fix(deps): update all non-major dependencies #11

Merged
waldemar.kindler merged 2 commits from renovate/all-minor-patch into main 2026-07-31 16:56:34 +00:00
Member

This PR contains the following updates:

Package Change Age Confidence
github.com/kcp-dev/sdk v0.31.0v0.32.3 age confidence
k8s.io/api v0.36.0v0.36.3 age confidence
k8s.io/apimachinery v0.36.0v0.36.3 age confidence
k8s.io/client-go v0.36.0v0.36.3 age confidence

Release Notes

kcp-dev/sdk (github.com/kcp-dev/sdk)

v0.32.3

Compare Source

v0.32.2

Compare Source

v0.32.1

Compare Source

v0.32.0

Compare Source

v0.31.6

Compare Source

v0.31.4

Compare Source

v0.31.3

Compare Source

v0.31.2

Compare Source

v0.31.1

Compare Source

kubernetes/api (k8s.io/api)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/kcp-dev/sdk](https://github.com/kcp-dev/sdk) | `v0.31.0` → `v0.32.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fkcp-dev%2fsdk/v0.32.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fkcp-dev%2fsdk/v0.31.0/v0.32.3?slim=true) | | [k8s.io/api](https://github.com/kubernetes/api) | `v0.36.0` → `v0.36.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapi/v0.36.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapi/v0.36.0/v0.36.3?slim=true) | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `v0.36.0` → `v0.36.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapimachinery/v0.36.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapimachinery/v0.36.0/v0.36.3?slim=true) | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `v0.36.0` → `v0.36.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fclient-go/v0.36.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fclient-go/v0.36.0/v0.36.3?slim=true) | --- ### Release Notes <details> <summary>kcp-dev/sdk (github.com/kcp-dev/sdk)</summary> ### [`v0.32.3`](https://github.com/kcp-dev/sdk/compare/v0.32.2...v0.32.3) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.32.2...v0.32.3) ### [`v0.32.2`](https://github.com/kcp-dev/sdk/compare/v0.32.1...v0.32.2) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.32.1...v0.32.2) ### [`v0.32.1`](https://github.com/kcp-dev/sdk/compare/v0.32.0...v0.32.1) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.32.0...v0.32.1) ### [`v0.32.0`](https://github.com/kcp-dev/sdk/compare/v0.31.6...v0.32.0) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.31.6...v0.32.0) ### [`v0.31.6`](https://github.com/kcp-dev/sdk/compare/v0.31.4...v0.31.6) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.31.4...v0.31.6) ### [`v0.31.4`](https://github.com/kcp-dev/sdk/compare/v0.31.3...v0.31.4) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.31.3...v0.31.4) ### [`v0.31.3`](https://github.com/kcp-dev/sdk/compare/v0.31.2...v0.31.3) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.31.2...v0.31.3) ### [`v0.31.2`](https://github.com/kcp-dev/sdk/compare/v0.31.1...v0.31.2) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.31.1...v0.31.2) ### [`v0.31.1`](https://github.com/kcp-dev/sdk/compare/v0.31.0...v0.31.1) [Compare Source](https://github.com/kcp-dev/sdk/compare/v0.31.0...v0.31.1) </details> <details> <summary>kubernetes/api (k8s.io/api)</summary> ### [`v0.36.3`](https://github.com/kubernetes/api/compare/v0.36.2...v0.36.3) [Compare Source](https://github.com/kubernetes/api/compare/v0.36.2...v0.36.3) ### [`v0.36.2`](https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2) [Compare Source](https://github.com/kubernetes/api/compare/v0.36.1...v0.36.2) ### [`v0.36.1`](https://github.com/kubernetes/api/compare/v0.36.0...v0.36.1) [Compare Source](https://github.com/kubernetes/api/compare/v0.36.0...v0.36.1) </details> <details> <summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary> ### [`v0.36.3`](https://github.com/kubernetes/apimachinery/compare/v0.36.2...v0.36.3) [Compare Source](https://github.com/kubernetes/apimachinery/compare/v0.36.2...v0.36.3) ### [`v0.36.2`](https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2) [Compare Source](https://github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2) ### [`v0.36.1`](https://github.com/kubernetes/apimachinery/compare/v0.36.0...v0.36.1) [Compare Source](https://github.com/kubernetes/apimachinery/compare/v0.36.0...v0.36.1) </details> <details> <summary>kubernetes/client-go (k8s.io/client-go)</summary> ### [`v0.36.3`](https://github.com/kubernetes/client-go/compare/v0.36.2...v0.36.3) [Compare Source](https://github.com/kubernetes/client-go/compare/v0.36.2...v0.36.3) ### [`v0.36.2`](https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2) [Compare Source](https://github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2) ### [`v0.36.1`](https://github.com/kubernetes/client-go/compare/v0.36.0...v0.36.1) [Compare Source](https://github.com/kubernetes/client-go/compare/v0.36.0...v0.36.1) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODUuNiIsInVwZGF0ZWRJblZlciI6IjQzLjI4NS42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
fix(deps): update all non-major dependencies
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
ci-main / test (pull_request) Failing after 8m52s
3a0321e782
Author
Member

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 15 additional dependencies were updated

Details:

Package Change
github.com/fxamacker/cbor/v2 v2.9.0 -> v2.9.1
github.com/go-openapi/jsonpointer v0.21.0 -> v0.23.1
github.com/go-openapi/jsonreference v0.21.0 -> v0.21.5
github.com/go-openapi/swag v0.23.0 -> v0.26.0
github.com/prometheus/procfs v0.19.2 -> v0.20.1
go.yaml.in/yaml/v2 v2.4.3 -> v2.4.4
golang.org/x/net v0.49.0 -> v0.53.0
golang.org/x/oauth2 v0.34.0 -> v0.36.0
golang.org/x/sys v0.40.0 -> v0.43.0
golang.org/x/term v0.39.0 -> v0.42.0
golang.org/x/text v0.33.0 -> v0.36.0
golang.org/x/time v0.14.0 -> v0.15.0
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a -> v0.0.0-20260414162039-ec9c827d403f
k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 -> v0.0.0-20260319190234-28399d86e0b5
sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.4.0
### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 15 additional dependencies were updated Details: | **Package** | **Change** | | :------------------------------------- | :--------------------------------------------------------------------------- | | `github.com/fxamacker/cbor/v2` | `v2.9.0` -> `v2.9.1` | | `github.com/go-openapi/jsonpointer` | `v0.21.0` -> `v0.23.1` | | `github.com/go-openapi/jsonreference` | `v0.21.0` -> `v0.21.5` | | `github.com/go-openapi/swag` | `v0.23.0` -> `v0.26.0` | | `github.com/prometheus/procfs` | `v0.19.2` -> `v0.20.1` | | `go.yaml.in/yaml/v2` | `v2.4.3` -> `v2.4.4` | | `golang.org/x/net` | `v0.49.0` -> `v0.53.0` | | `golang.org/x/oauth2` | `v0.34.0` -> `v0.36.0` | | `golang.org/x/sys` | `v0.40.0` -> `v0.43.0` | | `golang.org/x/term` | `v0.39.0` -> `v0.42.0` | | `golang.org/x/text` | `v0.33.0` -> `v0.36.0` | | `golang.org/x/time` | `v0.14.0` -> `v0.15.0` | | `k8s.io/kube-openapi` | `v0.0.0-20260317180543-43fb72c5454a` -> `v0.0.0-20260414162039-ec9c827d403f` | | `k8s.io/utils` | `v0.0.0-20260210185600-b8788abfbbc2` -> `v0.0.0-20260319190234-28399d86e0b5` | | `sigs.k8s.io/structured-merge-diff/v6` | `v6.3.2` -> `v6.4.0` |
sa-renovate force-pushed renovate/all-minor-patch from 3a0321e782
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
ci-main / test (pull_request) Failing after 8m52s
to 5c4d6719bd
Some checks failed
renovate/stability-days Updates have met minimum release age requirement
ci-main / test (pull_request) Failing after 5m53s
2026-07-30 03:04:29 +00:00
Compare
fix(deps): bump golang.org/x/net and golang.org/x/text for CVE fixes
All checks were successful
ci-main / test (pull_request) Successful in 3m32s
ci-main / test (push) Successful in 3m37s
b6dde593e1
Resolves four HIGH severity advisories reported by trivy:
- golang.org/x/net v0.53.0 -> v0.55.0 (CVE-2026-25681, CVE-2026-27136,
  CVE-2026-39821)
- golang.org/x/text v0.36.0 -> v0.39.0 (CVE-2026-56852)

Pulls golang.org/x/sys v0.45.0 and golang.org/x/term v0.43.0 along
transitively.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
DevFW-CICD/controller-util!11
No description provided.