chore(deps): bump the gomod group across 1 directory with 3 updates#105
Merged
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
knight42
force-pushed
the
dependabot/go_modules/gomod-1f5c975f44
branch
from
d41d6a9 to
1162eed
Compare
Bumps the gomod group with 2 updates in the / directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime). Updates `k8s.io/apimachinery` from 0.35.3 to 0.36.2 - [Commits](kubernetes/apimachinery@v0.35.3...v0.36.2) Updates `k8s.io/cli-runtime` from 0.35.3 to 0.36.2 - [Commits](kubernetes/cli-runtime@v0.35.3...v0.36.2) Updates `k8s.io/client-go` from 0.35.3 to 0.36.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.3...v0.36.2) --- updated-dependencies: - dependency-name: k8s.io/apimachinery dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/cli-runtime dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/client-go dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>
k8s.io/apimachinery v0.36 deprecates pkg/util/httpstream in favor of the new k8s.io/streaming module, which staticcheck (SA1019) flags. Switch all imports and use the *ForStreaming dialer constructors that client-go v0.36 provides for the new types. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Fixes GHSA DoS in the x/net HTML parser (dependabot alert #13); the grouped bump only reached v0.49.0, which is still vulnerable. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
knight42
force-pushed
the
dependabot/go_modules/gomod-1f5c975f44
branch
from
1162eed to
aba57e5
Compare
knight42
approved these changes
Jul 1, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 2 updates in the / directory: k8s.io/apimachinery and k8s.io/cli-runtime.
Updates
k8s.io/apimachineryfrom 0.35.3 to 0.36.2Commits
ae3f98eUpdate dependencies to v0.36.2 tag2ec982dMerge pull request #139508lalitc375/automated-cherry-pick-of-#1394806a88102Fix wrong marking of errorsefb7f26Merge remote-tracking branch 'origin/master' into release-1.36d966e56Update github.com/moby/spdystream from v0.5.0 to v0.5.179b3632Merge pull request #137864 from yongruilin/dv-dra-mismatcha8822f7Add slice and map union member support with tests7dba2d0Use IsZero instead of IsNil for union ratcheting checkd95710fFix union validation ratcheting when oldObj is nil729062dMerge pull request #137849 from bryantbiggs/deps/update-kube-openapiUpdates
k8s.io/cli-runtimefrom 0.35.3 to 0.36.2Commits
c97bc2fUpdate dependencies to v0.36.2 tag9157a44Merge remote-tracking branch 'origin/master' into release-1.36fb4f11dUpdate github.com/moby/spdystream from v0.5.0 to v0.5.108a1cd8Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi579d47fMerge pull request #137843 from pacoxu/cobra-v1.10.2e545712dependencies: bump kube-openapi to drop ginkgo/gomega indirect depsf392d21bump spf13/cobra to v1.10.2b0a204fMerge pull request #137298 from dims/dsri/cri-streaming-option-a-hardcute723dadMerge pull request #136792 from rata/userns-goes-ga18f8342Merge pull request #137495 from pohly/klog-updateUpdates
k8s.io/client-gofrom 0.35.3 to 0.36.2Commits
877f535Update dependencies to v0.36.2 tagf22a53eMerge remote-tracking branch 'origin/master' into release-1.36a948641Update github.com/moby/spdystream from v0.5.0 to v0.5.17e44ffcAdd Workload-Aware Preemption fields to Workload and PodGroup APIsdf2d882Merge pull request #136989 from nojnhuh/podgroup-resourceclaim4eece52Workload API: PodGroup ResourceClaims (KEP-5729)3d35c51Merge pull request #137190 from everpeace/KEP-5491-alpha0434117Merge pull request #137028 from nmn3m/feature/dra-resource-pool-statusba785beDrop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...4a9c878Add ResourcePoolStatusRequest API types and generated codeDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions