Update module k8s.io/apimachinery to v0.37.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
k8s.io/apimachinery	v0.34.3 → v0.37.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.0

Compare Source

v0.36.4

Compare Source

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.8

Compare Source

v0.35.7

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

v0.35.0

Compare Source

v0.34.11

Compare Source

v0.34.10

Compare Source

v0.34.9

Compare Source

v0.34.8

Compare Source

v0.34.7

Compare Source

v0.34.6

Compare Source

v0.34.5

Compare Source

v0.34.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.9 -> 1.26.0
k8s.io/klog/v2	v2.130.1 -> v2.140.0

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

Walkthrough

Updates the Go toolchain directive and refreshes Kubernetes, protobuf, and klog module requirements while removing the indirect gogo protobuf entry.

Changes

Go module refresh

Layer / File(s)	Summary
Toolchain and dependency alignment go.mod	The Go directive changes to 1.26.0. k8s.io/apimachinery, google.golang.org/protobuf, and k8s.io/klog/v2 versions are updated. The indirect github.com/gogo/protobuf requirement is removed.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• openshift-online/ocm-cli#1218: Updates the same dependencies and Go toolchain in go.mod.

Suggested labels: dependencies, go

Suggested reviewers: rcampos2029, miguelhbrito

🚥 Pre-merge checks | ✅ 10 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title identifies the dependency update but incorrectly states version v0.36.4; the changes update k8s.io/apimachinery to v0.36.3.	Change the title to state that k8s.io/apimachinery updates to v0.36.3.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	The PR changes only go.mod and go.sum. The patch and tracked Go source contain no MD5, SHA1, DES, RC4, Blowfish, ECB, custom crypto, or secret-comparison usage.
Container-Privileges	✅ Passed	The Dockerfile sets USER 1001, and manifest scans found no privileged:true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or allowPrivilegeEscalation:true.
No-Sensitive-Data-In-Logs	✅ Passed	The patch changes only go.mod and go.sum; it adds no logging code or sensitive-data log fields.
No-Hardcoded-Secrets	✅ Passed	The patch adds only Go version/dependency metadata and go.sum checksums; it adds no secret assignments, credential URLs, private-key markers, or hardcoded credentials.
No-Injection-Vectors	✅ Passed	The PR changes only go.mod and go.sum dependency metadata; added lines contain versions and checksums, with no SQL, shell, eval/exec, pickle, YAML, or HTML injection code.
Ai-Attribution	✅ Passed	The authored PR description and PR commits mention no AI tool. The update commit has only a Signed-off-by trailer and no Co-Authored-By trailer.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/kubernetes-monorepo

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/images-images	1bd73c0	link	true	/test images-images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

New changes are detected. LGTM label has been removed.