fix(go.mod/go.sum): update minor dependencies (golang)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	v0.88.0 → v0.91.0			require	minor
go (source)	1.25.6 → 1.26.4			golang	minor
k8s.io/apiextensions-apiserver	v0.35.0 → v0.36.1			require	minor
k8s.io/apimachinery	v0.35.0 → v0.36.1			require	minor
k8s.io/client-go	v0.35.0 → v0.36.1			require	minor
k8s.io/code-generator	v0.35.0 → v0.36.1			require	minor
k8s.io/kube-aggregator	v0.35.0 → v0.36.1			require	minor
sigs.k8s.io/controller-runtime	v0.23.0 → v0.24.1			require	minor
sigs.k8s.io/controller-runtime/tools/setup-envtest	v0.0.0-20260120065648-aebc15d7c689 → v0.24.1			require	minor
sigs.k8s.io/controller-tools	v0.20.0 → v0.21.0			require	minor

---

Release Notes

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.91.0: 0.91.0 / 2026-05-05

Compare Source

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #​8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #​8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #​8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #​8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #​8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #​8478
• [FEATURE] Configure node selector when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #​8486
• [FEATURE] Configure external label with topology information when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #​8519
• [FEATURE] Distribute scrape targets within topology zones when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #​8538
• [FEATURE] Add --promql-options CLI argument to the admission-webhook binary. #​8531
• [FEATURE] Validate PrometheusRule resources selected by Prometheus resources based on the PromQL enabled features. #​8545
• [FEATURE] Add workload identity authentication method for AzureSD in ScrapeConfig CRD. #​8489
• [ENHANCEMENT] Support strategic merge patch of container probes when workloads are configured with HTTPS. #​8427
• [ENHANCEMENT] Support auth_secret_file field for Email receiver in Alertmanager configuration Secret. #​8394
• [ENHANCEMENT] Support smtp_auth_secret_file field in Alertmanager configuration Secret. #​8396
• [ENHANCEMENT] Add externalId field to SigV4 configuration in Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #​8494
• [ENHANCEMENT] Add cipherSuites support for Thanos Sidecars and Rulers. #​8524
• [ENHANCEMENT] Add curves support for Thanos Sidecars and Rulers. #​8542
• [ENHANCEMENT] Speed up configuration reloads by watching the config file's parent directory. #​7366
• [ENHANCEMENT] Support Mattermost global webhook URL support in Alertmanager configuration Secret. #​8501
• [ENHANCEMENT] Add Mattermost global webhook URL support in Alertmanager CRD. #​8503 #​8534
• [ENHANCEMENT] Support payload field for Webhook receiver in Alertmanager configuration Secret. #​8505
• [ENHANCEMENT] Support attachment fields for Mattermost receiver in Alertmanager configuration Secret. #​8508
• [ENHANCEMENT] Support update_message field for Slack receiver in Alertmanager configuration Secret. #​8502
• [ENHANCEMENT] Add threading configuration for email receiver in AlertmanagerConfig CRD. #​8400
• [ENHANCEMENT] Add healthFilter field for ConsulSD in ScrapeConfig CRD. #​8529
• [BUGFIX] Ensure that inactive shards don't scrape any targets when the sharding retention policy is Retain. #​8513
• [BUGFIX] Fix Telegram bot token validation in Alertmanager configuration Secret. #​8465

v0.90.1: 0.90.1 / 2026-03-25

Compare Source

• [BUGFIX] Fix Probe ignoring HTTP client settings in scrape configuration. #​8461

v0.90.0: 0.90.0 / 2026-03-19

Compare Source

• [CHANGE/BUGFIX] Validate that the remote-write URL scheme is either http or https. #​8455
• [FEATURE] Add --repair-policy-for-statefulsets CLI argument to the operator. It defines how the operator manages StatefulSet's pods stuck at an incorrect revision. Users running Kubernetes v1.35+ are encouraged to enable this feature (see troubleshooting guide). #​8443
• [FEATURE] Add schedulerName support to the Prometheus, PrometheusAgent, Alertmanager and ThanosRuler CRDs. #​8451
• [ENHANCEMENT] Add --web.tls-curves CLI argument to the operator and admission-webhook binaries. #​8385
• [ENHANCEMENT] Support minimum TLS version for Thanos gRPC servers. #​8438
• [ENHANCEMENT] Add version label to ThanosRuler pods. #​8441
• [ENHANCEMENT] Add messageText support for Slack receiver in AlertmanagerConfig CRD. #​8374
• [ENHANCEMENT] Add messageText support for Slack receiver in Alertmanager secret config. #​8375
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP email config in Alertmanager secret config. #​8384 #​8404
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP email config in AlertmanagerConfig CRD. #​8386
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP global config in Alertmanager secret config. #​8405
• [ENHANCEMENT] Add forceImplicitTLS support for SMTP global config in Alertmanager CRD. #​8406
• [ENHANCEMENT] Add support for global Telegram bot token in Alertmanager CRD. #​8372
• [ENHANCEMENT] Add chatIDFile support for Telegram receiver in Alertmanager secret config. #​8376
• [ENHANCEMENT] Add wechatAPISecretFile support in Alertmanager global config. #​8377
• [ENHANCEMENT] Add authSecretFile support for email config in Alertmanager secret config. #​8396
• [ENHANCEMENT] Add nested field support for PagerDuty description in Alertmanager secret config. #​8402
• [ENHANCEMENT] Add email threading support in Alertmanager secret config. #​8388
• [ENHANCEMENT] Add field and label selectors for ConfigMap watches. #​8368
• [ENHANCEMENT] Improve ScrapeConfig API consistency and validation. #​8422
• [BUGFIX] Fix ThanosRuler config resource status not being updated on initial StatefulSet creation. #​8358
• [BUGFIX] Preserve LastTransitionTime in Prometheus status conditions. #​8346
• [BUGFIX] Make Mattermost text field optional in AlertmanagerConfig CRD. #​8363
• [BUGFIX] Remove nil error wrapping in v1alpha1 duplicate receiver validation. #​8379
• [BUGFIX] Aggregate Available condition across Prometheus shards. #​8434
• [BUGFIX] Reconcile resources with inconsistent status. #​8397
• [BUGFIX] Fix namespace lister/watcher compatibility with Kubernetes v1.35 client-go. #​8431
• [BUGFIX] Fix missing OAuth2 field in IonosSDConfig generation. #​8433
• [BUGFIX] Fix missing fields in AzureSDConfig. #​8444
• [BUGFIX] Validate Microsoft Teams V2 URL in AlertmanagerConfig CRD. #​8227
• [BUGFIX] Fix labelmap relabel action rejecting valid replacement values with template variables for Prometheus 2.x. #​8337

v0.89.0: 0.89.0 / 2026-02-05

Compare Source

• [ENHANCEMENT] Add hostNetwork field to the Alertmanager CRD. #​8281
• [ENHANCEMENT] Add the crds and full-crds commands to the operator's binary. #​8251
• [ENHANCEMENT] Report deprecated field usage in the Reconciled condition type. #​8236
• [ENHANCEMENT] Avoid unnecessary reconciliation upon creation of the ThanosRuler StatefulSet. #​8347
• [ENHANCEMENT] Add bodySizeLimit to the ScrapeConfig CRD. #​8348
• [ENHANCEMENT] Support http_headers field in the Alertmanager Secret. #​8357
• [ENHANCEMENT] Add the -kubelet-http-metrics flag to enable/disable the HTTP metrics port in the Kubelet endpoint (default=enabled). #​8350
• [ENHANCEMENT] Include operator.prometheus.io/version annotation in the full version of CRDs. #​8279
• [BUGFIX] Validate VictorOps global configuration in the Alertmanager CRD. #​8020
• [BUGFIX] Validate Jira global configuration in the Alertmanager CRD. #​8265
• [BUGFIX] Validate VictorOps receiver's URL in the AlertmanagerConfig CRD. #​8258
• [BUGFIX] Validate Webex receiver's URL in the AlertmanagerConfig CRD. #​8255
• [BUGFIX] Validate Jira receiver's URL configuration in the AlertmanagerConfig CRD. #​8230
• [BUGFIX] Validate OpsGenie receiver configuration in the AlertmanagerConfig CRD. #​8267
• [BUGFIX] Validate WeChat receiver configuration in the AlertmanagerConfig CRD. #​8271
• [BUGFIX] Validate SNS receiver configuration in the AlertmanagerConfig CRD. #​8217
• [BUGFIX] Validate Webex global configuration in the Alertmanager CRD. #​7979
• [BUGFIX] Validate Telegram global configuration in the Alertmanager CRD. #​8268
• [BUGFIX] Restore statefulset's labels if the creation fails with AlreadyExists. #​8343
• [BUGFIX] Fix potential panic due to informer cache races. #​8310
• [BUGFIX] Support probers defined with IPv6 addresses in the Probe CRD. #​8354
• [BUGFIX] Prevent group and repeat intervals with zero duration from breaking Alertmanager. #​8126
• [BUGFIX] Propagate all supported RocketChat attributes for AlertmanagerConfig CRD. #​8016
• [BUGFIX] Add URL validation for WeChat receiver. #​8256
• [BUGFIX] Add URL validation for SNS receiver. #​8259
• [BUGFIX] Fix GCE service discovery for the ScrapeConfig CRD. #​8284
• [BUGFIX] Avoid stale conditions in Alertmanager, ThanosRuler, Prometheus and PrometheusAgent resources. #​8304
• [BUGFIX] Fix race condition when updating rule ConfigMaps. #​8290
• [BUGFIX] Fix race condition when patching finalizers. #​8323
• [BUGFIX] Reconcile ScrapeConfig resources when namespace selection changes. #​8334

v0.88.1: 0.88.1 / 2026-01-27

Compare Source

• [BUGFIX] Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD. #​8294
• [BUGFIX] Revert maximum version check for EC2/Lightsail SD in ScrapeConfig CRD. #​8308
• [BUGFIX] Relax URL validation in Slack receiver in AlertmanagerConfig CRD to support Go templates. #​8299 #​8331
• [BUGFIX] Relax URL validation in PagerDuty in AlertmanagerConfig CRD to support Go templates. #​8319
• [BUGFIX] Relax URL validation in WebhookConfig in AlertmanagerConfig CRD to support Go templates. #​8307 #​8317
• [BUGFIX] Relax URL validation in RocketChat receiver in AlertmanagerConfig CRD to support Go templates. #​8318
• [BUGFIX] Relax URL validation in Pushover receiver in AlertmanagerConfig CRD to support Go templates. #​8307 #​8316

golang/go (go)

v1.26.4

v1.26.3

v1.26.2

v1.26.1

v1.26.0

v1.25.11

v1.25.10

v1.25.9

v1.25.8

v1.25.7

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

kubernetes/code-generator (k8s.io/code-generator)

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

kubernetes/kube-aggregator (k8s.io/kube-aggregator)

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

v0.35.1

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.24.1

Compare Source

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in #​3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

Compare Source

⚠️ Breaking Changes

• Dependencies: Update to k8s.io/* v1.36 (#​3506 #​3462 #​3486 #​3450)

🐛 Bug Fixes

• Cache: Fix IndexField blocking until informer is synced (#​3445)
• Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#​3425)
• Client: Update typed ApplyConfigurations with server response (#​3475)
• Fakeclient: Fix SSA status patch resource version check (#​3443)
• Fakeclient: Fix panic when using CRs with embedded pointer structs (#​3431)
• Fakeclient: Fix status apply if existing object has managedFields set (#​3430)
• Fakeclient: Retry GenerateName on AlreadyExists collisions (#​3498)
• HTTP servers: Wire up base context into http servers (#​3452)

🌱 Others

• Builder/Webhooks: Remove deprecated custom path function (#​3465)
• Cache: Test cache reader waits for cache sync (#​3434)
• Certwatcher: Deflake certwatcher tests (#​3457)
• Dependencies: Use forked version of btree (#​3449)
• Envtest: Ensure envtest stops the whole process group (#​3447)
• Logging: Add missing space in zap-log-level flag description (#​3492)
• Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#​3489)
• Owners: Cleanup (#​3453)
• Recorder: Add logger into context for structured logging (#​3454)
• Recorder: Switch to StartLogging for event debug logs (#​3451)
• Scheme: Deprecate the scheme builder (#​3461)
• Source/Kind: Improve logging for dynamic type kind source (#​3494)
• Webhooks: Reduce memory usage of default webhooks (#​3463 #​3468)

🌱 CI & linters

• Chore: Update golangci-lint version to v2.8.0 (#​3448)
• Chore: Update golangci-lint version to v2.10.1 (#​3470)
• Chore: Update golangci-lint version to v2.11.3 (#​3482)
• Migrate away from custom GitHub action approval workflow (#​3491)
• Release: Auto-create git tags for the tools/setup-envtest submodule (#​3476)

📖 Additionally, there has been 1 contribution to our documentation. (#​3477)

Dependencies

Added

• github.com/cenkalti/backoff/v5: v5.0.3
• gonum.org/v1/gonum: v0.16.0
• k8s.io/streaming: v0.36.0

Changed

• cel.dev/expr: v0.24.0 → v0.25.1
• cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.30.0
• github.com/alecthomas/units: b94a6e3 → 0f3dac3
• github.com/cncf/xds/go: 2f00578 → ee656c7
• github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
• github.com/coreos/go-systemd/v22: v22.5.0 → v22.7.0
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/emicklei/go-restful/v3: v3.12.2 → v3.13.0
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
• github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
• github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
• github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/golang/glog: v1.2.4 → v1.2.5
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.7
• github.com/moby/spdystream: v0.5.0 → v0.5.1
• github.com/onsi/ginkgo/v2: v2.27.2 → v2.27.4
• github.com/onsi/gomega: v1.38.2 → v1.39.0
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/common: v0.66.1 → v0.67.5
• github.com/prometheus/procfs: v0.16.1 → v0.19.2
• github.com/spf13/cobra: v1.10.0 → v1.10.2
• github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
• go.etcd.io/etcd/api/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/client/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/client/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
• go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 → v0.65.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0
• go.opentelemetry.io/otel/metric: v1.36.0 → v1.41.0
• go.opentelemetry.io/otel/sdk/metric: v1.36.0 → v1.40.0
• go.opentelemetry.io/otel/sdk: v1.36.0 → v1.40.0
• go.opentelemetry.io/otel/trace: v1.36.0 → v1.41.0
• go.opentelemetry.io/otel: v1.36.0 → v1.41.0
• go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
• go.uber.org/zap: v1.27.0 → v1.27.1
• golang.org/x/crypto: v0.45.0 → v0.47.0
• golang.org/x/exp: 8a7402a → 944ab1f
• golang.org/x/mod: v0.29.0 → v0.32.0
• golang.org/x/net: v0.47.0 → v0.49.0
• golang.org/x/oauth2: v0.30.0 → v0.34.0
• golang.org/x/sync: v0.18.0 → v0.19.0
• golang.org/x/sys: v0.38.0 → v0.40.0
• golang.org/x/telemetry: 078029d → bd525da
• golang.org/x/term: v0.37.0 → v0.39.0
• golang.org/x/text: v0.31.0 → v0.33.0
• golang.org/x/time: v0.9.0 → v0.14.0
• golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated
• golang.org/x/tools: v0.38.0 → v0.41.0
• google.golang.org/genproto/googleapis/api: a0af3ef → 8636f87
• google.golang.org/genproto/googleapis/rpc: 200df99 → 8636f87
• google.golang.org/grpc: v1.72.2 → v1.79.3
• google.golang.org/protobuf: v1.36.8 → f2248ac
• k8s.io/api: v0.35.0 → v0.36.0
• k8s.io/apiextensions-apiserver: v0.35.0 → v0.36.0
• k8s.io/apimachinery: v0.35.0 → v0.36.0
• k8s.io/apiserver: v0.35.0 → v0.36.0
• k8s.io/client-go: v0.35.0 → v0.36.0
• k8s.io/code-generator: v0.35.0 → v0.36.0
• k8s.io/component-base: v0.35.0 → v0.36.0
• k8s.io/klog/v2: v2.130.1 → v2.140.0
• k8s.io/kms: v0.35.0 → v0.36.0
• k8s.io/kube-openapi: 589584f → 43fb72c
• k8s.io/utils: bc988d5 → b8788ab
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0
• sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2

Removed

• github.com/cenkalti/backoff/v4: v4.3.0
• github.com/gregjones/httpcache: 901d907
• github.com/grpc-ecosystem/go-grpc-prometheus: v1.2.0
• github.com/zeebo/errs: v1.4.0
• golang.org/x/xerrors: 9bdfabe

Thanks to all our contributors! 😊

v0.23.3

Compare Source

What's Changed

• 🐛 Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if objects are equal by @​k8s-infra-cherrypick-robot in #​3469

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

v0.23.2

Compare Source

What's Changed

• 🐛 Fix fake client's SSA status patch resource version check by @​k8s-infra-cherrypick-robot in #​3446
• ✨ Reduce memory usage of default webhooks by @​k8s-infra-cherrypick-robot in #​3467

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

v0.23.1

Compare Source

What's Changed

• [release-0.23] 🐛 Cache reader: Wait for cache sync when ReaderFailOnMissingInformer is true by @​k8s-infra-cherrypick-robot in #​3433
• [release-0.23] 🐛 Fix panic when using CRs with embedded pointer structs by @​k8s-infra-cherrypick-robot in #​3436
• [release-0.23] 🌱 Test cache reader waits for cache sync by @​k8s-infra-cherrypick-robot in #​3438
• [release-0.23] 🐛 Fakeclient: Fix status apply if existing object has managedFields set by @​k8s-infra-cherrypick-robot in #​3437

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

kubernetes-sigs/controller-tools (sigs.k8s.io/controller-tools)

v0.21.0

Compare Source

What's Changed

• ⚠️ Bump to k8s.io/* v1.36 by @​sbueringer in #​1407
• ⚠️ Upgrade Go version to 1.26.0 by @​camilamacedo86 in #​1402
• ✨ Add kubebuilder:externalDoc marker by @​pedjak in #​1335
• ✨ Add optional roleName parameter to RBAC marker by @​AlirezaPourchali in #​1334
• ✨ Add support for external ApplyConfiguration mappings by @​andrew-farries in #​1327
• ✨ Add support for k8s:enum markers by @​alvaroaleman in #​1352
• ✨ Add support for k8s:immutable by @​alvaroaleman in #​1354
• ✨ ApplyConfigurations: Generate extract functions by @​alvaroaleman in #​1346
• ✨ Preserve Enum validation for IntOrString type in CRD generation by @​dongjiang1989 in #​1370
• ✨ Support nested pointer to type-aliased slices by @​dongjiang1989 in #​1331
• 🌱 Handle any/interface{} type in CRD generator with clear error by @​Fedosin in #​1362
• 🐛 Fix applyconfiguration generator for cluster-scoped resources by @​joelanford in #​1347

Misc

• 📖 docs: Add examples to all marker types. by @​camilamacedo86 in #​1340
• 🌱 Fix and test webhook testdata compilation by @​alvaroaleman in #​1345
• 🌱 Fix go generate validation by @​alvaroaleman in #​1348
• 🌱 Migrate away from custom GitHub action approval workflow by @​karimzakzouk in #​1372
• ✨ Migrate to new envtest location and newer Kubernetes version by @​sbueringer in #​1337
• 🌱 Test the test CRD can actually be applied by @​alvaroaleman in #​1351
• 🌱 Validate tidyness of all go modules by @​alvaroaleman in #​1349
• 🌱 Validate we use the same k8s.io/* version in all modules by @​alvaroaleman in #​1353

envtest

• ✨ Release envtest v1.36.0 by @​erikgb in #​1393
• 🌱 Promotion of envtest release for Kubernetes v1.36.0 by @​sbueringer in #​1400

Dependency bumps

• 🌱 Bump EndBug/add-and-commit from 9.1.4 to 10.0.0 in the all-github-actions group by @​dependabot[bot] in #​1369
• 🌱 Bump actions/setup-go from 6.1.0 to 6.2.0 in the all-github-actions group by @​dependabot[bot] in #​1326
• 🌱 Bump actions/setup-go from 6.2.0 to 6.3.0 in the all-github-actions group by @​dependabot[bot] in #​1356
• 🌱 Bump github.com/fatih/color from 1.18.0 to 1.19.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1368
• 🌱 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1322
• 🌱 Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1330
• 🌱 Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1405
• 🌱 Bump golang.org/x/tools from 0.40.0 to 0.41.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1325
• 🌱 Bump golang.org/x/tools from 0.41.0 to 0.42.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1342
• 🌱 Bump golang.org/x/tools from 0.42.0 to 0.43.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1364
• 🌱 Bump golang.org/x/tools from 0.43.0 to 0.44.0 in the all-go-mod-patch-and-minor group across 1 directory by @​dependabot[bot] in #​1377
• 🌱 Bump golangci-lint to v2.8.0 by @​dongjiang1989 in #​1332
• 🌱 Bump golangci-lint to v2.10.1 by @​dongjiang1989 in #​1358
• 🌱 Bump golangci-lint to v2.11.3 by @​dongjiang1989 in [#​1367](https://redirect.github.com/kubernetes-sigs/controller-t

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 29 additional dependencies were updated

Details:

Package	Change
github.com/emicklei/go-restful/v3	v3.12.2 -> v3.13.0
github.com/fatih/color	v1.18.0 -> v1.19.0
github.com/fsnotify/fsnotify	v1.9.0 -> v1.10.0
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.1
github.com/go-openapi/jsonpointer	v0.21.0 -> v0.23.1
github.com/go-openapi/jsonreference	v0.20.4 -> v0.21.5
github.com/go-openapi/swag	v0.23.0 -> v0.26.0
github.com/google/gnostic-models	v0.7.0 -> v0.7.1
github.com/mattn/go-colorable	v0.1.13 -> v0.1.14
github.com/prometheus/common	v0.66.1 -> v0.67.5
github.com/prometheus/procfs	v0.16.1 -> v0.20.1
go.uber.org/zap	v1.27.0 -> v1.27.1
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/crypto	v0.46.0 -> v0.50.0
golang.org/x/mod	v0.31.0 -> v0.35.0
golang.org/x/net	v0.48.0 -> v0.53.0
golang.org/x/oauth2	v0.30.0 -> v0.36.0
golang.org/x/sync	v0.19.0 -> v0.20.0
golang.org/x/sys	v0.39.0 -> v0.43.0
golang.org/x/term	v0.38.0 -> v0.42.0
golang.org/x/text	v0.32.0 -> v0.36.0
golang.org/x/time	v0.11.0 -> v0.15.0
golang.org/x/tools	v0.40.0 -> v0.44.0
google.golang.org/protobuf	v1.36.8 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/api	v0.35.0 -> v0.36.1
k8s.io/klog/v2	v2.130.1 -> v2.140.0
k8s.io/kube-openapi	v0.0.0-20250910181357-589584f1c912 -> v0.0.0-20260427204847-8949caaa1199
k8s.io/utils	v0.0.0-20251002143259-bc988d571ff4 -> v0.0.0-20260319190234-28399d86e0b5
sigs.k8s.io/structured-merge-diff/v6	v6.3.1 -> v6.4.0