build(deps): Bump the all-go-mod-patch-and-minor group across 4 directories with 1 update (#1190)

dependabot[bot] · web-flow · commit d20aded1efc2 · 2025-06-30T08:54:45.000+02:00
Bumps the all-go-mod-patch-and-minor group with 1 update in the / directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Bumps the all-go-mod-patch-and-minor group with 1 update in the /api directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Bumps the all-go-mod-patch-and-minor group with 1 update in the /common directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Bumps the all-go-mod-patch-and-minor group with 1 update in the /hack/tools directory: [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml). Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kubernetes-sigs/yaml/releases">sigs.k8s.io/yaml's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <ul> <li>Bugfix: Handle unhashable keys during merge (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/122">kubernetes-sigs/yaml#122</a>)</li> <li>Improvement: wrap errors returned by JSON unmarshal (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/106">kubernetes-sigs/yaml#106</a>)</li> <li>Deprecation: Deprecate code in goyaml.v2 and goyaml.v3 directories, and redirect to equivalents in go.yaml.in/yaml/v2 and go.yaml.in/yaml/v3 (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/133">kubernetes-sigs/yaml#133</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0f318dce2b6c41d0c47bf05f9b07c727dfa0cb90"><code>0f318dc</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/134">#134</a> from kubernetes-sigs/forgot-to-add-redirects-for-cons...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b8fc0c032f68a1bd3e7658c743761fee7e668f70"><code>b8fc0c0</code></a> Forgot to add redirects for v3 constants</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/8eaa80239387b0153fcc59c9521ebda5f89a06ac"><code>8eaa802</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/133">#133</a> from kubernetes-sigs/deprecate-code-in-goyaml.v3-goya...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/69e45c10e93d2641def90d03e62054d45e8d520e"><code>69e45c1</code></a> Deprecate code in goyaml.v2/goyaml.v3 directories and redirect</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0fe7da35edc6aa625b56143f278741913b204464"><code>0fe7da3</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/125">#125</a> from kragniz/go-1.24</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/14cbb8893b8b84b623eec64e133e616c3a7033f7"><code>14cbb88</code></a> Test against go 1.24.x</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/c6ac2c9190b082fe8136151445a804dbf1daa8e8"><code>c6ac2c9</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/126">#126</a> from kragniz/remove-travis</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/203ded930b90ad364efb2fcbad4bfc4fbc83f22e"><code>203ded9</code></a> Remove old travisci config file</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b9a9b1cb9d17f91e923529e5dcd3df1a6500b6a3"><code>b9a9b1c</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/106">#106</a> from ThatsMrTalbot/patch-1</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/4c6913f457f3ed3e2fe971555838d74d8fcf677b"><code>4c6913f</code></a> fix: wrap errors returned by JSON unmarshal</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">compare view</a></li> </ul> </details> <br /> Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kubernetes-sigs/yaml/releases">sigs.k8s.io/yaml's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <ul> <li>Bugfix: Handle unhashable keys during merge (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/122">kubernetes-sigs/yaml#122</a>)</li> <li>Improvement: wrap errors returned by JSON unmarshal (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/106">kubernetes-sigs/yaml#106</a>)</li> <li>Deprecation: Deprecate code in goyaml.v2 and goyaml.v3 directories, and redirect to equivalents in go.yaml.in/yaml/v2 and go.yaml.in/yaml/v3 (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/133">kubernetes-sigs/yaml#133</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0f318dce2b6c41d0c47bf05f9b07c727dfa0cb90"><code>0f318dc</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/134">#134</a> from kubernetes-sigs/forgot-to-add-redirects-for-cons...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b8fc0c032f68a1bd3e7658c743761fee7e668f70"><code>b8fc0c0</code></a> Forgot to add redirects for v3 constants</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/8eaa80239387b0153fcc59c9521ebda5f89a06ac"><code>8eaa802</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/133">#133</a> from kubernetes-sigs/deprecate-code-in-goyaml.v3-goya...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/69e45c10e93d2641def90d03e62054d45e8d520e"><code>69e45c1</code></a> Deprecate code in goyaml.v2/goyaml.v3 directories and redirect</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0fe7da35edc6aa625b56143f278741913b204464"><code>0fe7da3</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/125">#125</a> from kragniz/go-1.24</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/14cbb8893b8b84b623eec64e133e616c3a7033f7"><code>14cbb88</code></a> Test against go 1.24.x</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/c6ac2c9190b082fe8136151445a804dbf1daa8e8"><code>c6ac2c9</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/126">#126</a> from kragniz/remove-travis</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/203ded930b90ad364efb2fcbad4bfc4fbc83f22e"><code>203ded9</code></a> Remove old travisci config file</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b9a9b1cb9d17f91e923529e5dcd3df1a6500b6a3"><code>b9a9b1c</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/106">#106</a> from ThatsMrTalbot/patch-1</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/4c6913f457f3ed3e2fe971555838d74d8fcf677b"><code>4c6913f</code></a> fix: wrap errors returned by JSON unmarshal</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">compare view</a></li> </ul> </details> <br /> Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kubernetes-sigs/yaml/releases">sigs.k8s.io/yaml's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <ul> <li>Bugfix: Handle unhashable keys during merge (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/122">kubernetes-sigs/yaml#122</a>)</li> <li>Improvement: wrap errors returned by JSON unmarshal (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/106">kubernetes-sigs/yaml#106</a>)</li> <li>Deprecation: Deprecate code in goyaml.v2 and goyaml.v3 directories, and redirect to equivalents in go.yaml.in/yaml/v2 and go.yaml.in/yaml/v3 (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/133">kubernetes-sigs/yaml#133</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0f318dce2b6c41d0c47bf05f9b07c727dfa0cb90"><code>0f318dc</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/134">#134</a> from kubernetes-sigs/forgot-to-add-redirects-for-cons...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b8fc0c032f68a1bd3e7658c743761fee7e668f70"><code>b8fc0c0</code></a> Forgot to add redirects for v3 constants</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/8eaa80239387b0153fcc59c9521ebda5f89a06ac"><code>8eaa802</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/133">#133</a> from kubernetes-sigs/deprecate-code-in-goyaml.v3-goya...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/69e45c10e93d2641def90d03e62054d45e8d520e"><code>69e45c1</code></a> Deprecate code in goyaml.v2/goyaml.v3 directories and redirect</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0fe7da35edc6aa625b56143f278741913b204464"><code>0fe7da3</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/125">#125</a> from kragniz/go-1.24</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/14cbb8893b8b84b623eec64e133e616c3a7033f7"><code>14cbb88</code></a> Test against go 1.24.x</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/c6ac2c9190b082fe8136151445a804dbf1daa8e8"><code>c6ac2c9</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/126">#126</a> from kragniz/remove-travis</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/203ded930b90ad364efb2fcbad4bfc4fbc83f22e"><code>203ded9</code></a> Remove old travisci config file</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b9a9b1cb9d17f91e923529e5dcd3df1a6500b6a3"><code>b9a9b1c</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/106">#106</a> from ThatsMrTalbot/patch-1</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/4c6913f457f3ed3e2fe971555838d74d8fcf677b"><code>4c6913f</code></a> fix: wrap errors returned by JSON unmarshal</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">compare view</a></li> </ul> </details> <br /> Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kubernetes-sigs/yaml/releases">sigs.k8s.io/yaml's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <ul> <li>Bugfix: Handle unhashable keys during merge (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/122">kubernetes-sigs/yaml#122</a>)</li> <li>Improvement: wrap errors returned by JSON unmarshal (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/106">kubernetes-sigs/yaml#106</a>)</li> <li>Deprecation: Deprecate code in goyaml.v2 and goyaml.v3 directories, and redirect to equivalents in go.yaml.in/yaml/v2 and go.yaml.in/yaml/v3 (<a href="https://redirect.github.com/kubernetes-sigs/yaml/pull/133">kubernetes-sigs/yaml#133</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0f318dce2b6c41d0c47bf05f9b07c727dfa0cb90"><code>0f318dc</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/134">#134</a> from kubernetes-sigs/forgot-to-add-redirects-for-cons...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b8fc0c032f68a1bd3e7658c743761fee7e668f70"><code>b8fc0c0</code></a> Forgot to add redirects for v3 constants</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/8eaa80239387b0153fcc59c9521ebda5f89a06ac"><code>8eaa802</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/133">#133</a> from kubernetes-sigs/deprecate-code-in-goyaml.v3-goya...</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/69e45c10e93d2641def90d03e62054d45e8d520e"><code>69e45c1</code></a> Deprecate code in goyaml.v2/goyaml.v3 directories and redirect</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/0fe7da35edc6aa625b56143f278741913b204464"><code>0fe7da3</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/125">#125</a> from kragniz/go-1.24</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/14cbb8893b8b84b623eec64e133e616c3a7033f7"><code>14cbb88</code></a> Test against go 1.24.x</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/c6ac2c9190b082fe8136151445a804dbf1daa8e8"><code>c6ac2c9</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/126">#126</a> from kragniz/remove-travis</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/203ded930b90ad364efb2fcbad4bfc4fbc83f22e"><code>203ded9</code></a> Remove old travisci config file</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/b9a9b1cb9d17f91e923529e5dcd3df1a6500b6a3"><code>b9a9b1c</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/yaml/issues/106">#106</a> from ThatsMrTalbot/patch-1</li> <li><a href="https://github.com/kubernetes-sigs/yaml/commit/4c6913f457f3ed3e2fe971555838d74d8fcf677b"><code>4c6913f</code></a> fix: wrap errors returned by JSON unmarshal</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/yaml/compare/v1.4.0...v1.5.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/api/go.mod b/api/go.mod
@@ -59,6 +59,7 @@ require (
 	github.com/spf13/pflag v1.0.6 // indirect
 	github.com/valyala/fastjson v1.6.4 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
+	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	golang.org/x/net v0.38.0 // indirect
 	golang.org/x/oauth2 v0.28.0 // indirect
 	golang.org/x/sync v0.12.0 // indirect
@@ -76,5 +77,5 @@ require (
 	k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
 	sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.4.2 // indirect
-	sigs.k8s.io/yaml v1.4.0 // indirect
+	sigs.k8s.io/yaml v1.5.0 // indirect
 )
diff --git a/api/go.sum b/api/go.sum
@@ -124,6 +124,10 @@ go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
 go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
+go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
+go.yaml.in/yaml/v3 v3.0.3 h1:bXOww4E/J3f66rav3pX3m8w6jDE4knZjGOw8b5Y6iNE=
+go.yaml.in/yaml/v3 v3.0.3/go.mod h1:tBHosrYAkRZjRAOREWbDnBXUf08JOwYq++0QNwQiWzI=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
@@ -207,5 +211,6 @@ sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 h1:/Rv+M11QRah1itp8VhT6HoVx1
 sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3/go.mod h1:18nIHnGi6636UCz6m8i4DhaJ65T6EruyzmoQqI2BVDo=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2 h1:MdmvkGuXi/8io6ixD5wud3vOLwc1rj0aNqRlpuvjmwA=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2/go.mod h1:N8f93tFZh9U6vpxwRArLiikrE5/2tiu1w1AGfACIGE4=
-sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
 sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
+sigs.k8s.io/yaml v1.5.0 h1:M10b2U7aEUY6hRtU870n2VTPgR5RZiL/I6Lcc2F4NUQ=
+sigs.k8s.io/yaml v1.5.0/go.mod h1:wZs27Rbxoai4C0f8/9urLZtZtF3avA3gKvGyPdDqTO4=
diff --git a/common/go.mod b/common/go.mod
@@ -72,6 +72,7 @@ require (
 	go.opentelemetry.io/otel v1.29.0 // indirect
 	go.opentelemetry.io/otel/trace v1.29.0 // indirect
 	go.uber.org/automaxprocs v1.6.0 // indirect
+	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
 	golang.org/x/net v0.38.0 // indirect
 	golang.org/x/oauth2 v0.28.0 // indirect
@@ -93,5 +94,5 @@ require (
 	k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
 	sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.4.2 // indirect
-	sigs.k8s.io/yaml v1.4.0 // indirect
+	sigs.k8s.io/yaml v1.5.0 // indirect
 )
diff --git a/common/go.sum b/common/go.sum
@@ -173,6 +173,10 @@ go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
 go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
+go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
+go.yaml.in/yaml/v3 v3.0.3 h1:bXOww4E/J3f66rav3pX3m8w6jDE4knZjGOw8b5Y6iNE=
+go.yaml.in/yaml/v3 v3.0.3/go.mod h1:tBHosrYAkRZjRAOREWbDnBXUf08JOwYq++0QNwQiWzI=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
@@ -268,5 +272,6 @@ sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 h1:/Rv+M11QRah1itp8VhT6HoVx1
 sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3/go.mod h1:18nIHnGi6636UCz6m8i4DhaJ65T6EruyzmoQqI2BVDo=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2 h1:MdmvkGuXi/8io6ixD5wud3vOLwc1rj0aNqRlpuvjmwA=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2/go.mod h1:N8f93tFZh9U6vpxwRArLiikrE5/2tiu1w1AGfACIGE4=
-sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
 sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
+sigs.k8s.io/yaml v1.5.0 h1:M10b2U7aEUY6hRtU870n2VTPgR5RZiL/I6Lcc2F4NUQ=
+sigs.k8s.io/yaml v1.5.0/go.mod h1:wZs27Rbxoai4C0f8/9urLZtZtF3avA3gKvGyPdDqTO4=
diff --git a/go.mod b/go.mod
@@ -44,7 +44,7 @@ require (
 	sigs.k8s.io/cluster-api v1.10.3
 	sigs.k8s.io/cluster-api/test v1.10.3
 	sigs.k8s.io/controller-runtime v0.20.4
-	sigs.k8s.io/yaml v1.4.0
+	sigs.k8s.io/yaml v1.5.0
 )
 
 require (
@@ -159,6 +159,7 @@ require (
 	go.uber.org/automaxprocs v1.6.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
+	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	golang.org/x/crypto v0.36.0 // indirect
 	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
 	golang.org/x/mod v0.24.0 // indirect
diff --git a/go.sum b/go.sum
@@ -354,6 +354,10 @@ go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
 go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
+go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
+go.yaml.in/yaml/v3 v3.0.3 h1:bXOww4E/J3f66rav3pX3m8w6jDE4knZjGOw8b5Y6iNE=
+go.yaml.in/yaml/v3 v3.0.3/go.mod h1:tBHosrYAkRZjRAOREWbDnBXUf08JOwYq++0QNwQiWzI=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
@@ -473,5 +477,6 @@ sigs.k8s.io/kind v0.27.0 h1:PQ3f0iAWNIj66LYkZ1ivhEg/+Zb6UPMbO+qVei/INZA=
 sigs.k8s.io/kind v0.27.0/go.mod h1:RZVFmy6qcwlSWwp6xeIUv7kXCPF3i8MXsEXxW/J+gJY=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2 h1:MdmvkGuXi/8io6ixD5wud3vOLwc1rj0aNqRlpuvjmwA=
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2/go.mod h1:N8f93tFZh9U6vpxwRArLiikrE5/2tiu1w1AGfACIGE4=
-sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
 sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
+sigs.k8s.io/yaml v1.5.0 h1:M10b2U7aEUY6hRtU870n2VTPgR5RZiL/I6Lcc2F4NUQ=
+sigs.k8s.io/yaml v1.5.0/go.mod h1:wZs27Rbxoai4C0f8/9urLZtZtF3avA3gKvGyPdDqTO4=
diff --git a/hack/tools/go.mod b/hack/tools/go.mod
@@ -15,7 +15,7 @@ require (
 	k8s.io/apimachinery v0.32.6
 	sigs.k8s.io/cluster-api v1.10.3
 	sigs.k8s.io/controller-runtime v0.20.4
-	sigs.k8s.io/yaml v1.4.0
+	sigs.k8s.io/yaml v1.5.0
 )
 
 require (
@@ -151,6 +151,8 @@ require (
 	go.opentelemetry.io/otel/trace v1.29.0 // indirect
 	go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
 	go.uber.org/multierr v1.11.0 // indirect
+	go.yaml.in/yaml/v2 v2.4.2 // indirect
+	go.yaml.in/yaml/v3 v3.0.3 // indirect
 	go4.org v0.0.0-20201209231011-d4a079459e60 // indirect
 	golang.org/x/crypto v0.36.0 // indirect
 	golang.org/x/net v0.38.0 // indirect
diff --git a/hack/tools/go.sum b/hack/tools/go.sum
@@ -1035,6 +1035,10 @@ go.uber.org/zap v1.13.0/go.mod h1:zwrFLgMcdUuIBviXEYEH1YKNaOBnKXsx2IPda5bBwHM=
 go.uber.org/zap v1.18.1/go.mod h1:xg/QME4nWcxGxrpdeYfq7UvYrLh66cuVKdrbD1XF/NI=
 go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
 go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
+go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
+go.yaml.in/yaml/v3 v3.0.3 h1:bXOww4E/J3f66rav3pX3m8w6jDE4knZjGOw8b5Y6iNE=
+go.yaml.in/yaml/v3 v3.0.3/go.mod h1:tBHosrYAkRZjRAOREWbDnBXUf08JOwYq++0QNwQiWzI=
 go4.org v0.0.0-20201209231011-d4a079459e60 h1:iqAGo78tVOJXELHQFRjR6TMwItrvXH4hrGJ32I/NFF8=
 go4.org v0.0.0-20201209231011-d4a079459e60/go.mod h1:CIiUVy99QCPfoE13bO4EZaz5GZMZXMSBGhxRdsvzbkg=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
@@ -1507,6 +1511,7 @@ sigs.k8s.io/structured-merge-diff/v4 v4.4.2 h1:MdmvkGuXi/8io6ixD5wud3vOLwc1rj0aN
 sigs.k8s.io/structured-merge-diff/v4 v4.4.2/go.mod h1:N8f93tFZh9U6vpxwRArLiikrE5/2tiu1w1AGfACIGE4=
 sigs.k8s.io/yaml v1.1.0/go.mod h1:UJmg0vDUVViEyp3mgSv9WPwZCDxu4rQW1olrI1uml+o=
 sigs.k8s.io/yaml v1.2.0/go.mod h1:yfXDCHCao9+ENCvLSE62v9VSji2MKu5jeNfTrofGhJc=
-sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
 sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
+sigs.k8s.io/yaml v1.5.0 h1:M10b2U7aEUY6hRtU870n2VTPgR5RZiL/I6Lcc2F4NUQ=
+sigs.k8s.io/yaml v1.5.0/go.mod h1:wZs27Rbxoai4C0f8/9urLZtZtF3avA3gKvGyPdDqTO4=
 sourcegraph.com/sourcegraph/appdash v0.0.0-20190731080439-ebfcffb1b5c0/go.mod h1:hI742Nqp5OhwiqlzhgfbWU4mW4yO10fP+LoT9WOswdU=
