Skip to content

chore: bump the k8s-dependencies group across 1 directory with 5 updates - #78

Merged
openshift-merge-bot[bot] merged 1 commit into
mainfrom
dependabot/go_modules/k8s-dependencies-dd2850e504
Oct 28, 2026
Merged

openshift-merge-bot[bot] merged 1 commit into
mainfrom
dependabot/go_modules/k8s-dependencies-dd2850e504

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the k8s-dependencies group with 5 updates in the / directory:

Package From To
k8s.io/api 0.37.0 0.37.1
k8s.io/apiextensions-apiserver 0.37.0 0.37.1
k8s.io/apimachinery 0.37.0 0.37.1
k8s.io/client-go 0.37.0 0.37.1
sigs.k8s.io/controller-runtime 0.24.1 0.25.2

Updates k8s.io/api from 0.37.0 to 0.37.1

Commits

Updates k8s.io/apiextensions-apiserver from 0.37.0 to 0.37.1

Commits

Updates k8s.io/apimachinery from 0.37.0 to 0.37.1

Commits

Updates k8s.io/client-go from 0.37.0 to 0.37.1

Commits

Updates sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

v0.25.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

✨ New Features

  • Client: Add a read-your-own-writes client (#3472)
  • Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
  • Fakeclient: Add scale subresource support for Apply (#3569)
  • Metrics: Allow opt-in for client-go REST client metrics (#3510)
  • Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
  • Source: Add TypedInformer source (#3520)
  • Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

  • Cache: Fix goroutine leaks in cache Start() methods (#3565)
  • Client: Fix regression in Apply typed error handling (#3515)
  • Controller: Unlock when Controller.Start() returns with error (#3545)
  • Envtest: Fix envtest process stop on Windows (#3519)

... (truncated)

Commits
  • 5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
  • 7b211af sparkles: Add a metric for the readyourwite consistency wait duration
  • dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
  • c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
  • d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
  • 1b98304 sparkles: Add metrics handler options
  • 8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
  • ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
  • 67b72c2 [release-0.25] 🐛 client: fix subresource create RV parse error under read-you...
  • f997220 [release-0.25] 🐛 priorityqueue: fix data race on []*item in logState (#3593)
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Chores
    • This update includes no changes to product features or behavior visible to end users. No new capabilities, interface changes, or user-facing fixes are included. The changes do not alter how users interact with the product.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 16, 2026
@openshift-ci
openshift-ci Bot requested review from dtfranz and perdasilva October 16, 2026 18:31
@coderabbitai

coderabbitai Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: d082239e-cabc-41c9-af59-762555c20ff7
Commits

Reviewing files that changed from the base of the PR and between 2888876 and 0d8e048.

Files ignored due to path filters: 1
  • go.sum is excluded by !**/*.sum
Files selected for processing: 1
  • go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

Walkthrough

The pull request updates Kubernetes and controller-runtime dependency versions and adds or updates indirect dependencies in go.mod.

Changes: Go dependency updates

Layer / File(s) Summary
Update dependency versions
go.mod
Kubernetes modules and k8s.io/streaming move to v0.37.1. Controller-runtime moves to v0.25.2. The indirect dependencies add or update go-difflib, Prometheus modules, beorn7/perks, xxhash, and the OpenTelemetry metric SDK.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: joelanford, tmshort

Merge Risk: Minimal · up to 0d8e0

No blocking defect is established. Run the normal build and tests before merging.

Pre-merge checks: Passed 4 · Failed 1

Failed Failed checks: 1 warning

Check name Status Explanation Resolution
Description check Warning The description is a Dependabot-generated bump summary. It lists the five updated packages with version ranges and includes release notes and commit links. It does not follow the repository template. … Add the repository template's Reviewer Checklist section and state how each item applies to this change. For example, note that no exported API changed, state whether unit tests or build checks were run, and link any related issue or note t…
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title states the main change: a dependency bump of the k8s-dependencies group with 5 updates. The changeset updates k8s.io/api, apiextensions-apiserver, apimachinery, client-go (0.37.0 to 0.37.1) …
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within survi…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title states the main change: a dependency bump of the k8s-dependencies group with 5 updates. The changeset updates k8s.io/api, apiextensions-apiserver, apimachinery, client-go (0.37.0 to 0.37.1) and controller-runtime (0.24.1 to 0.25.2) in go.mod. The title is specific and accurate, and it follows the conventional commit prefix style.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Explanation

The description is a Dependabot-generated bump summary. It lists the five updated packages with version ranges and includes release notes and commit links. It does not follow the repository template. It has no '# Description' summary written by the author in the template's intended form, and it has no Reviewer Checklist. The checklist items (API Go Documentation, Unit Tests, Commit Messages, linked issues) are not addressed. The change is a low-risk dependency bump, so the missing items are mostly not applicable, but the checklist is still absent.

Resolution

Add the repository template's Reviewer Checklist section and state how each item applies to this change. For example, note that no exported API changed, state whether unit tests or build checks were run, and link any related issue or note that none exists. Add a short author-written summary under the '# Description' heading that states the motivation for the bump. The existing Dependabot content can remain below that summary.

Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@tmshort

tmshort commented Oct 16, 2026

Copy link
Copy Markdown
Member

/hold

@openshift-ci openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-dd2850e504 branch 4 times, most recently from 9472f95 to 2888876 Compare October 19, 2026 19:26
Bumps the k8s-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.37.0` | `0.37.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.37.0` | `0.37.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.37.0` | `0.37.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.37.0` | `0.37.1` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.1` | `0.25.2` |



Updates `k8s.io/api` from 0.37.0 to 0.37.1
- [Commits](kubernetes/api@v0.37.0...v0.37.1)

Updates `k8s.io/apiextensions-apiserver` from 0.37.0 to 0.37.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.37.0...v0.37.1)

Updates `k8s.io/apimachinery` from 0.37.0 to 0.37.1
- [Commits](kubernetes/apimachinery@v0.37.0...v0.37.1)

Updates `k8s.io/client-go` from 0.37.0 to 0.37.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.37.0...v0.37.1)

Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.2
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.24.1...v0.25.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s-dependencies-dd2850e504 branch from 2888876 to 0d8e048 Compare October 27, 2026 20:27
@tmshort

tmshort commented Oct 28, 2026

Copy link
Copy Markdown
Member

/unhold
/approve
/lgtm

@openshift-ci openshift-ci Bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Oct 28, 2026
@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Oct 28, 2026
@openshift-ci

openshift-ci Bot commented Oct 28, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: tmshort

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Oct 28, 2026
@openshift-merge-bot
openshift-merge-bot Bot merged commit 2feff01 into main Oct 28, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/k8s-dependencies-dd2850e504 branch October 28, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Pull requests that update a dependency file go Pull requests that update go code lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant