[scality-renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
k8s.io/api	v0.37.1 → v0.37.2
k8s.io/apimachinery	v0.37.1 → v0.37.2
k8s.io/client-go	v0.37.1 → v0.37.2

---

Release Notes

kubernetes/api (k8s.io/api)

v0.37.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.37.2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[scality-renovate]

ℹ️ Artifact update notice

File name: agent/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
k8s.io/streaming	v0.37.1 -> v0.37.2

[github-actions]

Dependency Bump Evaluation

Version change: k8s.io/api, k8s.io/apimachinery, k8s.io/client-go v0.37.1 -> v0.37.2 (plus indirect k8s.io/streaming v0.37.1 -> v0.37.2)
Semver bump type: patch

Changes:

• Each upstream repo has exactly one commit between the tags (Update dependencies to v0.37.2 tag). It only touches go.mod/go.sum and pins the sibling k8s.io/* modules to v0.37.2.
• The two tags are sibling publishing-bot commits on the same base (compare: diverged, ahead 1 / behind 1). None of the Go source in these three modules changed between them.
• The PR diff touches only agent/go.mod and agent/go.sum. Every hash change belongs to one of the four bumped k8s.io modules, and nothing else moves.

Breaking changes: None. No API or source changes in the bumped modules.

Security concerns: None. No CVE fixes, no new transitive dependencies, and no code changes to auth/TLS paths. client-go/plugin/pkg/client/auth is imported in agent/cmd/manager/main.go, but its code did not change.

Impact on codebase: The agent uses core/v1, meta/v1, runtime, util/errors, util/validation, tools/events, util/workqueue, kubernetes/scheme and rest. None of these changed. sigs.k8s.io/controller-runtime v0.25.2 and the indirect k8s.io/apiserver/apiextensions-apiserver/component-base v0.37.0 stay in the same minor line, so they are still compatible.

Recommendation: SAFE TO MERGE once CI is green. CI (lint, test el8/el9, image, e2e) was still running when this was checked.

Notes: Posted as a comment, not an approval, because the PR is authored by scality-renovate[bot]. Only dependabot PRs are auto-approved.

— Claude Code