Skip to content

Update Kubernetes dependencies (main) - #5714

Closed
renovate-rancher[bot] wants to merge 1 commit into
mainfrom
renovate/main-kubernetes-dependencies
Closed

Update Kubernetes dependencies (main)#5714
renovate-rancher[bot] wants to merge 1 commit into
mainfrom
renovate/main-kubernetes-dependencies

Conversation

@renovate-rancher

@renovate-rancher renovate-rancher Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
k8s.io/api v0.36.4v0.37.0 age confidence
k8s.io/apiextensions-apiserver v0.36.4v0.37.0 age confidence
k8s.io/apimachinery v0.36.4v0.37.0 age confidence
k8s.io/apiserver v0.36.4v0.37.0 age confidence
k8s.io/cli-runtime v0.36.4v0.37.0 age confidence
k8s.io/client-go v0.36.4v0.37.0 age confidence
k8s.io/cloud-provider v0.36.4v0.37.0 age confidence
k8s.io/cluster-bootstrap v0.36.4v0.37.0 age confidence
k8s.io/code-generator v0.36.4v0.37.0 age confidence
k8s.io/component-base v0.36.4v0.37.0 age confidence
k8s.io/component-helpers v0.36.4v0.37.0 age confidence
k8s.io/controller-manager v0.36.4v0.37.0 age confidence
k8s.io/cri-client v0.36.4v0.37.0 age confidence
k8s.io/cri-streaming v0.36.4v0.37.0 age confidence
k8s.io/csi-translation-lib v0.36.4v0.37.0 age confidence
k8s.io/dynamic-resource-allocation v0.36.3v0.37.0 age confidence
k8s.io/endpointslice v0.36.3v0.37.0 age confidence
k8s.io/kms v0.36.4v0.37.0 age confidence
k8s.io/kube-aggregator v0.36.4v0.37.0 age confidence
k8s.io/kube-controller-manager v0.36.4v0.37.0 age confidence
k8s.io/kube-proxy v0.36.4v0.37.0 age confidence
k8s.io/kube-scheduler v0.36.3v0.37.0 age confidence
k8s.io/kubectl v0.36.3v0.37.0 age confidence
k8s.io/kubelet v0.36.4v0.37.0 age confidence
k8s.io/kubernetes v1.36.4v1.37.0 age confidence
k8s.io/metrics v0.36.4v0.37.0 age confidence
k8s.io/pod-security-admission v0.36.3v0.37.0 age confidence
k8s.io/sample-apiserver v0.36.4v0.37.0 age confidence

Release Notes

kubernetes/api (k8s.io/api)

v0.37.0

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.37.0

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.0

Compare Source

kubernetes/apiserver (k8s.io/apiserver)

v0.37.0

Compare Source

kubernetes/cli-runtime (k8s.io/cli-runtime)

v0.37.0

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.37.0

Compare Source

kubernetes/cloud-provider (k8s.io/cloud-provider)

v0.37.0

Compare Source

kubernetes/cluster-bootstrap (k8s.io/cluster-bootstrap)

v0.37.0

Compare Source

kubernetes/code-generator (k8s.io/code-generator)

v0.37.0

Compare Source

kubernetes/component-base (k8s.io/component-base)

v0.37.0

Compare Source

kubernetes/component-helpers (k8s.io/component-helpers)

v0.37.0

Compare Source

kubernetes/controller-manager (k8s.io/controller-manager)

v0.37.0

Compare Source

kubernetes/cri-client (k8s.io/cri-client)

v0.37.0

Compare Source

kubernetes/cri-streaming (k8s.io/cri-streaming)

v0.37.0

Compare Source

kubernetes/csi-translation-lib (k8s.io/csi-translation-lib)

v0.37.0

Compare Source

kubernetes/dynamic-resource-allocation (k8s.io/dynamic-resource-allocation)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/endpointslice (k8s.io/endpointslice)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/kms (k8s.io/kms)

v0.37.0

Compare Source

kubernetes/kube-aggregator (k8s.io/kube-aggregator)

v0.37.0

Compare Source

kubernetes/kube-controller-manager (k8s.io/kube-controller-manager)

v0.37.0

Compare Source

kubernetes/kube-proxy (k8s.io/kube-proxy)

v0.37.0

Compare Source

kubernetes/kube-scheduler (k8s.io/kube-scheduler)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/kubectl (k8s.io/kubectl)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/kubelet (k8s.io/kubelet)

v0.37.0

Compare Source

kubernetes/kubernetes (k8s.io/kubernetes)

v1.37.0

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes/metrics (k8s.io/metrics)

v0.37.0

Compare Source

kubernetes/pod-security-admission (k8s.io/pod-security-admission)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/sample-apiserver (k8s.io/sample-apiserver)

v0.37.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

Copilot AI lite review requested due to automatic review settings September 3, 2026 05:43
@renovate-rancher renovate-rancher Bot added the dependencies (dependabot) label Sep 3, 2026
@renovate-rancher
renovate-rancher Bot requested a review from a team as a code owner September 3, 2026 05:43
@renovate-rancher renovate-rancher Bot added the dependencies (dependabot) label Sep 3, 2026
@renovate-rancher

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 17 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
k8s.io/kube-openapi v0.0.0-20260427204847-8949caaa1199 -> v0.0.0-20260721132016-d427ff9ee9ad
github.com/cyphar/filepath-securejoin v0.6.1 -> v0.7.0
github.com/go-openapi/jsonpointer v0.23.1 -> v1.0.0
github.com/go-openapi/jsonreference v0.21.5 -> v1.0.0
github.com/go-openapi/swag v0.26.0 -> v0.27.1
github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/conv v0.26.0 -> v0.27.1
github.com/go-openapi/swag/fileutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/loading v0.26.0 -> v0.27.1
github.com/go-openapi/swag/mangling v0.26.0 -> v0.27.1
github.com/go-openapi/swag/netutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/stringutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.27.1
k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b -> v2.0.0-20260408192533-25e2208e0dc3
sigs.k8s.io/structured-merge-diff/v6 v6.4.0 -> v6.4.2
File name: pkg/apis/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
github.com/fxamacker/cbor/v2 v2.9.0 -> v2.9.1
go.yaml.in/yaml/v2 v2.4.3 -> v2.4.4
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 -> v0.0.0-20260626114624-be93311217bd
sigs.k8s.io/structured-merge-diff/v6 v6.3.3 -> v6.4.2

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The root go.mod still explicitly requires k8s.io/controller-manager and k8s.io/kubelet at v0.36.1 while the replace block pins Kubernetes to v0.37.0, leaving inconsistent version declarations.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates the repository’s Kubernetes dependency set to the 0.37.0 / 1.37.0 release line (and updates associated transitive Go modules) across the root module and the pkg/apis submodule.

Changes:

  • Bump k8s.io/* dependencies (and the root replace pins) from v0.36.x to v0.37.0, and k8s.io/kubernetes from v1.36.4 to v1.37.0.
  • Refresh transitive dependencies and checksums (e.g., k8s.io/kube-openapi, sigs.k8s.io/structured-merge-diff/v6, github.com/fxamacker/cbor/v2, go.yaml.in/yaml/v2, github.com/go-openapi/*).
  • Apply the corresponding tidy/sum updates in both the root module and pkg/apis.
File summaries
File Description
pkg/apis/go.mod Updates pkg/apis module Kubernetes deps to v0.37.0 and refreshes indirect deps.
pkg/apis/go.sum Updates checksums for the pkg/apis module after dependency bumps/tidy.
go.mod Pins Kubernetes modules to v0.37.0/v1.37.0 (via replace + requirements) and updates related indirect deps.
go.sum Updates root module checksums to match the new dependency graph.
Review details

Suppressed comments (1)

go.mod:275

  • k8s.io/kubelet remains pinned to v0.36.1 in the indirect requirements, but the replace block now pins it to v0.37.0. Align this requirement to v0.37.0 (or remove the explicit indirect requirement and let go mod tidy manage it) to avoid mixed/ambiguous Kubernetes versions.
	k8s.io/gengo/v2 v2.0.0-20260408192533-25e2208e0dc3 // indirect
	k8s.io/kubelet v0.36.1 // indirect
  • Files reviewed: 2/4 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread go.mod
Comment on lines +271 to 272
k8s.io/component-helpers v0.37.0 // indirect
k8s.io/controller-manager v0.36.1 // indirect
@renovate-rancher
renovate-rancher Bot force-pushed the renovate/main-kubernetes-dependencies branch from c8550c5 to a6bba98 Compare September 4, 2026 04:51
@thardeck
thardeck enabled auto-merge (squash) September 4, 2026 15:01
@renovate-rancher
renovate-rancher Bot force-pushed the renovate/main-kubernetes-dependencies branch from a6bba98 to ac3144b Compare September 4, 2026 15:30
@thardeck thardeck closed this Sep 4, 2026
auto-merge was automatically disabled September 4, 2026 15:45

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies (dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants