fix(deps): update kubernetes

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
k8s.io/api	v0.34.3 → v0.35.1			require	minor
k8s.io/apimachinery	v0.34.3 → v0.35.1			require	minor
k8s.io/client-go	v0.34.3 → v0.35.1			require	minor
k8s.io/code-generator	v0.34.3 → v0.35.1				minor
k8s.io/utils	bc988d5 → b8788ab			require	digest
sigs.k8s.io/cluster-api	v1.12.0 → v1.12.2			require	patch
sigs.k8s.io/controller-runtime	v0.22.4 → v0.23.1			require	minor
sigs.k8s.io/controller-tools	v0.19.0 → v0.20.0				minor

---

Release Notes

kubernetes/api (k8s.io/api)

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.4

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.4

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.4

Compare Source

kubernetes/code-generator (k8s.io/code-generator)

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.4

Compare Source

kubernetes-sigs/cluster-api (sigs.k8s.io/cluster-api)

v1.12.2

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.31.x -> v1.35.x
• Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Changes since v1.12.1

📈 Overview

• 14 new commits merged
• 4 bugs fixed 🐛

🐛 Bug Fixes

• API: Fix v1beta1 ControlPlane contract to handle .status.initialized correctly (#​13188)
• ClusterClass: Allow adding spec via ClusterClass JSON patches (#​13226)
• Runtime SDK: Improve client cert/key rotation of the RuntimeSDK client (#​13217)
• Testing: Fix webhook envtest tests for Kubernetes < v1.35 (#​13172)

🌱 Others

• CI: Use env test 1.35.0 (#​13169)
• ClusterClass: Improve topology diff (#​13173)
• Dependency: Bump Go to v1.24.12 (#​13241)
• Dependency: Bump to controller-runtime v0.22.5 (#​13246)
• KCP: Remove the ControlPlaneKubeletLocalMode for kubeadm 1.36 later (#​13211)
• MachineHealthCheck: Decrease verbosity for MHC log entry (#​13203)

📖 Additionally, there have been 4 contributions to our documentation and book. (#​13197, #​13198, #​13208, #​13219)

Dependencies

Added

Nothing has changed.

Changed

• k8s.io/api: v0.34.2 → v0.34.3
• k8s.io/apiextensions-apiserver: v0.34.2 → v0.34.3
• k8s.io/apimachinery: v0.34.2 → v0.34.3
• k8s.io/apiserver: v0.34.2 → v0.34.3
• k8s.io/client-go: v0.34.2 → v0.34.3
• k8s.io/code-generator: v0.34.2 → v0.34.3
• k8s.io/component-base: v0.34.2 → v0.34.3
• k8s.io/kms: v0.34.2 → v0.34.3
• sigs.k8s.io/controller-runtime: v0.22.4 → v0.22.5

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.12.1

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.31.x -> v1.35.x
• Workload Cluster: v1.29.x -> v1.35.x

More information about version support can be found here

Highlights

• Support for Kubernetes v1.35

Changes since v1.12.0

📈 Overview

• 8 new commits merged
• 1 bug fixed 🐛

🐛 Bug Fixes

• KCP/MachineSet: Preserve existing object names for backward compatibility with pre-v1.7 in-place updates (#​13147)

🌱 Others

• CI: Bump Kubernetes version used for testing to v1.35.0-rc.1 (#​13139)
• e2e: Bump kind to v0.31.0 (#​13163)
• e2e: Bump Kubernetes version used for testing to v1.35.0 (#​13161)
• e2e: Bump to etcd-v3.6.6-0 (#​13145)

📖 Additionally, there have been 3 contributions to our documentation and book. (#​13141, #​13154, #​13160)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.23.1

Compare Source

What's Changed

• [release-0.23] 🐛 Cache reader: Wait for cache sync when ReaderFailOnMissingInformer is true by @​k8s-infra-cherrypick-robot in #​3433
• [release-0.23] 🐛 Fix panic when using CRs with embedded pointer structs by @​k8s-infra-cherrypick-robot in #​3436
• [release-0.23] 🌱 Test cache reader waits for cache sync by @​k8s-infra-cherrypick-robot in #​3438
• [release-0.23] 🐛 Fakeclient: Fix status apply if existing object has managedFields set by @​k8s-infra-cherrypick-robot in #​3437

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

Compare Source

🔆 Highlights

• Client: Add subresource Apply support by @​alvaroaleman in #​3321
• Conversion: Enable implementation of conversion outside of API packages by @​sbueringer in #​3335
• Priorityqueue: Various improvements, bug fixes and now enabled per default
• Webhooks: Generic Validator and Defaulter by @​alvaroaleman in #​3360

⚠️ Breaking changes

• Dependencies: Update to k8s.io/* v1.35 by @​alvaroaleman @​dongjiang1989 @​kannon92 (#​3316, #​3349, #​3386, #​3391, #​3401)
• Client: Add subresource Apply support by @​alvaroaleman in #​3321
• Events: Migration to the new events API by @​clebs in #​3262
  • Using the new GetEventRecorderFor requires updating your rbac for events to use the events.k8s.io apiGroup rather than the `` (core) apiGroup
• Fakeclient: Set ResourceVersion for SSA Create by @​alvaroaleman in #​3311
• Webhooks: Generic Validator and Defaulter by @​alvaroaleman in #​3360
  • Existing code of the form builder.WebhookManagedBy(mgr).For(&corev1.Deployment{}) has to be changed to builder.WebhookManagedBy(mgr, &appsv1.Deployment{})
  • Existing webhook implementations have to be changed to take the concrete object rather than runtime.Object, for example from ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) to ValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)

✨ Features

• Cache: Allow fine-granular SyncPeriod configuration by @​sbueringer in #​3376
• Client: Add FieldOwner option to client.Options by @​aerfio in #​3389
• Client: Add FieldValidation option to client.Options by @​aerfio in #​3393
• Conversion: Enable implementation of conversion outside of API packages by @​sbueringer in #​3335
• Metrics: Add controller_runtime_reconcile_timeouts_total metric to track ReconciliationTimeout timeouts by @​godwinpang in #​3382
• Priorityqueue: Add optional Priority field to reconcile.Result by @​sbueringer in #​3333
• Priorityqueue: Enable per default by @​sbueringer in #​3332
• Priorityqueue: Use a buffer to optimize priority queue AddWithOpts performance by @​zach593 in #​3415
• Source/Kind: Delay reconciliation until handlers sync by @​GonzaloLuminary in #​3406
• Webhooks: Add WithContextFunc to WebhookBuilder by @​dmvolod in #​3324

🐛 Bugfixes

• Client: Allow SSA after normal resource creation by @​filipcirtog in #​3346
• Client: Fix List in namespaced client to list objects that are cluster scoped by @​troy0820 in #​3351 #​3353
• Envtest: Respect pre-configured binary paths in ControlPlane by @​mzhaom in #​3372
• Fakeclient: Fix a number of bugs when updating through apply by @​alvaroaleman in #​3319
• FakeClient: Fix Apply with Unstructured ApplyConfiguration and resourceVersion unset by @​sbueringer in #​3403
• Fakeclient: Fix SSA after List with non-list kind by @​sbueringer in #​3364
• Fakeclient: Panic when trying to build more than one instance of fake.ClientBuilder by @​troy0820 in #​3314
• Leaderelection: Copy all parent context values to leader elector's context by @​msudheendra-cflt in #​3327
• Metrics: Adding missing exponential buckets on webhook native histogram by @​brito-rafa in #​3411
• Priorityqueue: Do FIFO ordering within priorities and not across by @​zach593 in #​3408
• Priorityqueue: Don't block on Get when queue is shutdown (2nd try) by @​sbueringer in #​3337
• Priorityqueue: Ensure priority queue always returns high-priority items first by @​moritzmoe in #​3330
• Priorityqueue: Fix TestWhenAddingMultipleItemsWithRatelimitTrueTheyDontAffectEachOther by @​zach593 in #​3395
• Priorityqueue: Limit depthWithPriorityMetric cardinality to 25 by @​alvaroaleman #​3419
• Priorityqueue: Properly sync the waiter manipulation by @​fossedihelm in #​3368
• setup-envtest: Select the newest Kubernetes by default by @​cbandy in #​3380
• testing/addr: Prevent possible leak by avoiding defer in loop by @​s-z-z in #​3367

🌱 Other

• Dependencies: Update controller-tools to 0.20.0 and fix lint by @​dongjiang1989 in #​3405
• Linter: Add depguard golangci-linter for forbid sort pkg by @​dongjiang1989 in #​3374
• Linter: Modernize finalizer utils by @​tbavelier in #​3329
• Linter: Update golangci-lint version and modernize lint by @​dongjiang1989 in #​3384
• Linter: Update golangci-lint version to v2.4.0 by @​dongjiang1989 in #​3318
• Linter: Update golangci-lint version to v2.5.0 by @​dongjiang1989 in #​3323
• Linter: Update golangci-lint version to v2.7.2 by @​dongjiang1989 in #​3399
• Manager: Deflake should execute the Warmup function test when Warmup group is started by @​alvaroaleman in #​3356
• Misc: Add CreateOrPatch function in alias.go by @​tisonkun in #​3375
• Misc: Change sort to slices package by @​dongjiang1989 in #​3370
• Misc: Fix typo in unit test name by @​s-z-z in #​3304
• Misc: Revert deprecation of client.Apply by @​sbueringer in #​3307
• Priorityqueue: Add and use newQueueWithTimeForwarder by @​alvaroaleman in #​3336
• Priorityqueue: Add some more tests to the priorityqueue by @​alvaroaleman in #​3387
• Priorityqueue: Use separate b-trees for ready and non-ready items by @​alvaroaleman in #​3416
• Priorityqueue: Use synctest by @​alvaroaleman in #​3350

📖 Documentation

• Add a design for supporting warm replicas by @​godwinpang in #​3121
• Remove latest from setupenvtest docs by @​troy0820 in #​3359
• pkg/client/config: Remove outdated doc comments by @​haoqixu in #​3306
• Update client.Apply example by @​aerfio in #​3390
• Update README.md's compatibility matrix for v0.22.x. by @​renormalize in #​3392

Dependencies

Added

• github.com/Masterminds/semver/v3: v3.4.0
• github.com/gkampitakis/ciinfo: v0.3.2
• github.com/gkampitakis/go-diff: v1.3.2
• github.com/gkampitakis/go-snaps: v0.5.15
• github.com/goccy/go-yaml: v1.18.0
• github.com/joshdk/go-junit: v1.0.0
• github.com/maruel/natural: v1.1.1
• github.com/mfridman/tparse: v0.18.0
• github.com/tidwall/gjson: v1.18.0
• github.com/tidwall/match: v1.1.1
• github.com/tidwall/pretty: v1.2.1
• github.com/tidwall/sjson: v1.2.5
• go.uber.org/automaxprocs: v1.6.0
• golang.org/x/tools/go/expect: v0.1.0-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated

Changed

• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/google/pprof: d1b30fe → 27863c8
• github.com/onsi/ginkgo/v2: v2.22.0 → v2.27.2
• github.com/onsi/gomega: v1.36.1 → v1.38.2
• github.com/prometheus/client_golang: v1.22.0 → v1.23.2
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.66.1
• github.com/prometheus/procfs: v0.15.1 → v0.16.1
• github.com/rogpeppe/go-internal: v1.13.1 → v1.14.1
• github.com/spf13/cobra: v1.9.1 → v1.10.0
• github.com/spf13/pflag: v1.0.6 → v1.0.9
• github.com/stretchr/testify: v1.10.0 → v1.11.1
• go.etcd.io/bbolt: v1.4.2 → v1.4.3
• go.etcd.io/etcd/api/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/client/pkg/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/client/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/pkg/v3: v3.6.4 → v3.6.5
• go.etcd.io/etcd/server/v3: v3.6.4 → v3.6.5
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.61.0
• go.opentelemetry.io/otel/metric: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.36.0
• go.opentelemetry.io/otel/sdk: v1.34.0 → v1.36.0
• go.opentelemetry.io/otel/trace: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel: v1.35.0 → v1.36.0
• go.yaml.in/yaml/v2: v2.4.2 → v2.4.3
• golang.org/x/crypto: v0.36.0 → v0.45.0
• golang.org/x/mod: v0.21.0 → v0.29.0
• golang.org/x/net: v0.38.0 → v0.47.0
• golang.org/x/oauth2: v0.27.0 → v0.30.0
• golang.org/x/sync: v0.12.0 → v0.18.0
• golang.org/x/sys: v0.31.0 → v0.38.0
• golang.org/x/telemetry: bda5523 → 078029d
• golang.org/x/term: v0.30.0 → v0.37.0
• golang.org/x/text: v0.23.0 → v0.31.0
• golang.org/x/tools: v0.26.0 → v0.38.0
• golang.org/x/xerrors: 5ec99f8 → 9bdfabe
• google.golang.org/genproto/googleapis/rpc: a0af3ef → 200df99
• google.golang.org/grpc: v1.72.1 → v1.72.2
• google.golang.org/protobuf: v1.36.5 → v1.36.8
• gopkg.in/evanphx/json-patch.v4: v4.12.0 → v4.13.0
• k8s.io/api: v0.34.0 → v0.35.0
• k8s.io/apiextensions-apiserver: v0.34.0 → v0.35.0
• k8s.io/apimachinery: v0.34.0 → v0.35.0
• k8s.io/apiserver: v0.34.0 → v0.35.0
• k8s.io/client-go: v0.34.0 → v0.35.0
• k8s.io/code-generator: v0.34.0 → v0.35.0
• k8s.io/component-base: v0.34.0 → v0.35.0
• k8s.io/gengo/v2: 85fd79d → ec3ebc5
• k8s.io/kms: v0.34.0 → v0.35.0
• k8s.io/kube-openapi: f3f2b99 → 589584f
• k8s.io/utils: 4c0f3b2 → bc988d5
• sigs.k8s.io/json: cfa47c3 → 2d32026

Removed

• github.com/kisielk/errcheck: v1.5.0
• github.com/kisielk/gotool: v1.0.0
• gopkg.in/yaml.v2: v2.4.0

New Contributors

• @​haoqixu made their first contribution in #​3306
• @​msudheendra-cflt made their first contribution in #​3327
• @​tbavelier made their first contribution in #​3329
• @​moritzmoe made their first contribution in #​3330
• @​filipcirtog made their first contribution in #​3346
• @​fossedihelm made their first contribution in #​3368
• @​mzhaom made their first contribution in #​3372
• @​tisonkun made their first contribution in #​3375
• @​renormalize made their first contribution in #​3392
• @​brito-rafa made their first contribution in #​3411
• @​GonzaloLuminary made their first contribution in #​3406

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.23.0

Thanks to all our contributors! 😊

v0.22.5

Compare Source

What's Changed

• 🌱 Bump k8s.io/* to v0.34.3 by @​sbueringer in #​3420

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.4...v0.22.5

kubernetes-sigs/controller-tools (sigs.k8s.io/controller-tools)

v0.20.0

Compare Source

What's Changed

• ⚠️ Bump to k8s.io/* v0.35.0 by @​sbueringer in #​1318
• ⚠️ Start from local type declaration when applying schema by @​JoelSpeed in #​1270
• ⚠️ Revert local override breaking behavioural change by @​JoelSpeed in #​1310
• ✨ Allow title to be set on a type by @​cbandy in #​1282
• ✨ crd/marker: add AtLeastOneOf constraint by @​shashankram in #​1278
• ✨ Add k8s:required and k8s:optional markers by @​lalitc375 in #​1247
• ✨ Publish Windows ARM64 controller-gen and envtest binaries by @​bear-redhat in #​1297
• 🐛 Sort manifest webhooks by @​HaraldNordgren in #​1295
• 🐛 Prevent XValidation duplication by verifying if the rule already exists by @​mcbenjemaa in #​1296

Misc

• 🌱 Change sort to slices package by @​dongjiang1989 in #​1299
• 🌱 Use modernize linter by @​HaraldNordgren in #​1300
• 🌱 Update importas in golangci config by @​dongjiang1989 in #​1309
• 🌱 Stop setting invalid formats int32/int64 for integer types by @​sbueringer in #​1274
• 🌱 Revert "Stop setting invalid formats int32/int64 for integer types" by @​sbueringer in #​1275

envtest

• ✨Release envtest v1.34.1 by @​dongjiang1989 in #​1280
• ✨Release envtest v1.35.0-alpha.3 by @​bear-redhat in #​1303
• ✨Release envtest v1.35.0 by @​dongjiang1989 in #​1317
• 🌱 Promotion of envtest release for Kubernetes v1.34.1 by @​sbueringer in #​1285
• 🌱 Promotion of envtest release for Kubernetes v1.35.0-alpha.3 by @​sbueringer in #​1304
• 🌱 Promotion of envtest release for Kubernetes v1.35.0 by @​sbueringer in #​1319

Dependency bumps

• 🌱 Bump to k8s.io/* v0.34.1 by @​dongjiang1989 in #​1279
• 🌱 Bump golang.org/x/tools from 0.37.0 to 0.38.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1291
• 🌱 Bump golang.org/x/tools from 0.38.0 to 0.39.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1307
• 🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 3 updates by @​dependabot[bot] in #​1277
• 🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 3 updates by @​dependabot[bot] in #​1315
• 🌱 Bump the all-go-mod-patch-and-minor group with 2 updates by @​dependabot[bot] in #​1284
• 🌱Update golangci-lint version to v2.4.0 by @​dongjiang1989 in #​1281
• 🌱Update golangci-lint version to v2.5.0 by @​dongjiang1989 in #​1288
• 🌱 Bump softprops/action-gh-release from 2.3.3 to 2.3.4 in the all-github-actions group by @​dependabot[bot] in #​1290
• 🌱 Bump softprops/action-gh-release from 2.3.4 to 2.4.1 in the all-github-actions group by @​dependabot[bot] in #​1292
• 🌱 Bump the all-github-actions group across 1 directory with 5 updates by @​dependabot[bot] in #​1316
• 🌱 Bump the all-github-actions group with 2 updates by @​dependabot[bot] in #​1305
• 🌱 Bump the all-github-actions group with 3 updates by @​dependabot[bot] in #​1276
• 🌱 Bump the all-github-actions group with 4 updates by @​dependabot[bot] in #​1308
• 🌱 Bump tj-actions/changed-files from 46.0.5 to 47.0.0 in the all-github-actions group by @​dependabot[bot] in #​1283

New Contributors

• @​lalitc375 made their first contribution in #​1247
• @​bear-redhat made their first contribution in #​1297
• @​HaraldNordgren made their first contribution in #​1295
• @​mcbenjemaa made their first contribution in #​1296

Full Changelog: kubernetes-sigs/controller-tools@v0.19.0...v0.20.0

---

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
gopkg.in/evanphx/json-patch.v4	v4.12.0 -> v4.13.0
k8s.io/apiserver	v0.34.2 -> v0.35.0
k8s.io/component-base	v0.34.2 -> v0.35.0
sigs.k8s.io/structured-merge-diff/v6	v6.3.0 -> v6.3.2-0.20260122202528-d9cc6641c482
k8s.io/apiextensions-apiserver	v0.34.2 -> v0.35.0
k8s.io/kube-openapi	v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
sigs.k8s.io/json	v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730

[codecov]

Codecov Report

❌ Patch coverage is 72.72727% with 12 lines in your changes missing coverage. Please review.
✅ Project coverage is 67.46%. Comparing base (9f5a2f1) to head (b247fee).
⚠️ Report is 3 commits behind head on main.

Files with missing lines	Patch %	Lines
...webhook/v1alpha2/linodeobjectstoragekey_webhook.go	66.66%	3 Missing ⚠️
...hook/v1alpha2/linodeobjectstoragebucket_webhook.go	60.00%	2 Missing ⚠️
internal/webhook/v1alpha2/linodecluster_webhook.go	83.33%	1 Missing ⚠️
.../webhook/v1alpha2/linodeclustertemplate_webhook.go	0.00%	1 Missing ⚠️
...nternal/webhook/v1alpha2/linodefirewall_webhook.go	80.00%	1 Missing ⚠️
internal/webhook/v1alpha2/linodemachine_webhook.go	83.33%	1 Missing ⚠️
.../webhook/v1alpha2/linodemachinetemplate_webhook.go	0.00%	1 Missing ⚠️
...l/webhook/v1alpha2/linodeplacementgroup_webhook.go	80.00%	1 Missing ⚠️
internal/webhook/v1alpha2/linodevpc_webhook.go	83.33%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #988      +/-   ##
==========================================
+ Coverage   67.03%   67.46%   +0.42%     
==========================================
  Files          71       71              
  Lines        6456     6384      -72     
==========================================
- Hits         4328     4307      -21     
+ Misses       1834     1804      -30     
+ Partials      294      273      -21     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.