Skip to content

Bump the non-k8s group with 13 updates #704

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the non-k8s group with 13 updates #704

wants to merge 1 commit into from
+268,801 −42,168

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 6, 2025 •
edited
Loading

Bumps the non-k8s group with 13 updates:

Package From To
github.com/coredns/coredns 1.11.3 1.12.2
github.com/miekg/dns 1.1.63 1.1.66
github.com/onsi/gomega 1.36.1 1.36.2
github.com/prometheus/client_golang 1.19.1 1.22.0
github.com/vishvananda/netlink 1.1.0 1.3.1
go.etcd.io/etcd/api/v3 3.5.18 3.6.0
go.etcd.io/etcd/client/pkg/v3 3.5.18 3.6.0
go.etcd.io/etcd/client/v2 2.305.18 2.305.21
go.etcd.io/etcd/client/v3 3.5.18 3.6.0
golang.org/x/net 0.38.0 0.40.0
k8s.io/klog/v2 2.120.1 2.130.1
k8s.io/kubernetes 1.30.12 1.33.1
k8s.io/utils 0.0.0-20230726121419-3b25d923346b 0.0.0-20241104100929-3ea5e8cea738

Updates github.com/coredns/coredns from 1.11.3 to 1.12.2

Release notes

Sourced from github.com/coredns/coredns's releases.

v1.12.2

This release introduces significant improvements to plugin stability and extensibility. It adds multicluster support to the Kubernetes plugin, fallthrough support in the file plugin, and a new SetProxyOptions function for the forward plugin. Notably, the QUIC (DoQ) plugin now limits concurrent streams, improving performance under load. Several bug fixes and optimizations improve reliability across plugins, including rewrite, proxy, and metrics.

Brought to You By

Ambrose Chua, Arthur Outhenin-Chalandre, Ben Kochie, Colden Cullen, Gleb Kogtev, Hirotaka Tagawa, Kevin Lyda, Manuel Rüger, Mark Mickan, Parfenov Ivan, skipper, vdbe, Viktor Oreshkin, Ville Vesilehto, Yannick Epstein, Yong Tang

Noteworthy Changes

v1.12.1

In this release:

  • kubernetes: Revert recent change to only create PTR records for endpoints with hostname defined.
  • forward: added option to return SERVFAIL immediately if all upstreams are unhealthy.

Brought to You By

... (truncated)

Commits

Updates github.com/miekg/dns from 1.1.63 to 1.1.66

Commits

Updates github.com/onsi/gomega from 1.36.1 to 1.36.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.36.2

Maintenance

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.36.2

Maintenance

  • Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 (#810) [9a7609d]
  • Bump golang.org/x/net from 0.30.0 to 0.33.0 (#807) [b6cb028]
  • Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 (#808) [5756529]
  • Bump nokogiri from 1.16.3 to 1.16.5 in /docs (#757) [dabc12e]
Commits
  • bb0e550 v1.36.2
  • 9a7609d Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 (#810)
  • b6cb028 Bump golang.org/x/net from 0.30.0 to 0.33.0 (#807)
  • 5756529 Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 (#808)
  • dabc12e Bump nokogiri from 1.16.3 to 1.16.5 in /docs (#757)
  • See full diff in compare view

Updates github.com/prometheus/client_golang from 1.19.1 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

1.20.5 / 2024-10-15

  • [BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input.

1.20.4 / 2024-09-07

... (truncated)

Commits
  • d50be25 Cut 1.22.0 (#1793)
  • 1043db7 Cut 1.22.0-rc.0 (#1768)
  • e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
  • f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
  • 9df772c build(deps): bump peter-evans/create-pull-request
  • a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
  • 60fd2b0 Remove go.work file for now
  • 8f9d0de exp: Add dependabot config
  • c5cf981 Merge pull request #1762 from prometheus/release-1.21
  • 8a42da3 Fix ios build. (#1758)
  • Additional commits viewable in compare view

Updates github.com/vishvananda/netlink from 1.1.0 to 1.3.1

Release notes

Sourced from github.com/vishvananda/netlink's releases.

v1.3.1

What's Changed

New Contributors

Full Changelog: vishvananda/netlink@v1.3.0...v1.3.1

What's Changed

... (truncated)

Commits
  • 17daef6 vlan: add support for flags and qos maps
  • b929916 filter: add classid and port range support for flower
  • 06c2c01 feat: add vlanid - tunnelid mapping support
  • c4bb4f9 rdma: support rdma metrics: resource and statistic
  • e9f11f7 bugfix: parse ipv4 src/dst error
  • 1f4f72c Mimic ipset C code for determining correct default ipset revision
  • 2426b05 qdisc: fix wrong type info of tc_sfq_qopt
  • a2e4b9a veth: allow configuring peer attributes beyond namespace and address
  • 9d88d83 feat: add support for RtoMin lock
  • 6b5dd30 geneve: Support setting/getting source port range
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/api/v3 from 3.5.18 to 3.6.0

Release notes

Sourced from go.etcd.io/etcd/api/v3's releases.

v3.6.0

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.0
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.0
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • f5d605a Merge pull request #19951 from ahrtr/release_script_20250515
  • a1bcdc7 Update release script to exactly match the target tag
  • 7a7a77c version: bump up to 3.6.0
  • 115f15e version: bump up to 3.6.0-rc.5
  • 53b485a Merge pull request #19890 from k8s-infra-cherrypick-robot/cherry-pick-19862-t...
  • c774d44 Fix the tar unzip command, adding the --no-same-owner option to avoid permiss...
  • 8d1d1a9 Merge pull request #19867 from ivanvc/release-3.6-go-1.23.9-bump
  • cddc9bc Bump Go to 1.23.9
  • 1a1cc66 Merge pull request #19853 from k8s-infra-cherrypick-robot/cherry-pick-19848-t...
  • 9f66823 fix: test-release
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/pkg/v3 from 3.5.18 to 3.6.0

Release notes

Sourced from go.etcd.io/etcd/client/pkg/v3's releases.

v3.6.0

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.0
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.0
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • f5d605a Merge pull request #19951 from ahrtr/release_script_20250515
  • a1bcdc7 Update release script to exactly match the target tag
  • 7a7a77c version: bump up to 3.6.0
  • 115f15e version: bump up to 3.6.0-rc.5
  • 53b485a Merge pull request #19890 from k8s-infra-cherrypick-robot/cherry-pick-19862-t...
  • c774d44 Fix the tar unzip command, adding the --no-same-owner option to avoid permiss...
  • 8d1d1a9 Merge pull request #19867 from ivanvc/release-3.6-go-1.23.9-bump
  • cddc9bc Bump Go to 1.23.9
  • 1a1cc66 Merge pull request #19853 from k8s-infra-cherrypick-robot/cherry-pick-19848-t...
  • 9f66823 fix: test-release
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v2 from 2.305.18 to 2.305.21

Commits
  • a17edfd version: bump up to 3.5.21
  • 2c77e22 Merge pull request #19686 from ivanvc/release-3.5-golang.org-x-net-to-v0.37.0
  • 14b8ce4 dependency: bump golang.org/x/net from v0.36.0 to v0.38.0
  • 163ff00 Merge pull request #19646 from ivanvc/release-3.5-bump-mygithub.libinneed.workers.dev-golang-jwt-...
  • 6439620 dependency: bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
  • ac31c34 version: bump up to 3.5.20
  • c518f6f Merge pull request #19629 from ahrtr/learner_test_20250319
  • 0a51fc2 Add e2e test to verify etcd is able to automatically fix the issue
  • 3c65dfa Merge pull request #19602 from ahrtr/3.5_add_learner_test_20250314
  • 341af03 Fix the issue that learner promotion command doesn't support json output
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.5.18 to 3.6.0

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.0

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.0
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.0
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • f5d605a Merge pull request #19951 from ahrtr/release_script_20250515
  • a1bcdc7 Update release script to exactly match the target tag
  • 7a7a77c version: bump up to 3.6.0
  • 115f15e version: bump up to 3.6.0-rc.5
  • 53b485a Merge pull request #19890 from k8s-infra-cherrypick-robot/cherry-pick-19862-t...
  • c774d44 Fix the tar unzip command, adding the --no-same-owner option to avoid permiss...
  • 8d1d1a9 Merge pull request #19867 from ivanvc/release-3.6-go-1.23.9-bump
  • cddc9bc Bump Go to 1.23.9
  • 1a1cc66 Merge pull request #19853 from k8s-infra-cherrypick-robot/cherry-pick-19848-t...
  • 9f66823 fix: test-release
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.38.0 to 0.40.0

Commits
  • 7d6e62a go.mod: update golang.org/x dependencies
  • ea0c1d9 internal/timeseries: use built-in max/min to simplify the code
  • 3e7a445 quic: skip packet numbers for optimistic ack defense
  • 3f563d3 quic: use an enum for sentPacket state
  • a3b6e77 quic: don't re-lose packets when discarding keys
  • 22500a6 quic: decode packet numbers >255 in tests
  • dd0b200 quic: remove go1.21 build constraint
  • b8d8877 go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates k8s.io/klog/v2 from 2.120.1 to 2.130.1

Release notes

Sourced from k8s.io/klog/v2's releases.

Prepare klog release for Kubernetes v1.31 (Take 2)

What's Changed

Full Changelog: kubernetes/klog@v2.130.0...v2.130.1

Prepare klog release for Kubernetes v1.31 (Take 1)

What's Changed

New Contributors

Full Changelog: kubernetes/klog@v2.120.1...v2.130.0

Commits
  • 75663bb Merge pull request #408 from pohly/klog-flush-sync-fix
  • 2327d4c data race: avoid unprotected access to sb.file
  • 16c7d26 Merge pull request #401 from pohly/ktesting-warning-delay
  • cd24012 ktesting: tone down warning about leaked test goroutine
  • 2ee202a Merge pull request #404 from 1978629634/fsync-freelock
  • 79575d8 Do not acquire lock for file.Sync() fsync call

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Jun 6, 2025
@dependabot dependabot bot mentioned this pull request Jun 6, 2025
Closed
@dependabot dependabot bot requested review from bowei and MrHohn June 6, 2025 15:39
@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Jun 6, 2025
@dependabot dependabot bot mentioned this pull request Jun 6, 2025
Closed
@dependabot dependabot bot requested a review from DamianSawicki June 6, 2025 15:39
@k8s-ci-robot
Copy link
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

This was referenced Jun 6, 2025
Closed
Closed
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign damiansawicki for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Jun 6, 2025
@DamianSawicki DamianSawicki mentioned this pull request Jun 6, 2025
Open
@dependabot
Bump the non-k8s group with 13 updates
5cc8331 
Bumps the non-k8s group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/coredns/coredns](https://github.com/coredns/coredns) | `1.11.3` | `1.12.2` |
| [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.63` | `1.1.66` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.1` | `1.36.2` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.1` | `1.22.0` |
| [github.com/vishvananda/netlink](https://github.com/vishvananda/netlink) | `1.1.0` | `1.3.1` |
| [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.5.18` | `3.6.0` |
| [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.5.18` | `3.6.0` |
| [go.etcd.io/etcd/client/v2](https://github.com/etcd-io/etcd) | `2.305.18` | `2.305.21` |
| [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.5.18` | `3.6.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.38.0` | `0.40.0` |
| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.120.1` | `2.130.1` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.30.12` | `1.33.1` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20230726121419-3b25d923346b` | `0.0.0-20241104100929-3ea5e8cea738` |


Updates `github.com/coredns/coredns` from 1.11.3 to 1.12.2
- [Release notes](https://github.com/coredns/coredns/releases)
- [Changelog](https://github.com/coredns/coredns/blob/master/Makefile.release)
- [Commits](coredns/coredns@v1.11.3...v1.12.2)

Updates `github.com/miekg/dns` from 1.1.63 to 1.1.66
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](miekg/dns@v1.1.63...v1.1.66)

Updates `github.com/onsi/gomega` from 1.36.1 to 1.36.2
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.1...v1.36.2)

Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.19.1...v1.22.0)

Updates `github.com/vishvananda/netlink` from 1.1.0 to 1.3.1
- [Release notes](https://github.com/vishvananda/netlink/releases)
- [Commits](vishvananda/netlink@v1.1.0...v1.3.1)

Updates `go.etcd.io/etcd/api/v3` from 3.5.18 to 3.6.0
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.18...v3.6.0)

Updates `go.etcd.io/etcd/client/pkg/v3` from 3.5.18 to 3.6.0
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.18...v3.6.0)

Updates `go.etcd.io/etcd/client/v2` from 2.305.18 to 2.305.21
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@client/v2.305.18...client/v2.305.21)

Updates `go.etcd.io/etcd/client/v3` from 3.5.18 to 3.6.0
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.18...v3.6.0)

Updates `golang.org/x/net` from 0.38.0 to 0.40.0
- [Commits](golang/net@v0.38.0...v0.40.0)

Updates `k8s.io/klog/v2` from 2.120.1 to 2.130.1
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](kubernetes/klog@v2.120.1...v2.130.1)

Updates `k8s.io/kubernetes` from 1.30.12 to 1.33.1
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.30.12...v1.33.1)

Updates `k8s.io/utils` from 0.0.0-20230726121419-3b25d923346b to 0.0.0-20241104100929-3ea5e8cea738
- [Commits](https://github.com/kubernetes/utils/commits)

---
updated-dependencies:
- dependency-name: github.com/coredns/coredns
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.66
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-k8s
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-k8s
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: github.com/vishvananda/netlink
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: go.etcd.io/etcd/client/v2
  dependency-version: 2.305.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-k8s
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: golang.org/x/net
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: k8s.io/klog/v2
  dependency-version: 2.130.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-k8s
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20241104100929-3ea5e8cea738
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-k8s
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/non-k8s-13bd4a62b4 branch from df9dff4 to 5cc8331 Compare June 6, 2025 19:33
@k8s-ci-robot
Copy link
Contributor

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-kubernetes-dns-test 5cc8331 link true /test pull-kubernetes-dns-test

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@cwayne18
Copy link

cwayne18 commented Jun 9, 2025

Looks like we also need to bump go to 1.24.x?

@dereknola
Copy link
Contributor

@DamianSawicki We need to pin k8s.io/kubernetes as well in the bottom of go.mod. Otherwise it will be out of sync with the rest of the k8s dependencies.

I am opening another PR to resolve this. Lets have dependabot try again next time.

@dereknola dereknola mentioned this pull request Jun 9, 2025
Merged
@DamianSawicki
Copy link
Collaborator

Looks like we also need to bump go to 1.24.x?

@cwayne18 I see go bumped to 1.24.0 in the third line of go.mod. Are you referring to some other place?

@DamianSawicki We need to pin k8s.io/kubernetes as well in the bottom of go.mod. Otherwise it will be out of sync with the rest of the k8s dependencies.

@dereknola I'm wondering why we have this pinning in the first place. With #702 and #705, we should hopefully be able to get rid of it. I'll close this PR and see if dependabot will try to update pinned targets. If not, perhaps instead of pinning k8s.io/kubernetes we can unpin everything else?

@DamianSawicki
Copy link
Collaborator

The present PR hasn't pick up the depandabot config fix from #705, closing.

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 9, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/go_modules/non-k8s-13bd4a62b4 branch June 9, 2025 18:41
@DamianSawicki DamianSawicki restored the dependabot/go_modules/non-k8s-13bd4a62b4 branch June 9, 2025 18:42
@dereknola
Copy link
Contributor

@DamianSawicki You are correct, by pinning all the k8s.io dependencies, dependabot is effectively doing nothing in its bumps to various k8s.io dependencies in go.mod because it will not touch replace directives.

However, there are several potential problems with letting dependabot handle k8s dependencies. We have run into these in the past with k3s and other downstream repos.

  1. Out of Step Versioning: even with groupings, dependabot does not always reliable bump All necessary k8s components at once. Its best to make sure that all v0.28.12 and v1.28.12 get bump and you don't end up with a weird v0.29.3 hanging on.
  2. Latest Minor, Not Oldest Supported Minor: Dependabot will bump to v1.33, because that's the newest version of the k8s components. However, as a downstream project, we try and ensure that we always are on the "Oldest Supported Minor", which at time of writing is v1.30.13. You may not care about this as much, and it may not matter to this repo, but it can make it difficult to support across both the newest and oldest versions of Kubernetes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bowei bowei Awaiting requested review from bowei

@MrHohn MrHohn Awaiting requested review from MrHohn

@DamianSawicki DamianSawicki Awaiting requested review from DamianSawicki

Assignees
No one assigned
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. dependencies Pull requests that update a dependency file go Pull requests that update Go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@k8s-ci-robot @cwayne18 @dereknola @DamianSawicki