Skip to content

chore(deps): bump @kubernetes/client-node from 1.4.0 to 2.0.0 - #1107

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/kubernetes/client-node-2.0.0
Open

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/kubernetes/client-node-2.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps @kubernetes/client-node from 1.4.0 to 2.0.0.

Release notes

Sourced from @​kubernetes/client-node's releases.

Release 2.0.0

Breaking Changes

  • HTTP backend migrated from node-fetch to undici. undici is now the underlying fetch implementation. The node-fetch dependency has been removed. Code relying on node-fetch-specific Agent/request internals or proxy wiring may need updates; the client now configures an undici Dispatcher instead of a node-fetch agent. (#2306)
  • Dropped Node.js 18 support. Node 18 removed from the test matrix (EOL Apr 30, 2025). (#2815)
  • Dropped Node.js 20 support. (#2840)
  • Dropped Node.js 23 support. (#2840)
  • socks-proxy-agent upgraded 8.x → 10.x and socks added as a direct dependency for the undici SOCKS proxy path. (#2820, #2802)
  • undici pinned to ^8.0.0. (#2821)

Features

  • Add SOCKS proxy support on the undici dispatcher path via a SocksClient connector. (#2802)
  • Add support for OIDC custom CA certificates via idp-certificate-authority and idp-certificate-authority-data. (#2761)
  • Allow port forwarding to a Deployment or Service (previously Pod-only). (#2749)
  • Introduce Node.js 26 support / testing. (#2848)
  • Generated against Kubernetes API release-1.36 (updated from release-1.34 via release-1.35 and release-1.36). (#2732, #2734, #2945)

Fixes

  • informer: treat TimeoutError as reconnectable, normalize timeout errors, and add exponential backoff on reconnect. (#2813)
  • Fix custom fetch implementation to use the Node.js https module instead of the dispatcher. (#2761)
  • Fix ArrayBuffer slice to return only the relevant portion of the buffer. (#2761)
  • Fix timeoutSignal being lost after being overridden with controller.signal. (#2665)
  • Fix cp from a Pod being broken. (#2664)
  • Fix Knative Service YAML parsing by checking API groups. (#2688)
  • Don't cast undefined expiration times in exec auth. (#2666)
  • Add a File polyfill for Node.js compatibility with undici (interim, prior to dropping older Node versions). (#2815)

Tooling / Internal

  • Migrated the full test suite from nock to the undici MockAgent; nock dependency removed. (#2813, #2306)
  • TypeScript upgraded to 6.x; ESLint upgraded to 10.x; typescript-eslint to 8.6x. (#2807, #2765, #2885)
  • Pinned all GitHub Actions to SHAs and added the zizmor security linter; resolved template-injection and permission-scoping findings. (#2814)
  • Enabled npm trusted publishing. (#2726)
  • Numerous dependency bumps (undici, ws, openid-client, js-yaml, form-data, jsonpath-plus, @​types/node, and dev tooling). Notes:
  • #2815 covers both the Node 18 drop and the File polyfill (same branch).
  • #2840 covers both Node 20 and Node 23 drops.
  • #2761 covers three entries (OIDC custom CA + the https fetch fix + the ArrayBuffer slice fix).
  • #2813 covers the informer reconnect fix and the nock→MockAgent migration.

... (truncated)

Commits
  • f72cc23 Merge pull request #3006 from davidgamero/release-2.0.0
  • 07c47b0 chore: update version from 2.0.0-rc.1 to 2.0.0 in package-lock.json
  • 0675448 release package bump
  • f48ae2b Merge pull request #3002 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • 9d1d12c Merge pull request #2997 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • 14423f7 Merge pull request #2996 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • 0af9449 build(deps): bump undici from 8.9.0 to 8.10.0
  • 7b5e8b1 build(deps): bump ws from 8.21.1 to 8.21.2
  • fb5764d build(deps-dev): bump tsx from 4.23.5 to 4.23.7
  • 637ba96 Merge pull request #3004 from kubernetes-client/ci/fix-zimor
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​kubernetes/client-node since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@kubernetes/client-node](https://github.com/kubernetes-client/javascript) from 1.4.0 to 2.0.0.
- [Release notes](https://github.com/kubernetes-client/javascript/releases)
- [Commits](kubernetes-client/javascript@1.4.0...2.0.0)

---
updated-dependencies:
- dependency-name: "@kubernetes/client-node"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file labels Oct 5, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dependabot labels Oct 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant