Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 19, 2025

Bumps the k8s-dependencies group with 4 updates in the / directory: k8s.io/apimachinery, k8s.io/client-go, k8s.io/component-base and k8s.io/sample-controller.

Updates k8s.io/apimachinery from 0.34.2 to 0.35.0

Commits
  • 72d71ea Merge remote-tracking branch 'origin/master' into release-1.35
  • e2a2dbc Bump golang.org/x/crypto to v0.45.0
  • 2e9c228 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • f274aac vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • 9445443 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • 52154f7 Update vendored dependencies
  • 5a348c5 KEP-5471: Extend tolerations operators (#134665)
  • 6f89492 Merge pull request #133648 from richabanker/merged-discovery
  • c77dde2 util/sort: Add MergePreservingRelativeOrder for topological sorting
  • 729c13d Merge pull request #134624 from yt2985/podcertificates-beta
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.34.2 to 0.35.0

Commits
  • 9bcb694 Update dependencies to v0.35.0 tag
  • 2d83546 Merge remote-tracking branch 'origin/master' into release-1.35
  • 56b4af2 Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-f...
  • 891f94c Merge remote-tracking branch 'origin/master' into release-1.35
  • 65ffe04 Merge pull request #135580 from serathius/client-go-transformer
  • 2fe4ac2 downgrade reflector watchlist fallback log to V(4)
  • 97256a6 Bump golang.org/x/crypto to v0.45.0
  • 46360b5 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • 171ef8c Use transformer in consistency checker
  • 3878a64 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • Additional commits viewable in compare view

Updates k8s.io/component-base from 0.34.2 to 0.35.0

Commits
  • 4e6b4eb Update dependencies to v0.35.0 tag
  • 5e09e27 Merge remote-tracking branch 'origin/master' into release-1.35
  • 518a1d0 Bump golang.org/x/crypto to v0.45.0
  • dffb9df Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • 622fcbc vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • 4461559 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • 43140e8 Update vendored dependencies
  • c1ad413 Merge pull request #134870 from pmengelbert/pmengelbert/kuberc/4
  • 8209f50 Add client-go credential plugin to kuberc
  • 09c454e Merge pull request #134995 from yongruilin/flagz-kk-structure
  • Additional commits viewable in compare view

Updates k8s.io/sample-controller from 0.34.2 to 0.35.0

Commits
  • 1f96a03 Update dependencies to v0.35.0 tag
  • 15adbb6 Merge remote-tracking branch 'origin/master' into release-1.35
  • 5c7eedd Bump golang.org/x/crypto to v0.45.0
  • d0a7987 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • ec2a1c8 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • b1d566f Update vendored dependencies
  • 2464cd8 Merge pull request #134881 from pohly/e2e-slow-priority
  • 85b7780 dependencies: ginkgo v2.27.2, gomega v1.38.2
  • 42bbeb6 Merge pull request #135004 from pohly/dependencies-x-repos
  • 6913650 dependencies: various minor updates
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20251002143259-bc988d571ff4

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 19, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign catherinef-dev for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. labels Dec 19, 2025
@k8s-ci-robot
Copy link
Contributor

This issue is currently awaiting triage.

If kube-state-metrics contributors determine this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@github-project-automation github-project-automation bot moved this to Needs Triage in SIG Instrumentation Dec 19, 2025
@k8s-ci-robot k8s-ci-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Dec 19, 2025
@mrueg
Copy link
Member

mrueg commented Dec 19, 2025

we'll handle 1.35 after the v2.18.0 release.

@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-c58cd56bc0 branch from b515730 to f88197a Compare December 29, 2025 09:05
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-c58cd56bc0 branch from f88197a to 04b7726 Compare January 5, 2026 15:18
@k8s-ci-robot k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Jan 5, 2026
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-c58cd56bc0 branch 2 times, most recently from 1ed191c to 6e1b368 Compare January 12, 2026 11:15
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-c58cd56bc0 branch from 6e1b368 to c6d5bb9 Compare January 19, 2026 10:52
@k8s-ci-robot k8s-ci-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jan 19, 2026
…5 updates

Bumps the k8s-dependencies group with 4 updates in the / directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go), [k8s.io/component-base](https://github.com/kubernetes/component-base) and [k8s.io/sample-controller](https://github.com/kubernetes/sample-controller).


Updates `k8s.io/apimachinery` from 0.34.2 to 0.35.0
- [Commits](kubernetes/apimachinery@v0.34.2...v0.35.0)

Updates `k8s.io/client-go` from 0.34.2 to 0.35.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.2...v0.35.0)

Updates `k8s.io/component-base` from 0.34.2 to 0.35.0
- [Commits](kubernetes/component-base@v0.34.2...v0.35.0)

Updates `k8s.io/sample-controller` from 0.34.2 to 0.35.0
- [Commits](kubernetes/sample-controller@v0.34.2...v0.35.0)

Updates `k8s.io/utils` from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20251002143259-bc988d571ff4
- [Commits](https://github.com/kubernetes/utils/commits)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/component-base
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/sample-controller
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20251002143259-bc988d571ff4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-c58cd56bc0 branch from c6d5bb9 to b454c3a Compare January 20, 2026 15:24
@k8s-ci-robot k8s-ci-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jan 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. dependencies Pull requests that update a dependency file go Pull requests that update Go code needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

Status: Needs Triage

Development

Successfully merging this pull request may close these issues.

3 participants