Skip to content

Update kubernetes dependencies#76

Closed
renovate-for-pdx[bot] wants to merge 1 commit intomainfrom
renovate/kubernetes-dependencies
Closed

Update kubernetes dependencies#76
renovate-for-pdx[bot] wants to merge 1 commit intomainfrom
renovate/kubernetes-dependencies

Conversation

@renovate-for-pdx
Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
k8s.io/api v0.34.3v0.35.3 age confidence require minor
k8s.io/apimachinery v0.34.3v0.35.3 age confidence require minor
k8s.io/client-go v0.34.3v0.35.3 age confidence require minor
kindest/node v1.34.0v1.34.3 age confidence patch
kindest/node v1.33.4v1.33.7 age confidence patch
kindest/node v1.32.8v1.32.11 age confidence patch
kubernetes-sigs/controller-runtime/setup-envtest v0.23.2v0.23.3 age confidence patch
kubernetes-sigs/controller-tools 1.34.11.35.0 age confidence minor
kubernetes-sigs/controller-tools/controller-gen v0.19.0v0.20.1 age confidence minor
kubernetes-sigs/kind v0.30.0v0.31.0 age confidence minor
kubernetes-sigs/kubebuilder v4.10.1v4.13.1 age confidence minor
kubernetes-sigs/kustomize v5.8.0v5.8.1 age confidence patch
kubernetes/kubectl 1.34.31.35.3 age confidence minor
sigs.k8s.io/controller-runtime v0.22.4v0.23.3 age confidence require minor

Renovate will not update the Kubernetes minor version automatically.

Please check the Kubernetes release notes and update the version manually if needed:


Release Notes

kubernetes/api (k8s.io/api)

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.6

Compare Source

v0.34.5

Compare Source

v0.34.4

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.6

Compare Source

v0.34.5

Compare Source

v0.34.4

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.6

Compare Source

v0.34.5

Compare Source

v0.34.4

Compare Source

kubernetes-sigs/controller-runtime (kubernetes-sigs/controller-runtime/setup-envtest)

v0.23.3

Compare Source

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

kubernetes-sigs/controller-tools (kubernetes-sigs/controller-tools)

v1.35.0

Compare Source

kubernetes-sigs/kind (kubernetes-sigs/kind)

v0.31.0

Compare Source

This release contains dependency updates and defaults to Kubernetes 1.35.0.

Please take note of the breaking changes from Kubernetes 1.35, and how to prepare for future changes to move off of the deprecated kubeam v1beta3 in favor of v1beta4. We will include updated reminders for both again in subsequent releases.

Breaking Changes

The default node image is now kindest/node:v1.35.0@​sha256:452d707d4862f52530247495d180205e029056831160e22870e37e3f6c1ac31f

Kubernetes 1.35+ Cgroup v1

Kubernetes will be removing cgroup v1 support, and therefore kind node images at those versions will also be dropping support.

You can read more about this change in the Kubernetes release blog: https://kubernetes.io/blog/2025/12/17/kubernetes-v1-35-release/#removal-of-cgroup-v1-support

If you must use kind on cgroup v1, we recommend using an older Kubernetes release for the immediate future, but we also strongly recommend migrating to cgroup v2.

In the near future as Kubernetes support dwindles, KIND will also clean up cgroup v1 workarounds and drop support in future kind releases and images, regardless of Kubernetes version.

Most stable linux distros should be on cgroupv2 out of the box.

This is a reminder to use pinned images by digest, see the note below about images for this release.

Kubeadm Config *Future* Breaking Change

WARNING: Future kind releases will adopt kubeadm v1beta4 configuration, kubeadm v1beta4 has a breaking change to extraArgs: https://kubernetes.io/blog/2024/08/23/kubernetes-1-31-kubeadm-v1beta4/.

If you use the kubeadmConfigPatches feature then you may need to prepare for this change.
We recommend that you use versioned config patches that explicitly match the version required.

KIND uses kubeadm v1beta3 for Kubernetes 1.23+, and will likely use v1beta4 for Kubernetes 1.36+
The exact version is TBD pending work to fix this but expected to be 1.36.
It will definitely be an as-of-yet-unreleased Kubernetes version to avoid surprises, and it will not be on a patch-release boundary.

