Skip to content

Bump the k8s-dependencies group across 1 directory with 5 updates - #2080

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s-dependencies-1c0d8c6ac3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s-dependencies-1c0d8c6ac3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the k8s-dependencies group with 5 updates in the / directory:

Package From To
k8s.io/apiextensions-apiserver 0.36.4 0.37.1
k8s.io/apimachinery 0.36.4 0.37.1
k8s.io/client-go 0.36.4 0.37.1
sigs.k8s.io/controller-runtime 0.24.1 0.25.2
sigs.k8s.io/kind 0.32.0 0.33.0

Updates k8s.io/apiextensions-apiserver from 0.36.4 to 0.37.1

Commits
  • 4cf2f06 Update dependencies to v0.37.1 tag
  • 29d19cf Fix unit test compile failure under the fieldsv1string build tag
  • 1aa2717 Merge pull request #140205 from pohly/cel-deps
  • b51744f dependencies: cel-go v0.29.2
  • f416935 Merge pull request #140782 from dims/update-kube-openapi
  • 19c0db2 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 8ed17b6 Merge pull request #140774 from dims/prom-client-v1.24.0
  • 48a6e2f Update prometheus/client_golang to 1.24.0
  • e7c1b62 Merge pull request #139821 from pohly/client-go-informers-type-safety
  • e86edad Merge pull request #140740 from dims/update-grpc-1.82.1
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.36.4 to 0.37.1

Commits
  • e3a4b17 Update dependencies to v0.37.1 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.4 to 0.37.1

Commits
  • 066ed4e Update dependencies to v0.37.1 tag
  • 50c6f9b metrics: Register: Fix incorrect assignment
  • 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
  • 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
  • 2bf14f2 Merge pull request #140990 from xigang/revert-140448
  • 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
  • df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
  • 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 694f4eb apidiff: ignore adding entirely new API groups
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

v0.25.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

✨ New Features

  • Client: Add a read-your-own-writes client (#3472)
  • Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
  • Fakeclient: Add scale subresource support for Apply (#3569)
  • Metrics: Allow opt-in for client-go REST client metrics (#3510)
  • Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
  • Source: Add TypedInformer source (#3520)
  • Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

  • Cache: Fix goroutine leaks in cache Start() methods (#3565)
  • Client: Fix regression in Apply typed error handling (#3515)
  • Controller: Unlock when Controller.Start() returns with error (#3545)
  • Envtest: Fix envtest process stop on Windows (#3519)

... (truncated)

Commits
  • 5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
  • 7b211af sparkles: Add a metric for the readyourwite consistency wait duration
  • dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
  • c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
  • d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
  • 1b98304 sparkles: Add metrics handler options
  • 8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
  • ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
  • 67b72c2 [release-0.25] 🐛 client: fix subresource create RV parse error under read-you...
  • f997220 [release-0.25] 🐛 priorityqueue: fix data race on []*item in logState (#3593)
  • Additional commits viewable in compare view

Updates sigs.k8s.io/kind from 0.32.0 to 0.33.0

Release notes

Sourced from sigs.k8s.io/kind's releases.

v0.33.0

This release contains critical dependency updates, bug fixes, and defaults to Kubernetes 1.37.0.

Breaking Changes

The default node image is now kindest/node:v1.37.0@sha256:a1ed56cfb0e7b93589bdf97c8cd566405a265939e3620fc4f5de89adff580ae5.

New Features

  • Assorted dependency updates.

Images pre-built for this release:

  • v1.37.0: kindest/node:v1.37.0@sha256:a1ed56cfb0e7b93589bdf97c8cd566405a265939e3620fc4f5de89adff580ae5
  • v1.36.4: kindest/node:v1.36.4@sha256:099e049362a1526b2db71494e1947aae99bd16290d7c895f2b7ea312e3cbfaed
  • v1.35.8: kindest/node:v1.35.8@sha256:07b2536e30b803ed61d1677a79df6115f798ce64c80f9e22f6ed45afd09323c0
  • v1.34.11: kindest/node:v1.34.11@sha256:44e222ee2132dab25ff87301682f89eb82c7880ea3a1bf543bfe9708fd08d67d

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see #2718

Fixes

  • Respect Docker client proxy config for docker nodes. (#4192)
  • Preserve external load balancer CDS/LDS configuration across container restarts. (#4195)
  • Improve local-path-provisioner helperPod tolerations. (#4210)
  • Assorted documentation fixes and improvements.

