Bump the k8s-io group with 3 updates #697

dependabot · 2025-05-29T11:49:47Z

Bumps the k8s-io group with 3 updates: k8s.io/klog/v2, k8s.io/kubernetes and k8s.io/utils.

Updates k8s.io/klog/v2 from 2.120.1 to 2.130.1

Release notes

Sourced from k8s.io/klog/v2's releases.

Prepare klog release for Kubernetes v1.31 (Take 2)

What's Changed

data race: avoid unprotected access to sb.file by @pohly in kubernetes/klog#408

Full Changelog: kubernetes/klog@v2.130.0...v2.130.1

Prepare klog release for Kubernetes v1.31 (Take 1)

What's Changed

chore(*): fix spelling of Intel Corporation by @jsoref in kubernetes/klog#399

build: fix some linter warnings by @pohly in kubernetes/klog#402

examples: fix linter warning by @pohly in kubernetes/klog#406

Do not acquire lock for file.Sync() fsync call by @1978629634 in kubernetes/klog#404

ktesting: tone down warning about leaked test goroutine by @pohly in kubernetes/klog#401

New Contributors

@jsoref made their first contribution in kubernetes/klog#399

@1978629634 made their first contribution in kubernetes/klog#404

Full Changelog: kubernetes/klog@v2.120.1...v2.130.0

Commits

75663bb Merge pull request #408 from pohly/klog-flush-sync-fix
2327d4c data race: avoid unprotected access to sb.file
16c7d26 Merge pull request #401 from pohly/ktesting-warning-delay
cd24012 ktesting: tone down warning about leaked test goroutine
2ee202a Merge pull request #404 from 1978629634/fsync-freelock
79575d8 Do not acquire lock for file.Sync() fsync call
7af45d6 Merge pull request #406 from pohly/linter
d008cfe examples: fix linter warning
ab53041 Merge pull request #402 from pohly/linter-issues
ff7c070 build: fix some linter warnings
Additional commits viewable in compare view

Updates k8s.io/kubernetes from 1.30.12 to 1.33.1

Release notes

Sourced from k8s.io/kubernetes's releases.

Kubernetes v1.33.1

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0-rc.1

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0-rc.0

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0-beta.0

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0-alpha.3

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0-alpha.2

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.33.0-alpha.1

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Kubernetes v1.32.5

... (truncated)

Commits

8adc0f0 Release commit for Kubernetes v1.33.1
cce99a8 Automated cherry pick of #130503: Unhandled panic crash on rollout_history pr...
00ebe85 Merge pull request #131636gnufied/automated-cherry-pick-of-#131568
5dc469c Merge pull request #131523carlory/automated-cherry-pick-of-#131495
973b381 Merge pull request #131437gnufied/automated-cherry-pick-of-#131418
b5a1738 Merge pull request #131708tigrato/automated-cherry-pick-of-#131702
3a09aeb Merge pull request #131679mortent/automated-cherry-pick-of-#131662
a257be8 fix: fixes a possible panic in NewYAMLToJSONDecoder
b59deb4 DRA: Fix failure to allocate large number of devices
d3c7573 Merge pull request #131427 from princepereira/automated-cherry-pick-of-#13113...
Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20230726121419-3b25d923346b to 0.0.0-20241104100929-3ea5e8cea738

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the k8s-io group with 3 updates: [k8s.io/klog/v2](https://github.com/kubernetes/klog), [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) and [k8s.io/utils](https://github.com/kubernetes/utils). Updates `k8s.io/klog/v2` from 2.120.1 to 2.130.1 - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md) - [Commits](kubernetes/klog@v2.120.1...v2.130.1) Updates `k8s.io/kubernetes` from 1.30.12 to 1.33.1 - [Release notes](https://github.com/kubernetes/kubernetes/releases) - [Commits](kubernetes/kubernetes@v1.30.12...v1.33.1) Updates `k8s.io/utils` from 0.0.0-20230726121419-3b25d923346b to 0.0.0-20241104100929-3ea5e8cea738 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: k8s.io/klog/v2 dependency-version: 2.130.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s-io - dependency-name: k8s.io/kubernetes dependency-version: 1.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: k8s-io - dependency-name: k8s.io/utils dependency-version: 0.0.0-20241104100929-3ea5e8cea738 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: k8s-io ... Signed-off-by: dependabot[bot] <[email protected]>

k8s-ci-robot · 2025-05-29T11:49:55Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign mrhohn for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot · 2025-05-29T11:49:56Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

k8s-ci-robot · 2025-05-29T11:52:11Z

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-kubernetes-dns-test	`30adad4`	link	true	`/test pull-kubernetes-dns-test`

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

DamianSawicki · 2025-05-29T12:01:58Z

We rather want to keep the k8s minor as low as possible. It would be ideal to only bump patch version.

dependabot · 2025-05-29T12:02:00Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

DamianSawicki · 2025-05-29T12:05:38Z

@FelipeYepez Looking at this this PR, wouldn't it be a better idea to make a group from k8s.io/kubernetes rather than from k8s.io/*?

Michcioperz · 2025-05-29T16:04:10Z

I think the intent was to synchronize bumping k8s.io/kubernetes with for example k8s.io/api (since one is 1.30.12 and the other 0.30.12). I'm guessing this is not being bumped here either because it's <1 or because of the large replace block at the bottom of go.mod?

FelipeYepez · 2025-05-30T12:15:01Z

How would you prefer it? @DamianSawicki @Michcioperz

DamianSawicki · 2025-05-30T13:00:21Z

Perhaps something like the following? WDYT @Michcioperz? I'm happy to prepare a new PR with this config.

    groups:
      k8s.io: # Group k8s.io golang dependencies updates.
        update-types: patch # We want to keep the latest supported k8s minor and only update patch version automatically.
        patterns: # Not all k8s.io dependencies are numbered in parallel with k8s releases, below we list those that do.
          - "k8s.io/apiextensions-apiserver"
          - "k8s.io/apimachinery"
          - "k8s.io/apiserver"
          - "k8s.io/cli-runtime"
          - "k8s.io/client-go"
          - "k8s.io/cloud-provider"
          - "k8s.io/cluster-bootstrap"
          - "k8s.io/code-generator"
          - "k8s.io/component-base"
          - "k8s.io/component-helpers"
          - "k8s.io/controller-manager"
          - "k8s.io/cri-api"
          - "k8s.io/csi-translation-lib"
          - "k8s.io/kube-aggregator"
          - "k8s.io/kube-controller-manager"
          - "k8s.io/kube-proxy"
          - "k8s.io/kube-scheduler"
          - "k8s.io/kubectl"
          - "k8s.io/kubelet"
          - "k8s.io/legacy-cloud-providers"
          - "k8s.io/metrics"
          - "k8s.io/mount-utils"
          - "k8s.io/pod-security-admission"
          - "k8s.io/sample-apiserver"
      non-k8s: # Let's group everything else together to minimize the number of PRs.
        exclude:
          - "k8s.io/apiextensions-apiserver"
          - "k8s.io/apimachinery"
          - "k8s.io/apiserver"
          - "k8s.io/cli-runtime"
          - "k8s.io/client-go"
          - "k8s.io/cloud-provider"
          - "k8s.io/cluster-bootstrap"
          - "k8s.io/code-generator"
          - "k8s.io/component-base"
          - "k8s.io/component-helpers"
          - "k8s.io/controller-manager"
          - "k8s.io/cri-api"
          - "k8s.io/csi-translation-lib"
          - "k8s.io/kube-aggregator"
          - "k8s.io/kube-controller-manager"
          - "k8s.io/kube-proxy"
          - "k8s.io/kube-scheduler"
          - "k8s.io/kubectl"
          - "k8s.io/kubelet"
          - "k8s.io/legacy-cloud-providers"
          - "k8s.io/metrics"
          - "k8s.io/mount-utils"
          - "k8s.io/pod-security-admission"
          - "k8s.io/sample-apiserver"

Michcioperz · 2025-05-30T13:01:58Z

I suppose that's worth trying

DamianSawicki · 2025-05-30T14:04:47Z

I suppose that's worth trying

Thanks for sharing your prespective, prepared #702. If needed, let's continue the discussion there.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels May 29, 2025

k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label May 29, 2025

k8s-ci-robot requested review from bowei and MrHohn May 29, 2025 11:49

k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label May 29, 2025

DamianSawicki closed this May 29, 2025

dependabot bot deleted the dependabot/go_modules/k8s-io-0b6862dffd branch May 29, 2025 12:02

DamianSawicki mentioned this pull request May 30, 2025

Configure dependabot with two groups: k8s and non-k8s, where k8s only bumps patch version #702

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the k8s-io group with 3 updates #697

Bump the k8s-io group with 3 updates #697

dependabot bot commented on behalf of github May 29, 2025

Uh oh!

k8s-ci-robot commented May 29, 2025

Uh oh!

k8s-ci-robot commented May 29, 2025

Uh oh!

k8s-ci-robot commented May 29, 2025

Uh oh!

DamianSawicki commented May 29, 2025

Uh oh!

dependabot bot commented on behalf of github May 29, 2025

Uh oh!

DamianSawicki commented May 29, 2025

Uh oh!

Michcioperz commented May 29, 2025

Uh oh!

FelipeYepez commented May 30, 2025

Uh oh!

DamianSawicki commented May 30, 2025

Uh oh!

Michcioperz commented May 30, 2025

Uh oh!

DamianSawicki commented May 30, 2025

Uh oh!

Uh oh!

Bump the k8s-io group with 3 updates #697

Bump the k8s-io group with 3 updates #697

Conversation

dependabot bot commented on behalf of github May 29, 2025

Prepare klog release for Kubernetes v1.31 (Take 2)

What's Changed

Prepare klog release for Kubernetes v1.31 (Take 1)

What's Changed

New Contributors

Kubernetes v1.33.1

Kubernetes v1.33.0

Kubernetes v1.33.0-rc.1

Kubernetes v1.33.0-rc.0

Kubernetes v1.33.0-beta.0

Kubernetes v1.33.0-alpha.3

Kubernetes v1.33.0-alpha.2

Kubernetes v1.33.0-alpha.1

Kubernetes v1.32.5

Uh oh!

k8s-ci-robot commented May 29, 2025

Uh oh!

k8s-ci-robot commented May 29, 2025

Uh oh!

k8s-ci-robot commented May 29, 2025

Uh oh!

DamianSawicki commented May 29, 2025

Uh oh!

dependabot bot commented on behalf of github May 29, 2025

Uh oh!

DamianSawicki commented May 29, 2025

Uh oh!

Michcioperz commented May 29, 2025

Uh oh!

FelipeYepez commented May 30, 2025

Uh oh!

DamianSawicki commented May 30, 2025

Uh oh!

Michcioperz commented May 30, 2025

Uh oh!

DamianSawicki commented May 30, 2025

Uh oh!

Uh oh!