Skip to content

build(deps): bump the kubernetes group with 3 updates - #312

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/kubernetes-2fb6fc394a
Closed

build(deps): bump the kubernetes group with 3 updates#312
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/kubernetes-2fb6fc394a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the kubernetes group with 3 updates: k8s.io/apiextensions-apiserver, k8s.io/apimachinery and k8s.io/client-go.

Updates k8s.io/apiextensions-apiserver from 0.36.4 to 0.37.0

Commits
  • 78b5577 Update dependencies to v0.37.0 tag
  • 29d19cf Fix unit test compile failure under the fieldsv1string build tag
  • 1aa2717 Merge pull request #140205 from pohly/cel-deps
  • b51744f dependencies: cel-go v0.29.2
  • f416935 Merge pull request #140782 from dims/update-kube-openapi
  • 19c0db2 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 8ed17b6 Merge pull request #140774 from dims/prom-client-v1.24.0
  • 48a6e2f Update prometheus/client_golang to 1.24.0
  • e7c1b62 Merge pull request #139821 from pohly/client-go-informers-type-safety
  • e86edad Merge pull request #140740 from dims/update-grpc-1.82.1
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.36.4 to 0.37.0

Commits
  • 7164e39 Update dependencies to v0.37.0 tag
  • e55f9ba feat(api): Update node restriction admission to use new API
  • cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
  • 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
  • f21afab Add validation for camelcase in reason field
  • d7ad413 Merge pull request #140782 from dims/update-kube-openapi
  • e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
  • 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
  • 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
  • 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.4 to 0.37.0

Commits
  • 2807644 Update dependencies to v0.37.0 tag
  • 50c6f9b metrics: Register: Fix incorrect assignment
  • 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
  • 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
  • 2bf14f2 Merge pull request #140990 from xigang/revert-140448
  • 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
  • df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
  • 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
  • 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
  • 694f4eb apidiff: ignore adding entirely new API groups
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the kubernetes group with 3 updates: [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/client-go](https://github.com/kubernetes/client-go).


Updates `k8s.io/apiextensions-apiserver` from 0.36.4 to 0.37.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.36.4...v0.37.0)

Updates `k8s.io/apimachinery` from 0.36.4 to 0.37.0
- [Commits](kubernetes/apimachinery@v0.36.4...v0.37.0)

Updates `k8s.io/client-go` from 0.36.4 to 0.37.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.4...v0.37.0)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: kubernetes
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 7, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 7, 2026
@copy-pr-bot

copy-pr-bot Bot commented Sep 7, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@lalitadithya

Copy link
Copy Markdown
Collaborator

/ok to test f1356a6

@ndipebot

ndipebot commented Sep 8, 2026

Copy link
Copy Markdown
Collaborator

Closing: this cannot be made green, and the block is upstream.

Kubernetes 1.37 removed the unused corev1.PodStatusResult type (kubernetes/kubernetes#136271 — no REST endpoint, unused since 2015). github.com/kubeflow/trainer/v2 still references it from pkg/apis/trainer/v1alpha1/zz_generated.openapi.go, and we import that package from api/v1alpha1/job_types.go, so the module stops type-checking:

zz_generated.openapi.go:279:10: undefined: corev1.PodStatusResult

That single error is what fails Lint, Build, Test, CodeQL, govulncheck, Verify and UAT here. This PR does not bump k8s.io/api directly, but client-go v0.37.0 requires it.

There is no version to upgrade to: trainer v2.2.1 and v2.3.0 both still reference the type, and trainer master is still on k8s.io/api v0.36.4. The bump is open in kubeflow/trainer#4005, blocked on kubeflow/trainer#4006.

#315 holds the kubernetes group at 0.36.x so this does not get re-raised every Monday. It is scoped to minor and major, so 0.36.x patch updates keep flowing. When kubeflow/trainer#4005 lands and a release follows, we bump trainer and drop the hold in the same PR.

@ndipebot ndipebot closed this Sep 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/kubernetes-2fb6fc394a branch September 8, 2026 15:17
ndipebot added a commit that referenced this pull request Sep 8, 2026
Kubernetes 1.37 removed the unused corev1.PodStatusResult type
(kubernetes/kubernetes#136271). github.com/kubeflow/trainer/v2 still
references it from its generated openapi, and we import that package
from api/v1alpha1/job_types.go, so the bump in #312 fails to type-check
and takes Lint, Build, Test, CodeQL, govulncheck, Verify and UAT down
with the same error.

Nothing in our graph wants 0.37; only Dependabot proposes it. Trainer
master is still on k8s v0.36.4 and its bump is open in
kubeflow/trainer#4005, blocked on kubeflow/trainer#4006. Without this
hold Dependabot re-raises the same red PR every Monday.

Scoped to minor and major so 0.36.x patch updates keep flowing, and
limited to the modules that move with the Kubernetes minor so that
klog, kube-openapi, utils and the independently versioned sigs.k8s.io
modules are not frozen by accident.

Signed-off-by: Ebot Ndip-Agbor <endipagbor@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants