Skip to content

Update dependency-updates (master) (patch) - #5311

Open
marvin-tigera wants to merge 1 commit into
masterfrom
renovate/master-patch-dependency-updates
Open

marvin-tigera wants to merge 1 commit into
masterfrom
renovate/master-patch-dependency-updates

Conversation

@marvin-tigera

@marvin-tigera marvin-tigera commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Age Confidence
calico/base patch ubi9-1784675397ubi9-1789183536 age confidence
golang (source) patch 1.26.51.26.8 age confidence
k8s.io/api require patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/apiextensions-apiserver require patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/apiextensions-apiserver indirect patch v0.36.2v0.36.4 age confidence
k8s.io/apimachinery require patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/apiserver require patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/cli-runtime indirect patch v0.36.2v0.36.4 age confidence
k8s.io/client-go require patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/component-base indirect patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/kube-aggregator require patch v0.37.0-beta.0v0.37.0 age confidence
k8s.io/kubectl indirect patch v0.36.2v0.36.4 age confidence

Release Notes

kubernetes/api (k8s.io/api)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/apiserver (k8s.io/apiserver)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/cli-runtime (k8s.io/cli-runtime)

v0.36.4

Compare Source

v0.36.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/component-base (k8s.io/component-base)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/kube-aggregator (k8s.io/kube-aggregator)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/kubectl (k8s.io/kubectl)

v0.36.4

Compare Source

v0.36.3

Compare Source


  • If you want to rebase/retry this PR, check this box

Copilot AI lite review requested due to automatic review settings September 11, 2026 01:03
@marvin-tigera
marvin-tigera requested a review from a team as a code owner September 11, 2026 01:03
@marvin-tigera marvin-tigera added dependencies Pull requests that update a dependency file docs-not-required release-note-not-required labels Sep 11, 2026
@marvin-tigera

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: api/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/go-openapi/jsonpointer v0.22.4 -> v1.0.0
github.com/go-openapi/jsonreference v0.21.4 -> v1.0.0
github.com/go-openapi/swag v0.25.4 -> v0.27.1
github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.27.1
github.com/go-openapi/swag/conv v0.25.4 -> v0.27.1
github.com/go-openapi/swag/fileutils v0.25.4 -> v0.27.1
github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.27.1
github.com/go-openapi/swag/loading v0.25.4 -> v0.27.1
github.com/go-openapi/swag/mangling v0.25.4 -> v0.27.1
github.com/go-openapi/swag/netutils v0.25.4 -> v0.27.1
github.com/go-openapi/swag/stringutils v0.25.4 -> v0.27.1
github.com/go-openapi/swag/typeutils v0.25.4 -> v0.27.1
github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.27.1
k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974 -> v0.0.0-20260721132016-d427ff9ee9ad
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
github.com/go-openapi/swag v0.27.0 -> v0.27.1
github.com/go-openapi/swag/cmdutils v0.27.0 -> v0.27.1
github.com/go-openapi/swag/netutils v0.27.0 -> v0.27.1
k8s.io/kube-openapi v0.0.0-20260706235625-cdb1db5517a0 -> v0.0.0-20260721132016-d427ff9ee9ad

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Update K8S_VERSION to v1.37.0 to align the build environment with the stable dependencies.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates Go, the Calico base image, and Kubernetes dependencies to newer stable and patch releases.

Changes:

  • Upgrades Go to 1.26.8 and the Calico base image.
  • Moves Kubernetes v0.37.0 modules from beta to stable.
  • Refreshes root and nested API module dependencies and checksums.

Review note: Moderate (2 votes): update K8S_VERSION in Makefile to v1.37.0 to align the build environment with the stable dependencies.

File summaries
File Description
Makefile Updates Go and Calico build image versions.
go.sum Refreshes root dependency checksums.
go.mod Updates root module and Kubernetes dependencies.
api/go.sum Refreshes API module dependency checksums.
api/go.mod Updates API module dependencies.
Review details
  • Files reviewed: 3/5 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread Makefile
GO_VERSION?=1.26.5
GO_VERSION?=1.26.8
# Version of Kubernetes to use for dependencies, tests, and kubectl.
K8S_VERSION?=v1.37.0-beta.0
Copilot AI review requested due to automatic review settings September 13, 2026 01:03
@marvin-tigera
marvin-tigera force-pushed the renovate/master-patch-dependency-updates branch from ce11f0d to 37e3d3e Compare September 13, 2026 01:03

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Update K8S_VERSION to v1.37.0 and use the corresponding published build image.

Review details

Suppressed comments (3)

Makefile:105

  • K8S_VERSION is still v1.37.0-beta.0 while this PR moves the Go modules to v0.37.0. Because GO_BUILD_VER includes K8S_VERSION, the default build and test containers will continue using the beta-tagged Kubernetes toolchain instead of the released version; please update K8S_VERSION to v1.37.0 with this dependency bump.
GO_VERSION?=1.26.8

api/go.mod:10

  • This API submodule is also being moved to Kubernetes 1.37.0, but the shared Makefile still derives GO_BUILD_VER from K8S_VERSION=v1.37.0-beta.0. That makes API-module builds use a beta Kubernetes toolchain image alongside stable Kubernetes modules; keep the toolchain selector aligned with this update by changing K8S_VERSION to v1.37.0 and using the corresponding published image.
	k8s.io/api v0.37.0
	k8s.io/apimachinery v0.37.0

go.mod:50

  • These dependencies now target Kubernetes 1.37.0, but Makefile:107 still sets K8S_VERSION to v1.37.0-beta.0. Since GO_BUILD_VER is derived from that value, normal builds continue to pull the beta-tagged calico/go-build image while compiling against the stable modules, leaving the toolchain version out of sync. Please update K8S_VERSION to v1.37.0 (and use the corresponding published build image).
	k8s.io/api v0.37.0
	k8s.io/apiextensions-apiserver v0.37.0
	k8s.io/apimachinery v0.37.0
  • Files reviewed: 3/5 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docs-not-required release-note-not-required

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants