Skip to content

build(deps): bump the golang group across 1 directory with 5 updates#252

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/golang-b4d31056f6
Open

build(deps): bump the golang group across 1 directory with 5 updates#252
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/golang-b4d31056f6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 8, 2026 •
edited
Loading

Bumps the golang group with 4 updates in the / directory: github.com/mikefarah/yq/v4, k8s.io/api, sigs.k8s.io/controller-runtime and sigs.k8s.io/controller-tools.

Updates github.com/mikefarah/yq/v4 from 4.52.5 to 4.53.2

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.53.2

  • Releases and tags now signed and immutable!
  • Add system(command; args) operator (disabled by default) (#2640)
  • TOML encoder: prefer readable table sections over inline tables (#2649)
  • Fix TOML encoder to quote keys containing special characters (#2648)
  • Add string slicing support (#2639)
  • Fix findInArray misuse on MappingNodes in equality and contains (#2645) Thanks @​jandubois!
  • Fix panic on negative slice indices that underflow after adjustment (#2646) Thanks @​jandubois!
  • Fix stack overflow from circular alias in traverse (#2647) Thanks @​jandubois!
  • Fix panic and OOM in repeatString for large repeat counts (#2644) Thanks @​jandubois!
  • Bumped dependencies
Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.53.2:

  • Fixing release process

4.53.1:

  • Releases and tags now signed and immutable!
  • Add system(command; args) operator (disabled by default) (#2640)
  • TOML encoder: prefer readable table sections over inline tables (#2649)
  • Fix TOML encoder to quote keys containing special characters (#2648)
  • Add string slicing support (#2639)
  • Fix findInArray misuse on MappingNodes in equality and contains (#2645) Thanks @​jandubois!
  • Fix panic on negative slice indices that underflow after adjustment (#2646) Thanks @​jandubois!
  • Fix stack overflow from circular alias in traverse (#2647) Thanks @​jandubois!
  • Fix panic and OOM in repeatString for large repeat counts (#2644) Thanks @​jandubois!
  • Bumped dependencies
Commits
  • 751d8ad Bumping version
  • 6dd681a Fixing release signing
  • fc7c337 Updating bump version script
  • e969dd7 Bumping version
  • dc4b4ea Preparing release notes
  • 602586d Create scorecard.yml
  • 9a0335a fix: restrict GitHub Actions workflow token permissions (OSSF least-privilege...
  • 838c516 Trying to test release
  • c8f6c1a Updating release to sign checksums
  • 0e80383 chore: pin GitHub Actions and Docker base images to full-length hashes (OSSF ...
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.35.3 to 0.36.0

Commits
  • 545bb97 Update dependencies to v0.36.0 tag
  • 879d396 Merge remote-tracking branch 'origin/master' into release-1.36
  • 030d81f Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • aef6eb6 Add granular authorization for DRA ResourceClaim status updates
  • 91061ea Merge pull request #136589 from tosi3k/preemption-mode
  • e6b81e2 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  • f8fce2e Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
  • b928f5e Workload API: PodGroup ResourceClaims (KEP-5729)
  • 61bd78e Merge pull request #137190 from everpeace/KEP-5491-alpha
  • 6bf46eb Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.36.0

Commits
  • debe1eb Update dependencies to v0.36.0 tag
  • efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
  • d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
  • a8822f7 Add slice and map union member support with tests
  • 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
  • d95710f Fix union validation ratcheting when oldObj is nil
  • 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 13b12e6 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • 27f4670 Merge pull request #136657 from Jefftree/sharding-test
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.0

⚠️ Breaking Changes

🐛 Bug Fixes

  • Cache: Fix IndexField blocking until informer is synced (#3445)
  • Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
  • Client: Update typed ApplyConfigurations with server response (#3475)
  • Fakeclient: Fix SSA status patch resource version check (#3443)
  • Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
  • Fakeclient: Fix status apply if existing object has managedFields set (#3430)
  • Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
  • HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

  • Builder/Webhooks: Remove deprecated custom path function (#3465)
  • Cache: Test cache reader waits for cache sync (#3434)
  • Certwatcher: Deflake certwatcher tests (#3457)
  • Dependencies: Use forked version of btree (#3449)
  • Envtest: Ensure envtest stops the whole process group (#3447)
  • Logging: Add missing space in zap-log-level flag description (#3492)
  • Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
  • Owners: Cleanup (#3453)
  • Recorder: Add logger into context for structured logging (#3454)
  • Recorder: Switch to StartLogging for event debug logs (#3451)
  • Scheme: Deprecate the scheme builder (#3461)
  • Source/Kind: Improve logging for dynamic type kind source (#3494)
  • Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

  • Chore: Update golangci-lint version to v2.8.0 (#3448)
  • Chore: Update golangci-lint version to v2.10.1 (#3470)
  • Chore: Update golangci-lint version to v2.11.3 (#3482)
  • Migrate away from custom GitHub action approval workflow (#3491)
  • Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

Added

  • github.com/cenkalti/backoff/v5: v5.0.3
  • gonum.org/v1/gonum: v0.16.0
  • k8s.io/streaming: v0.36.0

Changed

... (truncated)

Commits
  • d3eaef3 Merge pull request #3475 from alvaroaleman/fixfix
  • 3296f32 🐛 Update typed Applyconfigurations with server response
  • c8b4b9d Merge pull request #3506 from troy0820/troy0820/update-deps-k8s
  • 557c314 update to k8s.io v1.36.0
  • e4a998c Merge pull request #3499 from kubernetes-sigs/dependabot/github_actions/all-g...
  • 1a31c56 Merge pull request #3498 from vieux/fix-fake-client-generatename-retry
  • 80bc294 fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...
  • 77b730a 🌱 Bump the all-github-actions group with 2 updates
  • 6210f84 Merge pull request #3494 from erikgb/improve-kind-source-logging
  • 6f89e1d Improve logging for dynamic type kind source
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-tools from 0.20.1 to 0.21.0

Release notes

Sourced from sigs.k8s.io/controller-tools's releases.

v0.21.0

What's Changed

Misc

envtest

Dependency bumps

... (truncated)

Commits
  • 41fba85 Merge pull request #1407 from sbueringer/pr-k8s-v1.36
  • 319cce6 Upgrade k8s from 1.35 to 1.36
  • ec29474 Merge pull request #1354 from alvaroaleman/immutable
  • 27f2ee1 Merge pull request #1405 from kubernetes-sigs/dependabot/go_modules/all-go-mo...
  • f90ac1b 🌱 Bump github.com/onsi/gomega
  • 456a080 ✨ Add support for k8s:immutable
  • e17f046 Merge pull request #1402 from camilamacedo86/up-go
  • e0961cc Merge pull request #1383 from kubernetes-sigs/dependabot/github_actions/all-g...
  • ee76c90 Merge pull request #1377 from kubernetes-sigs/dependabot/go_modules/all-go-mo...
  • e70af51 Apply linter fixes for Go 1.26.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 8, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 8, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 8, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a trusted-execution-clusters member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@Jakob-Naucke
Copy link
Copy Markdown
Contributor

Jakob-Naucke commented May 8, 2026

Try this at the same time as #250 to verify locking still works
/ok-to-test

@Jakob-Naucke
Copy link
Copy Markdown
Contributor

Jakob-Naucke commented May 8, 2026

I think the locking worked, but we don't actually want this Go toolchain until it lands in RHEL. See #253

@dependabot dependabot Bot force-pushed the dependabot/go_modules/golang-b4d31056f6 branch from 85e5cd7 to 2dc08bb Compare May 11, 2026 08:22
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 11, 2026

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/operator-lifecycle-verify 2dc08bb link true /test operator-lifecycle-verify

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@dependabot
build(deps): bump the golang group across 1 directory with 5 updates
60f951f 
Bumps the golang group with 4 updates in the / directory: [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq), [k8s.io/api](https://github.com/kubernetes/api), [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) and [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools).


Updates `github.com/mikefarah/yq/v4` from 4.52.5 to 4.53.2
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.52.5...v4.53.2)

Updates `k8s.io/api` from 0.35.3 to 0.36.0
- [Commits](kubernetes/api@v0.35.3...v0.36.0)

Updates `k8s.io/apimachinery` from 0.35.3 to 0.36.0
- [Commits](kubernetes/apimachinery@v0.35.3...v0.36.0)

Updates `sigs.k8s.io/controller-runtime` from 0.23.3 to 0.24.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.23.3...v0.24.0)

Updates `sigs.k8s.io/controller-tools` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-tools@v0.20.1...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/mikefarah/yq/v4
  dependency-version: 4.53.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: k8s.io/api
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: sigs.k8s.io/controller-tools
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/golang-b4d31056f6 branch from 2dc08bb to 60f951f Compare May 11, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Jakob-Naucke