Merge https://github.com/kubernetes/cloud-provider-gcp:master (d72bf49) into main

.github/dependabot.yml

@@ -1,66 +1,36 @@
 version: 2
 updates:
-- package-ecosystem: docker
-  directory: /cluster/gce/gci/mounter
+- package-ecosystem: "github-actions"
+  directory: "/"
   schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-- package-ecosystem: docker
-  directory: /cluster/addons/addon-manager
-  schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-- package-ecosystem: gomod
-  directory: /providers
-  schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-  groups:
-    gomod-dependencies:
-      patterns:
-      - '*'
-- package-ecosystem: gomod
-  directory: /
-  schedule:
-    interval: weekly
+    interval: "weekly"
+    day: "sunday"
   labels:
+  - "ok-to-test"
   - 'area/dependency'
   - 'release-note-none'
-  - 'ok-to-test'
-  groups:
-    gomod-dependencies:
-      patterns:
-      - '*'
 - package-ecosystem: gomod
-  directory: /crd
+  directories:
+  - "/"
+  - "/providers"
+  - "/metis"
+  - "/test/e2e"
   schedule:
     interval: weekly
   labels:
   - 'area/dependency'
   - 'release-note-none'
   - 'ok-to-test'
   groups:
-    gomod-dependencies:
+    k8s-dependencies:
       patterns:
-      - '*'
-- package-ecosystem: gomod
-  directory: /crd/hack
-  schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-  groups:
-    gomod-dependencies:
+      - "k8s.io/*"
+      - "sigs.k8s.io/*"
+    workspace-deps:
       patterns:
-      - '*'
+        - "*"
+      exclude-patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"
+
+

.github/release.yml

@@ -0,0 +1,15 @@
+changelog:
+  exclude:
+    labels:
+      - ignore-for-release
+    authors:
+      - dependabot[bot]
+  categories:
+    - title: Features
+      labels:
+        - feature
+        - enhancement
+    - title: Bug Fixes
+      labels:
+        - bug
+        - fix

.github/workflows/dependabot-sync.yml

@@ -0,0 +1,37 @@
+name: Dependabot Go Work Sync
+
+on:
+  pull_request:
+    paths:
+      - '**/go.mod'
+      - '**/go.sum'
+
+permissions:
+  contents: write
+
+jobs:
+  go-work-sync:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+
+      - name: Setup Go
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c
+        with:
+          go-version-file: 'go.work'
+
+      - name: Sync Go Workspace
+        run: go work sync
+
+      - name: Commit and Push changes
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git add go.work.sum
+          # Only commit if there are actual changes
+          git diff --quiet && git diff --staged --quiet || git commit -m "chore: update go.work.sum"
+          git push

.github/workflows/release.yml

@@ -0,0 +1,24 @@
+name: Create GitHub Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0 # Important for generating release notes
+
+      - name: Create Draft Release
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        with:
+          draft: true
+          generate_release_notes: true

.github/workflows/tag-auth-provider-gcp.yml

@@ -0,0 +1,33 @@
+name: Tag auth-provider-gcp
+
+on:
+  push:
+    branches:
+      - 'release-1.*'
+    paths:
+      - 'cmd/auth-provider-gcp/**'
+      - 'go.mod'
+      - 'go.sum'
+
+jobs:
+  tag-auth-provider-gcp:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          fetch-depth: 0 # Fetch all history and tags
+
+      - name: Configure Git User
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Run auto-tag script
+        env:
+          DRY_RUN: "false"
+          FORCE_BRANCH: ${{ github.ref_name }}
+          COMPONENT_PREFIX: "auth-provider-gcp/"
+        run: ./tools/auto-tag.sh

.github/workflows/tag-ccm.yml

@@ -0,0 +1,32 @@
+name: Tag CCM
+
+on:
+  push:
+    branches:
+      - 'release-1.*'
+    paths-ignore:
+      - 'cmd/auth-provider-gcp/**'
+      - 'cmd/gke-gcloud-auth-plugin/**'
+
+jobs:
+  tag-ccm:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          fetch-depth: 0 # Fetch all history and tags
+
+      - name: Configure Git User
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Run auto-tag script
+        env:
+          DRY_RUN: "false"
+          FORCE_BRANCH: ${{ github.ref_name }}
+          COMPONENT_PREFIX: ""
+        run: ./tools/auto-tag.sh

.github/workflows/tag-gke-gcloud-auth-plugin.yml

@@ -0,0 +1,33 @@
+name: Tag gke-gcloud-auth-plugin
+
+on:
+  push:
+    branches:
+      - 'release-1.*'
+    paths:
+      - 'cmd/gke-gcloud-auth-plugin/**'
+      - 'go.mod'
+      - 'go.sum'
+
+jobs:
+  tag-gke-gcloud-auth-plugin:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          fetch-depth: 0 # Fetch all history and tags
+
+      - name: Configure Git User
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Run auto-tag script
+        env:
+          DRY_RUN: "false"
+          FORCE_BRANCH: ${{ github.ref_name }}
+          COMPONENT_PREFIX: "gke-gcloud-auth-plugin/"
+        run: ./tools/auto-tag.sh

.gitignore

@@ -1,2 +1 @@
-cluster/bin
 MERGED_LICENSES

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${BUILDPLATFORM} golang:1.25.8 AS builder
+FROM --platform=${BUILDPLATFORM} golang:1.26.3 AS builder
 
 # golang envs
 ARG TARGETARCH