Skip to content

deps(go): bump the all-go-dependencies group with 6 updates#66

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-go-dependencies-e87bb95e1f
Closed

deps(go): bump the all-go-dependencies group with 6 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-go-dependencies-e87bb95e1f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2025

Copy link
Copy Markdown
Contributor

Bumps the all-go-dependencies group with 6 updates:

Package From To
github.com/cert-manager/cert-manager 1.18.1 1.18.2
k8s.io/api 0.33.1 0.33.3
k8s.io/apiextensions-apiserver 0.32.2 0.33.3
k8s.io/apimachinery 0.33.1 0.33.3
k8s.io/client-go 0.33.1 0.33.3
sigs.k8s.io/controller-runtime 0.20.4 0.21.0

Updates github.com/cert-manager/cert-manager from 1.18.1 to 1.18.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.18.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We fixed a bug in the CSR's name constraints construction (only applies if you have enabled the NameConstraints feature gate). We dropped the new global.rbac.disableHTTPChallengesRole Helm option due to a bug we found, this feature will be released in v1.19 instead.

Changes since v1.18.1:

Bug or Regression

Commits
  • 686afa6 Merge pull request #7837 from cert-manager-bot/cherry-pick-7836-to-release-1.18
  • c38e37e Revert "More fine-grained control over powerful RBAC permission granted via H...
  • e779203 Merge pull request #7833 from cert-manager-bot/cherry-pick-7816-to-release-1.18
  • 6d59891 fix: permit permitted URI domains in name constraints
  • See full diff in compare view

Updates k8s.io/api from 0.33.1 to 0.33.3

Commits

Updates k8s.io/apiextensions-apiserver from 0.32.2 to 0.33.3

Commits
  • c3d7119 Update dependencies to v0.33.3 tag
  • c066cbe Merge remote-tracking branch 'origin/master' into release-1.33
  • 08c3d2f Move to released version of prometheus/client_golang v1.22.0 from rc.0
  • 7c1033e fix narrow spaces of %e for x/net bump
  • cdf67dd bump etcd 3.5.21 sdk
  • b8b1528 Merge pull request #129872 from seans3/websocket-https-proxy
  • d5c7de8 Websocket HTTPS proxy support
  • de39b8d Merge pull request #130899 from serathius/watchcache-error
  • 7022eab Merge pull request #130020 from mozillazg/patch-3
  • 718a2c7 Merge pull request #130906 from serathius/streaming-validation
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.33.1 to 0.33.3

Commits

Updates k8s.io/client-go from 0.33.1 to 0.33.3

Commits

Updates sigs.k8s.io/controller-runtime from 0.20.4 to 0.21.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.21.0

Highlights

  • Bump to Kubernetes v1.33 libraries
  • Improvements for priority queue (#2374)
  • envtest now has an option to download envtest binaries (can be used to replace setup-envtest depending on use case)
  • Metric improvements: native histograms, all Go runtime metrics are enabled now
  • Various bug fixes
  • New reviewers: @​troy0820, @​JoelSpeed!!

⚠️ Breaking Changes

  • Bump to k8s.io/* v0.33.0 and Go 1.24 (#3104 #3142 #3161 #3204 #3215)
  • config: Stop enabling client-side ratelimiter by default (#3119)
    • Previous behavior can be preserved by setting QPS 20 and Burst 30 on the rest.Config
  • controller: NewUnmanaged/NewTypedUnmanaged: Stop requiring a manager (#3141)
  • reconcile: Deprecate Result.Requeue (#3107)

✨ New Features

  • controller: priority queue:
    • Add debug logging for the state of the priority queue (#3075)
    • Add priority label to queue depth metric (#3156)
    • Leverage IsInInitialList (#3162)
    • Remove redundant WithLowPriorityWhenUnchanged in builder (#3168)
    • Retain the priority after Reconcile (#3167)
    • Set priority automatically in handlers (#3111 #3152 #3160 #3174)
  • envtest: Add Environment.KubeConfig field (#2278)
  • envtest: Add option to download envtest binaries (#3135 #3137)
  • events: Add IsInInitialList to TypedCreateEvent (#3162)
  • log/zap: Enable panic log level (#3186)
  • logging: Adopt WarningHandlerWithContext (#3176)
  • logging: Improve logging by adopting contextual logging (#3149)
  • metrics: Adopt native histograms (#3165)
  • metrics: Expose all Go runtime metrics (#3070)

🐛 Bug Fixes

  • apiutil: restmapper: Respect preferred version (#3151)
  • builder: webhook: Fix custom path for webhook conflicts (#3102)
  • cache: Clone maps to prevent data races when concurrently creating caches using the same options (#3078)
  • cache: Stop accumulating lists in multi-namespace cache implementation (#3195)
  • cache: List out of global cache when present and necessary (#3126)
  • client: Return error if pagination is used with the cached client (#3134)
  • controller: Support WaitForSync in TypedSyncingSource (#3084)
  • controller: priority queue: Fix behavior of rate limit option in priorityqueue.AddWithOpts (#3103)
  • controller: priority queue: Yet another queue_depth metric fix (#3085)
  • controllerutil: CreateOrUpdate: Avoid panic when the MutateFn is nil (#2828)
  • envtest: Fix nil pointer exception in Stop() (#3153)
  • fake client: Fix data races when writing to the scheme (#3143)

... (truncated)

Commits
  • 71f7db5 Merge pull request #3225 from troy0820/troy0820/prepare-for-0.21-release
  • 52d8779 update README with go version
  • ab37f74 Merge pull request #3223 from troy0820/troy0820/return-warnings-on-webhooks
  • 250a88f return warnings on webhooks
  • 85ee7a9 Merge pull request #3217 from kubernetes-sigs/dependabot/github_actions/all-g...
  • 81f1fae 🌱 Bump the all-github-actions group across 1 directory with 3 updates
  • d9a2274 Merge pull request #3187 from dongjiang1989/update-golangci-lint-v2
  • 9c38211 update golangci-lint to v2
  • 9b5f6a7 Merge pull request #3208 from troy0820/troy0820/api-machinery-marshal
  • b3278df use sigs.k8s.io/json to unmarshal in fakeclient
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@zak905

zak905 commented Aug 18, 2025

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2025

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Bumps the all-go-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.18.1` | `1.18.2` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.1` | `0.33.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.2` | `0.33.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.1` | `0.33.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.1` | `0.33.3` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.20.4` | `0.21.0` |


Updates `github.com/cert-manager/cert-manager` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.18.1...v1.18.2)

Updates `k8s.io/api` from 0.33.1 to 0.33.3
- [Commits](kubernetes/api@v0.33.1...v0.33.3)

Updates `k8s.io/apiextensions-apiserver` from 0.32.2 to 0.33.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.32.2...v0.33.3)

Updates `k8s.io/apimachinery` from 0.33.1 to 0.33.3
- [Commits](kubernetes/apimachinery@v0.33.1...v0.33.3)

Updates `k8s.io/client-go` from 0.33.1 to 0.33.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.1...v0.33.3)

Updates `sigs.k8s.io/controller-runtime` from 0.20.4 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.20.4...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@zak905
zak905 force-pushed the dependabot/go_modules/all-go-dependencies-e87bb95e1f branch from a4de8a8 to 862da58 Compare August 18, 2025 14:40
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 25, 2025
@dependabot
dependabot Bot deleted the dependabot/go_modules/all-go-dependencies-e87bb95e1f branch August 25, 2025 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant