chore(deps): bump the go group with 17 updates #746

dependabot · 2025-09-14T15:05:20Z

Bumps the go group with 17 updates:

Package	From	To
cuelang.org/go	`0.14.0`	`0.14.1`
github.com/containers/image/v5	`5.36.1`	`5.36.2`
github.com/fluxcd/pkg/apis/meta	`1.18.0`	`1.21.0`
github.com/fluxcd/pkg/http/fetch	`0.17.0`	`0.19.0`
github.com/fluxcd/pkg/kustomize	`1.19.0`	`1.22.0`
github.com/fluxcd/pkg/runtime	`0.79.0`	`0.85.0`
github.com/fluxcd/pkg/tar	`0.13.0`	`0.14.0`
github.com/mikefarah/yq/v4	`4.45.4`	`4.47.2`
github.com/onsi/gomega	`1.38.0`	`1.38.2`
github.com/stretchr/testify	`1.10.0`	`1.11.1`
helm.sh/helm/v3	`3.18.5`	`3.19.0`
k8s.io/api	`0.33.3`	`0.34.0`
k8s.io/apiextensions-apiserver	`0.33.3`	`0.34.0`
k8s.io/apimachinery	`0.33.3`	`0.34.0`
k8s.io/client-go	`0.33.3`	`0.34.0`
ocm.software/ocm	`0.27.0`	`0.29.1`
sigs.k8s.io/controller-runtime	`0.21.0`	`0.22.1`

Updates cuelang.org/go from 0.14.0 to 0.14.1

Updates github.com/containers/image/v5 from 5.36.1 to 5.36.2

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.36.2

What's Changed

[release-5.36] Bump to c/image v5.36.1 by @TomSweeneyRedHat in containers/image#2920

[release-5.36] rekor: do not cancel http context by @TomSweeneyRedHat in containers/image#2943

Full Changelog: containers/image@v5.36.1...v5.36.2

Commits

d464a25 Bump to v5.36.2
50a6b67 Merge pull request #2943 from TomSweeneyRedHat/dev/tsweeney/backport_2938
d3eb538 [release-5.36] rekor: do not cancel http context
6ed8326 Merge pull request #2920 from TomSweeneyRedHat/dev/tsweeney/v5.36.1
See full diff in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.18.0 to 1.21.0

Commits

6ce1a83 Merge pull request #1019 from fluxcd/update-otel
828f74f Prepare release
e7a2b15 Update otel to v1.38.0
d2f54dd Merge pull request #1018 from fluxcd/meta-artifact
9adb480 apis: Add Artifact type to meta package
7201e2c Merge pull request #1017 from fluxcd/kustomize-ignore-components
929f4b4 kustomize: Add ignoreMissingComponents option
a5e02ce Merge pull request #1013 from fluxcd/meta-history
71c0a08 Prepare release
4aaf176 meta: Add History API for tracking reconcile runs in status
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/http/fetch from 0.17.0 to 0.19.0

Commits

e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
2b974af Update sigs.k8s.io/controller-tools to v0.15.0
52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
c906252 Update dependencies to Kubernetes 1.30
92c1348 Merge pull request #764 from fluxcd/dependabot/github_actions/ci-e44cfae560
ccb916a build(deps): bump the ci group with 3 updates
6081556 Merge pull request #761 from fluxcd/kustomize-name-prefix-suffix
abf5675 kustomize: Add support for namePrefix and nameSuffix
98d2522 Merge pull request #760 from fluxcd/dependabot/github_actions/ci-8f082d4f6d
efcd824 build(deps): bump docker/setup-buildx-action in the ci group
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.19.0 to 1.22.0

Commits

bf02f0a Merge pull request #1026 from fluxcd/storage-refactoring
e2dd3d1 artifact: Refactor storage package structure
ee36d78 Merge pull request #1025 from fluxcd/controller-runtime-v0.22.1
b5ab5b9 Prepare release
6ce90c6 Add the Artifact Management SDK to readme
e4f3937 Update controller-runtime to v0.22.1
9e2ac7d Merge pull request #1024 from fluxcd/dependabot/github_actions/ci-43e6514044
93ac531 build(deps): bump the ci group across 1 directory with 5 updates
24724be Merge pull request #1023 from fluxcd/runtime-env-vars
85cb1e2 runtime: Add environment variables
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.79.0 to 0.85.0

