Bump the other group across 1 directory with 10 updates by dependabot[bot] · Pull Request #518 · metal-stack/gardener-extension-provider-metal

dependabot · 2026-09-09T15:33:42Z

Bumps the other group with 6 updates in the / directory:

Package	From	To
github.com/go-openapi/strfmt	`0.27.0`	`0.27.2`
github.com/onsi/gomega	`1.42.1`	`1.43.0`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
k8s.io/apiextensions-apiserver	`0.35.0`	`0.37.0`
k8s.io/autoscaler/vertical-pod-autoscaler	`1.5.1`	`1.7.1`
k8s.io/kubelet	`0.35.0`	`0.37.0`

Updates github.com/go-openapi/strfmt from 0.27.0 to 0.27.2

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.2

0.27.2 - 2026-09-03

Full Changelog: go-openapi/strfmt@v0.27.1...v0.27.2

2 commits in this release.

Miscellaneous tasks

chore: upgrade to go1.26 by @fredbi in #305 ...

chore: prepare release v0.27.2 by @bot-go-openapi[bot] in #304 ...

People who contributed to this release

@fredbi

strfmt license terms

Per-module changes

enable/mongodb (0.27.2)

Miscellaneous tasks

chore: upgrade to go1.26 by @fredbi in #305 ...

chore: prepare release v0.27.2 by @bot-go-openapi[bot] in #304 ...

... (truncated)

Commits

49f0562 chore: upgrade to go1.26 (#305)
13a4b88 chore: prepare release v0.27.2
4774525 chore: prepare release v0.27.1
52d2b5f doc: technical writing instructions for agents
fe878b1 doc: updated contributors file
f6b2b0e build(deps): bump the other-dependencies group across 3 directories with 1 up...
84ff4d5 build(deps): bump the development-dependencies group with 10 updates
5201cf6 build(deps): bump the go-openapi-dependencies group across 2 directories with...
2f422ba chore(dependabot): fix invalid timezone
38e386e build(deps): bump the development-dependencies group across 1 directory with ...
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.42.1 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

bc1f21e v1.43.0
c814c0e v1.43.0 (full)
a89f25d Add gomock adaptor extension for using Gomega matchers with gomock
See full diff in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.0 to 0.37.0

Commits

78b5577 Update dependencies to v0.37.0 tag
29d19cf Fix unit test compile failure under the fieldsv1string build tag
1aa2717 Merge pull request #140205 from pohly/cel-deps
b51744f dependencies: cel-go v0.29.2
f416935 Merge pull request #140782 from dims/update-kube-openapi
19c0db2 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
8ed17b6 Merge pull request #140774 from dims/prom-client-v1.24.0
48a6e2f Update prometheus/client_golang to 1.24.0
e7c1b62 Merge pull request #139821 from pohly/client-go-informers-type-safety
e86edad Merge pull request #140740 from dims/update-grpc-1.82.1
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.0 to 0.37.0

Commits

7164e39 Update dependencies to v0.37.0 tag
e55f9ba feat(api): Update node restriction admission to use new API
cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
f21afab Add validation for camelcase in reason field
d7ad413 Merge pull request #140782 from dims/update-kube-openapi
e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
Additional commits viewable in compare view

Updates k8s.io/autoscaler/vertical-pod-autoscaler from 1.5.1 to 1.7.1

Release notes

Sourced from k8s.io/autoscaler/vertical-pod-autoscaler's releases.

vertical-pod-autoscaler-1.7.1

Changes by Kind

Regression

Fixed the VPA recommender ignoring the --history-cpu-metric and --history-memory-metric flags when using the Prometheus history provider, which caused the historical queries to omit the configured metric name. (#9753, @ulascansenturk)

Fixed VPA checkpoint loading to prevent recommendations from restarting from scratch (#10052, @adrianmoisey)

Bug

Fix bug where VPA Checkpoint GC error message wasn't logging correctly (#9886, @adrianmoisey)

Add reasons to in-place update deferred log messages (#9964, @omerap12)

Other (Cleanup or Flake)

[vpa-release-1.7] Bump the actions group across 3 directories with 1 update by @k8s-infra-cherrypick-robot in kubernetes/autoscaler#9735

Bump the patch-updates group across 2 directories with 19 updates by @dependabot[bot] in kubernetes/autoscaler#9776

Bump the patch-updates group across 2 directories with 37 updates by @dependabot[bot] in kubernetes/autoscaler#9938

Bump the actions group across 3 directories with 1 update by @dependabot[bot] in kubernetes/autoscaler#9979

Bump the patch-updates group across 2 directories with 3 updates by @dependabot[bot] in kubernetes/autoscaler#9982

Bump to k8s 1.36.3 patch versions by @adrianmoisey in kubernetes/autoscaler#10046

Bump VPA to 1.7.1 by @adrianmoisey in kubernetes/autoscaler#10053

Bump to VPA 1.7.1 by @adrianmoisey in kubernetes/autoscaler#10058

Full Changelog: kubernetes/autoscaler@vertical-pod-autoscaler-1.7.0...vertical-pod-autoscaler-1.7.1

vertical-pod-autoscaler-1.7.0

Changes by Kind

API Change

Added MemoryAggregationIntervalSeconds for the VPA object (#9317, @omerap12)

EvictAfterOOMThreshold is now per vpa (#9071, @omerap12)

The VPA support InPlace update mode. VPA will not evict any pods and only try to resize pods inplace. (#8888, @omerap12)

Users can configure a startupBoost policy in the VPA spec. (#9141, @kamarabbas99)

VPA now stores a observedGeneration in both status and condition fields. (#9524, @adrianmoisey)

Bug or Regression

Fix bug where VPA admission-controller could write a webhook with an empty cert for a brief period. (#9599, @adrianmoisey)

Fixed OOM detection for pods with restartPolicy: Never (#7955, @tkukushkin)

Fixed a bug where the presence of a LimitRange object with CPU constraints in the cluster prevented VPA from recreating Pods managed by the targeted controllers. The updated code section, which proportionally reduces resource requests and limits, could result in the loss of sub-millicore values. (#8946, @iamzili)

Fixed a bug where users could use alpha (off-by-default) features by updating an existing VPA resource, bypassing the feature gate check. (#9557, @adrianmoisey)

Other (Cleanup or Flake)

Bump Kubernetes dependencies to 1.36.0 (#9547, @adrianmoisey)

... (truncated)

Commits

3523658 Merge pull request #10058 from adrianmoisey/vpa-release-1.7.1
741c809 Bump to VPA 1.7.1
9568371 Merge pull request #10053 from adrianmoisey/release-1.7.1
90028bd Bump VPA to 1.7.1
86a69bd Merge pull request #10052 from k8s-infra-cherrypick-robot/cherry-pick-10045-t...
16fadf1 Ensure that VPA checkpoint is loaded in the correct order
c385263 Merge pull request #10046 from adrianmoisey/vpa-release-1.7-k8s-1.36.3
98b0150 Bump to k8s 1.36.3 patch versions
1db6027 Merge pull request #9982 from kubernetes/dependabot/go_modules/vertical-pod-a...
7cff63b Merge pull request #9979 from kubernetes/dependabot/docker/vertical-pod-autos...
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.0 to 0.37.0

Commits

2807644 Update dependencies to v0.37.0 tag
50c6f9b metrics: Register: Fix incorrect assignment
49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
2bf14f2 Merge pull request #140990 from xigang/revert-140448
7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
694f4eb apidiff: ignore adding entirely new API groups
Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.35.0 to 0.37.0

Commits

932621b Update dependencies to v0.37.0 tag
ad11b1b Bump CSI again
6da4511 Update vendor to new CSI spec
82c4ba9 Merge pull request #140782 from dims/update-kube-openapi
f6bb69f Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
ea180a6 Merge pull request #139821 from pohly/client-go-informers-type-safety
118c85d Merge pull request #140693 from lalitc375/limit-subfields
5779c75 Merge pull request #140732 from thockin/dv-add-prefixed-label-key
5991a20 Add a DV format for prefixed label key
7850673 code-generator/validation-gen: Disable nested +k8s:subfield validations
Additional commits viewable in compare view

Updates k8s.io/component-base from 0.35.0 to 0.37.0

Commits

94d22b8 Update dependencies to v0.37.0 tag
a6b06ee Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
ea1331d Merge pull request #140774 from dims/prom-client-v1.24.0
92e2dda Update prometheus/client_golang to 1.24.0
4e4e0b2 Merge pull request #140695 from richabanker/scheduler-perf-tests
40cb850 Merge pull request #140740 from dims/update-grpc-1.82.1
8b9a753 Update google.golang.org/grpc to v1.82.1
7410c09 improve scheduler_perf by gathering metrics once per collection
6e6e41b Merge pull request #138770 from KevinTMtz/plrm-tests
750d48c Register resource manager metrics with subsystem/stability level
Additional commits viewable in compare view

Updates k8s.io/kubelet from 0.35.0 to 0.37.0

Commits

f73ba00 Update dependencies to v0.37.0 tag
71c07b7 Merge pull request #140052 from VeraQin/master
d9ca143 Merge pull request #140007 from QiWang19/mem_high_default
a5a3290 Kep-5996: Add kubelet configuration "DefaultPodSysctls" with feature gate.
d3d0dac Promote MemoryQoS to beta; default memoryThrottlingFactor to nil
1773f7f Merge pull request #139477 from harche/dra-kubelet-plugin-cleanup
3396c66 Merge pull request #140194 from gnufied/implement-volume-health-api
5b7699f Remove older volume metrics from stats API
afbdaf4 Merge pull request #140782 from dims/update-kube-openapi
191196a Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the other group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.27.0` | `0.27.2` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.35.0` | `0.37.0` | | [k8s.io/autoscaler/vertical-pod-autoscaler](https://github.com/kubernetes/autoscaler) | `1.5.1` | `1.7.1` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.35.0` | `0.37.0` | Updates `github.com/go-openapi/strfmt` from 0.27.0 to 0.27.2 - [Release notes](https://github.com/go-openapi/strfmt/releases) - [Commits](go-openapi/strfmt@v0.27.0...v0.27.2) Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.42.1...v1.43.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `k8s.io/apiextensions-apiserver` from 0.35.0 to 0.37.0 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.35.0...v0.37.0) Updates `k8s.io/apimachinery` from 0.35.0 to 0.37.0 - [Commits](kubernetes/apimachinery@v0.35.0...v0.37.0) Updates `k8s.io/autoscaler/vertical-pod-autoscaler` from 1.5.1 to 1.7.1 - [Release notes](https://github.com/kubernetes/autoscaler/releases) - [Commits](kubernetes/autoscaler@vertical-pod-autoscaler-1.5.1...vertical-pod-autoscaler-1.7.1) Updates `k8s.io/client-go` from 0.35.0 to 0.37.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.0...v0.37.0) Updates `k8s.io/code-generator` from 0.35.0 to 0.37.0 - [Commits](kubernetes/code-generator@v0.35.0...v0.37.0) Updates `k8s.io/component-base` from 0.35.0 to 0.37.0 - [Commits](kubernetes/component-base@v0.35.0...v0.37.0) Updates `k8s.io/kubelet` from 0.35.0 to 0.37.0 - [Commits](kubernetes/kubelet@v0.35.0...v0.37.0) --- updated-dependencies: - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: github.com/onsi/gomega dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/apimachinery dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/autoscaler/vertical-pod-autoscaler dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/client-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/code-generator dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/component-base dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: k8s.io/kubelet dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner September 9, 2026 15:33

dependabot Bot added dependencies Updates dependencies of a code repository. go Pull requests that update go code minor Breaking change or new feature, causes the release drafter to create a new minor version labels Sep 9, 2026

metal-robot Bot added the area: gardener Affects the gardener area. label Sep 9, 2026

metal-robot Bot added this to Development Sep 9, 2026

Navigation Menu

Uh oh!

Bump the other group across 1 directory with 10 updates - #518

Bump the other group across 1 directory with 10 updates#518
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/other-d82dcc2000

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026

v0.27.2

0.27.2 - 2026-09-03

Miscellaneous tasks

People who contributed to this release

Per-module changes

enable/mongodb (0.27.2)

Miscellaneous tasks

v1.43.0

1.43.0

Features

1.43.0

Features

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

vertical-pod-autoscaler-1.7.1

Changes by Kind

Regression

Bug

Other (Cleanup or Flake)

vertical-pod-autoscaler-1.7.0

Changes by Kind

API Change

Bug or Regression

Other (Cleanup or Flake)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants