dependabot[bot]
39d6506d85
build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.45.0 to 0.47.0.
- [Commits](https://github.com/golang/sys/compare/v0.45.0...v0.47.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-04 01:59:36 +00:00
kubernetes-prow[bot]
8c9719bb22
Merge pull request #6246 from koba1t/fix/dependabot-go-workspace-root
...
configure Dependabot for the Go workspace
2026-09-04 01:54:19 +00:00
Yugo Kobayashi
5c240a1d0a
configure Dependabot for the Go workspace
2026-09-03 22:34:56 +09:00
kubernetes-prow[bot]
0c85ead867
Merge pull request #6244 from kubernetes-sigs/dependabot/go_modules/hack/google.golang.org/grpc-1.83.1
...
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /hack
2026-09-03 11:38:17 +00:00
dependabot[bot]
f509176c32
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /hack
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.82.1 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.1...v1.83.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.83.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-02 08:20:41 +00:00
yugo kobayashi
a87baa5639
sync Go workspace for Dependabot updates ( #6240 )
...
* ci: sync Go workspace for Dependabot updates
* ci: preserve Dependabot automatic rebases
* build: monitor all Go modules with Dependabot
2026-09-01 11:42:12 +00:00
kubernetes-prow[bot]
c44f66d54f
Merge pull request #6239 from superbrothers/feat/image-volume-cronjob
...
fix: add CronJob Image Volume support to images transformer
2026-08-31 04:00:11 +00:00
Kazuki Suda
12135e1563
fix: add CronJob Image Volume support to images transformer
...
The default images field spec covers spec/volumes[]/image/reference
under Pod and PodTemplateSpec, but CronJob's Image Volume under
spec/jobTemplate/spec/template/spec was missing from the list. This
adds the missing path.
2026-08-29 18:53:27 +09:00
kubernetes-prow[bot]
3fd96a0bfb
Merge pull request #6236 from koba1t/chore/bump_stretchr_testify_to_remove_old_dependencies
...
chore: bump stretch/testify pkg to remove old yaml dependencies
2026-08-24 18:57:01 +00:00
kubernetes-prow[bot]
12f9e63914
Merge pull request #6235 from kubernetes-sigs/revert-6223-codex/fix-integer-key-json
...
Revert "fix: support integer keys when marshaling resources to JSON"
2026-08-20 16:59:14 +00:00
kubernetes-prow[bot]
cf33ea71bf
Merge pull request #6229 from kubernetes-sigs/dependabot/go_modules/hack/software.sslmate.com/src/go-pkcs12-0.7.2
...
build(deps): bump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.2 in /hack
2026-08-20 00:13:10 +00:00
Yugo Kobayashi
84168ddd1b
chore: bump stretch/testify pkg to remove old yaml dependencies
2026-08-20 09:04:11 +09:00
yugo kobayashi
35875a0b55
Revert "fix: support integer keys when marshaling resources to JSON"
2026-08-20 08:52:50 +09:00
dependabot[bot]
e16545fb29
build(deps): bump software.sslmate.com/src/go-pkcs12 in /hack
...
Bumps software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.2.
---
updated-dependencies:
- dependency-name: software.sslmate.com/src/go-pkcs12
dependency-version: 0.7.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-17 22:55:35 +00:00
kubernetes-prow[bot]
db6d67b043
Merge pull request #6223 from iahsanGill/codex/fix-integer-key-json
...
fix: support integer keys when marshaling resources to JSON
2026-08-17 17:54:55 +00:00
kubernetes-prow[bot]
7565ccab0b
Merge pull request #6222 from kubernetes-sigs/dependabot/github_actions/dorny/paths-filter-4.0.3
...
build(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3
2026-08-12 21:33:35 +00:00
iahsanGill
cd2fd71797
fix: support integer keys when marshaling JSON
2026-08-13 01:36:17 +05:00
iahsanGill
1df43a9735
test: reproduce integer key marshal failure
2026-08-13 01:29:37 +05:00
dependabot[bot]
a4e5a1a23d
build(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3
...
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter ) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/dorny/paths-filter/releases )
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md )
- [Commits](7b450fff21...ceb8a2b8f2support@github.com >
2026-08-10 00:42:44 +00:00
kubernetes-prow[bot]
0fd1ae0ce9
Merge pull request #6190 from koba1t/agent/openapi-artifact-compiler
...
chore: refactor read scheme to openapi from kubernetes api definition
2026-08-03 01:55:25 +00:00
koba1t
9216c6f573
chore: refactor read scheme to openapi from kubernetes api definition
...
Previously, only a single embedded Kubernetes API version could be specified, resulting in a lack of support for certain GVKs.
To address this, the goal is to create and utilize a unified scheme that consolidates Kubernetes API definitions.
As a preliminary step, the current method of loading API definitions will be improved.
2026-08-02 22:39:33 +09:00
kubernetes-prow[bot]
3a4f8c5337
Merge pull request #6193 from kubernetes-sigs/dependabot/github_actions/actions/setup-go-7.0.0
...
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
2026-07-27 09:25:58 +00:00
kubernetes-prow[bot]
1dfeee4a1f
Merge pull request #6203 from kubernetes-sigs/dependabot/npm_and_yarn/site/postcss-8.5.23
...
build(deps-dev): bump postcss from 8.4.31 to 8.5.23 in /site
2026-07-27 09:20:00 +00:00
kubernetes-prow[bot]
caa78f7419
Merge pull request #6199 from kubernetes-sigs/dependabot/go_modules/hack/google.golang.org/grpc-1.82.1
...
build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in /hack
2026-07-27 07:31:57 +00:00
dependabot[bot]
b7591e5efc
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](924ae3a1cd...b7ad1dad31support@github.com >
2026-07-27 07:25:45 +00:00
dependabot[bot]
9ab73fbc4f
build(deps-dev): bump postcss from 8.4.31 to 8.5.23 in /site
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.4.31 to 8.5.23.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.4.31...8.5.23 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.23
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-27 07:25:07 +00:00
kubernetes-prow[bot]
32a30dee8c
Merge pull request #6202 from kubernetes-sigs/dependabot/github_actions/actions/checkout-7.0.1
...
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
2026-07-27 07:23:56 +00:00
dependabot[bot]
5db144fd72
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](9c091bb21b...3d3c42e5aasupport@github.com >
2026-07-27 00:42:30 +00:00
dependabot[bot]
f4b15c8c78
build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in /hack
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.80.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.82.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.82.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-25 06:18:20 +00:00
kubernetes-prow[bot]
f7d33c2610
Merge pull request #6164 from EdwardCooke/minifiedreleasejson
...
fix: occasional minified JSON from GitHub release API
2026-07-16 11:51:22 +00:00
Edward Cooke
f602af3858
Remove --short
2026-07-15 21:41:25 -06:00
Edward Cooke
a315a01185
Added test to install_kustomize to verify that minified releases work
2026-07-15 21:41:25 -06:00
Edward Cooke
f8488f94e6
Fix for the occasional minified JSON from GitHub release API
2026-07-15 21:41:25 -06:00
kubernetes-prow[bot]
f36fdc77d3
Merge pull request #6184 from arpitjain099/fix/image-match-invalid-regex
...
fix: do not panic on an invalid image name regexp
2026-07-15 18:51:24 +00:00
yugo kobayashi
79bb1aa2b2
update vuln dependencies at 2026/07 ( #6187 )
...
* update dependencies
* sync modules
2026-07-12 03:19:46 +00:00
kubernetes-prow[bot]
d3e1f975d8
Merge pull request #6181 from kubernetes-sigs/dependabot/github_actions/dorny/paths-filter-4.0.2
...
build(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2
2026-07-11 14:05:44 +00:00
kubernetes-prow[bot]
f39f952d6d
Merge pull request #6186 from koba1t/bump/go_v1.26.5
...
bump/go v1.26.5
2026-07-11 00:25:45 +00:00
koba1t
9bd009f427
fix: format mismatch
2026-07-11 07:42:00 +09:00
koba1t
81991821f6
bump: go v1.26.5
2026-07-11 07:42:00 +09:00
Arpit Jain
d32ba3f38c
fix: do not panic on an invalid image name regexp
...
IsImageMatched interpolates the image name from kustomization images[].name
straight into a regexp and discarded the compile error. When the name is not
a valid regexp (for example "["), regexp.Compile returns a nil *Regexp and
the following MatchString call dereferences it, so kustomize build crashes with
a SIGSEGV.
Capture the compile error and return false when it is set. A name that can't
compile matches no image, which leaves the resource untouched (the same result
you get for any name that doesn't match). Adds a unit test for the invalid name
and a krusty end-to-end case that builds without panicking.
Signed-off-by: Arpit Jain <arpitjain099@gmail.com >
2026-07-11 05:50:05 +09:00
dependabot[bot]
f0abbe7735
build(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2
...
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter ) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/dorny/paths-filter/releases )
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md )
- [Commits](fbd0ab8f3e...7b450fff21support@github.com >
2026-07-06 00:42:40 +00:00
kubernetes-prow[bot]
ecf3669e96
Merge pull request #6177 from kubernetes-sigs/dependabot/github_actions/actions/setup-go-6.5.0
...
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
2026-06-29 01:05:04 +00:00
dependabot[bot]
f5c0b73ea8
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4a3601121d...924ae3a1cdsupport@github.com >
2026-06-29 00:42:26 +00:00
kubernetes-prow[bot]
a1f24af332
Merge pull request #6056 from HarshithaMS005/fix-vap-namespace-scope
...
kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped
2026-06-28 08:19:03 +00:00
kubernetes-prow[bot]
64ef0cb297
Merge pull request #6170 from kubernetes-sigs/dependabot/github_actions/actions/checkout-7.0.0
...
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
2026-06-27 17:59:01 +00:00
Harshitha MS
fcef996b14
kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped
...
Signed-off-by: Harshitha MS <harshitha.ms@ibm.com >
2026-06-22 18:55:53 +05:30
dependabot[bot]
846f27fffd
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...9c091bb21bsupport@github.com >
2026-06-22 00:42:23 +00:00
SEONGHYUN HONG
9f89960cf2
fix: match image digests with any algorithm, not only sha256 ( #6167 )
...
* fix: match image digests with any algorithm, not only sha256
IsImageMatched hard-coded '@sha256:' in its regex, while Split accepts any
digest algorithm. An image pinned with a non-sha256 digest (e.g.
nginx@sha512:...) was not matched, so the ImageTagTransformer silently left
it unchanged and the user's images: override was ignored. Generalize the
digest algorithm in the regex to match what Split accepts.
Signed-off-by: Seonghyun Hong <s3onghyun.hong@gmail.com >
* Address review: match OCI digest grammar and test spec example algorithms
Broaden the digest-algorithm match to the OCI grammar (algorithm components
separated by +._-), so multihash+base58 and other registered/unregistered
algorithms match, not just [a-zA-Z][a-zA-Z0-9]*. Add test cases using the
descriptor example algorithms: a full-length sha512 digest and
multihash+base58.
Signed-off-by: Seonghyun Hong <s3onghyun.hong@gmail.com >
---------
Signed-off-by: Seonghyun Hong <s3onghyun.hong@gmail.com >
2026-06-20 15:25:40 +05:30
Kubernetes Prow Robot
313aacedd3
Merge pull request #6138 from dims/update-kube-openapi
...
bump k8s.io/kube-openapi, drop github.com/mailru/easyjson
2026-05-02 21:33:24 +05:30
Davanum Srinivas
9a61304919
bump k8s.io/kube-openapi, drop github.com/mailru/easyjson
...
Updates k8s.io/kube-openapi from v0.0.0-20241212222426-2c72e554b1e7 to
v0.0.0-20260502001324-b7f5293f4787 across api, kyaml, and kustomize modules,
then propagates the change across all workspace modules via make workspace-sync.
The new kube-openapi release switched from the monolithic go-openapi/swag
(v0.23.0) to the refactored split sub-modules (go-openapi/swag/* v0.25.4).
The old swag carried github.com/mailru/easyjson as a dependency; the new
sub-modules do not. After go mod tidy, easyjson and josharian/intern are
fully removed from all three module graphs.
Also upgraded: github.com/google/gnostic-models v0.6.9 → v0.7.0 (pulled
in by the same kube-openapi update).
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2026-05-02 10:47:24 -04:00