Contributors

Committers for this release:

... (truncated)

Commits
  • 407a967 version v0.33.0
  • 2f5bf7d Merge pull request #4248 from stmcginnis/v1.37.0
  • 5bf2da5 bump default iamge to kindest/node:v1.37.0
  • fed2688 Merge pull request #4242 from BenTheElder/node-v1.37.0-rc.1
  • c20a04a bump default image to kindest/node:v1.37.0-rc.1
  • 813e832 Merge pull request #4241 from BenTheElder/update-images
  • 0d47763 Merge pull request #4233 from antoineco/picture-emoji
  • 2200065 nodeimage: bump default local-path-provisioner image to v20260820-69b56db7
  • d2dcab9 nodeimage: bump default kindnetd image to v20260820-69b56db7
  • 4062f9c nodeimage: bump default base image to v20260820-69b56db7
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Chores
    • Updated Kubernetes-related components and supporting libraries to newer versions, including tools for monitoring and telemetry. No user-facing feature changes are included in this update.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 7, 2026
@perdasilva

Copy link
Copy Markdown
Contributor

/hold until we're ready for 1.37

@openshift-ci openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Sep 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-1c0d8c6ac3 branch from d8b366c to 8f3af79 Compare September 15, 2026 02:43
@coderabbitai

coderabbitai Bot commented Sep 15, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: afb03c73-5d37-4d43-9f89-857b78631433
📥 Commits

Reviewing files that changed from the base of the PR and between ef52fef and 0ed52bc.

⛔ Files ignored due to path filters: 1
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing: 1
  • go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

📝 Walkthrough

go.mod updates Kubernetes, controller-runtime, and kind dependencies. It also updates selected indirect dependencies, including fxamacker/cbor, go-openapi, Prometheus, OpenTelemetry, and Kubernetes-related packages.

Changes: Dependency upgrades

Layer / File(s) Summary
Module version updates
go.mod
Kubernetes dependencies move from v0.36.4 to v0.37.1, controller-runtime moves from v0.24.1 to v0.25.2, and kind moves from v0.32.0 to v0.33.0. Selected indirect dependencies are also updated.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 0ed52

This is a dependency version bump with no identified code incompatibility. The PR is on hold until the project is ready for Kubernetes 1.37, and normal CI should confirm the build.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title accurately identifies the pull request as a grouped Kubernetes dependency update and matches the five proposed updates in the repository root.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-1c0d8c6ac3 branch 4 times, most recently from b138854 to d2e9a49 Compare September 23, 2026 02:43
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-1c0d8c6ac3 branch 5 times, most recently from b2e59c4 to d4b9ba5 Compare October 2, 2026 02:43
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-1c0d8c6ac3 branch from d4b9ba5 to 57eb300 Compare October 6, 2026 02:43
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-1c0d8c6ac3 branch from 57eb300 to ef52fef Compare October 15, 2026 02:43
@dependabot
dependabot Bot changed the base branch from master to main October 15, 2026 20:29
Bumps the k8s-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.4` | `0.37.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.4` | `0.37.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.4` | `0.37.1` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.1` | `0.25.2` |
| [sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind) | `0.32.0` | `0.33.0` |



Updates `k8s.io/apiextensions-apiserver` from 0.36.4 to 0.37.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.36.4...v0.37.1)

Updates `k8s.io/apimachinery` from 0.36.4 to 0.37.1
- [Commits](kubernetes/apimachinery@v0.36.4...v0.37.1)

Updates `k8s.io/client-go` from 0.36.4 to 0.37.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.4...v0.37.1)

Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.2
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.24.1...v0.25.2)

Updates `sigs.k8s.io/kind` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/kubernetes-sigs/kind/releases)
- [Changelog](https://github.com/kubernetes-sigs/kind/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/kind@v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/kind
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-1c0d8c6ac3 branch from ef52fef to 0ed52bc Compare October 16, 2026 02:43
@openshift-ci

openshift-ci Bot commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tmshort for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant