Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps the k8s-dependencies group with 6 updates:

Package From To
k8s.io/apimachinery 0.32.3 0.35.0
k8s.io/mount-utils 0.32.3 0.35.0
k8s.io/utils 0.0.0-20241104100929-3ea5e8cea738 0.0.0-20251002143259-bc988d571ff4
k8s.io/kube-openapi 0.0.0-20241105132330-32ad38e42d3f 0.0.0-20250910181357-589584f1c912
sigs.k8s.io/json 0.0.0-20241010143419-9aa6b5e7a4b3 0.0.0-20250730193827-2d320260d730
sigs.k8s.io/yaml 1.4.0 1.6.0

Updates k8s.io/apimachinery from 0.32.3 to 0.35.0

Commits
  • 72d71ea Merge remote-tracking branch 'origin/master' into release-1.35
  • e2a2dbc Bump golang.org/x/crypto to v0.45.0
  • 2e9c228 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • f274aac vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • 9445443 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • 52154f7 Update vendored dependencies
  • 5a348c5 KEP-5471: Extend tolerations operators (#134665)
  • 6f89492 Merge pull request #133648 from richabanker/merged-discovery
  • c77dde2 util/sort: Add MergePreservingRelativeOrder for topological sorting
  • 729c13d Merge pull request #134624 from yt2985/podcertificates-beta
  • Additional commits viewable in compare view

Updates k8s.io/mount-utils from 0.32.3 to 0.35.0

Commits
  • efda6a1 Merge remote-tracking branch 'origin/master' into release-1.35
  • 21f7caa Bump golang.org/x/crypto to v0.45.0
  • 72562d2 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • 9d04d56 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • ce1a365 Update vendored dependencies
  • 92fe232 Merge pull request #135004 from pohly/dependencies-x-repos
  • d9d54ad dependencies: various minor updates
  • 54422a1 Merge pull request #134780 from joshjms/bump-etcd-sdk-v3.6.5
  • e1d462c etcd: bump etcd sdk to v3.6.5
  • 304d3a1 Merge pull request #134120 from BenTheElder/golang-language-125
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20241104100929-3ea5e8cea738 to 0.0.0-20251002143259-bc988d571ff4

Commits

Updates k8s.io/kube-openapi from 0.0.0-20241105132330-32ad38e42d3f to 0.0.0-20250910181357-589584f1c912

Commits

Updates sigs.k8s.io/json from 0.0.0-20241010143419-9aa6b5e7a4b3 to 0.0.0-20250730193827-2d320260d730

Commits

Updates sigs.k8s.io/yaml from 1.4.0 to 1.6.0

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.6.0

What's Changed

v1.5.0

Full Changelog: kubernetes-sigs/yaml@v1.4.0...v1.5.0

Commits
  • 048d724 Merge pull request #132 from thockin/master
  • 23c836c Bolster tests, mostly in error-handling
  • 2e3340b Add compact output tests
  • 4a4f539 Add test case for tabs in multi-line strings
  • 13509ad Change which methods get a newline and fix tests
  • 59c2c43 Add compact mode so KYAML can be used in more places
  • abc1add kyaml: Implement escaping closer to YAML spec
  • 7749171 Add a yamlfmt cmd
  • a932007 Add KYAML support
  • 0f318dc Merge pull request #134 from kubernetes-sigs/forgot-to-add-redirects-for-cons...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Jan 5, 2026
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign mattcary for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot
Copy link
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Jan 5, 2026
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-28a7754740 branch from e092d47 to 95a9363 Compare January 6, 2026 04:56
Bumps the k8s-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.32.3` | `0.35.0` |
| [k8s.io/mount-utils](https://github.com/kubernetes/mount-utils) | `0.32.3` | `0.35.0` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20241104100929-3ea5e8cea738` | `0.0.0-20251002143259-bc988d571ff4` |
| [k8s.io/kube-openapi](https://github.com/kubernetes/kube-openapi) | `0.0.0-20241105132330-32ad38e42d3f` | `0.0.0-20250910181357-589584f1c912` |
| [sigs.k8s.io/json](https://github.com/kubernetes-sigs/json) | `0.0.0-20241010143419-9aa6b5e7a4b3` | `0.0.0-20250730193827-2d320260d730` |
| [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.4.0` | `1.6.0` |


Updates `k8s.io/apimachinery` from 0.32.3 to 0.35.0
- [Commits](kubernetes/apimachinery@v0.32.3...v0.35.0)

Updates `k8s.io/mount-utils` from 0.32.3 to 0.35.0
- [Commits](kubernetes/mount-utils@v0.32.3...v0.35.0)

Updates `k8s.io/utils` from 0.0.0-20241104100929-3ea5e8cea738 to 0.0.0-20251002143259-bc988d571ff4
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `k8s.io/kube-openapi` from 0.0.0-20241105132330-32ad38e42d3f to 0.0.0-20250910181357-589584f1c912
- [Commits](https://github.com/kubernetes/kube-openapi/commits)

Updates `sigs.k8s.io/json` from 0.0.0-20241010143419-9aa6b5e7a4b3 to 0.0.0-20250730193827-2d320260d730
- [Commits](https://github.com/kubernetes-sigs/json/commits)

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/mount-utils
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20251002143259-bc988d571ff4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/kube-openapi
  dependency-version: 0.0.0-20250910181357-589584f1c912
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/json
  dependency-version: 0.0.0-20250730193827-2d320260d730
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s-dependencies-28a7754740 branch from 95a9363 to 577c528 Compare January 9, 2026 07:51
@k8s-ci-robot
Copy link
Contributor

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-gcp-filestore-csi-driver-unit 577c528 link true /test pull-gcp-filestore-csi-driver-unit
pull-gcp-filestore-csi-driver-sanity 577c528 link true /test pull-gcp-filestore-csi-driver-sanity
pull-gcp-filestore-csi-driver-verify 577c528 link true /test pull-gcp-filestore-csi-driver-verify
pull-gcp-filestore-csi-driver-kubernetes-integration 577c528 link true /test pull-gcp-filestore-csi-driver-kubernetes-integration
pull-gcp-filestore-csi-driver-e2e 577c528 link true /test pull-gcp-filestore-csi-driver-e2e

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants