/* v0.34.1 by @​k8s-infra-cherrypick-robot in #​3317
• 🐛 Don't block on Get when queue is shutdown (2nd try) by @​k8s-infra-cherrypick-robot in #​3338
• 🐛 Fix a bug where the priorityqueue would sometimes not return high-priority items first by @​k8s-infra-cherrypick-robot in #​3340

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2

v0.22.1

Compare Source

What's Changed

• 🌱 Revert deprecation of client.Apply by @​k8s-infra-cherrypick-robot in #​3308

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1

v0.22.0

Compare Source

🔆 Highlights

• Client: Native support for Server-Side Apply (SSA) (#​3253, #​2981)
• Update to k8s.io/* v1.34 dependencies (#​3231, #​3236, #​3246, #​3259, #​3270, #​3300)
• Controller: Implement warmup support for controllers (#​3192)
• Priorityqueue: various improvements (#​3289, #​3290, #​3243, #​3250)

⚠️ Breaking changes

• Update to k8s.io/* v1.34 dependencies by @​alvaroaleman @​troy0820 #​3231, #​3236, #​3246, #​3259, #​3270, #​3300
• Client: Add native SSA support by @​alvaroaleman in #​3253
• Client: Default selector to Nothing if it is nil for MatchingLabelsSelector and MatchingFieldsSelector by @​acumino in #​3279
• Fakeclient: Add SSA support by @​alvaroaleman in #​2981
• Fakeclient: Remove support for objects with pointer ObjectMeta by @​alvaroaleman in #​3228
• Fakeclient: Clear TypeMeta for structured objects by @​alvaroaleman in #​3229
• Priorityqueue: Make Priority option a pointer by @​alvaroaleman in #​3289

✨ Features

• Client: Add UnsafeDisableDeepCopy to GetOptions by @​jonathan-innis in #​3227
• Controller: Add a ReconciliationTimeout option by @​alvaroaleman in #​3296
• Controller: Implement warmup support for controllers by @​godwinpang in #​3192
• Envtest: Allow selection of binaries version by release series by @​cbandy in #​3280
• Manager: Add support for custom labels on leader election leases by @​DerekFrank in #​3237
• Priorityqueue: WithLowPriorityWhenUnchanged: Set Priority for all add methods by @​alvaroaleman in #​3290
• Webhooks: Handle panics during conversion more gracefully by @​sbueringer in #​3278

🐛 Bugfixes

• Envtest: Ensure cleanup validates etcd process state first by @​Danil-Grigorev in #​3272
• Envtest: Include listening address in kube-apiserver serving certificate by @​solidDoWant in #​3284
• Fakeclient: Fix some SSA-related bugs by @​alvaroaleman in #​3268
• Fakeclient: Update passed object in Apply by @​alvaroaleman in #​3283
• Fakeclient: Validate managed fields on init objects by @​alvaroaleman in #​3282
• Manager: Prevent goroutine leak on shutdown timeout by @​jingyih in #​3247
• Priorityqueue: Don't block on Get when queue is shutdown by @​dongjiang1989 in #​3243
• Pri

---

Configuration

📅 Schedule: Branch creation - "before 8am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 26 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.25.0
k8s.io/api	v0.33.4 -> v0.34.1
k8s.io/apimachinery	v0.33.4 -> v0.34.1
k8s.io/client-go	v0.33.4 -> v0.34.1
github.com/emicklei/go-restful/v3	v3.12.2 -> v3.13.0
github.com/fxamacker/cbor/v2	v2.8.0 -> v2.9.0
github.com/go-jose/go-jose/v4	v4.1.0 -> v4.1.1
github.com/go-openapi/jsonpointer	v0.21.1 -> v0.22.1
github.com/go-openapi/jsonreference	v0.21.0 -> v0.21.2
github.com/google/gnostic-models	v0.6.9 -> v0.7.0
github.com/hashicorp/go-retryablehttp	v0.7.7 -> v0.7.8
github.com/modern-go/reflect2	v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/prometheus/common	v0.65.0 -> v0.66.1
github.com/prometheus/procfs	v0.16.1 -> v0.17.0
github.com/spf13/pflag	v1.0.6 -> v1.0.10
golang.org/x/net	v0.41.0 -> v0.47.0
golang.org/x/oauth2	v0.30.0 -> v0.31.0
golang.org/x/sync	v0.15.0 -> v0.18.0
golang.org/x/sys	v0.33.0 -> v0.38.0
google.golang.org/protobuf	v1.36.6 -> v1.36.9
gopkg.in/evanphx/json-patch.v4	v4.12.0 -> v4.13.0
k8s.io/apiextensions-apiserver	v0.33.1 -> v0.34.1
k8s.io/kube-openapi	v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils	v0.0.0-20250502105355-0f33e8f1c979 -> v0.0.0-20250820121507-0af2bda4dd1d
sigs.k8s.io/gateway-api	v1.3.0 -> v1.4.0
sigs.k8s.io/json	v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/yaml	v1.4.0 -> v1.6.0

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 21 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25 -> 1.25.0
github.com/fxamacker/cbor/v2	v2.8.0 -> v2.9.0
github.com/go-jose/go-jose/v4	v4.1.0 -> v4.1.1
github.com/google/gnostic-models	v0.6.9 -> v0.7.0
github.com/google/pprof	v0.0.0-20250403155104-27863c87afa6 -> v0.0.0-20260115054156-294ebfa9ad83
github.com/hashicorp/go-retryablehttp	v0.7.7 -> v0.7.8
github.com/modern-go/reflect2	v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/prometheus/common	v0.65.0 -> v0.66.1
github.com/spf13/pflag	v1.0.6 -> v1.0.9
golang.org/x/sync	v0.15.0 -> v0.19.0
golang.org/x/sys	v0.33.0 -> v0.40.0
golang.org/x/term	v0.32.0 -> v0.39.0
golang.org/x/text	v0.26.0 -> v0.33.0
golang.org/x/time	v0.11.0 -> v0.12.0
golang.org/x/tools	v0.33.0 -> v0.41.0
google.golang.org/protobuf	v1.36.6 -> v1.36.8
gopkg.in/evanphx/json-patch.v4	v4.12.0 -> v4.13.0
k8s.io/apiextensions-apiserver	v0.33.1 -> v0.35.0
k8s.io/kube-openapi	v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils	v0.0.0-20250502105355-0f33e8f1c979 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json	v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/yaml	v1.4.0 -> v1.6.0