KIND may still work with older Kubernetes versions at v1beta2, but we no longer test or actively support these as Kubernetes only supports 1.32+ currently: https://kubernetes.io/releases/

You likely only need v1beta3 + v1beta4 patches, you can take your existing patches that work with v1beta3, explicitly set apiVersion: kubeadm.k8s.io/v1beta3 in the patch at the top level, and make another copy for v1beta4. The v1beta4 patch will need to move extraArgs from a map to a list, for examples see: https://kubernetes.io/docs/reference/config-api/kubeadm-config.v1beta4/

For a concrete example of kind config with kubeadm config patch targeting both v1beta3 and v1beta4, consider this simple kind config that sets verbosity of the apiserver logs:

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
kubeadmConfigPatches:

# patch for v1beta3 (1.23 ...)
- |
  kind: ClusterConfiguration
  apiVersion: kubeadm.k8s.io/v1beta3
  apiServer:
    extraArgs:
      "v": "4"

# patch for v1beta4 (future)
- |
  kind: ClusterConfiguration
  apiVersion: kubeadm.k8s.io/v1beta4
  apiServer:
    extraArgs:
      - name: "v"
        value: "4"

If you only need to target a particular release, you can use one version.

If you only need to target fields that did not change between kubeadm beta versions, you can use a versionless patch, which may be more convenient, but we cannot guarantee there will be no future kubeadm config breaking changes.

New Features

  • Assorted unspecified dependency updates

Images pre-built for this release:

  • v1.35.0: kindest/node:v1.35.0@​sha256:452d707d4862f52530247495d180205e029056831160e22870e37e3f6c1ac31f
  • v1.34.3: kindest/node:v1.34.3@​sha256:08497ee19eace7b4b5348db5c6a1591d7752b164530a36f855cb0f2bdcbadd48
  • v1.33.7: kindest/node:v1.33.7@​sha256:d26ef333bdb2cbe9862a0f7c3803ecc7b4303d8cea8e814b481b09949d353040
  • v1.32.11: kindest/node:v1.32.11@​sha256:5fc52d52a7b9574015299724bd68f183702956aa4a2116ae75a63cb574b35af8
  • v1.31.14: kindest/node:v1.31.14@​sha256:6f86cf509dbb42767b6e79debc3f2c32e4ee01386f0489b3b2be24b0a55aac2b

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see #​2718

Fixes

  • Detect additional edge case with ipv6 support on the host
  • Make development / release scripts GOTOOLCHAIN aware

Contributors

Committers for this release:

kubernetes-sigs/kubebuilder (kubernetes-sigs/kubebuilder)

v4.13.1

Compare Source

🚀 Keep Your Scaffold Updated

The migration guide covers upgrading from any version to the latest, including AI-assisted helpers/commands for legacy scaffolds that may require manual steps. For the smoothest path, enable the AutoUpdate Plugin (uses GitHub Actions) or run kubebuilder alpha update locally—both use the same update logic. The other options are primarily for older projects missing cliVersion in the PROJECT file as a one-time step to reach a supported version; after that, you can rely on these workflows for ongoing updates.

✨ Upgrades

  • (go/v4): Upgrade cert-manager from v1.19.4 to v1.20.0 (#​5531)
  • (go/v4): Upgrade controller-runtime from v0.23.1 to v0.23.3 (#​5532)

🐛 Bug Fixes

  • (API): Move test/e2e/helpers to test/e2e/internal (#​5516
  • (API): Move logging and alpha packages to internal (#​5514)
  • (helm/v2-alpha): Fix double-escaping of YAML-encoded quotes in template expressions (#​5529)
  • (go/v4): Add SchemeGroupVersion for applyconfiguration compatibility (#​5491)
  • (config/v3): Ignore unknown fields in the PROJECT file for forward compatibility (#​5540)
  • (alpha/generate): Skip Go version check by default (#​5547)

What's Changed

New Contributors

Full Changelog: kubernetes-sigs/kubebuilder@v4.13.0...v4.13.1

v4.13.0

Compare Source

🚀 Keep Your Scaffold Updated

The migration guide covers upgrading from any version to the latest, including AI-assisted helpers/commands for legacy scaffolds that may require manual steps. For the smoothest path, enable the AutoUpdate Plugin (uses GitHub Actions) or run kubebuilder alpha update locally—both use the same update logic. The other options are primarily for older projects missing cliVersion in the PROJECT file as a one-time step to reach a supported version; after that, you can rely on these workflows for ongoing updates.

✨ Upgrades

  • (go/v4): Upgrade cert-manager used in the e2e tests from v1.19.3 to v1.19.4 (#​5509)

✨ New Features

  • (helm/v2-alpha): Add manager.envOverrides to support overriding manager environment variables via Helm CLI (e.g. --set manager.envOverrides.LOG_LEVEL=debug) (#​5495)

🐛 Bug Fixes

  • (go/v4): Fix lint execution to ensure the project’s configured lint rules are properly applied (#​5493)
  • (helm/v2-alpha): Fix manager.replicas so values from values.yaml are correctly applied in the chart template (#​5494)
  • (helm/v2-alpha): Ensure generated Helm Chart files use consistent 2-space indentation (#​5490)
  • (CLI/alpha update): Fix panic when multiple plugins define the same CLI flag (e.g. edit with go/v4 + helm/v2-alpha) (#​5506)
  • (go/v4, helm/v2-alpha): Standardize generated file and directory permissions (files: 0644, directories: 0755) (#​5508)

🎉 Thanks to all contributors!

What's Changed ( Full Changelog )

New Contributors

Full Changelog: kubernetes-sigs/kubebuilder@v4.12.0...v4.13.0

v4.12.0

Compare Source

🚀 Keep Your Scaffold Updated

The migration guide covers upgrading from any version to the latest, including AI-assisted helpers/commands for legacy scaffolds that may require manual steps. For the smoothest path, enable the AutoUpdate Plugin (uses GitHub Actions) or run kubebuilder alpha update locally—both use the same update logic. The other options are primarily for older projects missing cliVersion in the PROJECT file as a one-time step to reach a supported version; after that, you can rely on these workflows for ongoing updates.

✨ Upgrades

  • (go/v4): upgrade golangci-lint from v2.7.2 to v2.8.1. (#​5403, #​5481)
  • (go/v4): Upgrade certmanager from v1.19.2 to v1.19.3. (#​5431)
  • (go/v4): Upgrade controller-tools from v0.20.0 to v0.20.1 (#​5475)
  • (kustomize/v2): Upgrade kustomize from 5.7.1 to 5.8.1. (#​5412, #​5481)

✨ New features

  • (helm/v2-alpha): Polish Chart.yaml metadata. (#​5414)
  • (helm/v2-alpha): Add Notes.txt. (#​5392)
  • (helm/v2-alpha): Add Makefile targets for Helm Development. (#​5442,#​5468)
  • (go/v4): Add autocomplete support in .devcontainer/post-install.sh and enhance script. (#​5394, #​5435)
  • (go/v4): Add custom k8s linter for logs to promote better observability. (#​5396)
  • (go/v4): Now, users can scaffold projects which are namespace-scoped managers by using the flag --namespaced. The flag is valid for init and edit subcommands (#​5411, #​5482, #​5480)
  • (go/v4): add --multigroup flag to init subcommand. Now you can initialize a project with this layout (#​5440)
  • (CLI): Add short description to tab completion in bash . (#​5408)
  • (alpha/update): Add the flag --merge-message and flag --conflict-message to allow customise commit messages. (#​5429, #​5479)

🐛 Bug fixes

  • (go/v4): Follow Kubernetes logging conventions. (#​5406)
  • (go/v4): Make e2e tests more robust to avoid flakes (#​5437, #​5450)
  • (helm/v2-alpha): wrap webhook resources with .Values.webhook.enable conditional. (#​5413)
  • (helm/v2-alpha): Fix chart generation and template rendering issues. (#​5422)
  • (helm/v2-alpha): Support custom container names and fix templating bugs (#​5463)
  • (helm/v2-alpha): Fix crd.keep to correctly add the helm.sh/resource-policy: keep annotation to generated CRDs (#​5472)
  • (helm/v2-alpha): remove deprecated helm/v1-alpha plugin entry from PROJECT file when helm/v2-alpha is used. (#​5436)
  • (CLI): alpha generate/update now respects the custom project name. (#​5426)
  • (alpha/update): update commit messages with conventional commit format. (#​5428)
  • (CLI/API): Fix issues when the --help command was used with --plugins and improve output to show the available help plugins per subcommand. (#​5448)
  • (API): move hack/docs/utils to hack/docs/internal. (#​5407)

🎉 Thanks to all contributors!

