Skip to content

Bump the kubernetes group across 1 directory with 6 updates#510

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/kubernetes-a3b253239d
Open

Bump the kubernetes group across 1 directory with 6 updates#510
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/kubernetes-a3b253239d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps the kubernetes group with 3 updates in the / directory: k8s.io/api, k8s.io/apiextensions-apiserver and sigs.k8s.io/controller-runtime.

Updates k8s.io/api from 0.35.4 to 0.36.1

Commits
  • 25001c8 Update dependencies to v0.36.1 tag
  • 879d396 Merge remote-tracking branch 'origin/master' into release-1.36
  • 030d81f Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • aef6eb6 Add granular authorization for DRA ResourceClaim status updates
  • 91061ea Merge pull request #136589 from tosi3k/preemption-mode
  • e6b81e2 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  • f8fce2e Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
  • b928f5e Workload API: PodGroup ResourceClaims (KEP-5729)
  • 61bd78e Merge pull request #137190 from everpeace/KEP-5491-alpha
  • 6bf46eb Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.4 to 0.36.1

Commits
  • 5b822b1 Update dependencies to v0.36.1 tag
  • 4cd8c3d Merge remote-tracking branch 'origin/master' into release-1.36
  • c2fd557 Merge pull request #138346 from dashpole/update_otel_prop
  • 1daa309 Merge remote-tracking branch 'origin/master' into release-1.36
  • 1551264 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 6c97d2b update go.opentelemetry.io/otel to v1.41.0
  • 862c52a update google.golang.org/grpc to v1.79.3
  • abac065 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 7acee75 Merge pull request #137843 from pacoxu/cobra-v1.10.2
  • 612f1d8 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.4 to 0.36.1

Commits
  • 7af103a Update dependencies to v0.36.1 tag
  • efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
  • d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
  • a8822f7 Add slice and map union member support with tests
  • 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
  • d95710f Fix union validation ratcheting when oldObj is nil
  • 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 13b12e6 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • 27f4670 Merge pull request #136657 from Jefftree/sharding-test
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.4 to 0.36.1

Commits
  • 55ef15a Update dependencies to v0.36.1 tag
  • f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
  • a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  • df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
  • 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
  • 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
  • 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
  • ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
  • 4a9c878 Add ResourcePoolStatusRequest API types and generated code
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2

Commits

Updates sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

⚠️ Breaking Changes

🐛 Bug Fixes

  • Cache: Fix IndexField blocking until informer is synced (#3445)
  • Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
  • Client: Update typed ApplyConfigurations with server response (#3475)
  • Fakeclient: Fix SSA status patch resource version check (#3443)
  • Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
  • Fakeclient: Fix status apply if existing object has managedFields set (#3430)
  • Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
  • HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

  • Builder/Webhooks: Remove deprecated custom path function (#3465)
  • Cache: Test cache reader waits for cache sync (#3434)
  • Certwatcher: Deflake certwatcher tests (#3457)
  • Dependencies: Use forked version of btree (#3449)
  • Envtest: Ensure envtest stops the whole process group (#3447)
  • Logging: Add missing space in zap-log-level flag description (#3492)
  • Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
  • Owners: Cleanup (#3453)
  • Recorder: Add logger into context for structured logging (#3454)
  • Recorder: Switch to StartLogging for event debug logs (#3451)
  • Scheme: Deprecate the scheme builder (#3461)
  • Source/Kind: Improve logging for dynamic type kind source (#3494)
  • Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

  • Chore: Update golangci-lint version to v2.8.0 (#3448)
  • Chore: Update golangci-lint version to v2.10.1 (#3470)
  • Chore: Update golangci-lint version to v2.11.3 (#3482)
  • Migrate away from custom GitHub action approval workflow (#3491)
  • Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

... (truncated)

Commits
  • 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
  • 0f7b33d Fix regression in Apply typed error handling
  • d3eaef3 Merge pull request #3475 from alvaroaleman/fixfix
  • 3296f32 🐛 Update typed Applyconfigurations with server response
  • c8b4b9d Merge pull request #3506 from troy0820/troy0820/update-deps-k8s
  • 557c314 update to k8s.io v1.36.0
  • e4a998c Merge pull request #3499 from kubernetes-sigs/dependabot/github_actions/all-g...
  • 1a31c56 Merge pull request #3498 from vieux/fix-fake-client-generatename-retry
  • 80bc294 fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...
  • 77b730a 🌱 Bump the all-github-actions group with 2 updates
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Chores
    • Updated Go toolchain and dependencies including Kubernetes libraries and monitoring components to latest versions for enhanced stability and performance.

@dependabot dependabot Bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels May 6, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 6, 2026

Walkthrough

Bumps Go toolchain 1.25.7 → 1.26.0 and upgrades direct Kubernetes modules (k8s.io/* → v0.36.1), controller-runtime → v0.24.1, plus a set of indirect dependencies (go-restful/v3, Prometheus libs, golang.org/x/time, protobuf, kube-openapi/streaming, structured-merge-diff, etc.) in go.mod.

Changes

Dependency upgrade — single cohort

Layer / File(s) Summary
Toolchain directive
go.mod
go directive updated from 1.25.7 to 1.26.0.
Kubernetes core modules
go.mod
Direct Kubernetes modules bumped: k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-gov0.36.1; sigs.k8s.io/controller-runtimev0.24.1; k8s.io/utils advanced.
Indirects: go-restful & Prometheus
go.mod
Indirect dependency github.com/emicklei/go-restful/v3v3.13.0; Prometheus-related modules (github.com/prometheus/common, github.com/prometheus/procfs, etc.) updated.
Other indirect dependency revisions
go.mod
Other transitive updates: golang.org/x/time, google.golang.org/protobuf, k8s.io/component-base, k8s.io/kube-openapi, k8s.io/streaming, sigs.k8s.io/structured-merge-diff/v6, and related revisions.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

Suggested reviewers

  • feichashao

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error, 2 warnings)

Check name Status Explanation Resolution
Ote Binary Stdout Contract ❌ Error Two OTE stdout contract violations found: (1) cmd/main.go line 46 sets klog.SetOutput(os.Stdout) instead of stderr, (2) cmd/fips.go init() calls fmt.Println() which writes to stdout at startup. Fix line 46 in cmd/main.go: change klog.SetOutput(os.Stdout) to klog.SetOutput(os.Stderr) or use klog.LogToStderr(true). Remove or redirect the fmt.Println call in cmd/fips.go init() function.
Microshift Test Compatibility ⚠️ Warning PR adds Ginkgo e2e tests using config.openshift.io APIs (FeatureGate, ClusterVersion) unavailable on MicroShift without proper [Skipped:MicroShift] or [apigroup:] labels. Add [Skipped:MicroShift] labels or guard with IsMicroShiftCluster checks to tests: (1) "blocks customers from setting TechPreviewNoUpgrade feature gate"; (2) "blocks unauthenticated users from managing managed resources".
Single Node Openshift (Sno) Test Compatibility ⚠️ Warning Test "blocks modifications to nodes" explicitly requires infra-labeled nodes that don't exist on SNO, causing failure without SNO compatibility protections. Add [Skipped:SingleReplicaTopology] label or use exutil.IsSingleNode() guard to skip multi-node-specific tests on SNO.
✅ Passed checks (9 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately reflects the main change: a Dependabot group update bumping multiple Kubernetes-related Go modules (k8s.io/api, apiextensions-apiserver, apimachinery, client-go, utils, and controller-runtime) in the go.mod file.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed All Ginkgo test names in validation_webhook_tests.go are stable and deterministic with no dynamic content. Dynamic pod names are correctly used in test setup bodies, not in test titles.
Test Structure And Quality ✅ Passed PR contains only go.mod/go.sum dependency version updates; no test code files were modified, so the Ginkgo test code quality check is not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed PR only updates Go module dependencies in go.mod/go.sum with no deployment manifests, operator code, or controllers modified—custom check for topology-aware scheduling constraints does not apply.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The custom check applies only to "when new Ginkgo e2e tests are added." This PR is a Dependabot dependency update (go.mod/go.sum only) with no new e2e tests, making the check inapplicable.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/kubernetes-a3b253239d

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions Bot enabled auto-merge (squash) May 6, 2026 20:14
@openshift-ci openshift-ci Bot requested review from feichashao and tnierman May 6, 2026 20:14
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented May 6, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@dependabot dependabot Bot force-pushed the dependabot/go_modules/kubernetes-a3b253239d branch from f6adf86 to 878c6e5 Compare May 13, 2026 20:18
Bumps the kubernetes group with 3 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime).


Updates `k8s.io/api` from 0.35.4 to 0.36.1
- [Commits](kubernetes/api@v0.35.4...v0.36.1)

Updates `k8s.io/apiextensions-apiserver` from 0.35.4 to 0.36.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.35.4...v0.36.1)

Updates `k8s.io/apimachinery` from 0.35.4 to 0.36.1
- [Commits](kubernetes/apimachinery@v0.35.4...v0.36.1)

Updates `k8s.io/client-go` from 0.35.4 to 0.36.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.4...v0.36.1)

Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `sigs.k8s.io/controller-runtime` from 0.23.3 to 0.24.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.23.3...v0.24.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20260210185600-b8788abfbbc2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kubernetes
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/kubernetes-a3b253239d branch from 878c6e5 to 1c7739e Compare May 20, 2026 23:16
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented May 20, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign mitalibhalla for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented May 20, 2026

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/pr-check 1c7739e link true /test pr-check
ci/prow/e2e-binary-build-success 1c7739e link true /test e2e-binary-build-success

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Around line 19-22: The listed Kubernetes module versions (k8s.io/api,
k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go) are
pinned to the nonexistent v0.36.1; update those module version strings to a
valid Kubernetes release (e.g., v1.36.1) in go.mod and then run the module
tidy/update command (eg. go get or go mod tidy) to refresh the go.sum and vendor
files so dependencies resolve correctly. Ensure you update all occurrences of
k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery and
k8s.io/client-go to the same compatible v1.36.1 version.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 70201908-05ad-4e1b-8322-99c3ec8a9945

📥 Commits

Reviewing files that changed from the base of the PR and between 878c6e5 and 1c7739e.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
Comment on lines +19 to +22
k8s.io/api v0.36.1
k8s.io/apiextensions-apiserver v0.36.1
k8s.io/apimachinery v0.36.1
k8s.io/client-go v0.36.1
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

Kubernetes v0.36.1 release notes and breaking changes

💡 Result:

Kubernetes does not have a release numbered v0.36.1. Kubernetes release versions are of the form vMAJOR.MINOR.PATCH (for example, v1.36.1). Kubernetes’s official release pages show that the latest v1.36 patch release is v1.36.1 (released 2026-05-12) and the v1.36 release line is managed as a supported minor version. [1][2] Kubernetes v1.36.1 release notes / breaking changes - The official Kubernetes release notes for v1.36.1 are provided via the GitHub release tag and the CHANGELOG for that release. [2][3] - The CHANGELOG for v1.36 (covering the v1.36.0 cycle) contains “Urgent Upgrade Notes” and a structured list of changes including deprecations and API changes, some of which are explicitly marked as action required/breaking for upgrade consumers. [3] Notable breaking/action-required changes called out for the v1.36 cycle (upgrade impact) 1) DRA (Dynamic Resource Allocation) RBAC permissions required (API change; action required) - The v1.36 CHANGELOG states that DRA drivers/controllers now require granular RBAC permissions to update ResourceClaim statuses when the DRAResourceStatusAuthorization feature gate is enabled. [3] 2) kubeadm flex-volumes integrated support removed (API change; action required) - The v1.36 CHANGELOG states that kubeadm’s integrated support for flex-volumes is removed; users were advised to migrate away from flex-volumes earlier, and v1.36 users who still want it must use a custom image and kube-controller-manager static pod volume mounting via kubeadm extraVolumes/flags per the note. [3] 3) apiserver admission subsystem type change: sets.String to sets.Set[string] (breaking for consumers of NewLifecycle) - The v1.36 CHANGELOG states this deprecated sets.String was replaced with sets.Set[string] in the apiserver admission subsystem, and that it is a breaking change for consumers of the NewLifecycle function. [3] If you meant “Kubernetes 1.36.1” (instead of “0.36.1”), those are the authoritative breaking/action-required items to review from the v1.36 CHANGELOG. [3][2] If you truly meant a non-Kubernetes project (for example, a library or dependency with a v0.36.1 tag), tell me the project/repo name and I’ll look up its exact release notes and breaking changes.

Citations:


Kubernetes version v0.36.1 does not exist—update dependencies to a valid version.

The dependencies are pinned to v0.36.1, but Kubernetes versions follow the format vMAJOR.MINOR.PATCH (e.g., v1.36.1). Kubernetes has no v0.36.1 release. Update all k8s.io dependencies to a valid version such as v1.36.1 (the latest v1.36 release as of May 2026).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` around lines 19 - 22, The listed Kubernetes module versions
(k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery,
k8s.io/client-go) are pinned to the nonexistent v0.36.1; update those module
version strings to a valid Kubernetes release (e.g., v1.36.1) in go.mod and then
run the module tidy/update command (eg. go get or go mod tidy) to refresh the
go.sum and vendor files so dependencies resolve correctly. Ensure you update all
occurrences of k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery
and k8s.io/client-go to the same compatible v1.36.1 version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants