Skip to content

Bump the k8s group with 4 updates - #1486

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s-409cd9fe56
Open

Bump the k8s group with 4 updates#1486
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s-409cd9fe56

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the k8s group with 4 updates: k8s.io/api, k8s.io/apimachinery, k8s.io/client-go and k8s.io/kubectl.

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits
  • 3fde3c4 Update dependencies to v0.36.3 tag
  • 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits
  • 40bf4b2 Update dependencies to v0.36.3 tag
  • 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits
  • 44a8af2 Update dependencies to v0.36.3 tag
  • f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/kubectl from 0.36.2 to 0.36.3

Commits
  • 73fdc7a Update dependencies to v0.36.3 tag
  • 58802ae Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • fde8e27 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated Kubernetes components and structured merge-diff support to newer patch versions.
    • Includes routine maintenance updates with no changes to public functionality.

Bumps the k8s group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl).


Updates `k8s.io/api` from 0.36.2 to 0.36.3
- [Commits](kubernetes/api@v0.36.2...v0.36.3)

Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.3
- [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3)

Updates `k8s.io/client-go` from 0.36.2 to 0.36.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.2...v0.36.3)

Updates `k8s.io/kubectl` from 0.36.2 to 0.36.3
- [Commits](kubernetes/kubectl@v0.36.2...v0.36.3)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/kubectl
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 1, 2026
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

@dependabot dependabot Bot added the go Pull requests that update Go code label Aug 1, 2026
@openshift-ci
openshift-ci Bot requested review from dorzel and r4f4 August 1, 2026 05:54
@openshift-ci

openshift-ci Bot commented Aug 1, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign adolfo-ab for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Aug 1, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Aug 1, 2026
@coderabbitai

coderabbitai Bot commented Aug 1, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 5dfdb28c-f8ae-48f5-8445-46fafbe45d6f

📥 Commits

Reviewing files that changed from the base of the PR and between 3fd9931 and 0575721.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Walkthrough

The change updates direct and indirect Kubernetes dependencies in go.mod from v0.36.2 to v0.36.3. It also updates sigs.k8s.io/structured-merge-diff/v6 from v6.3.2 to v6.3.3.

Changes

Kubernetes dependency updates

Layer / File(s) Summary
Dependency version updates
go.mod
Direct and indirect Kubernetes dependencies move to v0.36.3. The indirect structured-merge-diff dependency moves to v6.3.3.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: aguidirh

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies a grouped Kubernetes dependency update and matches the main change in the pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The PR changes only go.mod and go.sum dependency versions. It adds or edits no Ginkgo test declarations or test files.
Test Structure And Quality ✅ Passed The PR changes only go.mod and go.sum; it adds or modifies no Ginkgo test code, cluster operations, assertions, or test setup.
Microshift Test Compatibility ✅ Passed The PR changes only go.mod and go.sum; no Ginkgo e2e tests or test declarations were added, so the MicroShift compatibility check is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The commit changes only go.mod and go.sum; it adds no Ginkgo e2e tests or test constructs requiring SNO compatibility review.
Topology-Aware Scheduling Compatibility ✅ Passed The PR changes only go.mod and go.sum dependency versions; it adds or modifies no deployment manifests, operators, controllers, or scheduling constraints.
Ote Binary Stdout Contract ✅ Passed The commit changes only go.mod/go.sum; the OTE main has no stdout writes, logs.InitLogs sends klog output to stderr, and the Ginkgo adapter sets GinkgoWriter to os.Stderr.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The patch changes only go.mod and go.sum; it adds no Go tests, Ginkgo constructs, IPv4 assumptions, or external connectivity.
No-Weak-Crypto ✅ Passed The PR changes only go.mod and go.sum dependency versions. No weak-crypto usage or crypto implementation appears in the added lines; existing MD5 code is unchanged.
Container-Privileges ✅ Passed The PR changes only go.mod and go.sum dependency versions; no container/Kubernetes manifests or privilege markers were added.
No-Sensitive-Data-In-Logs ✅ Passed The patch changes only go.mod and go.sum dependency versions and checksums; it adds no logging code or sensitive data fields.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/k8s-409cd9fe56

Comment @coderabbitai help to get the list of available commands.

@r4f4

r4f4 commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

/ok-to-test

@openshift-ci openshift-ci Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Aug 3, 2026
@openshift-ci

openshift-ci Bot commented Aug 3, 2026

Copy link
Copy Markdown

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/unit 0575721 link true /test unit

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant