Skip to content

fix(deps): update kubernetes dependencies to v0.36.0#2654

Merged
matthiasbruns merged 7 commits into
open-component-model:mainfrom
matthiasbruns:fix/deps-align-kubernetes-dependency-updates
May 29, 2026
Merged

fix(deps): update kubernetes dependencies to v0.36.0#2654
matthiasbruns merged 7 commits into
open-component-model:mainfrom
matthiasbruns:fix/deps-align-kubernetes-dependency-updates

Conversation

@matthiasbruns

@matthiasbruns matthiasbruns commented May 27, 2026

Copy link
Copy Markdown
Contributor

What this PR does / why we need it

Updates the Kubernetes dependency set to v0.36.0, matching the Renovate update from #2632, and includes the required follow-up fixes so the update can pass CI.

This includes:

  • Updating Kubernetes modules and related generated-tool version metadata.
  • Aligning controller-runtime with Kubernetes v0.36.0.
  • Tidying affected module dependency graphs.
  • Fixing event recorder format-string vet failures exposed by the updated dependency/toolchain set.

Which issue(s) this PR fixes

Follow-up/replacement for #2632.

Testing

How to test the changes

Run package-load/compile checks in affected modules:

go test ./... -run ^

Checked in:

  • cli
  • cli/integration
  • bindings/go/helm
  • bindings/go/transfer
  • bindings/go/transfer/integration
  • kubernetes/controller
Verification
  • I have added/updated tests that prove my fix is effective or that my feature works
  • Tests pass locally with my changes
  • If touching multiple modules, go work is enabled (see go.work)
  • My changes do not decrease test coverage
  • I have tested the changes locally by running ocm

Note: controller package compilation was verified with go test ./... -run ^. Full envtest suites require local envtest binaries/examples that are not available in this checkout.

@matthiasbruns matthiasbruns requested a review from a team as a code owner May 27, 2026 09:43
@coderabbitai

coderabbitai Bot commented May 27, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 079a2a49-ede9-40db-8973-91ea45a4b5db

📥 Commits

Reviewing files that changed from the base of the PR and between 8f9d14a and 0da7a1c.

⛔ Files ignored due to path filters (6)
  • bindings/go/helm/go.sum is excluded by !**/*.sum
  • bindings/go/transfer/go.sum is excluded by !**/*.sum
  • bindings/go/transfer/integration/go.sum is excluded by !**/*.sum
  • cli/go.sum is excluded by !**/*.sum
  • cli/integration/go.sum is excluded by !**/*.sum
  • kubernetes/controller/go.sum is excluded by !**/*.sum
📒 Files selected for processing (70)
  • .env
  • bindings/go/blob/filesystem/spec/access/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/configuration/extract/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/filesystem/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/generic/v1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/http/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/ocm/v1/runtime/zz_generated.deepcopy.go
  • bindings/go/configuration/ocm/v1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/ownership/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/resolvers/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/constructor/runtime/zz_generated.deepcopy.go
  • bindings/go/constructor/spec/v1/zz_generated.deepcopy.go
  • bindings/go/credentials/spec/config/runtime/zz_generated.deepcopy.go
  • bindings/go/credentials/spec/config/v1/zz_generated.deepcopy.go
  • bindings/go/descriptor/runtime/zz_generated.deepcopy.go
  • bindings/go/descriptor/v2/zz_generated.deepcopy.go
  • bindings/go/generator/ocmtypegen/test/zz_generated.deepcopy.go
  • bindings/go/gpg/spec/credentials/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/gpg/spec/identity/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/gpg/spec/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/helm/go.mod
  • bindings/go/helm/spec/access/v1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/input/v1/zz_generated.deepcopy.go
  • bindings/go/helm/transformation/spec/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/input/dir/spec/v1/zz_generated.deepcopy.go
  • bindings/go/input/file/spec/v1/zz_generated.deepcopy.go
  • bindings/go/input/utf8/spec/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/access/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/repository/v1/ctf/zz_generated.deepcopy.go
  • bindings/go/oci/spec/repository/v1/oci/zz_generated.deepcopy.go
  • bindings/go/oci/spec/transformation/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/plugin/internal/dummytype/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/blobtransformer/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/componentlister/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/digestprocessor/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/input/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/ocmrepository/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/resource/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/signing/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/types/zz_generated.deepcopy.go
  • bindings/go/rsa/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/rsa/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/rsa/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/runtime/zz_generated.deepcopy.go
  • bindings/go/sigstore/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/credentials/oidcidentitytoken/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/credentials/trustedroot/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/identity/signer/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/identity/verifier/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/transfer/go.mod
  • bindings/go/transfer/integration/go.mod
  • bindings/go/transfer/internal/zz_generated.deepcopy.go
  • bindings/go/transform/graph/internal/testutils/zz_generated.deepcopy.go
  • bindings/go/transform/spec/v1alpha1/meta/zz_generated.deepcopy.go
  • bindings/go/transform/spec/v1alpha1/zz_generated.deepcopy.go
  • cli/go.mod
  • cli/integration/go.mod
  • cli/internal/plugin/spec/config/v2alpha1/zz_generated.deepcopy.go
  • cli/internal/versioncheck/zz_generated.deepcopy.go
  • kubernetes/controller/api/v1alpha1/groupversion_info.go
  • kubernetes/controller/go.mod
  • kubernetes/controller/internal/controller/component/component_controller.go
  • kubernetes/controller/internal/controller/deployer/deployer_controller.go
  • kubernetes/controller/internal/controller/resource/resource_controller.go
  • kubernetes/controller/internal/status/mutate_condition_status.go
✅ Files skipped from review due to trivial changes (59)
  • bindings/go/constructor/spec/v1/zz_generated.deepcopy.go
  • cli/internal/plugin/spec/config/v2alpha1/zz_generated.deepcopy.go
  • bindings/go/gpg/spec/credentials/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/generator/ocmtypegen/test/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/credentials/trustedroot/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/identity/verifier/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/transformation/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/configuration/filesystem/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/digestprocessor/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/sigstore/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/input/utf8/spec/v1/zz_generated.deepcopy.go
  • cli/internal/versioncheck/zz_generated.deepcopy.go
  • bindings/go/configuration/ocm/v1/spec/zz_generated.deepcopy.go
  • bindings/go/descriptor/v2/zz_generated.deepcopy.go
  • bindings/go/gpg/spec/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/gpg/spec/identity/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/transform/spec/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/repository/v1/ctf/zz_generated.deepcopy.go
  • kubernetes/controller/api/v1alpha1/groupversion_info.go
  • bindings/go/helm/spec/input/v1/zz_generated.deepcopy.go
  • bindings/go/transform/spec/v1alpha1/meta/zz_generated.deepcopy.go
  • bindings/go/blob/filesystem/spec/access/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/access/v1/zz_generated.deepcopy.go
  • bindings/go/configuration/generic/v1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/http/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/transfer/internal/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/identity/signer/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/rsa/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/signing/v1/zz_generated.deepcopy.go
  • bindings/go/rsa/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/runtime/zz_generated.deepcopy.go
  • bindings/go/configuration/extract/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/ownership/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/plugin/internal/dummytype/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/resource/v1/zz_generated.deepcopy.go
  • bindings/go/input/dir/spec/v1/zz_generated.deepcopy.go
  • bindings/go/input/file/spec/v1/zz_generated.deepcopy.go
  • bindings/go/descriptor/runtime/zz_generated.deepcopy.go
  • bindings/go/credentials/spec/config/runtime/zz_generated.deepcopy.go
  • kubernetes/controller/internal/controller/component/component_controller.go
  • bindings/go/constructor/runtime/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/types/zz_generated.deepcopy.go
  • bindings/go/credentials/spec/config/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/ocmrepository/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/configuration/resolvers/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/credentials/oidcidentitytoken/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/access/v1/zz_generated.deepcopy.go
  • bindings/go/rsa/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/helm/transformation/spec/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/componentlister/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/repository/v1/oci/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/blobtransformer/v1/zz_generated.deepcopy.go
  • bindings/go/configuration/ocm/v1/runtime/zz_generated.deepcopy.go
  • bindings/go/helm/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/input/v1/zz_generated.deepcopy.go
🚧 Files skipped from review as they are similar to previous changes (10)
  • bindings/go/transform/graph/internal/testutils/zz_generated.deepcopy.go
  • kubernetes/controller/internal/status/mutate_condition_status.go
  • kubernetes/controller/internal/controller/resource/resource_controller.go
  • .env
  • bindings/go/transfer/integration/go.mod
  • cli/integration/go.mod
  • kubernetes/controller/internal/controller/deployer/deployer_controller.go
  • cli/go.mod
  • bindings/go/transfer/go.mod
  • bindings/go/helm/go.mod

📝 Walkthrough

Walkthrough

Bumps DEEPCOPY_GEN_VERSION to v0.36.0 and regenerates autogenerated deepcopy headers; updates multiple Go module dependency blocks (k8s.io/* → v0.36.0, controller-runtime → v0.24.1, Prometheus/protobuf transitive changes); adjusts controller error-event emissions and status event formatting.

Changes

Deepcopy-gen Tool Upgrade and Go Module Dependencies

Layer / File(s) Summary
Deepcopy-gen version upgrade and file regeneration
.env, bindings/go/**/zz_generated.deepcopy.go, cli/**/zz_generated.deepcopy.go, bindings/go/transfer/internal/zz_generated.deepcopy.go
DEEPCOPY_GEN_VERSION bumped to v0.36.0; many autogenerated zz_generated.deepcopy.go files were regenerated. Only generated header comments changed; deepcopy logic and exported signatures are unchanged.
Go module dependency updates (Kubernetes v0.36.0, controller-runtime v0.24.1, transitive changes)
bindings/go/helm/go.mod, bindings/go/transfer/go.mod, bindings/go/transfer/integration/go.mod, cli/go.mod, cli/integration/go.mod, kubernetes/controller/go.mod
Multiple go.mod files update indirect and direct dependencies: k8s.io/* modules moved to v0.36.0, sigs.k8s.io/controller-runtime to v0.24.1; protobuf, Prometheus, and gRPC-related transitive entries adjusted; some indirect deps added (beorn7/perks, cespare/xxhash, fsnotify) and some removed (github.com/google/go-cmp, github.com/gregjones/httpcache, github.com/onsi/ginkgo, github.com/google/pprof).
Kubernetes controller event emission and status formatting
kubernetes/controller/api/v1alpha1/groupversion_info.go, kubernetes/controller/internal/controller/component/component_controller.go, kubernetes/controller/internal/controller/deployer/deployer_controller.go, kubernetes/controller/internal/controller/resource/resource_controller.go, kubernetes/controller/internal/status/mutate_condition_status.go
Controllers now emit event.New(..., "%s", err.Error()) for workerpool.ErrNotSafelyDigestible in reconciler branches; MarkNotReady and MarkAsStalled use "%s", msg formatting for event emission. A //nolint: staticcheck comment was added near SchemeBuilder.

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly Related PRs

Suggested Reviewers

  • frewilhelm
  • jakobmoellerdev
  • morri-son

"I hopped to the repo, nibbling a line,
Bumped deepcopy, headers now shine.
Modules aligned and events now loud,
A rabbit's small cheer for a tidy commit crowd. 🐇"

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The PR title clearly summarizes the main change: updating Kubernetes dependencies to v0.36.0, which is the primary objective of this changeset.
Description check ✅ Passed The PR description is related to the changeset and explains the motivation (matching Renovate update #2632), scope (Kubernetes module updates, controller-runtime alignment, dependency tidying, event recorder fixes), and testing approach.
Linked Issues check ✅ Passed The PR addresses the requirements from #2632: updates k8s.io/* modules from v0.35.x to v0.36.0 [#2632], bumps sigs.k8s.io/controller-runtime to v0.24.1 [#2632], regenerates deepcopy-gen files with v0.36 metadata [#2632], and fixes event recorder format-string vet failures [#2632].
Out of Scope Changes check ✅ Passed All changes align with the stated objectives: updating Kubernetes dependencies and related generated metadata, tidying module graphs, and fixing vet failures. The nolint comment addition is a necessary follow-up to dependency updates, not out of scope.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions Bot added kind/bugfix Bug kind/dependency dependency update, etc. size/m Medium labels May 27, 2026
@matthiasbruns matthiasbruns marked this pull request as draft May 27, 2026 09:47
@matthiasbruns matthiasbruns changed the title fix(deps): align kubernetes dependency updates fix(deps): update kubernetes dependencies to v0.36.0 May 27, 2026
@matthiasbruns matthiasbruns changed the base branch from renovate/kubernetes-deps to main May 27, 2026 10:16
@github-actions github-actions Bot added size/l Large and removed size/m Medium labels May 27, 2026
@matthiasbruns matthiasbruns marked this pull request as ready for review May 27, 2026 10:53

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
kubernetes/controller/go.mod (1)

7-7: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Verify opencontainers/go-digest replace directive target (acc66fb5367c)

acc66fb5367c matches the published pseudo-version for the github.com/opencontainers/go-digest/blake3 module (v0.0.0-20260423074420-acc66fb5367c), so the referenced revision appears reachable in upstream.
Couldn’t find a direct source tying that exact revision to PR #66; link the PR/merge evidence (or adjust the comment to remove the PR #66 linkage).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@kubernetes/controller/go.mod` at line 7, The replace directive "replace
github.com/opencontainers/go-digest => github.com/opencontainers/go-digest
v1.0.1-0.20260423074420-acc66fb5367c" references a specific revision but the
review comment ties it to PR `#66` without evidence; either add a verification
link (commit/PR/merge URL proving that acc66fb5367c corresponds to PR `#66`) next
to the replace directive or remove/adjust the PR `#66` mention in the comment so
it only states the pseudo-version and that the revision is reachable upstream.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Outside diff comments:
In `@kubernetes/controller/go.mod`:
- Line 7: The replace directive "replace github.com/opencontainers/go-digest =>
github.com/opencontainers/go-digest v1.0.1-0.20260423074420-acc66fb5367c"
references a specific revision but the review comment ties it to PR `#66` without
evidence; either add a verification link (commit/PR/merge URL proving that
acc66fb5367c corresponds to PR `#66`) next to the replace directive or
remove/adjust the PR `#66` mention in the comment so it only states the
pseudo-version and that the revision is reachable upstream.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 15f77049-11df-4e6e-9eee-f59baa5b72c2

📥 Commits

Reviewing files that changed from the base of the PR and between b4bb4e8 and 5482eac.

⛔ Files ignored due to path filters (6)
  • bindings/go/helm/go.sum is excluded by !**/*.sum
  • bindings/go/transfer/go.sum is excluded by !**/*.sum
  • bindings/go/transfer/integration/go.sum is excluded by !**/*.sum
  • cli/go.sum is excluded by !**/*.sum
  • cli/integration/go.sum is excluded by !**/*.sum
  • kubernetes/controller/go.sum is excluded by !**/*.sum
📒 Files selected for processing (66)
  • .env
  • bindings/go/blob/filesystem/spec/access/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/configuration/extract/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/filesystem/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/generic/v1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/http/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/ocm/v1/runtime/zz_generated.deepcopy.go
  • bindings/go/configuration/ocm/v1/spec/zz_generated.deepcopy.go
  • bindings/go/configuration/resolvers/v1alpha1/spec/zz_generated.deepcopy.go
  • bindings/go/constructor/runtime/zz_generated.deepcopy.go
  • bindings/go/constructor/spec/v1/zz_generated.deepcopy.go
  • bindings/go/credentials/spec/config/runtime/zz_generated.deepcopy.go
  • bindings/go/credentials/spec/config/v1/zz_generated.deepcopy.go
  • bindings/go/descriptor/runtime/zz_generated.deepcopy.go
  • bindings/go/descriptor/v2/zz_generated.deepcopy.go
  • bindings/go/generator/ocmtypegen/test/zz_generated.deepcopy.go
  • bindings/go/helm/go.mod
  • bindings/go/helm/spec/access/v1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/helm/spec/input/v1/zz_generated.deepcopy.go
  • bindings/go/helm/transformation/spec/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/input/dir/spec/v1/zz_generated.deepcopy.go
  • bindings/go/input/file/spec/v1/zz_generated.deepcopy.go
  • bindings/go/input/utf8/spec/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/access/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/oci/spec/repository/v1/ctf/zz_generated.deepcopy.go
  • bindings/go/oci/spec/repository/v1/oci/zz_generated.deepcopy.go
  • bindings/go/oci/spec/transformation/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/plugin/internal/dummytype/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/blobtransformer/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/componentlister/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/digestprocessor/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/input/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/ocmrepository/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/resource/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/contracts/signing/v1/zz_generated.deepcopy.go
  • bindings/go/plugin/manager/types/zz_generated.deepcopy.go
  • bindings/go/rsa/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/rsa/spec/credentials/v1/zz_generated.deepcopy.go
  • bindings/go/rsa/spec/identity/v1/zz_generated.deepcopy.go
  • bindings/go/runtime/zz_generated.deepcopy.go
  • bindings/go/sigstore/signing/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/credentials/oidcidentitytoken/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/credentials/trustedroot/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/identity/signer/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/sigstore/spec/identity/verifier/v1alpha1/zz_generated.deepcopy.go
  • bindings/go/transfer/go.mod
  • bindings/go/transfer/integration/go.mod
  • bindings/go/transfer/internal/zz_generated.deepcopy.go
  • bindings/go/transform/graph/internal/testutils/zz_generated.deepcopy.go
  • bindings/go/transform/spec/v1alpha1/meta/zz_generated.deepcopy.go
  • bindings/go/transform/spec/v1alpha1/zz_generated.deepcopy.go
  • cli/go.mod
  • cli/integration/go.mod
  • cli/internal/plugin/spec/config/v2alpha1/zz_generated.deepcopy.go
  • cli/internal/versioncheck/zz_generated.deepcopy.go
  • kubernetes/controller/api/v1alpha1/groupversion_info.go
  • kubernetes/controller/go.mod
  • kubernetes/controller/internal/controller/component/component_controller.go
  • kubernetes/controller/internal/controller/deployer/deployer_controller.go
  • kubernetes/controller/internal/controller/resource/resource_controller.go
  • kubernetes/controller/internal/status/mutate_condition_status.go

@netlify

netlify Bot commented May 27, 2026

Copy link
Copy Markdown

Deploy Preview for ocm-website ready!

Name Link
🔨 Latest commit 0da7a1c
🔍 Latest deploy log https://app.netlify.com/projects/ocm-website/deploys/6a1975503543d20008505169
😎 Deploy Preview https://deploy-preview-2654--ocm-website.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

frewilhelm
frewilhelm previously approved these changes May 28, 2026
@matthiasbruns matthiasbruns enabled auto-merge (squash) May 28, 2026 10:30
@coderabbitai

coderabbitai Bot commented May 28, 2026

Copy link
Copy Markdown
Contributor

Actionable comments posted: 0

ocmbot Bot and others added 3 commits May 29, 2026 09:15
Signed-off-by: Matthias Bruns <git@matthiasbruns.com>
On-behalf-of: SAP <matthias.bruns@sap.com>
Signed-off-by: Matthias Bruns <git@matthiasbruns.com>
@matthiasbruns matthiasbruns force-pushed the fix/deps-align-kubernetes-dependency-updates branch from 8f9d14a to 26f27fd Compare May 29, 2026 07:15
On-behalf-of: SAP <matthias.bruns@sap.com>
Signed-off-by: Matthias Bruns <git@matthiasbruns.com>
@matthiasbruns matthiasbruns dismissed stale reviews from jakobmoellerdev and frewilhelm via 10fe102 May 29, 2026 07:18
@matthiasbruns matthiasbruns requested a review from frewilhelm May 29, 2026 09:08
@matthiasbruns matthiasbruns merged commit bddbabd into open-component-model:main May 29, 2026
152 of 161 checks passed
skarlso-release-bot Bot pushed a commit to Skarlso/open-component-model that referenced this pull request May 29, 2026
…model#2654)

#### What this PR does / why we need it

Updates the Kubernetes dependency set to v0.36.0, matching the Renovate
update from open-component-model#2632, and includes the required follow-up fixes so the
update can pass CI.

This includes:
- Updating Kubernetes modules and related generated-tool version
metadata.
- Aligning controller-runtime with Kubernetes v0.36.0.
- Tidying affected module dependency graphs.
- Fixing event recorder format-string vet failures exposed by the
updated dependency/toolchain set.

#### Which issue(s) this PR fixes

Follow-up/replacement for open-component-model#2632.

#### Testing

##### How to test the changes

Run package-load/compile checks in affected modules:

```bash
go test ./... -run ^
```

Checked in:
- `cli`
- `cli/integration`
- `bindings/go/helm`
- `bindings/go/transfer`
- `bindings/go/transfer/integration`
- `kubernetes/controller`

##### Verification

- [ ] I have added/updated tests that prove my fix is effective or that
my feature works
- [x] Tests pass locally with my changes
- [ ] If touching multiple modules, `go work` is enabled (see `go.work`)
- [x] My changes do not decrease test coverage
- [ ] I have tested the changes locally by running `ocm`

Note: controller package compilation was verified with `go test ./...
-run ^`. Full envtest suites require local envtest binaries/examples
that are not available in this checkout.

---------

Signed-off-by: Matthias Bruns <git@matthiasbruns.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com> bddbabd
ocmbot Bot pushed a commit that referenced this pull request May 29, 2026
#### What this PR does / why we need it

Updates the Kubernetes dependency set to v0.36.0, matching the Renovate
update from #2632, and includes the required follow-up fixes so the
update can pass CI.

This includes:
- Updating Kubernetes modules and related generated-tool version
metadata.
- Aligning controller-runtime with Kubernetes v0.36.0.
- Tidying affected module dependency graphs.
- Fixing event recorder format-string vet failures exposed by the
updated dependency/toolchain set.

#### Which issue(s) this PR fixes

Follow-up/replacement for #2632.

#### Testing

##### How to test the changes

Run package-load/compile checks in affected modules:

```bash
go test ./... -run ^
```

Checked in:
- `cli`
- `cli/integration`
- `bindings/go/helm`
- `bindings/go/transfer`
- `bindings/go/transfer/integration`
- `kubernetes/controller`

##### Verification

- [ ] I have added/updated tests that prove my fix is effective or that
my feature works
- [x] Tests pass locally with my changes
- [ ] If touching multiple modules, `go work` is enabled (see `go.work`)
- [x] My changes do not decrease test coverage
- [ ] I have tested the changes locally by running `ocm`

Note: controller package compilation was verified with `go test ./...
-run ^`. Full envtest suites require local envtest binaries/examples
that are not available in this checkout.

---------

Signed-off-by: Matthias Bruns <git@matthiasbruns.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com> bddbabd
@matthiasbruns matthiasbruns deleted the fix/deps-align-kubernetes-dependency-updates branch June 1, 2026 11:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bugfix Bug kind/dependency dependency update, etc. size/l Large

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants