fix(deps): update go-modules controller-runtime and k8s#869
fix(deps): update go-modules controller-runtime and k8s#869red-hat-konflux[bot] wants to merge 1 commit into
Conversation
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
from
c8ab15c to
bafeb9f
Compare
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #869 +/- ##
==========================================
- Coverage 58.34% 54.23% -4.11%
==========================================
Files 25 25
Lines 2775 2775
==========================================
- Hits 1619 1505 -114
- Misses 992 1122 +130
+ Partials 164 148 -16
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
4 times, most recently
from
b51aa19 to
e68fb40
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
6 times, most recently
from
6e70e93 to
e0ed773
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
3 times, most recently
from
3a829c9 to
bc59b5a
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
2 times, most recently
from
3c4b5f4 to
3f5e9b5
Compare
github-actions
Bot
added
semver/minor
AI Dependency Impact AnalysisPrevious analysisPrevious analysisPrevious analysisPrevious analysisRisk Level: MEDIUMSummary of Dependency ChangesThis PR updates several Kubernetes-related dependencies, including k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, and sigs.k8s.io/controller-runtime. The k8s dependencies are bumped from v0.33.4 to v0.36.0, and controller-runtime is updated from v0.19.4 to v0.24.0. The controller-runtime update includes breaking changes due to its dependency on k8s.io/* v1.36. Affected Code
Breaking Change AssessmentWhile this is a minor version bump for the overall PR, the update to Security AssessmentNo security advisories or govulncheck results are provided, so this cannot be assessed. Recommended ActionReview specific areas: Medium risk, reviewer should check all areas where controller-runtime is used, especially webhook implementations, to ensure compatibility with the new Kubernetes API version and webhook signatures. Specific attention should be paid to the controller logic to ensure that there are no dependency conflicts. Risk Level: MEDIUMSummary of Dependency ChangesThis PR updates several Kubernetes dependencies (api, apimachinery, client-go) from v0.33.4 to v0.36.0 and controller-runtime from v0.19.4 to v0.24.0. The controller-runtime update includes breaking changes due to the k8s.io/* dependency updates. Additionally, the update includes various bug fixes, features, and performance improvements in the controller-runtime. Affected Code
Breaking Change AssessmentThe controller-runtime v0.24.0 release notes indicate breaking changes due to the update to k8s.io/* v1.36. Specifically, if our code uses webhook builder, the Security AssessmentNo security advisories or govulncheck data were included in the context, so no assessment could be made about potential vulnerabilities. Recommended ActionReview specific areas: Due to the potential breaking changes in controller-runtime webhooks and the k8s.io/* version bumps, the reviewer should carefully examine the webhook configurations and any code that utilizes the Kubernetes API to ensure compatibility. Specifically, verify that any webhook implementations are using the concrete object rather than Risk Level: MEDIUMSummary of Dependency ChangesThis PR updates several Kubernetes dependencies (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go) from v0.33.4 to v0.36.0 and sigs.k8s.io/controller-runtime from v0.19.4 to v0.24.0, along with k8s.io/utils to a new digest. The controller-runtime update includes breaking changes due to updated Kubernetes dependencies. Affected Code
Breaking Change AssessmentThe controller-runtime v0.24.0 release notes indicate a breaking change due to updating to k8s.io/* v1.36. Since these are minor version bumps, semantic versioning suggests breaking changes should be minimal and likely fixable. Security AssessmentNo security advisories or govulncheck results are included in the context. Recommended ActionReview specific areas: Medium risk, reviewer should check the codebase for compatibility issues arising from the Kubernetes API updates in controller-runtime and ensure the application is compatible with the updated Kubernetes API version. Focus on areas utilizing controller-runtime's client, cache, or webhook features. Risk Level: MEDIUMSummary of Dependency ChangesThis PR updates Affected CodeSince no code snippets are provided, it's not possible to determine how the codebase uses these dependencies. Without specific code usage, an analysis can only be made based on the risk hints provided. No direct imports exist. Breaking Change AssessmentThe Security AssessmentNo security advisories or govulncheck data provided. Recommended ActionNeeds careful review: The update to Risk Level: MEDIUMSummary of Dependency ChangesThis PR updates several Kubernetes dependencies (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go) from v0.33.4 to v0.36.0 and sigs.k8s.io/controller-runtime from v0.19.4 to v0.24.0. The controller-runtime update includes breaking changes related to the required Kubernetes dependencies and webhook implementations. k8s.io/utils has a digest update. Affected CodeSince no source code snippets were provided, I can only state that the impact assessment is based solely on the dependency information. The codebase presumably uses types and functions from Breaking Change AssessmentThe update to controller-runtime v0.24.0 introduces breaking changes. Most notably, it depends on k8s.io/* v1.36. The webhook builder API has also changed, requiring updates to webhook implementations to accept concrete types instead of Security AssessmentNo security advisories or Recommended ActionReview specific areas: Due to the breaking changes in controller-runtime related to webhooks and core Kubernetes dependencies, a reviewer should carefully examine the following:
|
github-actions
Bot
added
the
risk/medium
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Risk Level: MEDIUM
Summary of Dependency Changes
This PR updates several Kubernetes-related dependencies, including k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, and sigs.k8s.io/controller-runtime. The k8s dependencies are bumped from v0.33.4 to v0.36.0, and controller-runtime is updated from v0.19.4 to v0.24.0. The controller-runtime update includes breaking changes due to its dependency on k8s.io/* v1.36.
Affected Code
- No Direct Imports: k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, and sigs.k8s.io/controller-runtime have no direct imports.
Breaking Change Assessment
While this is a minor version bump for the overall PR, the update to sigs.k8s.io/controller-runtime from v0.19.4 to v0.24.0 includes breaking changes. Specifically, it upgrades to k8s.io/* v1.36, which may introduce incompatibilities. Further, if the codebase uses webhooks, the signature for validate/default methods must change to accept concrete objects instead of runtime objects. The breaking changes associated with the k8s.io/* v1.36 update itself require manual inspection of the code to assess the risk.
Security Assessment
No security advisories or govulncheck results are provided, so this cannot be assessed.
Recommended Action
Review specific areas: Medium risk, reviewer should check all areas where controller-runtime is used, especially webhook implementations, to ensure compatibility with the new Kubernetes API version and webhook signatures. Specific attention should be paid to the controller logic to ensure that there are no dependency conflicts.
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
from
3f5e9b5 to
9072a24
Compare
github-actions
Bot
added
risk/medium
There was a problem hiding this comment.
Risk Level: MEDIUM
Summary of Dependency Changes
This PR updates several Kubernetes dependencies (api, apimachinery, client-go) from v0.33.4 to v0.36.0 and controller-runtime from v0.19.4 to v0.24.0. The controller-runtime update includes breaking changes due to the k8s.io/* dependency updates. Additionally, the update includes various bug fixes, features, and performance improvements in the controller-runtime.
Affected Code
- k8s.io/api, k8s.io/apimachinery, k8s.io/client-go: These are fundamental Kubernetes libraries, and since no direct imports are available, it's assumed our code interacts with these indirectly through controller-runtime.
- sigs.k8s.io/controller-runtime: This is a core dependency. Our code uses it for building controllers, handling events, and interacting with the Kubernetes API.
Breaking Change Assessment
The controller-runtime v0.24.0 release notes indicate breaking changes due to the update to k8s.io/* v1.36. Specifically, if our code uses webhook builder, the WebhookManagedBy and ValidateCreate signatures have changed. This warrants further review, as these may require code modification.
Security Assessment
No security advisories or govulncheck data were included in the context, so no assessment could be made about potential vulnerabilities.
Recommended Action
Review specific areas: Due to the potential breaking changes in controller-runtime webhooks and the k8s.io/* version bumps, the reviewer should carefully examine the webhook configurations and any code that utilizes the Kubernetes API to ensure compatibility. Specifically, verify that any webhook implementations are using the concrete object rather than runtime.Object. Also, check if the RBAC for events is using the events.k8s.io apiGroup, if GetEventRecorderFor is used.
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
from
9072a24 to
1d6fd39
Compare
github-actions
Bot
added
risk/medium
There was a problem hiding this comment.
Risk Level: MEDIUM
Summary of Dependency Changes
This PR updates several Kubernetes dependencies (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go) from v0.33.4 to v0.36.0 and sigs.k8s.io/controller-runtime from v0.19.4 to v0.24.0, along with k8s.io/utils to a new digest. The controller-runtime update includes breaking changes due to updated Kubernetes dependencies.
Affected Code
- No direct imports found for k8s.io/api, k8s.io/apimachinery, k8s.io/client-go or k8s.io/utils.
- The codebase likely uses controller-runtime for building controllers, defining CRDs, and interacting with the Kubernetes API. Due to no direct imports, the impact can not be determined.
Breaking Change Assessment
The controller-runtime v0.24.0 release notes indicate a breaking change due to updating to k8s.io/* v1.36. Since these are minor version bumps, semantic versioning suggests breaking changes should be minimal and likely fixable.
Security Assessment
No security advisories or govulncheck results are included in the context.
Recommended Action
Review specific areas: Medium risk, reviewer should check the codebase for compatibility issues arising from the Kubernetes API updates in controller-runtime and ensure the application is compatible with the updated Kubernetes API version. Focus on areas utilizing controller-runtime's client, cache, or webhook features.
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
from
1d6fd39 to
5f5b3be
Compare
github-actions
Bot
added
risk/medium
There was a problem hiding this comment.
Risk Level: MEDIUM
Summary of Dependency Changes
This PR updates k8s.io/api, k8s.io/client-go, and sigs.k8s.io/controller-runtime to newer minor versions. The controller-runtime update includes breaking changes related to the Kubernetes API version, event API, SSA, and webhooks. The k8s.io/utils also updates from a digest update.
Affected Code
Since no code snippets are provided, it's not possible to determine how the codebase uses these dependencies. Without specific code usage, an analysis can only be made based on the risk hints provided. No direct imports exist.
Breaking Change Assessment
The controller-runtime update from v0.19.4 to v0.24.0 introduces several breaking changes. Notably, the update to k8s.io/* v1.36. The change in events API may require RBAC update. A change in the webhooks implementation also requires changes to the existing webhooks.
Security Assessment
No security advisories or govulncheck data provided.
Recommended Action
Needs careful review: The update to controller-runtime includes breaking changes that affect Kubernetes API version and webhook implementations. A careful review is needed to ensure that our controllers and webhooks are compatible with the new version.
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-modules-controller-runtime-and-k8s
branch
from
5f5b3be to
3c8c571
Compare
github-actions
Bot
added
risk/medium
There was a problem hiding this comment.
Risk Level: MEDIUM
Summary of Dependency Changes
This PR updates several Kubernetes dependencies (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go) from v0.33.4 to v0.36.0 and sigs.k8s.io/controller-runtime from v0.19.4 to v0.24.0. The controller-runtime update includes breaking changes related to the required Kubernetes dependencies and webhook implementations. k8s.io/utils has a digest update.
Affected Code
Since no source code snippets were provided, I can only state that the impact assessment is based solely on the dependency information. The codebase presumably uses types and functions from k8s.io/api, k8s.io/apimachinery, and k8s.io/client-go for interacting with the Kubernetes API. The codebase also likely utilizes the controller-runtime library for building Kubernetes controllers and webhooks.
Breaking Change Assessment
The update to controller-runtime v0.24.0 introduces breaking changes. Most notably, it depends on k8s.io/* v1.36. The webhook builder API has also changed, requiring updates to webhook implementations to accept concrete types instead of runtime.Object. Without codebase examples, it's impossible to know if these affect us directly, but since these are potentially very impactful to the code, we should assume it affects us.
Security Assessment
No security advisories or govulncheck data were provided.
Recommended Action
Review specific areas: Due to the breaking changes in controller-runtime related to webhooks and core Kubernetes dependencies, a reviewer should carefully examine the following:
- Webhook implementations to ensure they are compatible with the updated API.
- Controller implementations for compatibility with updated Kubernetes types.
- RBAC configurations related to event recording (due to potential API group changes for events).
|
Requires go 1.26.x so incompatible with the current UBI images which, to this date, only provide 1.25.x |
1 similar comment
|
Requires go 1.26.x so incompatible with the current UBI images which, to this date, only provide 1.25.x |
2 participants
This PR contains the following updates:
v0.33.4→v0.36.0v0.33.4→v0.36.0v0.33.4→v0.36.0bc988d5→ff6756fv0.19.4→v0.24.0Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
kubernetes/api (k8s.io/api)
v0.36.0Compare Source
v0.35.4Compare Source
v0.35.3Compare Source
v0.35.2Compare Source
v0.35.1Compare Source
v0.35.0Compare Source
v0.34.7Compare Source
v0.34.6Compare Source
v0.34.5Compare Source
v0.34.4Compare Source
v0.34.3Compare Source
v0.34.2Compare Source
v0.34.1Compare Source
v0.34.0Compare Source
v0.33.11Compare Source
v0.33.10Compare Source
v0.33.9Compare Source
v0.33.8Compare Source
v0.33.7Compare Source
v0.33.6Compare Source
v0.33.5Compare Source
kubernetes/apimachinery (k8s.io/apimachinery)
v0.36.0Compare Source
v0.35.4Compare Source
v0.35.3Compare Source
v0.35.2Compare Source
v0.35.1Compare Source
v0.35.0Compare Source
v0.34.7Compare Source
v0.34.6Compare Source
v0.34.5Compare Source
v0.34.4Compare Source
v0.34.3Compare Source
v0.34.2Compare Source
v0.34.1Compare Source
v0.34.0Compare Source
v0.33.11Compare Source
v0.33.10Compare Source
v0.33.9Compare Source
v0.33.8Compare Source
v0.33.7Compare Source
v0.33.6Compare Source
v0.33.5Compare Source
kubernetes/client-go (k8s.io/client-go)
v0.36.0Compare Source
v0.35.4Compare Source
v0.35.3Compare Source
v0.35.2Compare Source
v0.35.1Compare Source
v0.35.0Compare Source
v0.34.7Compare Source
v0.34.6Compare Source
v0.34.5Compare Source
v0.34.4Compare Source
v0.34.3Compare Source
v0.34.2Compare Source
v0.34.1Compare Source
v0.34.0Compare Source
v0.33.11Compare Source
v0.33.10Compare Source
v0.33.9Compare Source
v0.33.8Compare Source
v0.33.7Compare Source
v0.33.6Compare Source
v0.33.5Compare Source
kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)
v0.24.0Compare Source
🐛 Bug Fixes
🌱 Others
StartLoggingfor event debug logs (#3451)🌱 CI & linters
tools/setup-envtestsubmodule (#3476)📖 Additionally, there has been 1 contribution to our documentation. (#3477)
Dependencies
Added
Changed
8a7402a→944ab1f078029d→bd525daa0af3ef→8636f87200df99→8636f87f2248ac589584f→43fb72cbc988d5→b8788abRemoved
9bdfabeThanks to all our contributors! 😊
v0.23.3Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3
v0.23.2Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2
v0.23.1Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1
v0.23.0Compare Source
🔆 Highlights
GetEventRecorderForrequires updating your rbac for events to use theevents.k8s.ioapiGroup rather than the `` (core) apiGroupbuilder.WebhookManagedBy(mgr).For(&corev1.Deployment{})has to be changed tobuilder.WebhookManagedBy(mgr, &appsv1.Deployment{})runtime.Object, for example fromValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error)toValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)✨ Features
🐛 Bugfixes
waitermanipulation by @fossedihelm in #3368🌱 Other
sorttoslicespackage by @dongjiang1989 in #3370📖 Documentation
README.md's compatibility matrix forv0.22.x. by @renormalize in #3392Dependencies
Added
Changed
bda5523→078029d5ec99f8→9bdfabea0af3ef→200df9985fd79d→ec3ebc5f3f2b99→589584f4c0f3b2→bc988d5cfa47c3→2d32026Removed
New Contributors
Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.23.0
Thanks to all our contributors! 😊
v0.22.5Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.22.4...v0.22.5
v0.22.4Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.22.3...v0.22.4
v0.22.3Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3
v0.22.2Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2
v0.22.1Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1
v0.22.0Compare Source
🔆 Highlights
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.