Skip to content

Bump k8s.io/apimachinery from 0.34.3 to 0.36.3 - #2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s.io/apimachinery-0.36.2
Open

Bump k8s.io/apimachinery from 0.34.3 to 0.36.3#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/k8s.io/apimachinery-0.36.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps k8s.io/apimachinery from 0.34.3 to 0.36.3.

Commits
  • 40bf4b2 Update dependencies to v0.36.3 tag
  • 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
  • 6a88102 Fix wrong marking of errors
  • efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
  • d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
  • a8822f7 Add slice and map union member support with tests
  • 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s.io/apimachinery-0.36.2 branch from 84c5880 to 6f993b2 Compare July 10, 2026 16:13
@openshift-ci

openshift-ci Bot commented Jul 10, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign umago for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@umago

umago commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

/ok-to-test

@umago

umago commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

/retest

@dependabot dependabot Bot changed the title Bump k8s.io/apimachinery from 0.34.3 to 0.36.2 Bump k8s.io/apimachinery from 0.34.3 to 0.36.3 Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s.io/apimachinery-0.36.2 branch from 6f993b2 to 51642db Compare July 28, 2026 07:43
Akrog added a commit to Akrog/lightspeed-operator that referenced this pull request Jul 28, 2026
Error is:

```
Vulnerability openstack-k8s-operators#1: GO-2026-6061
    Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2
    transport server implementation in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6061
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.78.0
    Fixed in: google.golang.org/grpc@v1.82.1
    Example traces found:
      openstack-k8s-operators#1: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.NewHTTP2Client
      openstack-k8s-operators#2: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.Close
      openstack-k8s-operators#3: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.GracefulClose
```
Akrog added a commit to Akrog/lightspeed-operator that referenced this pull request Jul 28, 2026
Error is:

```
Vulnerability openstack-k8s-operators#1: GO-2026-6061
    Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2
    transport server implementation in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6061
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.78.0
    Fixed in: google.golang.org/grpc@v1.82.1
    Example traces found:
      openstack-k8s-operators#1: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.NewHTTP2Client
      openstack-k8s-operators#2: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.Close
      openstack-k8s-operators#3: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.GracefulClose
```
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.34.3 to 0.36.3.
- [Commits](kubernetes/apimachinery@v0.34.3...v0.36.3)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/k8s.io/apimachinery-0.36.2 branch from 51642db to a4353fa Compare July 28, 2026 16:09
@openshift-ci

openshift-ci Bot commented Jul 28, 2026

Copy link
Copy Markdown

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/openstack-lightspeed-kuttl-4-18 6f993b2 link true /test openstack-lightspeed-kuttl-4-18
ci/prow/openstack-lightspeed-kuttl-4-20 a4353fa link true /test openstack-lightspeed-kuttl-4-20
ci/prow/images a4353fa link true /test images
ci/prow/ci-index-openstack-lightspeed-bundle a4353fa link true /test ci-index-openstack-lightspeed-bundle

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant