build(deps): bump the k8s group across 6 directories with 4 updates - #7371
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the k8s group across 6 directories with 4 updates#7371dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the k8s group with 3 updates in the / directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime). Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/analysis directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/ecs directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/kubernetes directory: [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime). Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/kubernetes_multicluster directory: [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime). Bumps the k8s group with 1 update in the /tool/actions-gh-release directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Updates `k8s.io/apimachinery` from 0.24.3 to 0.37.0 - [Commits](kubernetes/apimachinery@v0.24.3...v0.37.0) Updates `k8s.io/client-go` from 0.24.3 to 0.37.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.24.3...v0.37.0) Updates `sigs.k8s.io/controller-runtime` from 0.12.3 to 0.25.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.12.3...v0.25.0) Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.12.3...v0.25.0) Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.12.3...v0.25.0) Updates `sigs.k8s.io/yaml` from 1.3.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: k8s.io/apimachinery dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: k8s.io/client-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
✅ Deploy Preview for pipecd-site canceled.
|
Contributor
There was a problem hiding this comment.
🔵 Needs a closer look
It includes major Kubernetes/controller-runtime upgrades across multiple modules plus additional unrelated dependency changes, and the tool module’s go.sum appears inconsistent with its test dependencies.
Pull request overview
This Dependabot PR updates Kubernetes-related Go module dependencies across the main PipeCD module and several plugin/tool submodules, aligning them with newer Kubernetes (v0.37.0) and controller-runtime (v0.25.0) versions.
Changes:
- Bump core Kubernetes libraries in the root module to
k8s.io/* v0.37.0andsigs.k8s.io/controller-runtime v0.25.0. - Bump
sigs.k8s.io/yamltov1.6.0across multiple pipedv1 plugin modules and thetool/actions-gh-releasemodule. - Refresh additional (non-k8s) dependencies in the root module (e.g., prometheus, cobra/pflag, otel, zap, golang.org/x/*), broadening the scope beyond the PR description.
File summaries
| File | Description |
|---|---|
| go.mod | Updates root module k8s/controller-runtime versions and also refreshes multiple unrelated dependencies. |
| pkg/app/pipedv1/plugin/analysis/go.mod | Bumps sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/analysis/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| pkg/app/pipedv1/plugin/cloudrun/go.mod | Bumps indirect sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/cloudrun/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| pkg/app/pipedv1/plugin/ecs/go.mod | Bumps sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/ecs/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| pkg/app/pipedv1/plugin/kubernetes/go.mod | Bumps controller-runtime to v0.25.0 and updates related indirects. |
| pkg/app/pipedv1/plugin/kubernetes/go.sum | Updates checksum entries for bumped Kubernetes/controller-runtime-related dependencies. |
| pkg/app/pipedv1/plugin/kubernetes_multicluster/go.mod | Bumps controller-runtime to v0.25.0 and updates related indirects. |
| pkg/app/pipedv1/plugin/kubernetes_multicluster/go.sum | Updates checksum entries for bumped Kubernetes/controller-runtime-related dependencies. |
| pkg/app/pipedv1/plugin/scriptrun/go.mod | Bumps indirect sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/scriptrun/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| pkg/app/pipedv1/plugin/terraform/go.mod | Bumps indirect sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/terraform/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| pkg/app/pipedv1/plugin/wait/go.mod | Bumps indirect sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/wait/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| pkg/app/pipedv1/plugin/waitapproval/go.mod | Bumps indirect sigs.k8s.io/yaml to v1.6.0. |
| pkg/app/pipedv1/plugin/waitapproval/go.sum | Updates checksum entries for sigs.k8s.io/yaml v1.6.0. |
| tool/actions-gh-release/go.mod | Bumps sigs.k8s.io/yaml to v1.6.0 and adjusts indirect YAML dependencies. |
| tool/actions-gh-release/go.sum | Updates checksums for YAML/go-cmp and removes older entries. |
Review details
- Files reviewed: 11/22 changed files
- Comments generated: 1
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Comment on lines
+44
to
+49
| github.com/prometheus/client_golang v1.24.0 | ||
| github.com/prometheus/common v0.70.0 | ||
| github.com/robfig/cron/v3 v3.0.1 | ||
| github.com/slack-go/slack v0.24.0 | ||
| github.com/spf13/cobra v1.9.1 | ||
| github.com/spf13/pflag v1.0.6 | ||
| github.com/spf13/cobra v1.10.2 | ||
| github.com/spf13/pflag v1.0.10 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the k8s group with 3 updates in the / directory: k8s.io/apimachinery, k8s.io/client-go and sigs.k8s.io/controller-runtime.
Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/analysis directory: sigs.k8s.io/yaml.
Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/ecs directory: sigs.k8s.io/yaml.
Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/kubernetes directory: sigs.k8s.io/controller-runtime.
Bumps the k8s group with 1 update in the /pkg/app/pipedv1/plugin/kubernetes_multicluster directory: sigs.k8s.io/controller-runtime.
Bumps the k8s group with 1 update in the /tool/actions-gh-release directory: sigs.k8s.io/yaml.
Updates
k8s.io/apimachineryfrom 0.24.3 to 0.37.0Commits
7164e39Update dependencies to v0.37.0 tage55f9bafeat(api): Update node restriction admission to use new APIcb0680dMerge pull request #129125 from pohly/log-client-go-tools-apis97b2132Merge pull request #140194 from gnufied/implement-volume-health-apif21afabAdd validation for camelcase in reason fieldd7ad413Merge pull request #140782 from dims/update-kube-openapie15ad7cMerge pull request #138808 from chenk008/cbor-streaminglist464b5d1Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad0de14ecMerge pull request #140732 from thockin/dv-add-prefixed-label-key95258ebMerge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...Updates
k8s.io/client-gofrom 0.24.3 to 0.37.0Commits
2807644Update dependencies to v0.37.0 tag50c6f9bmetrics: Register: Fix incorrect assignment49f0a7bMerge pull request #140931 from pohly/client-go-changelog-adding-apigroups74d4b1eMerge pull request #140966 from alancaldelas/client-go-fakecustomstore-store2bf14f2Merge pull request #140990 from xigang/revert-1404487b892feRevert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"df92378Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta45a0ff1client-go: restore FakeCustomStore conformance to cache.Store9d3b531Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups694f4ebapidiff: ignore adding entirely new API groupsUpdates
sigs.k8s.io/controller-runtimefrom 0.12.3 to 0.25.0Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
... (truncated)
Commits
e8f9455🐛 fakeclient: Allow updating managedFields through Update (#3585)0cc1315Merge pull request #3565 from dongjiang1989/fix-leakfa96780🐛 Fix goroutine leaks in cache Start() methods1f5514b✨ Add a read-your-own-write client (#3472)df386c7🌱 Bump to golangci-lint v2.13.1 (#3580)dc7618fMerge pull request #3583 from pujitha24/auto/issue-358237fe235🐛 fake: fix AddIndex panic when client is wrapped with an interceptor01c7782✨ Allow overriding REST client latency histogram buckets (#3573)857be80Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-loggingb1387beMerge pull request #3581 from alvaroaleman/fake-consistentUpdates
sigs.k8s.io/yamlfrom 1.5.0 to 1.6.0Release notes
Sourced from sigs.k8s.io/yaml's releases.
Commits
048d724Merge pull request #132 from thockin/master23c836cBolster tests, mostly in error-handling2e3340bAdd compact output tests4a4f539Add test case for tabs in multi-line strings13509adChange which methods get a newline and fix tests59c2c43Add compact mode so KYAML can be used in more placesabc1addkyaml: Implement escaping closer to YAML spec7749171Add a yamlfmt cmda932007Add KYAML supportUpdates
sigs.k8s.io/yamlfrom 1.5.0 to 1.6.0Release notes
Sourced from sigs.k8s.io/yaml's releases.
Commits
048d724Merge pull request #132 from thockin/master23c836cBolster tests, mostly in error-handling2e3340bAdd compact output tests4a4f539Add test case for tabs in multi-line strings13509adChange which methods get a newline and fix tests59c2c43Add compact mode so KYAML can be used in more placesabc1addkyaml: Implement escaping closer to YAML spec7749171Add a yamlfmt cmda932007Add KYAML supportUpdates
sigs.k8s.io/yamlfrom 1.5.0 to 1.6.0Release notes
Sourced from sigs.k8s.io/yaml's releases.
Commits
048d724Merge pull request #132 from thockin/master23c836cBolster tests, mostly in error-handling2e3340bAdd compact output tests4a4f539Add test case for tabs in multi-line strings13509adChange which methods get a newline and fix tests59c2c43Add compact mode so KYAML can be used in more placesabc1addkyaml: Implement escaping closer to YAML spec7749171Add a yamlfmt cmda932007Add KYAML supportUpdates
sigs.k8s.io/controller-runtimefrom 0.24.1 to 0.25.0Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
... (truncated)
Commits
e8f9455🐛 fakeclient: Allow updating managedFields through Update (#3585)0cc1315Merge pull request #3565 from dongjiang1989/fix-leakfa96780🐛 Fix goroutine leaks in cache Start() methods1f5514b✨ Add a read-your-own-write client (#3472)df386c7🌱 Bump to golangci-lint v2.13.1 (#3580)dc7618fMerge pull request #3583 from pujitha24/auto/issue-358237fe235🐛 fake: fix AddIndex panic when client is wrapped with an interceptor01c7782✨ Allow overriding REST client latency histogram buckets (#3573)857be80Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-loggingb1387beMerge pull request #3581 from alvaroaleman/fake-consistentUpdates
sigs.k8s.io/controller-runtimefrom 0.24.1 to 0.25.0Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
... (truncated)
Commits
e8f9455🐛 fakeclient: Allow updating managedFields through Update (#3585)0cc1315Merge pull request #3565 from dongjiang1989/fix-leakfa96780🐛 Fix goroutine leaks in cache Start() methods1f5514b✨ Add a read-your-own-write client (#3472)df386c7🌱 Bump to golangci-lint v2.13.1 (#3580)dc7618fMerge pull request #3583 from pujitha24/auto/issue-358237fe235🐛 fake: fix AddIndex panic when client is wrapped with an interceptor01c7782✨ Allow overriding REST client latency histogram buckets (#3573)857be80Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-loggingb1387beMerge pull request #3581 from alvaroaleman/fake-consistentUpdates
sigs.k8s.io/yamlfrom 1.3.0 to 1.6.0Release notes
Sourced from sigs.k8s.io/yaml's releases.
Commits
048d724Merge pull request #132 from thockin/master23c836cBolster tests, mostly in error-handling2e3340bAdd compact output tests4a4f539Add test case for tabs in multi-line strings13509adChange which methods get a newline and fix tests59c2c43Add compact mode so KYAML can be used in more placesabc1addkyaml: Implement escaping closer to YAML spec7749171Add a yamlfmt cmda932007Add KYAML supportDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions