Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps the go-dependencies group with 7 updates in the / directory:

Package From To
github.com/cert-manager/cert-manager 1.18.1 1.18.2
github.com/stretchr/testify 1.10.0 1.11.1
github.com/traefik/traefik/v3 3.4.5 3.5.1
k8s.io/api 0.33.2 0.34.0
k8s.io/client-go 0.33.2 0.34.0
sigs.k8s.io/controller-runtime 0.21.0 0.22.0
sigs.k8s.io/external-dns 0.17.0 0.18.0

Updates github.com/cert-manager/cert-manager from 1.18.1 to 1.18.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.18.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We fixed a bug in the CSR's name constraints construction (only applies if you have enabled the NameConstraints feature gate). We dropped the new global.rbac.disableHTTPChallengesRole Helm option due to a bug we found, this feature will be released in v1.19 instead.

Changes since v1.18.1:

Bug or Regression

Commits
  • 686afa6 Merge pull request #7837 from cert-manager-bot/cherry-pick-7836-to-release-1.18
  • c38e37e Revert "More fine-grained control over powerful RBAC permission granted via H...
  • e779203 Merge pull request #7833 from cert-manager-bot/cherry-pick-7816-to-release-1.18
  • 6d59891 fix: permit permitted URI domains in name constraints
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates github.com/traefik/traefik/v3 from 3.4.5 to 3.5.1

Release notes

Sourced from github.com/traefik/traefik/v3's releases.

v3.5.1

Bug fixes:

  • [accesslogs,otel] Provide Log Body in OTEL access Log (#11867 by tomMoulard)
  • [acme] Bump github.com/go-acme/lego/v4 to v4.25.1 (#11882 by ldez)
  • [k8s/gatewayapi] Make app protocol case insensitive (#11989 by shreealt)
  • [otel] Fix misspelling in docs (#11952 by mmanciop)
  • [server] Bump to github.com/pires/go-proxyproto v0.8.1 (#11991 by rtribotte)
  • [server] Silent expected errors on receiving sigterm signal (#11838 by Kwuray)
  • [tracing] Fix capturedRequestHeaders and capturedResponseHeaders headers options not being canonicalized in tracing (#12005 by mcuelenaere)
  • [tracing] Follow OTel semantic conventions for root span naming (#11673 by Alex-Waring)
  • [webui] Update Traefik Proxy dashboard UI development deps (#11958 by mdeliatf)
  • Refactor to use reflect.TypeFor (#12010 by cuiweixie)

Documentation:

Misc:

v3.5.0

Important: Please read the migration guide.

Enhancements:

  • [acme] OCSP stapling (#8393 by alekitto)
  • [acme] Add acme.httpChallenge.delay option (#11643 by ldez)
  • [acme] Allow configuration of ACME provider http timeout (#11637 by tkw1536)
  • [healthcheck] Add url option to healthcheck command (#11711 by Nelwhix)
  • [healthcheck] Add unhealthy Interval to the health check configuration (#10610 by sswastik02)
  • [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.3.0 (#11719 by rtribotte)
  • [k8s/ingress] Make the behavior of prefix matching in Ingress consistent with Kubernetes doc (#11203 by charlie0129)
  • [k8s] NGINX Ingress Provider (#11844 by rtribotte)
  • [middleware,authentication] Handle context canceled in ForwardAuth middleware (#11817 by bengentree)
  • [plugins] Ability to enable unsafe in yaegi through plugin manifest (#11589 by Rydez)
  • [tls] Introduce X25519MLKEM768 for Post-Quantum-Secure TLS (#11731 by fzoli)
  • [webui] Migrate Traefik Proxy dashboard UI to React (#11674 by gndz07)
  • [webui] Improve visualization for StatusRewrites option of errors middleware (#11806 by sevensolutions)

... (truncated)

Changelog

Sourced from github.com/traefik/traefik/v3's changelog.

v3.5.1 (2025-08-27)

All Commits

Bug fixes:

  • [accesslogs,otel] Provide Log Body in OTEL access Log (#11867 by tomMoulard)
  • [acme] Bump github.com/go-acme/lego/v4 to v4.25.1 (#11882 by ldez)
  • [k8s/gatewayapi] Make app protocol case insensitive (#11989 by shreealt)
  • [otel] Fix misspelling in docs (#11952 by mmanciop)
  • [server] Bump to github.com/pires/go-proxyproto v0.8.1 (#11991 by rtribotte)
  • [server] Silent expected errors on receiving sigterm signal (#11838 by Kwuray)
  • [tracing] Fix capturedRequestHeaders and capturedResponseHeaders headers options not being canonicalized in tracing (#12005 by mcuelenaere)
  • [tracing] Follow OTel semantic conventions for root span naming (#11673 by Alex-Waring)
  • [webui] Update Traefik Proxy dashboard UI development deps (#11958 by mdeliatf)
  • Refactor to use reflect.TypeFor (#12010 by cuiweixie)

Documentation:

Misc:

v2.11.29 (2025-08-26)

All Commits

Bug fixes:

  • [acme] Bump github.com/go-acme/lego/v4 to v4.25.2 (#11983 by ldez)
  • [docker] Bump github.com/docker/docker to v28.3.3 (#12007 by kevinpollet)

Documentation:

v3.5.0 (2025-07-23)

All Commits

Enhancements:

... (truncated)

Commits
  • 30b0666 Prepare release v3.5.1
  • 3f1b521 Merge branch v2.11 into v3.5
  • 4ff8eca Fix Swarm unit test for the nodeIP property
  • c2db9db Merge branch v2.11 into v3.5
  • 90702d9 Fix HTTP headers not being canonicalized in tracing
  • 0bf6442 Update Broken Links in the Migration Docs
  • 1986610 Prepare release v2.11.29
  • 09c1153 Fix Documentation menu
  • 1997bc7 Clean Documentation
  • 8ac8473 Fix missing middleware application for whoami service in docker guide
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.33.2 to 0.34.0

Commits
  • ae6c3b9 Update dependencies to v0.34.0 tag
  • 133a39c Merge remote-tracking branch 'origin/master' into release-1.34
  • fd087be clarify that staging repos are automatically published
  • ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • 5ec86fc link to what a staging repository is
  • 08c5dee docs: clarify that this is a staging repository and not for direct contributions
  • ba64d0b Update prerelease lifecycle to v1.34
  • 25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
  • baa1eb1 KEP-5075: generated codes from make update
  • 740b2c9 KEP-5075: API updates
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.33.2 to 0.34.0

Commits
  • b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
  • cd8b91c clarify that staging repos are automatically published
  • 8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • ec3cea5 link to what a staging repository is
  • e4db694 docs: clarify that this is a staging repository and not for direct contributions
  • 04507a3 Merge pull request #132942 from thockin/kyaml
  • 50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
  • 7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
  • 58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
  • 38a24e6 chore: residual boolptr and intptr removal
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.33.2 to 0.34.0

Commits
  • b1c7d7b Update dependencies to v0.34.0 tag
  • 97396af Merge remote-tracking branch 'origin/master' into release-1.34
  • 5f737f3 clarify that staging repos are automatically published
  • 0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • c00384c link to what a staging repository is
  • b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
  • 42e6182 KEP-5075: generated codes from make update
  • da11948 Merge pull request #130653 from yliaog/master
  • 3b7d818 extended resource backed by DRA: codegen
  • bb11581 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.21.0 to 0.22.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

🐛 Bugfixes

🌱 Other

📖 Documentation

... (truncated)

Commits
  • fc84a60 Merge pull request #3300 from troy0820/troy0820/k8s-deps-1.34
  • c430462 update k8s.io dependencies to v0.34.0
  • 7085be7 Merge pull request #3299 from sbueringer/pr-clarify-state-of-warmup
  • 5fd7ff6 Clarify state of Warmup feature
  • e922805 Merge pull request #3293 from s-z-z/certwatcher-patch
  • 41feb4f feat(certwatcher): add instance-specific logger with cert/key context
  • 0f4e99e Merge pull request #3296 from alvaroaleman/reconciliationtimeout
  • f8db32f ✨ Add a ReconciliationTimeout option
  • 9d3997b ✨ envtest: search the assets index for latest of a release series (#3280)
  • 9f93124 Merge pull request #3290 from alvaroaleman/addafter
  • Additional commits viewable in compare view

Updates sigs.k8s.io/external-dns from 0.17.0 to 0.18.0

Release notes

Sourced from sigs.k8s.io/external-dns's releases.

v0.18.0

General information

⚠️ This release requires a RBAC update on endpointslices. It will be included in the next Chart release, see #5493.

⚠️ The exposed metrics has been significantly changed. You'll need to update your observability stack accordingly, see #5516

ℹ️ This release remove in-tree support for ibmcloud, tencentcloud & ultradns. Users needing those providers can use a previous version of external-dns or create a webhook-based provider.

ℹ️ The change on default-targets behavior provide a mitigation strategy, if you need it, see #5316

⚠️ Breaking Changes

🚀 Features

🐛 Bug fixes

... (truncated)

Changelog

Sourced from sigs.k8s.io/external-dns's changelog.

Release

Release cycle

Currently we don't release regularly. Whenever we think it makes sense to release a new version we do it. You might want to ask in our Slack channel external-dns when the next release will come out.

Staging Release cycle

A new staging image is released weekly and can be found at gcr.io/k8s-staging-external-dns/external-dns.

There is a time lag between merging changes into the master branch and the subsequent creation of the staging image.

Example command to fetch 10 most recent staging images:

export EXT_DNS_VERSION="v0.18.0"
curl -sLk https://gcr.io/v2/k8s-staging-external-dns/external-dns/tags/list | jq | grep "$EXT_DNS_VERSION" | tail -n 10

Versioning convention

These are the conventions that we will be using for releases following 0.7.6:

  • Patch version should be updated if we need to merge bugfixes, e.g. provider a does need a fix in order make updates working again. I would see updating or improving documentation here.

  • Minor version should be updated if new features are implemented in existing providers or new provider get introduced.

  • Major version should be upgraded if we introduce breaking changes.

How to release a new image

Prerequisite

We use https://github.com/cli/cli to automate the release process. Please install it according to the official documentation.

You must be an official maintainer of the project to be able to do a release.

Steps

  • Run scripts/releaser.sh to create a new GitHub release. Alternatively you can create a release in the GitHub UI making sure to click on the autogenerate release node feature.
  • The step above will trigger the Kubernetes based CI/CD system Prow. Verify that a new image was built and uploaded to gcr.io/k8s-staging-external-dns/external-dns.
  • Create a PR in the k8s.io repo by taking the current staging image using the sha256 digest. They can be obtained with scripts/get-sha256.sh. Once the PR is merged, the image will be live with the corresponding tag specified in the PR.
  • Verify that the image is pullable with the given tag
    • docker run registry.k8s.io/external-dns/external-dns:v0.16.0 --version
  • Branch out from the default branch and run scripts/version-updater.sh to update the image tag used in the kustomization.yaml and in documentation.
  • Create the PR with this version change.
  • Create an issue to release the corresponding Helm chart via the chart release process (below) assigned to a chart maintainer
  • Once the PR is merged, all is done :-)

... (truncated)

Commits

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 1, 2025
@dependabot dependabot bot requested a review from borchero as a code owner September 1, 2025 20:20
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 1, 2025
@github-actions github-actions bot added the build label Sep 1, 2025
…pdates

Bumps the go-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.18.1` | `1.18.2` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [github.com/traefik/traefik/v3](https://github.com/traefik/traefik) | `3.4.5` | `3.5.1` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.2` | `0.34.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.2` | `0.34.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.21.0` | `0.22.0` |
| [sigs.k8s.io/external-dns](https://github.com/kubernetes-sigs/external-dns) | `0.17.0` | `0.18.0` |



Updates `github.com/cert-manager/cert-manager` from 1.18.1 to 1.18.2
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.18.1...v1.18.2)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `github.com/traefik/traefik/v3` from 3.4.5 to 3.5.1
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v3.5.1/CHANGELOG.md)
- [Commits](traefik/traefik@v3.4.5...v3.5.1)

Updates `k8s.io/api` from 0.33.2 to 0.34.0
- [Commits](kubernetes/api@v0.33.2...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.2 to 0.34.0
- [Commits](kubernetes/apimachinery@v0.33.2...v0.34.0)

Updates `k8s.io/client-go` from 0.33.2 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.2...v0.34.0)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.21.0...v0.22.0)

Updates `sigs.k8s.io/external-dns` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/kubernetes-sigs/external-dns/releases)
- [Changelog](https://github.com/kubernetes-sigs/external-dns/blob/master/docs/release.md)
- [Commits](kubernetes-sigs/external-dns@v0.17.0...v0.18.0)

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/traefik/traefik/v3
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/external-dns
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dependencies-679c0921a6 branch from 367e62e to 3ed32f4 Compare October 1, 2025 06:03
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 1, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-dependencies-679c0921a6 branch December 1, 2025 06:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant