Bump the k8s-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #522 · operator-framework/api

dependabot · 2026-09-07T23:32:47Z

Bumps the k8s-dependencies group with 5 updates in the / directory:

Package	From	To
k8s.io/apiextensions-apiserver	`0.36.4`	`0.37.1`
k8s.io/apimachinery	`0.36.4`	`0.37.1`
k8s.io/client-go	`0.36.4`	`0.37.1`
k8s.io/kube-openapi	`0.0.0-20260317180543-43fb72c5454a`	`0.0.0-20260721132016-d427ff9ee9ad`
sigs.k8s.io/controller-runtime	`0.24.1`	`0.25.2`

Updates k8s.io/apiextensions-apiserver from 0.36.4 to 0.37.1

Commits

4cf2f06 Update dependencies to v0.37.1 tag
29d19cf Fix unit test compile failure under the fieldsv1string build tag
1aa2717 Merge pull request #140205 from pohly/cel-deps
b51744f dependencies: cel-go v0.29.2
f416935 Merge pull request #140782 from dims/update-kube-openapi
19c0db2 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
8ed17b6 Merge pull request #140774 from dims/prom-client-v1.24.0
48a6e2f Update prometheus/client_golang to 1.24.0
e7c1b62 Merge pull request #139821 from pohly/client-go-informers-type-safety
e86edad Merge pull request #140740 from dims/update-grpc-1.82.1
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.36.4 to 0.37.1

Commits

e3a4b17 Update dependencies to v0.37.1 tag
e55f9ba feat(api): Update node restriction admission to use new API
cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
f21afab Add validation for camelcase in reason field
d7ad413 Merge pull request #140782 from dims/update-kube-openapi
e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.4 to 0.37.1

Commits

066ed4e Update dependencies to v0.37.1 tag
50c6f9b metrics: Register: Fix incorrect assignment
49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
2bf14f2 Merge pull request #140990 from xigang/revert-140448
7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
694f4eb apidiff: ignore adding entirely new API groups
Additional commits viewable in compare view

Updates k8s.io/kube-openapi from 0.0.0-20260317180543-43fb72c5454a to 0.0.0-20260721132016-d427ff9ee9ad

Commits

See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

[release-0.25] 🐛 Fix SubResourceCreateOptions.ApplyToSubResourceCreate by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3600

[release-0.25] ✨ Add metrics handler options by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3603

[release-0.25] 📖 Document that ReadYourWrite doesn't work correctly with > 1 Namespace by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3610

[release-0.25] ✨ Add a metric for the readyourwite consistency wait duration by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3613

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

v0.25.1

What's Changed

🐛 priorityqueue: fix data race on []*item in logState by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3593

🐛 client: fix subresource create RV parse error under read-your-writes consistency by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3596

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

Dependencies: Bump to k8s.io/* v1.37 (#3579 #3575 #3567 #3561 #3547 #3529 #3524)

Events: Add new EventRecorder interface (#3509)

✨ New Features

Client: Add a read-your-own-writes client (#3472)

Fakeclient: Add WithGlobalResourceVersionCounter (#3581)

Fakeclient: Add scale subresource support for Apply (#3569)

Metrics: Allow opt-in for client-go REST client metrics (#3510)

Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)

Source: Add TypedInformer source (#3520)

Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

Cache: Fix goroutine leaks in cache Start() methods (#3565)

Client: Fix regression in Apply typed error handling (#3515)

Controller: Unlock when Controller.Start() returns with error (#3545)

Envtest: Fix envtest process stop on Windows (#3519)

... (truncated)

Commits

5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
7b211af sparkles: Add a metric for the readyourwite consistency wait duration
dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
1b98304 sparkles: Add metrics handler options
8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
67b72c2 [release-0.25] 🐛 client: fix subresource create RV parse error under read-you...
f997220 [release-0.25] 🐛 priorityqueue: fix data race on []*item in logState (#3593)
Additional commits viewable in compare view

Summary by CodeRabbit

Chores
- Applied routine maintenance updates. No user-facing features or behavior changes are included in this release.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

openshift-ci · 2026-09-07T23:32:55Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign grokspawn for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

coderabbitai · 2026-09-14T07:31:19Z

No actionable comments were generated in the recent review.

Recent review info

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: defaults
Review profile: CHILL
Plan: Enterprise
Run ID: 65da225c-fa8c-444e-8098-8223ac6b69d8

Commits

Reviewing files that changed from the base of the PR and between 65c1042 and f4a23d5.

Files ignored due to path filters: 1

go.sum is excluded by !**/*.sum

Files selected for processing: 1

go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

Walkthrough

The go.mod file upgrades Kubernetes modules, controller-runtime, and kube-openapi. It also updates indirect dependency versions and entries, including changes to the swag dependency set.

Changes: Go module dependencies

Layer / File(s)	Summary
Module dependency updates `go.mod`	Kubernetes modules, controller-runtime, and kube-openapi move to newer versions. Indirect dependencies are updated, `swag/fileutils` and related subpackages are added, and `swag/jsonname` and `github.com/kr/text` are removed.

Priority: Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Possibly related PRs

operator-framework/api#529: Both PRs change the root go.mod dependency graph, with different changes to github.com/kr/text.

Suggested reviewers: perdasilva

Merge Risk: Minimal · up to f4a23

No concrete compatibility or merge-blocking defect was identified in the dependency updates.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title accurately describes the main change: five Kubernetes dependency updates in one directory.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches: 💡 1

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

🛠️ Fix failing CI checks: 💡

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

perdasilva · 2026-09-14T13:03:11Z

/hold until we're ready for 1.37

grokspawn · 2026-09-17T18:41:51Z

Looks like the delta is purely formatting, not functional (for e.g. serialization-related), but this still looks like we'll have to perform this bump manually or layer a re-generation of content in this PR to pass validation.

tmshort · 2026-10-28T13:36:51Z

@dependabot rebase

tmshort · 2026-10-28T13:37:03Z

/unhold

Bumps the k8s-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.4` | `0.37.1` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.4` | `0.37.1` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.4` | `0.37.1` | | [k8s.io/kube-openapi](https://github.com/kubernetes/kube-openapi) | `0.0.0-20260317180543-43fb72c5454a` | `0.0.0-20260721132016-d427ff9ee9ad` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.1` | `0.25.2` | Updates `k8s.io/apiextensions-apiserver` from 0.36.4 to 0.37.1 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.36.4...v0.37.1) Updates `k8s.io/apimachinery` from 0.36.4 to 0.37.1 - [Commits](kubernetes/apimachinery@v0.36.4...v0.37.1) Updates `k8s.io/client-go` from 0.36.4 to 0.37.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.4...v0.37.1) Updates `k8s.io/kube-openapi` from 0.0.0-20260317180543-43fb72c5454a to 0.0.0-20260721132016-d427ff9ee9ad - [Commits](https://github.com/kubernetes/kube-openapi/commits) Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.2 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.24.1...v0.25.2) --- updated-dependencies: - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s-dependencies - dependency-name: k8s.io/kube-openapi dependency-version: 0.0.0-20260721132016-d427ff9ee9ad dependency-type: direct:production update-type: version-update:semver-patch dependency-group: k8s-dependencies - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

tmshort · 2026-10-28T14:34:43Z

Closing in favor of #530

dependabot · 2026-10-28T14:34:46Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 7, 2026

openshift-ci Bot requested review from camilamacedo86 and grokspawn September 7, 2026 23:32

dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-20f0d38923 branch from 0ac4ffe to ea9c7c3 Compare September 14, 2026 07:31

openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Sep 14, 2026

dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-20f0d38923 branch 2 times, most recently from aa3383f to 55eb311 Compare September 22, 2026 06:59

openshift-ci Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Oct 28, 2026

openshift-ci Bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Oct 28, 2026

dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-20f0d38923 branch from 55eb311 to f4a23d5 Compare October 28, 2026 13:38

openshift-ci Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Oct 28, 2026

tmshort mentioned this pull request Oct 28, 2026

chore: update Kubernetes dependencies to 1.37 and regenerate CRDs #530

Merged

tmshort closed this Oct 28, 2026

dependabot Bot deleted the dependabot/go_modules/k8s-dependencies-20f0d38923 branch October 28, 2026 14:34

Navigation Menu

Repository navigation

Bump the k8s-dependencies group across 1 directory with 5 updates - #522

Bump the k8s-dependencies group across 1 directory with 5 updates#522
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/k8s-dependencies-20f0d38923

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading

Uh oh!

openshift-ci Bot commented Sep 7, 2026

Uh oh!

coderabbitai Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

perdasilva commented Sep 14, 2026

Uh oh!

grokspawn commented Sep 17, 2026

Uh oh!

tmshort commented Oct 28, 2026

Uh oh!

tmshort commented Oct 28, 2026

Uh oh!

tmshort commented Oct 28, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 28, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.25.2

What's Changed

v0.25.1

What's Changed

v0.25.0

Highlights

⚠️ Breaking Changes

✨ New Features

🐛 Bug Fixes

Summary by CodeRabbit

Uh oh!

openshift-ci Bot commented Sep 7, 2026

Uh oh!

coderabbitai Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

perdasilva commented Sep 14, 2026

Uh oh!

grokspawn commented Sep 17, 2026

Uh oh!

tmshort commented Oct 28, 2026

Uh oh!

tmshort commented Oct 28, 2026

Uh oh!

tmshort commented Oct 28, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 28, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading

coderabbitai Bot commented Sep 14, 2026 •

edited

Loading