Skip to content

[gomod] bump the dependencies group across 1 directory with 12 updates#339

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/dependencies-a16f1ca0f5
Closed

[gomod] bump the dependencies group across 1 directory with 12 updates#339
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/dependencies-a16f1ca0f5

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2026 •
edited
Loading

Bumps the dependencies group with 10 updates in the / directory:

Package From To
github.com/golang-jwt/jwt/v5 5.3.0 5.3.1
github.com/oapi-codegen/runtime 1.1.2 1.2.0
github.com/onsi/ginkgo/v2 2.27.5 2.28.1
github.com/onsi/gomega 1.39.0 1.39.1
k8s.io/api 0.35.0 0.35.1
k8s.io/client-go 0.35.0 0.35.1
k8s.io/kubectl 0.35.0 0.35.1
sigs.k8s.io/cluster-api 1.10.10 1.12.3
sigs.k8s.io/cluster-api/test 1.10.10 1.12.3
sigs.k8s.io/controller-runtime 0.22.5 0.23.1

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

👒 Dependencies

New Contributors

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits
  • 7ceae61 Add release.yml for changelog configuration
  • dce8e4d Set token.Signature in ParseUnverified (#414)
  • 8889e20 Save signature to Token struct after successful signing (#417)
  • d237f82 ci: update github-actions schedule interval to monthly
  • d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
  • e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
  • e6a0afa Bump actions/checkout from 5 to 6 (#487)
  • 9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
  • 60a8669 Bump actions/setup-go from 5 to 6 (#469)
  • 76f5828 Remove misleading ParserOptions documentation (#484)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Parameter binding extensions, bug fixes, dependency updates

Notable Changes

The main change in this release is the addition of new Parameter binding and styling functions, which allow the code generator to pass in the type and format from the spec. Previously, we inferred what we wanted to do based on the destination type, however, it's not always possible to decide this without information about the specification.

🚀 New features and improvements

🐛 Bug fixes

👻 Maintenance

📦 Dependency updates

  • chore(deps): update release-drafter/release-drafter action to v6 (#31) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

... (truncated)

Commits
  • b76a24f fix: bind Date and Time query params as scalar values (#21) (#93)
  • 1f844c3 feat: add BindRawQueryParameter for correct comma handling (#92)
  • ca4e933 fix: support non-indexed deepObject array unmarshaling (#22) (#96)
  • ead11e4 fix: correct time.Time date-only fallback parsing in deepObject (#95)
  • 224825a fix: add Type/Format-aware parameter binding and styling for []byte (#97) (#98)
  • 03288f9 Refactor date parsing error handling (#88)
  • effec1a feat(fix): bump gin version (#51)
  • 53a813b fix: improve email validation using net/mail package (#60)
  • 451d249 Update golang.org/x/crypto to v0.32.0 (#59)
  • 7dffa6e Updated Golang reference to address security vulnerability (#57)
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v2.28.0

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

Commits

Updates github.com/onsi/gomega from 1.39.0 to 1.39.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.39.1

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Commits

Updates k8s.io/api from 0.35.0 to 0.35.1

Commits

Updates k8s.io/apimachinery from 0.35.0 to 0.35.1

Commits

Updates k8s.io/client-go from 0.35.0 to 0.35.1

Commits

Updates k8s.io/kubectl from 0.35.0 to 0.35.1

Commits

Updates sigs.k8s.io/cluster-api from 1.10.10 to 1.12.3

Release notes

Sourced from sigs.k8s.io/cluster-api's releases.

v1.12.3

👌 Kubernetes version support

  • Management Cluster: v1.31.x -> v1.35.x
  • Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.2

📈 Overview

  • 7 new commits merged
  • 1 feature addition ✨
  • 2 bugs fixed 🐛

✨ New Features

  • KCP: Bump coredns/corefile-migration to v1.0.30 (#13294)

🐛 Bug Fixes

  • e2e: Add wait-resource-versions-{become,remain}-stable intervals to e2e config (#13328)
  • Misc: Fix bug while setting status for deprecated fields (#13344)

🌱 Others

  • clusterctl: Update cert-manager to v1.19.3 (#13314)
  • clusterctl: Update to cert-manager v1.19.2 (#13278)
  • Dependency: Go bump 1.24.13 (#13324)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13261)

Dependencies

Added

Nothing has changed.

Changed

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.12.2

👌 Kubernetes version support

  • Management Cluster: v1.31.x -> v1.35.x
  • Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.1

... (truncated)

Commits
  • 1a1852c Merge pull request #13344 from k8s-infra-cherrypick-robot/cherry-pick-13336-t...
  • bc95886 Fix bug while setting status for deprecated fields
  • 90f7459 Merge pull request #13328 from k8s-infra-cherrypick-robot/cherry-pick-13263-t...
  • e57e3c0 Add wait-resource-versions-{become,remain}-stable intervals to e2e config
  • 8ff9b8a Merge pull request #13314 from k8s-infra-cherrypick-robot/cherry-pick-13307-t...
  • f6a3c01 Merge pull request #13324 from irapandey/go-bump-1.24.12
  • 89368a7 go-bump-1.24.13
  • bf05546 update cert-manager to v1.19.3
  • 7207555 Merge pull request #13294 from nikParasyr/release_1_12_corefile
  • 2c7e4f7 Bump coredns/corefile-migration to v1.0.30
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api/test from 1.10.10 to 1.12.3

Release notes

Sourced from sigs.k8s.io/cluster-api/test's releases.

v1.12.3

👌 Kubernetes version support

  • Management Cluster: v1.31.x -> v1.35.x
  • Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.2

📈 Overview

  • 7 new commits merged
  • 1 feature addition ✨
  • 2 bugs fixed 🐛

✨ New Features

  • KCP: Bump coredns/corefile-migration to v1.0.30 (#13294)

🐛 Bug Fixes

  • e2e: Add wait-resource-versions-{become,remain}-stable intervals to e2e config (#13328)
  • Misc: Fix bug while setting status for deprecated fields (#13344)

🌱 Others

  • clusterctl: Update cert-manager to v1.19.3 (#13314)
  • clusterctl: Update to cert-manager v1.19.2 (#13278)
  • Dependency: Go bump 1.24.13 (#13324)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13261)

Dependencies

Added

Nothing has changed.

Changed

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.12.2

👌 Kubernetes version support

  • Management Cluster: v1.31.x -> v1.35.x
  • Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.1

... (truncated)

Commits
  • 1a1852c Merge pull request #13344 from k8s-infra-cherrypick-robot/cherry-pick-13336-t...
  • bc95886 Fix bug while setting status for deprecated fields
  • 90f7459 Merge pull request #13328 from k8s-infra-cherrypick-robot/cherry-pick-13263-t...
  • e57e3c0 Add wait-resource-versions-{become,remain}-stable intervals to e2e config
  • 8ff9b8a Merge pull request #13314 from k8s-infra-cherrypick-robot/cherry-pick-13307-t...
  • f6a3c01 Merge pull request #13324 from irapandey/go-bump-1.24.12
  • 89368a7 go-bump-1.24.13
  • bf05546 update cert-manager to v1.19.3
  • 7207555 Merge pull request #13294 from nikParasyr/release_1_12_corefile
  • 2c7e4f7 Bump coredns/corefile-migration to v1.0.30
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.22.5 to 0.23.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.23.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

🐛 Bugfixes

... (truncated)

Commits
  • f52bbb8 Merge pull request #3437 from k8s-infra-cherrypick-robot/cherry-pick-3430-to-...
  • 4f41337 Merge pull request #3438 from k8s-infra-cherrypick-robot/cherry-pick-3434-to-...
  • e29a1b9 seedling: Test cache reader waits for cache sync
  • 83c8dc3 bug: Fakeclient: Fix status apply if existing object has managedFields set
  • bf6bcd5 Merge pull request #3436 from k8s-infra-cherrypick-robot/cherry-pick-3431-to-...
  • b6a3a46 bug: Fix panic when using CRs with embedded pointer structs
  • 7866fb0 Merge pull request #3433 from k8s-infra-cherrypick-robot/cherry-pick-3425-to-...
  • 90b26f7 check to see if informer is synced and started before returning cache
  • 129853d Merge pull request #3419 from alvaroaleman/limit-cardinality
  • 00b8b07 🐛 Limit depthWithPriorityMetric cardinality to 25
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.34.3 to 0.35.0

Commits
  • a8d2a03 Update dependencies to v0.35.0 tag
  • b9eb912 Merge remote-tracking branch 'origin/master' into release-1.35
  • e526698 Bump golang.org/x/crypto to v0.45.0
  • fd7881d Merge pull request #135278 from aman4433/KUBE-134468
  • 8db5ab6 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
  • 4ed5bd4 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
  • 704bc3d Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
  • 7d598d7 Refactor: Contextualize CRDFinalizer to fix goroutine leak
  • 27e5803 Update vendored dependencies
  • c4e434c Merge pull request #134216 from Goend/master
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[gomod] bump the dependencies group across 1 directory with 12 updates
172b6bb 
Bumps the dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.3.0` | `5.3.1` |
| [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) | `1.1.2` | `1.2.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.27.5` | `2.28.1` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.39.0` | `1.39.1` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.0` | `0.35.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.0` | `0.35.1` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.35.0` | `0.35.1` |
| [sigs.k8s.io/cluster-api](https://github.com/kubernetes-sigs/cluster-api) | `1.10.10` | `1.12.3` |
| [sigs.k8s.io/cluster-api/test](https://github.com/kubernetes-sigs/cluster-api) | `1.10.10` | `1.12.3` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.22.5` | `0.23.1` |



Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](golang-jwt/jwt@v5.3.0...v5.3.1)

Updates `github.com/oapi-codegen/runtime` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.1.2...v1.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.27.5 to 2.28.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.5...v2.28.1)

Updates `github.com/onsi/gomega` from 1.39.0 to 1.39.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.0...v1.39.1)

Updates `k8s.io/api` from 0.35.0 to 0.35.1
- [Commits](kubernetes/api@v0.35.0...v0.35.1)

Updates `k8s.io/apimachinery` from 0.35.0 to 0.35.1
- [Commits](kubernetes/apimachinery@v0.35.0...v0.35.1)

Updates `k8s.io/client-go` from 0.35.0 to 0.35.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.0...v0.35.1)

Updates `k8s.io/kubectl` from 0.35.0 to 0.35.1
- [Commits](kubernetes/kubectl@v0.35.0...v0.35.1)

Updates `sigs.k8s.io/cluster-api` from 1.10.10 to 1.12.3
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.10.10...v1.12.3)

Updates `sigs.k8s.io/cluster-api/test` from 1.10.10 to 1.12.3
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.10.10...v1.12.3)

Updates `sigs.k8s.io/controller-runtime` from 0.22.5 to 0.23.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.22.5...v0.23.1)

Updates `k8s.io/apiextensions-apiserver` from 0.34.3 to 0.35.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.3...v0.35.0)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: k8s.io/kubectl
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/cluster-api
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/cluster-api/test
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 26, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 27, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 27, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/dependencies-a16f1ca0f5 branch February 27, 2026 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@krishnajs krishnajs Awaiting requested review from krishnajs krishnajs is a code owner

@adorney99 adorney99 Awaiting requested review from adorney99 adorney99 is a code owner

@eoghanlawless eoghanlawless Awaiting requested review from eoghanlawless eoghanlawless is a code owner

@scottmbaker scottmbaker Awaiting requested review from scottmbaker scottmbaker is a code owner

@togashidm togashidm Awaiting requested review from togashidm togashidm is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants