deps: bump the k8s group across 1 directory with 6 updates

[dependabot]

Bumps the k8s group with 2 updates in the / directory: helm.sh/helm/v3 and sigs.k8s.io/controller-runtime.

Updates helm.sh/helm/v3 from 3.21.1 to 3.21.3

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

• MacOS amd64 (checksum / 76d0db4730b05d3d625eee11e80f0721b32b4d8422f4e5d093de6337bf3ac9f8)
• MacOS arm64 (checksum / 19879a848cad832b7a1ac24b767a481d20fb3b95ab53a220849649422ada144e)
• Linux amd64 (checksum / 15e041a93a590dce8100f39385cd98c84a765c9e36aeeb9e2dc6ff9e4769e2e0)
• Linux arm (checksum / 60f3106ba5e24371af51574fccf489d382d2f59c56ce566d02f2a6f00bf4fb3b)
• Linux arm64 (checksum / 67f58155079ff9ffab98ba5c88daff0ed9b542f3a4732f5dd426dde7dd0f5244)
• Linux i386 (checksum / 95e7ef76d4631f30e3f6c17d4355420878ca85771dbe7deb7b797521007aebe4)
• Linux ppc64le (checksum / c8657c0f77b7d3e2f9508c4a9a545b5862d01690f2a528fbbe659a3a4d534382)
• Linux s390x (checksum / d6c2dd29b32da1cb9dfef5af0cb93a1f391beca4e714779186330681b39f4b59)
• Linux riscv64 (checksum / ff063cc304a60af858242aa71b5635852d65aa7d3301a46eca17a31c54e8d994)
• Windows amd64 (checksum / ff490897e07e976c65a9bd7690cfc139b35ba5e8f25d00eaf1e53a30f1ad3f62)
• Windows arm64 (checksum / 1d409b98f99a38704ccb3f0917cbad2417ed53f75751902b6bd84447803b69a9)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
• 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

• Apply suggestions from code review 1ad6e68924fdf6fb0c7dcef8e9e1dfc0f36eaed6 (Benoit Tigeot)
• fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e7d51b08e30a0233bd546c345ab3ea3bba (Benoit Tigeot)
• chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178ba06a8a1eeacaab1df9162b658b1e07fe9 (dependabot[bot])

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

... (truncated)

Commits

• 1ad6e68 Apply suggestions from code review
• 037733e fix: drop containerd v1 dep to resolve govulncheck CVEs
• d3e178b chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33
• 1259634 chore(deps): bump the k8s-io group with 2 updates
• b52e276 fixes
• 3342dbf chore(deps): bump the k8s-io group across 1 directory with 2 updates
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.3 to 0.36.2

Commits

• e4eb159 Update dependencies to v0.36.2 tag
• 4cd8c3d Merge remote-tracking branch 'origin/master' into release-1.36
• c2fd557 Merge pull request #138346 from dashpole/update_otel_prop
• 1daa309 Merge remote-tracking branch 'origin/master' into release-1.36
• 1551264 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 6c97d2b update go.opentelemetry.io/otel to v1.41.0
• 862c52a update google.golang.org/grpc to v1.79.3
• abac065 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 7acee75 Merge pull request #137843 from pacoxu/cobra-v1.10.2
• 612f1d8 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• Additional commits viewable in compare view

Updates k8s.io/cli-runtime from 0.35.3 to 0.36.2

Commits

• c97bc2f Update dependencies to v0.36.2 tag
• 9157a44 Merge remote-tracking branch 'origin/master' into release-1.36
• fb4f11d Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 08a1cd8 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 579d47f Merge pull request #137843 from pacoxu/cobra-v1.10.2
• e545712 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• f392d21 bump spf13/cobra to v1.10.2
• b0a204f Merge pull request #137298 from dims/dsri/cri-streaming-option-a-hardcut
• e723dad Merge pull request #136792 from rata/userns-goes-ga
• 18f8342 Merge pull request #137495 from pohly/klog-update
• Additional commits viewable in compare view

Updates k8s.io/kubectl from 0.35.3 to 0.36.2

Commits

• 7f7757a Update dependencies to v0.36.2 tag
• 2a397b1 Merge pull request #138500soltysh/automated-cherry-pick-of-#138499
• 8598401 Escape path inside the container
• 50e8956 Merge remote-tracking branch 'origin/master' into release-1.36
• 3f435ca Merge pull request #138346 from dashpole/update_otel_prop
• 36707c8 Merge remote-tracking branch 'origin/master' into release-1.36
• 5e5dfaa Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 777119f update go.opentelemetry.io/otel to v1.41.0
• 02b6975 pause: fix version drift in various files
• 82a3c05 Merge pull request #137906 from aramase/aramase/c/grpc_v1.79.0
• Additional commits viewable in compare view

Updates k8s.io/metrics from 0.35.4 to 0.36.2

Commits

• 3bd6634 Update dependencies to v0.36.2 tag
• f060ca2 Merge remote-tracking branch 'origin/master' into release-1.36
• 632437b Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 187698f dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• 502a3c3 Merge pull request #137298 from dims/dsri/cri-streaming-option-a-hardcut
• 0962f95 staging: extract CRI streaming modules with client-go compatibility
• 0926a24 Merge pull request #137495 from pohly/klog-update
• 41992d6 dependencies: klog v2.140.0
• c1ed770 Merge pull request #137456 from liggitt/go126
• 029817a Bump to go 1.26
• Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

⚠️ Breaking Changes

• Dependencies: Update to k8s.io/* v1.36 (#3506 #3462 #3486 #3450)

🐛 Bug Fixes

• Cache: Fix IndexField blocking until informer is synced (#3445)
• Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
• Client: Update typed ApplyConfigurations with server response (#3475)
• Fakeclient: Fix SSA status patch resource version check (#3443)
• Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
• Fakeclient: Fix status apply if existing object has managedFields set (#3430)
• Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
• HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

• Builder/Webhooks: Remove deprecated custom path function (#3465)
• Cache: Test cache reader waits for cache sync (#3434)
• Certwatcher: Deflake certwatcher tests (#3457)
• Dependencies: Use forked version of btree (#3449)
• Envtest: Ensure envtest stops the whole process group (#3447)
• Logging: Add missing space in zap-log-level flag description (#3492)
• Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
• Owners: Cleanup (#3453)
• Recorder: Add logger into context for structured logging (#3454)
• Recorder: Switch to StartLogging for event debug logs (#3451)
• Scheme: Deprecate the scheme builder (#3461)
• Source/Kind: Improve logging for dynamic type kind source (#3494)
• Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

• Chore: Update golangci-lint version to v2.8.0 (#3448)
• Chore: Update golangci-lint version to v2.10.1 (#3470)
• Chore: Update golangci-lint version to v2.11.3 (#3482)
• Migrate away from custom GitHub action approval workflow (#3491)
• Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

... (truncated)

Commits

• 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
• 0f7b33d Fix regression in Apply typed error handling
• d3eaef3 Merge pull request #3475 from alvaroaleman/fixfix
• 3296f32 🐛 Update typed Applyconfigurations with server response
• c8b4b9d Merge pull request #3506 from troy0820/troy0820/update-deps-k8s
• 557c314 update to k8s.io v1.36.0
• e4a998c Merge pull request #3499 from kubernetes-sigs/dependabot/github_actions/all-g...
• 1a31c56 Merge pull request #3498 from vieux/fix-fake-client-generatename-retry
• 80bc294 fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...
• 77b730a 🌱 Bump the all-github-actions group with 2 updates
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
k8s.io/apiextensions-apiserver	[>= 0.30.0.a, < 0.30.1]
k8s.io/kubectl	[>= 0.30.0.a, < 0.30.1]
k8s.io/cli-runtime	[>= 0.30.0.a, < 0.30.1]