Skip to content

chore(deps): bump the gomod-dependencies group across 1 directory with 10 updates#852

Merged
cheftako merged 1 commit into
masterfrom
dependabot/go_modules/gomod-dependencies-1296fda898
May 22, 2026
Merged

chore(deps): bump the gomod-dependencies group across 1 directory with 10 updates#852
cheftako merged 1 commit into
masterfrom
dependabot/go_modules/gomod-dependencies-1296fda898

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 21, 2026 •
edited
Loading

Bumps the gomod-dependencies group with 9 updates in the / directory:

Package From To
go.uber.org/mock 0.5.2 0.6.0
golang.org/x/net 0.53.0 0.55.0
google.golang.org/grpc 1.80.0 1.81.1
k8s.io/api 0.36.0 0.36.1
k8s.io/client-go 0.36.0 0.36.1
k8s.io/component-base 0.36.0 0.36.1
k8s.io/component-helpers 0.34.0 0.36.1
sigs.k8s.io/controller-runtime 0.24.0 0.24.1
sigs.k8s.io/e2e-framework 0.6.0 0.7.0

Updates go.uber.org/mock from 0.5.2 to 0.6.0

Release notes

Sourced from go.uber.org/mock's releases.

v0.6.0

0.6.0 (18 Aug 2025)

Added

  • #258[]: Archive mode: a new mockgen mode that generates mocks out of archive files.

Fixed

  • #276[]: Fixed mockgen errors with go1.25 due to outdated golang.org/x/tools dependency.

#258: uber-go/mock#258 #276: uber-go/mock#276

Changelog

Sourced from go.uber.org/mock's changelog.

0.6.0 (18 Aug 2025)

Added

  • #258[]: Archive mode: a new mockgen mode that generates mocks out of archive files.
  • #262[]: Support for specifying mock names when using the _gomock_archive bazel rule.

Fixed

  • #276[]: Fixed mockgen errors with go1.25 due to outdated golang.org/x/tools dependency.

#258: uber-go/mock#258 #262: uber-go/mock#262 #276: uber-go/mock#276

Commits

Updates golang.org/x/net from 0.53.0 to 0.55.0

Commits
  • 7770ec4 go.mod: update golang.org/x dependencies
  • 4ece7b6 html: escape greater-than symbol in doctype identifiers
  • 08be507 html: improve Noah's Ark clause performance
  • a8fb2fe html: properly render fostered elements in foreign content
  • 0dc5b7a html: properly check namespace in "in body" any other end tag
  • a452f3c html: ignore duplicate attributes during tokenization
  • f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
  • 210ed3c quic: establish a "happened-before" relationship between stream write and read
  • ad8140e quic: fix buffer slicing when handling overlapping stream data
  • 23ee2ef http2: avoid API changes when built with go1.27
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

  • Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

  • xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)
  • transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)
  • xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

  • grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)
  • xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)
  • xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)
  • xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)
  • stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)
  • mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Performance Improvements

  • alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)
  • transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)
Commits

Updates k8s.io/api from 0.36.0 to 0.36.1

Commits

Updates k8s.io/apimachinery from 0.36.0 to 0.36.1

Commits

Updates k8s.io/client-go from 0.36.0 to 0.36.1

Commits

Updates k8s.io/component-base from 0.36.0 to 0.36.1

Commits

Updates k8s.io/component-helpers from 0.34.0 to 0.36.1

Commits
  • 58f41a0 Update dependencies to v0.36.1 tag
  • 0bfaf2c Merge remote-tracking branch 'origin/master' into release-1.36
  • cb0ac54 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 67c3d22 Add alpha 2 phase implementation for UserNamespacesHostNetworkSupport
  • 2bf8eee Merge pull request #137352 from natasha41575/nonsidecarinitctrs
  • 22e0625 Merge pull request #136725 from pravk03/native-dra-2
  • 2302685 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 850543f use Node Declared Features to handle 'InPlacePodVerticalScalingInitContainers'
  • a4dd23f dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • 58c8ea9 Merge pull request #136185 from tallclair/ndf-bitmap
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

Commits
  • 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
  • 0f7b33d Fix regression in Apply typed error handling
  • See full diff in compare view

Updates sigs.k8s.io/e2e-framework from 0.6.0 to 0.7.0

Release notes

Sourced from sigs.k8s.io/e2e-framework's releases.

v0.7.0

What's Changed

  • Resources.ExecInDeployment method — execute commands in a pod of a Deployment (@​keeprocking, #506)
  • KUBECONFIG path list support — handle colon-separated KUBECONFIG env var values (@​ndbaker1, #510)
  • Extend GetKubeconfig methods with args — explicit args for kubeconfig retrieval (@​mjudeikis, #471)
  • DecodeURL function in decoder package — decode manifests from URLs (@​dmvolod, #475)
  • kwok WithWaitDuration ClusterOpts — configurable wait duration for kwok cluster setup (@​liam-mackie, #479)
  • Enhance DaemonSetReady — check rollout completion in addition to readiness (@​pschulten, #547)
  • third_party/helm context support — provide context.Context via Option (@​chancez, #549)
  • Cluster providers receive context — pass context.Context when creating clusters (@​chancez, #557)
  • Testcontainers example — new example showing testcontainers integration (@​prit342, #520)

Bug Fixes

  • Test scope per-feature — fix scope handling so tests are scoped per-feature (@​ndbaker1, #517)
  • Fail-fast excludes skipped tests — skipped tests no longer trigger fail-fast (@​faganihajizada, #545)
  • Milliseconds/Second timestamp bug — correct unit conversion (@​zhaodiaoer, #552)
  • Cilium test repair — fix broken Cilium test due to upstream change (@​harshanarayana, #493)
  • Staticcheck fixes in example — SA4022 and SA1029 in kind_with_config (@​av-petrov, #528)

Structural Changes

  • examples/ carved out as its own Go module — reduces the main module's dependency surface (@​faganihajizada, #546)
  • Bump Go / golangci-lint and clean CI — toolchain refresh and CI tidy-up (@​cpanato, #548)

Documentation

  • Fix example doc parameters — correct parameters in example documentation (@​prit342, #516)
  • Docstring & tense cleanup in config.go — typo fix and present-tense normalization (@​Steven-Yiran, #529)

Dependency Updates

Routine dependabot maintenance kept the module current across Go deps, testcontainers example deps, and GitHub Actions. Notable version ranges:

  • Go deps: sigs.k8s.io/controller-runtime 0.20.0 → 0.22.4 · sigs.k8s.io/yaml 1.4.0 → 1.6.0 · golang.org/x/net 0.33.0 → 0.38.0 · github.com/vladimirvivien/gexe 0.4.1 → 0.5.0
  • Examples/testcontainers: github.com/docker/docker 28.2.2 → 28.3.3 · github.com/moby/spdystream 0.5.0 → 0.5.1 · golang.org/x/crypto 0.37.0 → 0.45.0
  • GitHub Actions: actions/setup-go 5.2.0 → 6.4.0 · actions/checkout 4.2.2 → 6.0.2 · goreleaser/goreleaser-action 6.1.0 → 7.1.0

⚠️ Possible Breaking Changes

These changes were thoroughly reviewed to avoid breaking changes with the current API. However, because of signature changes, there exist a small possibility of your code breaking.

  • Cluster provider interfaces now receive context.Context (#557)
  • GetKubeconfig method extended with variable args (#471)
  • examples/ is now a separate Go module (#546)

🎉 New Contributors

... (truncated)

Commits
  • 7d89e24 Merge pull request #563 from kubernetes-sigs/dependabot/github_actions/gorele...
  • 43ebb99 build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.1.0
  • 08a5ab3 Merge pull request #561 from kubernetes-sigs/dependabot/go_modules/examples/t...
  • 27cf407 build(deps): bump github.com/moby/spdystream in /examples/testcontainers
  • 2d2ccad Merge pull request #559 from kubernetes-sigs/dependabot/go_modules/examples/a...
  • 34f39d9 build(deps): bump the all group in /examples with 2 updates
  • 7491cec Merge pull request #557 from chancez/pr/chancez/cluster_providers_use_ctx
  • 919f544 fix: Pass Context when getting kubeconfig for cluster providers
  • b4aba23 fix: Pass context to cluster providers when creating clusters
  • c2722ec Merge pull request #546 from faganihajizada/fix/carve-out-examples-module-540
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 21, 2026
@k8s-ci-robot k8s-ci-robot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label May 21, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 21, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label May 21, 2026
@k8s-ci-robot k8s-ci-robot requested review from elmiko and tallclair May 21, 2026 11:40
@k8s-ci-robot k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label May 21, 2026
@cheftako
Copy link
Copy Markdown
Contributor

cheftako commented May 21, 2026

/ok-to-test

@k8s-ci-robot k8s-ci-robot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels May 21, 2026
@dependabot
chore(deps): bump the gomod-dependencies group across 1 directory wit…
a8faa87 
…h 10 updates

Bumps the gomod-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [go.uber.org/mock](https://github.com/uber/mock) | `0.5.2` | `0.6.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.53.0` | `0.55.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.0` | `0.36.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.0` | `0.36.1` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.36.0` | `0.36.1` |
| [k8s.io/component-helpers](https://github.com/kubernetes/component-helpers) | `0.34.0` | `0.36.1` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.0` | `0.24.1` |
| [sigs.k8s.io/e2e-framework](https://github.com/kubernetes-sigs/e2e-framework) | `0.6.0` | `0.7.0` |



Updates `go.uber.org/mock` from 0.5.2 to 0.6.0
- [Release notes](https://github.com/uber/mock/releases)
- [Changelog](https://github.com/uber-go/mock/blob/main/CHANGELOG.md)
- [Commits](uber-go/mock@v0.5.2...v0.6.0)

Updates `golang.org/x/net` from 0.53.0 to 0.55.0
- [Commits](golang/net@v0.53.0...v0.55.0)

Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.81.1)

Updates `k8s.io/api` from 0.36.0 to 0.36.1
- [Commits](kubernetes/api@v0.36.0...v0.36.1)

Updates `k8s.io/apimachinery` from 0.36.0 to 0.36.1
- [Commits](kubernetes/apimachinery@v0.36.0...v0.36.1)

Updates `k8s.io/client-go` from 0.36.0 to 0.36.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.0...v0.36.1)

Updates `k8s.io/component-base` from 0.36.0 to 0.36.1
- [Commits](kubernetes/component-base@v0.36.0...v0.36.1)

Updates `k8s.io/component-helpers` from 0.34.0 to 0.36.1
- [Commits](kubernetes/component-helpers@v0.34.0...v0.36.1)

Updates `sigs.k8s.io/controller-runtime` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1)

Updates `sigs.k8s.io/e2e-framework` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/kubernetes-sigs/e2e-framework/releases)
- [Changelog](https://github.com/kubernetes-sigs/e2e-framework/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/e2e-framework@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: go.uber.org/mock
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: k8s.io/component-base
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: k8s.io/component-helpers
  dependency-version: 0.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: sigs.k8s.io/e2e-framework
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the gomod-dependencies group with 10 updates chore(deps): bump the gomod-dependencies group across 1 directory with 10 updates May 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-dependencies-1296fda898 branch from 2d35afe to a8faa87 Compare May 22, 2026 11:10
cheftako
cheftako approved these changes May 22, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@cheftako cheftako left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good.

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 22, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cheftako, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 22, 2026
@cheftako cheftako merged commit ad9cad2 into master May 22, 2026
21 of 22 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/gomod-dependencies-1296fda898 branch May 22, 2026 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cheftako cheftako cheftako approved these changes

@elmiko elmiko Awaiting requested review from elmiko

@tallclair tallclair Awaiting requested review from tallclair

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. dependencies Pull requests that update a dependency file go Pull requests that update Go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@k8s-ci-robot @cheftako