Bump k8s.io/apimachinery from 0.27.1 to 0.35.2#319
Bump k8s.io/apimachinery from 0.27.1 to 0.35.2#319dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.27.1 to 0.35.2. - [Commits](kubernetes/apimachinery@v0.27.1...v0.35.2) --- updated-dependencies: - dependency-name: k8s.io/apimachinery dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
dependabot
bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Free Tier Details
Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.
To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| k8s.io/api v0.27.1 | ||
| k8s.io/apiextensions-apiserver v0.27.1 | ||
| k8s.io/apimachinery v0.27.1 | ||
| k8s.io/apimachinery v0.35.2 |
There was a problem hiding this comment.
Incompatible k8s.io package version skew breaks compatibility
High Severity
k8s.io/apimachinery is bumped to v0.35.2 while k8s.io/api, k8s.io/client-go, and k8s.io/apiextensions-apiserver remain at v0.27.1. These Kubernetes Go modules are released in lockstep and designed to be used at matching versions. An 8-minor-version skew will almost certainly cause compilation failures or runtime incompatibilities, as Go's MVS will force the older packages to build against the much newer apimachinery, which was never tested with them. sigs.k8s.io/controller-runtime v0.14.6 is also designed for the 0.27 era.
Additional Locations (1)
Triggered by project rule: Gemini Project Review Guidelines
Bumps k8s.io/apimachinery from 0.27.1 to 0.35.2.
Commits
72d71eaMerge remote-tracking branch 'origin/master' into release-1.35e2a2dbcBump golang.org/x/crypto to v0.45.02e9c228Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fixf274aacvendor: update vendor and license metadata after replacing BeTrue usage in cs...9445443Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...52154f7Update vendored dependencies5a348c5KEP-5471: Extend tolerations operators (#134665)6f89492Merge pull request #133648 from richabanker/merged-discoveryc77dde2util/sort: Add MergePreservingRelativeOrder for topological sorting729c13dMerge pull request #134624 from yt2985/podcertificates-betaDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
High Risk
High risk because it upgrades a core Kubernetes dependency (
k8s.io/apimachinery) across several major/minor versions while otherk8s.io/*modules remain pinned, and it also bumps the project Go version to1.25.0, which can affect build/tooling compatibility.Overview
Updates the module to target Go
1.25.0and upgradesk8s.io/apimachineryfromv0.27.1tov0.35.2.As part of the upgrade, this refreshes a large set of direct and transitive dependencies (notably
k8s.io/klog/v2,golang.org/x/*,google.golang.org/protobuf, and severalsigs.k8s.io/*libs) and regeneratesgo.sumaccordingly.Written by Cursor Bugbot for commit b3fd604. This will update automatically on new commits. Configure here.