Skip to content

build(deps): bump the k8s group across 1 directory with 6 updates - #583

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s-fa2a6e64a2
Open

build(deps): bump the k8s group across 1 directory with 6 updates#583
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s-fa2a6e64a2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the k8s group with 6 updates in the / directory:

Package From To
k8s.io/apiextensions-apiserver 0.35.0 0.37.1
k8s.io/apimachinery 0.35.1 0.37.1
k8s.io/client-go 0.35.1 0.37.1
k8s.io/utils 0.0.0-20260210185600-b8788abfbbc2 0.0.0-20260626114624-be93311217bd
sigs.k8s.io/controller-runtime 0.23.1 0.25.2
sigs.k8s.io/gateway-api 1.5.1 1.6.3

Updates k8s.io/apiextensions-apiserver from 0.35.0 to 0.37.1

Commits
  • 4cf2f06 Update dependencies to v0.37.1 tag
  • 29d19cf Fix unit test compile failure under the fieldsv1string build tag
  • 1aa2717 Merge pull request #140205 from pohly/cel-deps
  • b51744f dependencies: cel-go v0.29.2
  • f416935 Merge pull request #140782 from dims/update-kube-openapi
  • 19c0db2 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 8ed17b6 Merge pull request #140774 from dims/prom-client-v1.24.0
  • 48a6e2f Update prometheus/client_golang to 1.24.0
  • e7c1b62 Merge pull request #139821 from pohly/client-go-informers-type-safety
  • e86edad Merge pull request #140740 from dims/update-grpc-1.82.1
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.1 to 0.37.1

Commits
  • e3a4b17 Update dependencies to v0.37.1 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.1 to 0.37.1

Commits
  • 066ed4e Update dependencies to v0.37.1 tag
  • 50c6f9b metrics: Register: Fix incorrect assignment
  • 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
  • 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
  • 2bf14f2 Merge pull request #140990 from xigang/revert-140448
  • 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
  • df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
  • 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 694f4eb apidiff: ignore adding entirely new API groups
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20260210185600-b8788abfbbc2 to 0.0.0-20260626114624-be93311217bd

Commits

Updates sigs.k8s.io/controller-runtime from 0.23.1 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

v0.25.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

✨ New Features

  • Client: Add a read-your-own-writes client (#3472)
  • Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
  • Fakeclient: Add scale subresource support for Apply (#3569)
  • Metrics: Allow opt-in for client-go REST client metrics (#3510)
  • Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
  • Source: Add TypedInformer source (#3520)
  • Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

  • Cache: Fix goroutine leaks in cache Start() methods (#3565)
  • Client: Fix regression in Apply typed error handling (#3515)
  • Controller: Unlock when Controller.Start() returns with error (#3545)
  • Envtest: Fix envtest process stop on Windows (#3519)

... (truncated)

Commits
  • 5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
  • 7b211af sparkles: Add a metric for the readyourwite consistency wait duration
  • dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
  • c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
  • d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
  • 1b98304 sparkles: Add metrics handler options
  • 8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
  • ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
  • 67b72c2 [release-0.25] 🐛 client: fix subresource create RV parse error under read-you...
  • f997220 [release-0.25] 🐛 priorityqueue: fix data race on []*item in logState (#3593)
  • Additional commits viewable in compare view

Updates sigs.k8s.io/gateway-api from 1.5.1 to 1.6.3

Release notes

Sourced from sigs.k8s.io/gateway-api's releases.

v1.6.3

Major Changes Since v1.6.2

Conformance

  • Conformance tests for stable features (notable TCPRoute and UDPRoute) are no longer marked as "provisional" (#5260, @​rikatz)
  • Force the timeout for the ExpectMirroredRequest conformance test to MaxTimeToConsistency (#5296, @​kl52752)
  • Actually remove unused namespaces in Mesh conformance tests (#5251, @​xtineskim)
  • Add the GatewayInvalidParametersRef conformance test (#5236, @​kl52752)

Build

v1.6.2

Major Changes Since v1.6.1

Bug or Regression

  • HTTPRequestRedirectFilter status codes 303, 307, and 308 are Extended conformance, not Core. (#5173, @​kflynn)

Other (Cleanup or Flake)

  • Fix flaky TCPRouteWeightedRouting and UDPRouteWeightedRouting conformance tests by adding a data-plane readiness check before performing weighted routing assertions. (#5064, @​arybolovlev)
  • Fix FailFast not working as expected (#5204, @​zirain)
  • Allow disabling parallel tests at the suite level (#5184, @​zirain)

v1.6.1

Major Changes Since v1.6.0

Test & Conformance

  • Change the port used in TCPRouteMultipleRoutesAttachment. (#5053, @​davidjumani)
  • Respect CleanupTestResources for BackendTLSPolicy, TCPRouteMultipleRoutesAttachment and UDPRouteMultipleRoutesAttachment(#5065, @​snorwin)
  • Fix SetupTimeoutConfig() not respecting defaults for ListenerSetMustHaveCondition, ListenerSetListenersMustHaveConditions, and RequiredConsecutiveSuccesses. (#5066, @​immanuwell)
  • Honour tcpRouteMustHaveCondition and udpRouteMustHaveCondition timeouts which were silently ignore. (#5067, @​immanuwell)

Other (Cleanup or Flake)

  • Fix GatewayStaticAddresses test flake by waiting for status.addresses to be published instead of assuming it appears atomically with Programmed. (#5038, @​howardjohn)
  • Fix GatewayInfrastructure test flake by polling for generated infrastructure resources instead of assuming immediate visibility after the gateway is accepted. (#5047, @​howardjohn)
  • Fix flaky TCPRouteWeightedRouting and UDPRouteWeightedRouting conformance tests by adding a data-plane readiness check before performing weighted routing assertions. (#5064, @​arybolovlev)

v1.6.0

Changes Since v1.5.1

... (truncated)

Commits
  • c083613 chore: Release 1.6.3 (#5335)
  • 6379db7 change timeout in ExpectMirroredRequest to MaxTimeToConsistency (#5296)
  • 5cc08b4 release-1.6: fix: remove provisional flag from promoted tests (#5260)
  • a247322 Removed unused namespaces in mesh suites (#5251)
  • e12f66b Create a new GatewayInvalidParametersRefFeature and move GatewayInvalidParame...
  • e1e5d5f cleanup: ensure Go toolchain matches go.work (#5234)
  • ca6c2a6 chore: Prep for v1.6.2 release (#5217)
  • 35a901e fix: FailFast not working as expected (#5204)
  • ce8030b [release-1.6] 303, 307, and 308 HTTPRoute redirect codes are Extended, not Co...
  • 52754cd allow to disabled parallel tests (#5184)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 30, 2026
@cursor

cursor Bot commented Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Medium Risk
Large controller-runtime and client-go minor jumps can change runtime behavior (cache, client, webhooks) even without code edits; validate reconcilers and Gateway API integration in CI or a test cluster.

Overview
Bumps the root module’s Kubernetes dependency set from the 0.35 line to 0.37.1, including k8s.io/api, apimachinery, client-go, apiextensions-apiserver, and k8s.io/utils.

Also upgrades sigs.k8s.io/controller-runtime from 0.23.1 to 0.25.2 and sigs.k8s.io/gateway-api from 1.5.1 to 1.6.3, with matching go.sum checksum updates. Transitive pins move with that stack (e.g. k8s.io/apiserver / component-base, kube-openapi, structured-merge-diff, new indirect k8s.io/streaming, and refreshed cel-go / OTel trace exporter versions).

There are no application source changes in this diff—only go.mod and go.sum.

Reviewed by Cursor Bugbot for commit 11edce6. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-fa2a6e64a2 branch from 2b9626e to 2f1df9b Compare October 6, 2026 21:54
@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't resolve your Go dependency files. Because of this, Dependabot cannot update this pull request.

@dependabot
build(deps): bump the k8s group across 1 directory with 6 updates
11edce6 
Bumps the k8s group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.35.0` | `0.37.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.1` | `0.37.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.1` | `0.37.1` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20260210185600-b8788abfbbc2` | `0.0.0-20260626114624-be93311217bd` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.23.1` | `0.25.2` |
| [sigs.k8s.io/gateway-api](https://github.com/kubernetes-sigs/gateway-api) | `1.5.1` | `1.6.3` |



Updates `k8s.io/apiextensions-apiserver` from 0.35.0 to 0.37.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.35.0...v0.37.1)

Updates `k8s.io/apimachinery` from 0.35.1 to 0.37.1
- [Commits](kubernetes/apimachinery@v0.35.1...v0.37.1)

Updates `k8s.io/client-go` from 0.35.1 to 0.37.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.1...v0.37.1)

Updates `k8s.io/utils` from 0.0.0-20260210185600-b8788abfbbc2 to 0.0.0-20260626114624-be93311217bd
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `sigs.k8s.io/controller-runtime` from 0.23.1 to 0.25.2
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.23.1...v0.25.2)

Updates `sigs.k8s.io/gateway-api` from 1.5.1 to 1.6.3
- [Release notes](https://github.com/kubernetes-sigs/gateway-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/gateway-api/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/gateway-api@v1.5.1...v1.6.3)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20260626114624-be93311217bd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
- dependency-name: sigs.k8s.io/gateway-api
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-fa2a6e64a2 branch from 2f1df9b to 11edce6 Compare October 14, 2026 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants