fix(go.mod/go.sum): update minor dependencies (golang)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
k8s.io/apiextensions-apiserver	v0.35.1 → v0.36.3
k8s.io/apimachinery	v0.35.1 → v0.36.3
k8s.io/client-go	v0.35.1 → v0.36.3
k8s.io/code-generator	v0.35.1 → v0.36.3
k8s.io/kube-aggregator	v0.35.1 → v0.36.3
sigs.k8s.io/controller-runtime	v0.23.3 → v0.24.1
sigs.k8s.io/controller-runtime/tools/setup-envtest	v0.0.0-20260131020224-aba4afecb038 → v0.24.1
sigs.k8s.io/controller-tools	v0.20.1 → v0.21.0

---

Release Notes

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.7

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.7

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.7

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/code-generator (k8s.io/code-generator)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.7

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/kube-aggregator (k8s.io/kube-aggregator)

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.7

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.24.1

Compare Source

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in #​3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

Compare Source

⚠️ Breaking Changes

• Dependencies: Update to k8s.io/* v1.36 (#​3506 #​3462 #​3486 #​3450)

🐛 Bug Fixes

• Cache: Fix IndexField blocking until informer is synced (#​3445)
• Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#​3425)
• Client: Update typed ApplyConfigurations with server response (#​3475)
• Fakeclient: Fix SSA status patch resource version check (#​3443)
• Fakeclient: Fix panic when using CRs with embedded pointer structs (#​3431)
• Fakeclient: Fix status apply if existing object has managedFields set (#​3430)
• Fakeclient: Retry GenerateName on AlreadyExists collisions (#​3498)
• HTTP servers: Wire up base context into http servers (#​3452)

🌱 Others

• Builder/Webhooks: Remove deprecated custom path function (#​3465)
• Cache: Test cache reader waits for cache sync (#​3434)
• Certwatcher: Deflake certwatcher tests (#​3457)
• Dependencies: Use forked version of btree (#​3449)
• Envtest: Ensure envtest stops the whole process group (#​3447)
• Logging: Add missing space in zap-log-level flag description (#​3492)
• Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#​3489)
• Owners: Cleanup (#​3453)
• Recorder: Add logger into context for structured logging (#​3454)
• Recorder: Switch to StartLogging for event debug logs (#​3451)
• Scheme: Deprecate the scheme builder (#​3461)
• Source/Kind: Improve logging for dynamic type kind source (#​3494)
• Webhooks: Reduce memory usage of default webhooks (#​3463 #​3468)

🌱 CI & linters

• Chore: Update golangci-lint version to v2.8.0 (#​3448)
• Chore: Update golangci-lint version to v2.10.1 (#​3470)
• Chore: Update golangci-lint version to v2.11.3 (#​3482)
• Migrate away from custom GitHub action approval workflow (#​3491)
• Release: Auto-create git tags for the tools/setup-envtest submodule (#​3476)

📖 Additionally, there has been 1 contribution to our documentation. (#​3477)

Dependencies

Added

• github.com/cenkalti/backoff/v5: v5.0.3
• gonum.org/v1/gonum: v0.16.0
• k8s.io/streaming: v0.36.0

Changed

• cel.dev/expr: v0.24.0 → v0.25.1
• cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.30.0
• github.com/alecthomas/units: b94a6e3 → 0f3dac3
• github.com/cncf/xds/go: 2f00578 → ee656c7
• github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
• github.com/coreos/go-systemd/v22: v22.5.0 → v22.7.0
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/emicklei/go-restful/v3: v3.12.2 → v3.13.0
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
• github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
• github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
• github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/golang/glog: v1.2.4 → v1.2.5
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.7
• github.com/moby/spdystream: v0.5.0 → v0.5.1
• github.com/onsi/ginkgo/v2: v2.27.2 → v2.27.4
• github.com/onsi/gomega: v1.38.2 → v1.39.0
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/common: v0.66.1 → v0.67.5
• github.com/prometheus/procfs: v0.16.1 → v0.19.2
• github.com/spf13/cobra: v1.10.0 → v1.10.2
• github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
• go.etcd.io/etcd/api/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/client/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/client/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
• go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 → v0.65.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0
• go.opentelemetry.io/otel/metric: v1.36.0 → v1.41.0
• go.opentelemetry.io/otel/sdk/metric: v1.36.0 → v1.40.0
• go.opentelemetry.io/otel/sdk: v1.36.0 → v1.40.0
• go.opentelemetry.io/otel/trace: v1.36.0 → v1.41.0
• go.opentelemetry.io/otel: v1.36.0 → v1.41.0
• go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
• go.uber.org/zap: v1.27.0 → v1.27.1
• golang.org/x/crypto: v0.45.0 → v0.47.0
• golang.org/x/exp: 8a7402a → 944ab1f
• golang.org/x/mod: v0.29.0 → v0.32.0
• golang.org/x/net: v0.47.0 → v0.49.0
• golang.org/x/oauth2: v0.30.0 → v0.34.0
• golang.org/x/sync: v0.18.0 → v0.19.0
• golang.org/x/sys: v0.38.0 → v0.40.0
• golang.org/x/telemetry: 078029d → bd525da
• golang.org/x/term: v0.37.0 → v0.39.0
• golang.org/x/text: v0.31.0 → v0.33.0
• golang.org/x/time: v0.9.0 → v0.14.0
• golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated
• golang.org/x/tools: v0.38.0 → v0.41.0
• google.golang.org/genproto/googleapis/api: a0af3ef → 8636f87
• google.golang.org/genproto/googleapis/rpc: 200df99 → 8636f87
• google.golang.org/grpc: v1.72.2 → v1.79.3
• google.golang.org/protobuf: v1.36.8 → f2248ac
• k8s.io/api: v0.35.0 → v0.36.0
• k8s.io/apiextensions-apiserver: v0.35.0 → v0.36.0
• k8s.io/apimachinery: v0.35.0 → v0.36.0
• k8s.io/apiserver: v0.35.0 → v0.36.0
• k8s.io/client-go: v0.35.0 → v0.36.0
• k8s.io/code-generator: v0.35.0 → v0.36.0
• k8s.io/component-base: v0.35.0 → v0.36.0
• k8s.io/klog/v2: v2.130.1 → v2.140.0
• k8s.io/kms: v0.35.0 → v0.36.0
• k8s.io/kube-openapi: 589584f → 43fb72c
• k8s.io/utils: bc988d5 → b8788ab
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0
• sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2

Removed

• github.com/cenkalti/backoff/v4: v4.3.0
• github.com/gregjones/httpcache: 901d907
• github.com/grpc-ecosystem/go-grpc-prometheus: v1.2.0
• github.com/zeebo/errs: v1.4.0
• golang.org/x/xerrors: 9bdfabe

Thanks to all our contributors! 😊

kubernetes-sigs/controller-tools (sigs.k8s.io/controller-tools)

v0.21.0

Compare Source

What's Changed

• ⚠️ Bump to k8s.io/* v1.36 by @​sbueringer in #​1407
• ⚠️ Upgrade Go version to 1.26.0 by @​camilamacedo86 in #​1402
• ✨ Add kubebuilder:externalDoc marker by @​pedjak in #​1335
• ✨ Add optional roleName parameter to RBAC marker by @​AlirezaPourchali in #​1334
• ✨ Add support for external ApplyConfiguration mappings by @​andrew-farries in #​1327
• ✨ Add support for k8s:enum markers by @​alvaroaleman in #​1352
• ✨ Add support for k8s:immutable by @​alvaroaleman in #​1354
• ✨ ApplyConfigurations: Generate extract functions by @​alvaroaleman in #​1346
• ✨ Preserve Enum validation for IntOrString type in CRD generation by @​dongjiang1989 in #​1370
• ✨ Support nested pointer to type-aliased slices by @​dongjiang1989 in #​1331
• 🌱 Handle any/interface{} type in CRD generator with clear error by @​Fedosin in #​1362
• 🐛 Fix applyconfiguration generator for cluster-scoped resources by @​joelanford in #​1347

Misc

• 📖 docs: Add examples to all marker types. by @​camilamacedo86 in #​1340
• 🌱 Fix and test webhook testdata compilation by @​alvaroaleman in #​1345
• 🌱 Fix go generate validation by @​alvaroaleman in #​1348
• 🌱 Migrate away from custom GitHub action approval workflow by @​karimzakzouk in #​1372
• ✨ Migrate to new envtest location and newer Kubernetes version by @​sbueringer in #​1337
• 🌱 Test the test CRD can actually be applied by @​alvaroaleman in #​1351
• 🌱 Validate tidyness of all go modules by @​alvaroaleman in #​1349
• 🌱 Validate we use the same k8s.io/* version in all modules by @​alvaroaleman in #​1353

envtest

• ✨ Release envtest v1.36.0 by @​erikgb in #​1393
• 🌱 Promotion of envtest release for Kubernetes v1.36.0 by @​sbueringer in #​1400

Dependency bumps

• 🌱 Bump EndBug/add-and-commit from 9.1.4 to 10.0.0 in the all-github-actions group by @​dependabot[bot] in #​1369
• 🌱 Bump actions/setup-go from 6.1.0 to 6.2.0 in the all-github-actions group by @​dependabot[bot] in #​1326
• 🌱 Bump actions/setup-go from 6.2.0 to 6.3.0 in the all-github-actions group by @​dependabot[bot] in #​1356
• 🌱 Bump github.com/fatih/color from 1.18.0 to 1.19.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1368
• 🌱 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1322
• 🌱 Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1330
• 🌱 Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1405
• 🌱 Bump golang.org/x/tools from 0.40.0 to 0.41.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1325
• 🌱 Bump golang.org/x/tools from 0.41.0 to 0.42.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1342
• 🌱 Bump golang.org/x/tools from 0.42.0 to 0.43.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1364
• 🌱 Bump golang.org/x/tools from 0.43.0 to 0.44.0 in the all-go-mod-patch-and-minor group across 1 directory by @​dependabot[bot] in #​1377
• 🌱 Bump golangci-lint to v2.8.0 by @​dongjiang1989 in #​1332
• 🌱 Bump golangci-lint to v2.10.1 by @​dongjiang1989 in #​1358
• 🌱 Bump golangci-lint to v2.11.3 by @​dongjiang1989 in #​1367
• 🌱 Bump softprops/action-gh-release from 2.5.0 to 2.6.1 in the all-github-actions group by @​dependabot[bot] in #​1365
• 🌱 Bump the all-github-actions group across 1 directory with 4 updates by @​dependabot[bot] in #​1383
• 🌱 Bump the all-github-actions group with 2 updates by @​dependabot[bot] in #​1328
• 🌱 Bump tj-actions/changed-files from 47.0.1 to 47.0.2 in the all-github-actions group by @​dependabot[bot] in #​1343
• 🌱 Bump tj-actions/changed-files from 47.0.2 to 47.0.4 in the all-github-actions group by @​dependabot[bot] in #​1355
• 🌱 Bump tj-actions/changed-files from 47.0.4 to 47.0.5 in the all-github-actions group by @​dependabot[bot] in #​1361

New Contributors

• @​AlirezaPourchali made their first contribution in #​1334
• @​andrew-farries made their first contribution in #​1327
• @​pedjak made their first contribution in #​1335
• @​camilamacedo86 made their first contribution in #​1340
• @​Fedosin made their first contribution in #​1362
• @​karimzakzouk made their first contribution in #​1372

Full Changelog: kubernetes-sigs/controller-tools@v0.20.0...v0.21.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 19 additional dependencies were updated

Details:

Package	Change
github.com/emicklei/go-restful/v3	v3.12.2 -> v3.13.0
github.com/fatih/color	v1.18.0 -> v1.19.0
github.com/fsnotify/fsnotify	v1.9.0 -> v1.10.0
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.1
github.com/go-openapi/jsonpointer	v0.21.0 -> v0.23.1
github.com/go-openapi/jsonreference	v0.20.4 -> v0.21.5
github.com/go-openapi/swag	v0.23.0 -> v0.26.0
github.com/mattn/go-colorable	v0.1.13 -> v0.1.14
github.com/prometheus/common	v0.66.1 -> v0.67.5
github.com/prometheus/procfs	v0.16.1 -> v0.20.1
go.uber.org/zap	v1.27.0 -> v1.27.1
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/oauth2	v0.30.0 -> v0.36.0
golang.org/x/time	v0.11.0 -> v0.15.0
google.golang.org/protobuf	v1.36.8 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/api	v0.35.1 -> v0.36.3
k8s.io/klog/v2	v2.130.1 -> v2.140.0
k8s.io/kube-openapi	v0.0.0-20250910181357-589584f1c912 -> v0.0.0-20260427204847-8949caaa1199
k8s.io/utils	v0.0.0-20251002143259-bc988d571ff4 -> v0.0.0-20260319190234-28399d86e0b5