Commits

4e0af91 Merge pull request #1028 from fluxcd/cel-string-slice
3adc488 Prepare for release
c302901 runtime/cel: introduce EvaluateStringSlice()
6914a6a Merge pull request #1027 from fluxcd/helm-v0.34.0
75e64b1 Update Helm to v3.19.0
bf02f0a Merge pull request #1026 from fluxcd/storage-refactoring
e2dd3d1 artifact: Refactor storage package structure
ee36d78 Merge pull request #1025 from fluxcd/controller-runtime-v0.22.1
b5ab5b9 Prepare release
6ce90c6 Add the Artifact Management SDK to readme
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.13.0 to 0.14.0

Commits

909b315 Merge pull request #651 from fluxcd/git-upgrade-deps
3249e6d git: upgrade dependencies
6eae7b4 Merge pull request #650 from pjbgf/upstream-billy
e8ee260 git/gogit: Replaces fs with upstream osfs.BoundOS
01981ea Merge pull request #649 from fluxcd/dependabot/github_actions/ci-915f3d3f9a
c6bb1fa build(deps): bump the ci group with 2 updates
eedb1a0 Merge pull request #646 from fluxcd/oci-cr-logger
e6669d8 oci/auth: Add test to check for non-test flags
f01d884 oci: Use controller-runtime pkg/log explicitly
488252e Merge pull request #643 from fluxcd/dependabot/github_actions/ci-81eb07bab1
Additional commits viewable in compare view

Updates github.com/mikefarah/yq/v4 from 4.45.4 to 4.47.2

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.47.2

Conversion from TOML to JSON no longer omits empty tables #2459 (thanks @louislouislouislouis)

Bumped dependencies

v4.47.1 - Merge Anchor fixes (with flag)

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes

Fixed panic for syntax error when creating a map #2423

Bumped dependencies

v4.46.1 - INI support + bug fixes

Added INI support

Fixed 'add' operator when piped in with no data #2378, #2383, #2384

Fixed delete after slice problem (bad node path) #2387 Thanks @antoinedeschenes

Fixed yq small build Thanks @imzue

Switched to YAML org supported go-yaml!

Bumped dependencies

Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.47.2:

Conversion from TOML to JSON no longer omits empty tables #2459 (thanks @louislouislouislouis)

Bumped dependencies

4.47.1:

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes

Fixed panic for syntax error when creating a map #2423

Bumped dependencies

4.46.1:

Added INI support

Fixed 'add' operator when piped in with no data #2378, #2383, #2384

Fixed delete after slice problem (bad node path) #2387 Thanks @antoinedeschenes

Fixed yq small build Thanks @imzue

Switched to YAML org supported go-yaml!

Bumped dependencies

Commits

6251e95 Bumping version
b2155eb Preparing release
911e394 Bumping pflag
35d338c modify empty table decode
6d7aa38 Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
e890011 Adding gah as a community supported install method
c34edcf Bump actions/checkout from 4 to 5
a46a576 Bump golang from 1.24.5 to 1.25.0
af2f868 Bump golang.org/x/net from 0.42.0 to 0.43.0
76c8170 Use ghcr.io instead of ghrc.io
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.38.0 to 1.38.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.2

1.38.2

roll back to go 1.23.0 [c404969]

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.2

roll back to go 1.23.0 [c404969]

1.38.1

Fixes

Numerous minor fixes and dependency bumps

Commits

79b8a75 v1.38.2
c404969 roll back to go 1.23.0
c36e89a v1.38.1
92eaa57 go mod tidy
b9ed3cd deprecate CompileTest*
2a5bf77 fix invalid fmt.Errorf
3e9e385 bump ginkgo
7f37abe Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3
69e4761 fix(async_assertion): use correct error in errors.As
95737c0 Bump golang.org/x/net from 0.41.0 to 0.43.0 (#856)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

... (truncated)

Commits

2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
af8c912 Backport #1786 to release/1.11
b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.18.5 to 3.19.0

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.19.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Fixed a helm pull regression from 3.18 - error pulling OCI charts with --password #31230

Fixed a helm lint regression from Helm 3.18 - rejected JSON Schema $ref URLs that worked in 3.17.x #31166

Fixed go mod tidy #31154

Fixed k8s version parsing not matching original #31091

Fixed charts failing when using a redirect registry #31087

Fixed missing debug logging for OCI transport

Fixed broken legacy docker support for login #30941

Fixed bugs from the move to ORAS v2

Fixed processing all hook deletions on failure #30673

Feature for helm create added httproute from gateway-api to create chart template #30658

Installation and Upgrading

Download Helm v3.19.0. The common platform binaries are here:

MacOS amd64 (checksum / 09a108c0abda42e45af172be65c49125354bf7cd178dbe10435e94540e49c7b9)

MacOS arm64 (checksum / 31513e1193da4eb4ae042eb5f98ef9aca7890cfa136f4707c8d4f70e2115bef6)

Linux amd64 (checksum / a7f81ce08007091b86d8bd696eb4d86b8d0f2e1b9f6c714be62f82f96a594496)

Linux arm (checksum / 8708367b8e8bed9bdf8429bb57536e4223cdca96245dffc205cb0cb670b151f4)

Linux arm64 (checksum / 440cf7add0aee27ebc93fada965523c1dc2e0ab340d4348da2215737fc0d76ad)

Linux i386 (checksum / ca0329cd1b09267e7c63c563e32462265949c31512b537dd6615d0b5190040fc)

Linux ppc64le (checksum / f57ea04d7fa62cc3e90a831eb67edb1400c810df6083875bee3a7c195a795ce4)

Linux s390x (checksum / 0dff2f249f71690e3b420ebb5efc573eb26a51b4a614c4391c8c7fa3e47863f2)

Linux riscv64 (checksum / 978af545a3d72a253ce1d4c03c9febb509a239a48b2581107e548883ab61a227)

Windows amd64 (checksum / 6488630c2e5d5945ed990fa02fd9e99f9c6792cdbcd79eb264b6cfb90179d2d1)

Windows arm64 (checksum / 488f7530a1776da1b46b14e988bf305c9d7419c78e7e73aeb92f198a41c9ef6b)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.19.1 will contain only bug fixes.

3.20.0 is the next feature release.

Changelog

bump version to v3.19.0 3d8990f0836691f0229297773f3524598f46bda6 (Scott Rigby)

fix: use username and password if provided 9a54bf1df6245232aff6235ebc5da7616f06afa7 (Evans Mungai)

... (truncated)

Commits

3d8990f bump version to v3.19.0
eab6c55 Merge pull request #31214 from helm/dependabot/go_modules/dev-v3/k8s-io-e32ea...
25f462c Merge pull request #31241 from banjoh/em/fix-username-password-v3
9a54bf1 fix: use username and password if provided
5af0f68 chore(deps): bump the k8s-io group with 7 updates
fb05a5a Merge pull request #31233 from helm/dependabot/go_modules/dev-v3/github.com/s...
e485606 chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1
2386688 Merge pull request #31208 from helm/dependabot/go_modules/dev-v3/github.com/s...
6355c3d chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1
ee80c32 Merge pull request #31189 from helm/dependabot/go_modules/dev-v3/github.com/s...
Additional commits viewable in compare view

Updates k8s.io/api from 0.33.3 to 0.34.0

Commits

ae6c3b9 Update dependencies to v0.34.0 tag
133a39c Merge remote-tracking branch 'origin/master' into release-1.34
fd087be clarify that staging repos are automatically published
ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
5ec86fc link to what a staging repository is
08c5dee docs: clarify that this is a staging repository and not for direct contributions
ba64d0b Update prerelease lifecycle to v1.34
25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
baa1eb1 KEP-5075: generated codes from make update
740b2c9 KEP-5075: API updates
Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.33.3 to 0.34.0

Commits

ce01291 Update dependencies to v0.34.0 tag
aada5e8 Merge remote-tracking branch 'origin/master' into release-1.34
bad5b2a clarify that staging repos are automatically published
f498996 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
f782221 link to what a staging repository is
3625d64 docs: clarify that this is a staging repository and not for direct contributions
71e26b6 Bump etcd sdk to v3.6.4
056a425 Merge pull request #133180 from ylink-lfs/chore/ptr_cast_replace
63d27f2 Merge pull request #132942 from thockin/kyaml
6f8ce15 Allow white-spaced CABundle during webhook client creation and validation (#1...
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.33.3 to 0.34.0

Commits

b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
cd8b91c clarify that staging repos are automatically published
8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
ec3cea5 link to what a staging repository is
e4db694 docs: clarify that this is a staging repository and not for direct contributions
04507a3 Merge pull request #132942 from thockin/kyaml
50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
38a24e6 chore: residual boolptr and intptr removal
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.33.3 to 0.34.0

Commits

b1c7d7b Update dependencies to v0.34.0 tag
97396af Merge remote-tracking branch 'origin/master' into release-1.34
5f737f3 clarify that staging repos are automatically published
0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
c00384c link to what a staging repository is
b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
42e6182 KEP-5075: generated codes from make update
da11948 Merge pull request #130653 from yliaog/master
3b7d818 extended resource backed by DRA: codegen
bb11581 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
Additional commits viewable in compare view

Updates ocm.software/ocm from 0.27.0 to 0.29.1

Release notes

Sourced from ocm.software/ocm's releases.

v0.29.1

What's Changed

⬆️ Dependencies

chore: update Go version to 1.25.1 (open-component-model#1609) by @fabianburth in open-component-model/ocm#1611

🧰 Maintenance

chore: bump VERSION to 0.29.1-dev by @fabianburth in open-component-model/ocm#1610

Full Changelog: open-component-model/ocm@v0.29.0...v0.29.1

v0.29.0

What's Changed

🐛 Bug Fixes

fix: tag //go:build integration by @vasu1124 in open-component-model/ocm#1570

fix(ci): correct artifact download path in release workflow to ensure proper recognition by @jakobmoellerdev in open-component-model/ocm#1595

⬆️ Dependencies

chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible in the go_modules group by @dependabot[bot] in open-component-model/ocm#1557

chore(deps): bump the go group with 9 updates by @dependabot[bot] in open-component-model/ocm#1559

chore(deps): bump [email protected] by @hilmarf in open-component-model/ocm#1563

chore(deps): bump distroless/static-debian12 from to by @dependabot[bot] in open-component-model/ocm#1571

chore(deps): bump the go group with 11 updates by @dependabot[bot] in open-component-model/ocm#1572

chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in the go_modules group by @dependabot[bot] in open-component-model/ocm#1578

chore(deps): bump the go group with 12 updates by @dependabot[bot] in open-component-model/ocm#1582

chore(deps): bump the go group with 10 updates by @dependabot[bot] in open-component-model/ocm#1589

chore: update minimal build version to go 1.25 by @jakobmoellerdev in open-component-model/ocm#1591

🧰 Maintenance

chore: bump VERSION to 0.29.0-dev by @ocmbot[bot] in open-component-model/ocm#1556

Full Changelog: open-component-model/ocm@v0.28...v0.29.0

v0.29.0-rc.1

What's Changed

🐛 Bug Fixes

fix: tag //go:build integration by @vasu1124 in open-component-model/ocm#1570

fix(ci): correct artifact download path in release workflow to ensure proper recognition by @jakobmoellerdev in open-component-model/ocm#1595

⬆️ Dependencies

... (truncated)

Commits

c9a4cd0 Release v0.29.1
70af624 chore: update Go version to 1.25.1 (open-component-model#1609) (#1611)
d6c43e7 chore: bump VERSION to 0.29.1-dev (#1610)
2d0e9e8 Release v0.29.0
a67cd36 fix(ci): correct artifact download path in release workflow to ensure proper ...
ce5eb4d chore: update minimal build version to go 1.25 (#1591)
24ee03d chore: update 'flake.nix' (#1590)
26ea852 chore(deps): bump the go group with 10 updates (#1589)
f129439 chore(deps): bump github/codeql-action from 3.29.10 to 3.29.11 in the ci grou...
564bba1 chore: update 'flake.nix' (#1587)
Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.21.0 to 0.22.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.1

What's Changed

🌱 Revert deprecation of client.Apply by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3308

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1

v0.22.0

🔆 Highlights

Client: Native support for Server-Side Apply (SSA) (#3253, #2981)

Update to k8s.io/* v1.34 dependencies (#3231, #3236, #3246, #3259, #3270, #3300)

Controller: Implement warmup support for controllers (#3192)

Priorityqueue: various improvements (#3289, #3290, #3243, #3250)

⚠️ Breaking changes

Update to k8s.io/* v1.34 dependencies by @alvaroaleman @troy0820 #3231, #3236, #3246, #3259, #3270, #3300

Client: Add native SSA support by @alvaroaleman in kubernetes-sigs/controller-runtime#3253

Client: Default selector to Nothing if it is nil for MatchingLabelsSelector and MatchingFieldsSelector by @acumino in kubernetes-sigs/controller-runtime#3279

Fakeclient: Add SSA support by @alvaroaleman in kubernetes-sigs/controller-runtime#2981

Fakeclient: Remove support for objects with pointer ObjectMeta by @alvaroaleman in kubernetes-sigs/controller-runtime#3228

Fakeclient: Clear TypeMeta for structured objects by @alvaroaleman in kubernetes-sigs/controller-runtime#3229

Priorityqueue: Make Priority option a pointer by @alvaroaleman in kubernetes-sigs/controller-runtime#3289

✨ Features

Client: Add UnsafeDisableDeepCopy to GetOptions by @jonathan-innis in kubernetes-sigs/controller-runtime#3227

Controller: Add a ReconciliationTimeout option by @alvaroaleman in kubernetes-sigs/controller-runtime#3296

Controller: Implement warmup support for controllers by @godwinpang in kubernetes-sigs/controller-runtime#3192

Envtest: Allow selection of binaries version by release series by @cbandy in kubernetes-sigs/controller-runtime#3280

Manager: Add support for custom labels on leader election leases by @DerekFrank<...
Description has been truncated

Bumps the go group with 17 updates: | Package | From | To | | --- | --- | --- | | cuelang.org/go | `0.14.0` | `0.14.1` | | [github.com/containers/image/v5](https://github.com/containers/image) | `5.36.1` | `5.36.2` | | [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.18.0` | `1.21.0` | | [github.com/fluxcd/pkg/http/fetch](https://github.com/fluxcd/pkg) | `0.17.0` | `0.19.0` | | [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.19.0` | `1.22.0` | | [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.79.0` | `0.85.0` | | [github.com/fluxcd/pkg/tar](https://github.com/fluxcd/pkg) | `0.13.0` | `0.14.0` | | [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.45.4` | `4.47.2` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.38.0` | `1.38.2` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.18.5` | `3.19.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.33.3` | `0.34.0` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.33.3` | `0.34.0` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.3` | `0.34.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.3` | `0.34.0` | | [ocm.software/ocm](https://github.com/open-component-model/ocm) | `0.27.0` | `0.29.1` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.21.0` | `0.22.1` | Updates `cuelang.org/go` from 0.14.0 to 0.14.1 Updates `github.com/containers/image/v5` from 5.36.1 to 5.36.2 - [Release notes](https://github.com/containers/image/releases) - [Commits](containers/image@v5.36.1...v5.36.2) Updates `github.com/fluxcd/pkg/apis/meta` from 1.18.0 to 1.21.0 - [Commits](fluxcd/pkg@apis/meta/v1.18.0...apis/meta/v1.21.0) Updates `github.com/fluxcd/pkg/http/fetch` from 0.17.0 to 0.19.0 - [Commits](fluxcd/pkg@git/v0.17.0...git/v0.19.0) Updates `github.com/fluxcd/pkg/kustomize` from 1.19.0 to 1.22.0 - [Commits](fluxcd/pkg@apis/meta/v1.19.0...kustomize/v1.22.0) Updates `github.com/fluxcd/pkg/runtime` from 0.79.0 to 0.85.0 - [Commits](fluxcd/pkg@runtime/v0.79.0...runtime/v0.85.0) Updates `github.com/fluxcd/pkg/tar` from 0.13.0 to 0.14.0 - [Commits](fluxcd/pkg@git/v0.13.0...git/v0.14.0) Updates `github.com/mikefarah/yq/v4` from 4.45.4 to 4.47.2 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@v4.45.4...v4.47.2) Updates `github.com/onsi/gomega` from 1.38.0 to 1.38.2 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.38.0...v1.38.2) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) Updates `helm.sh/helm/v3` from 3.18.5 to 3.19.0 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.18.5...v3.19.0) Updates `k8s.io/api` from 0.33.3 to 0.34.0 - [Commits](kubernetes/api@v0.33.3...v0.34.0) Updates `k8s.io/apiextensions-apiserver` from 0.33.3 to 0.34.0 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.33.3...v0.34.0) Updates `k8s.io/apimachinery` from 0.33.3 to 0.34.0 - [Commits](kubernetes/apimachinery@v0.33.3...v0.34.0) Updates `k8s.io/client-go` from 0.33.3 to 0.34.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.33.3...v0.34.0) Updates `ocm.software/ocm` from 0.27.0 to 0.29.1 - [Release notes](https://github.com/open-component-model/ocm/releases) - [Changelog](https://github.com/open-component-model/ocm/blob/main/RELEASE_PROCESS.md) - [Commits](open-component-model/ocm@v0.27...v0.29.1) Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.1 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.21.0...v0.22.1) --- updated-dependencies: - dependency-name: cuelang.org/go dependency-version: 0.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/containers/image/v5 dependency-version: 5.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/http/fetch dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/kustomize dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/runtime dependency-version: 0.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/tar dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/mikefarah/yq/v4 dependency-version: 4.47.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/onsi/gomega dependency-version: 1.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: helm.sh/helm/v3 dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/api dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/apimachinery dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/client-go dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: ocm.software/ocm dependency-version: 0.29.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-09-21T15:03:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Sep 14, 2025

dependabot bot requested a review from a team as a code owner September 14, 2025 15:05

dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Sep 14, 2025

dependabot bot closed this Sep 21, 2025

dependabot bot deleted the dependabot/go_modules/go-c4aa93e5d0 branch September 21, 2025 15:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go group with 17 updates #746

chore(deps): bump the go group with 17 updates #746

Uh oh!

dependabot bot commented on behalf of github Sep 14, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the go group with 17 updates #746

chore(deps): bump the go group with 17 updates #746

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.36.2

What's Changed

v4.47.2

v4.47.1 - Merge Anchor fixes (with flag)

v4.46.1 - INI support + bug fixes

v1.38.2

1.38.2

v1.38.1

1.38.1

Fixes

1.38.2

1.38.1

Fixes

v1.11.1

What's Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Notable Changes

Installation and Upgrading

What's Next

Changelog

v0.29.1

What's Changed

⬆️ Dependencies

🧰 Maintenance

v0.29.0

What's Changed

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.29.0-rc.1

What's Changed

🐛 Bug Fixes

⬆️ Dependencies

v0.22.1

What's Changed

v0.22.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

Uh oh!

dependabot bot commented on behalf of github Sep 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Sep 14, 2025 •

edited

Loading