What's Changed ( Full Changelog )

New Contributors

Full Changelog: kubernetes-sigs/kubebuilder@v4.11.1...v4.12.0

v4.11.1

Compare Source

🚀 Keep Your Scaffold Updated

The migration guide covers upgrading from any version to the latest, including AI-assisted helpers/commands for legacy scaffolds that may require manual steps. For the smoothest path, enable the AutoUpdate Plugin (uses GitHub Actions)) or run kubebuilder alpha update locally—both use the same update logic. The other options are primarily for older projects missing cliVersion in the PROJECT file as a one-time step to reach a supported version; after that, you can rely on these workflows for ongoing updates.

🐛 Bug fixes

  • (go/v4): Upgrade controller-runtime from v0.23.0 to v0.23.1. For further information, see its release notes.(#​5402)
  • (helm/v2-alpha): Escape existing Go template syntax in generated Helm charts to prevent rendering conflicts. (#​5388)
  • (helm/v2-alpha): Prevent CRs (Custom Resources) resources from being added to the extras directory. (#​5389)
  • (CLI): Insert build information into Go tools installation methods used by the CLI version command. (#​5303)
  • (CLI): Format the output of the version subcommand for improved readability and consistency. (#​5236)
  • (API): Move the cmd package under internal to improve encapsulation and API boundaries. (#​5400)

Note: If you did not upgrade your project to v4.11.0, please make sure to review its release notes, as they contain important major changes that also apply to this release.

🎉 Thanks to all contributors!

What's Changed (Full Changelog)

Full Changelog: kubernetes-sigs/kubebuilder@v4.11.0...v4.11.1

v4.11.0

Compare Source

🚀 Keep Your Scaffold Updated

🎉 Our migration guide was fully updated to help you upgrade from any version to the latest. It also now includes AI migration helpers/commands to guide upgrades for old scaffolds where manual steps are required. See the migrations guidance.

Automate updates with kubebuilder edit --plugins="autoupdate.kubebuilder.io/v1-alpha" or run them manually with kubebuilder alpha update. If your PROJECT file does not include cliVersion, you may need a one-time upgrade, and kubebuilder alpha generate can fully re-scaffold the project in one step. After that, updates work seamlessly. (More info)

⚠️ Breaking changes

controller-runtime v0.23.0 upgrade (v0.22.4v0.23.0)

This release updates Kubebuilder scaffolding to match controller-runtime v0.23.0. This version includes breaking changes that impact generated projects:

  1. Type-safe webhook builder API — webhooks now use generics for stronger type safety
  2. New Events API — migration from tools/record to tools/events
  3. ENVTEST teardowntestEnv.Stop() now requires an Eventually wrapper for graceful shutdown
If you use the Helm plugin to distribute your project

This release includes major Helm plugin changes (community-raised fixes and improvements have been addressed). Please update your project:

kubebuilder edit --plugins=helm/v2-alpha --force

If you have customisations, back up your current Helm chart first so you can re-apply them on top of the latest version.

Tip: Check the `PR


Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-for-pdx
Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 21 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.3 -> 1.25.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
golang.org/x/mod v0.27.0 -> v0.29.0
golang.org/x/sync v0.16.0 -> v0.18.0
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2-0.20260122202528-d9cc6641c482
github.com/prometheus/client_golang v1.22.0 -> v1.23.2
github.com/prometheus/client_model v0.6.1 -> v0.6.2
github.com/prometheus/common v0.62.0 -> v0.66.1
github.com/prometheus/procfs v0.15.1 -> v0.16.1
github.com/spf13/cobra v1.9.1 -> v1.10.0
github.com/spf13/pflag v1.0.6 -> v1.0.9
golang.org/x/net v0.43.0 -> v0.47.0
golang.org/x/oauth2 v0.27.0 -> v0.30.0
golang.org/x/sys v0.35.0 -> v0.38.0
golang.org/x/term v0.34.0 -> v0.37.0
golang.org/x/text v0.28.0 -> v0.31.0
golang.org/x/tools v0.36.0 -> v0.38.0
google.golang.org/protobuf v1.36.7 -> v1.36.8
k8s.io/apiextensions-apiserver v0.34.1 -> v0.35.0
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730

@ystkfujii ystkfujii requested a review from 012xx April 10, 2026 02:20
@012xx 012xx closed this Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants