Update module github.com/gardener/gardener to v1.133.0

Author: gardener-ci-robot

.github/renovate.json5

@@ -84,6 +84,7 @@ The following dependencies have been updated:\n\
     "github.com/gobwas/glob",
     "github.com/goccy/go-yaml",
     "github.com/gogo/protobuf",
+    "github.com/golang-jwt/jwt/v5",
     "github.com/golang/protobuf",
     "github.com/google/btree",
     "github.com/google/cel-go",

config/crd/bases/controlplane.cluster.x-k8s.io_gardenershootcontrolplanes.yaml

@@ -316,7 +316,7 @@ spec:
                       ignoreTaints:
                         description: |-
                           IgnoreTaints specifies a list of taint keys to ignore in node templates when considering to scale a node group.
-                          Deprecated: Ignore taints are deprecated as of K8S 1.29 and treated as startup taints
+                          Deprecated: Ignore taints are deprecated and treated as startup taints
                         items:
                           type: string
                         type: array
@@ -793,9 +793,8 @@ spec:
                             type: string
                         type: object
                       structuredAuthentication:
-                        description: |-
-                          StructuredAuthentication contains configuration settings for structured authentication for the kube-apiserver.
-                          This field is only available for Kubernetes v1.30 or later.
+                        description: StructuredAuthentication contains configuration
+                          settings for structured authentication for the kube-apiserver.
                         properties:
                           configMapName:
                             description: |-
@@ -806,9 +805,8 @@ spec:
                         - configMapName
                         type: object
                       structuredAuthorization:
-                        description: |-
-                          StructuredAuthorization contains configuration settings for structured authorization for the kube-apiserver.
-                          This field is only available for Kubernetes v1.30 or later.
+                        description: StructuredAuthorization contains configuration
+                          settings for structured authorization for the kube-apiserver.
                         properties:
                           configMapName:
                             description: |-
@@ -1262,7 +1260,7 @@ spec:
                         properties:
                           swapBehavior:
                             description: |-
-                              SwapBehavior configures swap memory available to container workloads. May be one of {"LimitedSwap", "UnlimitedSwap"}
+                              SwapBehavior configures swap memory available to container workloads. May be one of {"NoSwap", "LimitedSwap"}
                               defaults to: LimitedSwap
                             type: string
                         type: object
@@ -1857,6 +1855,19 @@ spec:
                     description: Credentials contains information about the shoot
                       credentials.
                     properties:
+                      encryptionAtRest:
+                        description: EncryptionAtRest contains information about Shoot
+                          data encryption at rest.
+                        properties:
+                          resources:
+                            description: |-
+                              Resources is the list of resources in the Shoot which are currently encrypted.
+                              Secrets are encrypted by default and are not part of the list.
+                              See https://github.com/gardener/gardener/blob/master/docs/usage/security/etcd_encryption_config.md for more details.
+                            items:
+                              type: string
+                            type: array
+                        type: object
                       rotation:
                         description: Rotation contains information about the credential
                           rotations.
@@ -2058,6 +2069,9 @@ spec:
                       EncryptedResources is the list of resources in the Shoot which are currently encrypted.
                       Secrets are encrypted by default and are not part of the list.
                       See https://github.com/gardener/gardener/blob/master/docs/usage/security/etcd_encryption_config.md for more details.
+
+                      Deprecated: This field is deprecated and will be removed with release v1.138.
+                      This field will be removed in favor of `status.credentials.encryptionAtRest.resources`.
                     items:
                       type: string
                     type: array

config/crd/bases/infrastructure.cluster.x-k8s.io_gardenerworkerpools.yaml

@@ -479,7 +479,7 @@ spec:
                         properties:
                           swapBehavior:
                             description: |-
-                              SwapBehavior configures swap memory available to container workloads. May be one of {"LimitedSwap", "UnlimitedSwap"}
+                              SwapBehavior configures swap memory available to container workloads. May be one of {"NoSwap", "LimitedSwap"}
                               defaults to: LimitedSwap
                             type: string
                         type: object

go.mod

@@ -6,19 +6,19 @@ toolchain go1.24.10
 
 require (
 	github.com/MakeNowJust/heredoc v1.0.0
-	github.com/gardener/gardener v1.132.2
+	github.com/gardener/gardener v1.133.0
 	github.com/google/gofuzz v1.2.0
 	github.com/kcp-dev/kcp/sdk v0.28.3
 	github.com/kcp-dev/multicluster-provider v0.2.1
 	github.com/onsi/ginkgo/v2 v2.27.1
 	github.com/onsi/gomega v1.38.2
 	github.com/valyala/fastjson v1.6.4
 	golang.org/x/sync v0.18.0
-	k8s.io/api v0.34.1
-	k8s.io/apimachinery v0.34.1
-	k8s.io/client-go v0.34.1
-	k8s.io/cluster-bootstrap v0.34.1
-	k8s.io/component-base v0.34.1
+	k8s.io/api v0.34.2
+	k8s.io/apimachinery v0.34.2
+	k8s.io/client-go v0.34.2
+	k8s.io/cluster-bootstrap v0.34.2
+	k8s.io/component-base v0.34.2
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	sigs.k8s.io/cluster-api v1.10.8
 	sigs.k8s.io/controller-runtime v0.22.4
@@ -73,6 +73,7 @@ require (
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang-jwt/jwt/v5 v5.3.0 // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/cel-go v0.26.0 // indirect
@@ -119,10 +120,10 @@ require (
 	github.com/perses/perses-operator v0.2.0 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.86.2 // indirect
+	github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.87.0 // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.67.2 // indirect
+	github.com/prometheus/common v0.67.4 // indirect
 	github.com/prometheus/otlptranslator v0.0.2 // indirect
 	github.com/prometheus/procfs v0.17.0 // indirect
 	github.com/robfig/cron v1.2.0 // indirect
@@ -173,17 +174,17 @@ require (
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect
-	golang.org/x/crypto v0.44.0 // indirect
-	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect
-	golang.org/x/mod v0.29.0 // indirect
-	golang.org/x/net v0.46.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect
+	golang.org/x/mod v0.30.0 // indirect
+	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/oauth2 v0.32.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/telemetry v0.0.0-20251008203120-078029d740a8 // indirect
+	golang.org/x/telemetry v0.0.0-20251111182119-bc8e575c7b54 // indirect
 	golang.org/x/term v0.37.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	golang.org/x/tools v0.38.0 // indirect
+	golang.org/x/tools v0.39.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250825161204-c5933d9347a5 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 // indirect
@@ -194,23 +195,23 @@ require (
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	helm.sh/helm/v3 v3.19.1 // indirect
+	helm.sh/helm/v3 v3.19.2 // indirect
 	istio.io/api v1.27.3 // indirect
 	istio.io/client-go v1.27.2 // indirect
-	k8s.io/apiextensions-apiserver v0.34.1 // indirect
-	k8s.io/apiserver v0.34.1 // indirect
+	k8s.io/apiextensions-apiserver v0.34.2 // indirect
+	k8s.io/apiserver v0.34.2 // indirect
 	k8s.io/autoscaler/vertical-pod-autoscaler v1.5.1 // indirect
-	k8s.io/code-generator v0.34.1 // indirect
+	k8s.io/code-generator v0.34.2 // indirect
 	k8s.io/gengo v0.0.0-20230829151522-9cce18d56c01 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250820003526-c297c0c1eb9d // indirect
 	k8s.io/klog v1.0.0 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kms v0.34.1 // indirect
-	k8s.io/kube-aggregator v0.34.1 // indirect
+	k8s.io/kms v0.34.2 // indirect
+	k8s.io/kube-aggregator v0.34.2 // indirect
 	k8s.io/kube-openapi v0.0.0-20250814151709-d7b6acb124c3 // indirect
-	k8s.io/kubelet v0.34.1 // indirect
-	k8s.io/metrics v0.34.1 // indirect
-	k8s.io/pod-security-admission v0.34.1 // indirect
+	k8s.io/kubelet v0.34.2 // indirect
+	k8s.io/metrics v0.34.2 // indirect
+	k8s.io/pod-security-admission v0.34.2 // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.3 // indirect
 	sigs.k8s.io/controller-tools v0.19.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect