Skip to content

Bump the k8sio group across 1 directory with 4 updates - #303

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/main/k8sio-35555c6830
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/main/k8sio-35555c6830

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the k8sio group with 4 updates in the / directory: k8s.io/api, k8s.io/apimachinery, k8s.io/client-go and k8s.io/kubectl.

Updates k8s.io/api from 0.37.1 to 0.37.2

Commits

Updates k8s.io/apimachinery from 0.37.1 to 0.37.2

Commits

Updates k8s.io/client-go from 0.37.1 to 0.37.2

Commits

Updates k8s.io/kubectl from 0.37.1 to 0.37.2

Commits

@dependabot dependabot Bot added the dependencies Issue/PR Pull about a dependency file label Oct 29, 2026
@copy-pr-bot

copy-pr-bot Bot commented Oct 29, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Devin Review

Comment thread vendor/modules.txt
k8s.io/cli-runtime/pkg/printers
k8s.io/cli-runtime/pkg/resource
# k8s.io/client-go v0.37.1
# k8s.io/client-go v0.37.2

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Vendored Kubernetes code remains on old patch

The v0.37.2 module entries still point builds at unchanged v0.37.1 vendored sources. Released binaries therefore omit the Kubernetes patch updates.

Learn more

Go uses vendor/ by default for this module, so changing go.mod and modules.txt alone does not replace the source compiled into the binaries. None of the vendored Kubernetes source files changed in this PR. The version labels now describe a newer release than the code they accompany.

Example: A release built from this PR records k8s.io/client-go v0.37.2 in module metadata, but compiles the unchanged client-go files vendored before the bump.

Recommended fix: Run go mod vendor with the updated module versions and commit the resulting changes under vendor/k8s.io/; verify that make check-vendor produces no diff.

Devin Review


Was this helpful? React with 👍 or 👎 to provide feedback.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is incorrect. "go mod vendor" produces no more diff.

@rahulait

Copy link
Copy Markdown
Contributor

/ok to test a9f1d3e

@coveralls

coveralls commented Oct 30, 2026 •

Copy link
Copy Markdown

Coverage Report for CI Build 43554142458

Coverage remained the same at 24.026%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 1719
Covered Lines: 413
Line Coverage: 24.03%
Coverage Strength: 0.24 hits per line

💛 - Coveralls

@rahulait rahulait left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

needs manual updates to fix vendored modules as they are not correctly added.

@dependabot dependabot Bot changed the title Bump the k8sio group with 4 updates Bump the k8sio group across 1 directory with 4 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/main/k8sio-35555c6830 branch 2 times, most recently from 815248b to 3211f35 Compare November 10, 2026 05:52
@rahulait

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/main/k8sio-35555c6830 branch from 3211f35 to c09c02e Compare November 14, 2026 03:49
Bumps the k8sio group with 4 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go) and [k8s.io/kubectl](https://github.com/kubernetes/kubectl).

Updates `k8s.io/api` from 0.37.1 to 0.37.2
- [Commits](kubernetes/api@v0.37.1...v0.37.2)

Updates `k8s.io/apimachinery` from 0.37.1 to 0.37.2
- [Commits](kubernetes/apimachinery@v0.37.1...v0.37.2)

Updates `k8s.io/client-go` from 0.37.1 to 0.37.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.37.1...v0.37.2)

Updates `k8s.io/kubectl` from 0.37.1 to 0.37.2
- [Commits](kubernetes/kubectl@v0.37.1...v0.37.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8sio
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8sio
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8sio
- dependency-name: k8s.io/kubectl
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8sio
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Rahul Sharma <rahulsharm@nvidia.com>
@rahulait
rahulait force-pushed the dependabot/go_modules/main/k8sio-35555c6830 branch from c09c02e to ac6070d Compare November 14, 2026 03:54
@rahulait
rahulait self-requested a review November 14, 2026 03:54
@rahulait

Copy link
Copy Markdown
Contributor

/ok to test ac6070d

@rahulait rahulait left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issue/PR Pull about a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants