fix(deps): update all non-major dependencies - #2419
Merged
Merged
Conversation
renovate
Bot
requested review from
abaguas,
elohmrow,
jkremser,
k0da,
kuritka and
ytsarev
as code owners
July 3, 2026 18:39
✅ Deploy Preview for k8gb-preview ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
July 7, 2026 15:08
4abbae7 to
d450c8a
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
July 9, 2026 14:46
a88c211 to
c70e298
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
July 15, 2026 14:07
139e953 to
b6813dd
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
July 16, 2026 17:33
affad46 to
d269923
Compare
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 17, 2026 09:22
d269923 to
2e9b6f4
Compare
ytsarev
approved these changes
Jul 17, 2026
aryasoni98
pushed a commit
to aryasoni98/k8gb
that referenced
this pull request
Jul 20, 2026
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com>
ytsarev
added a commit
that referenced
this pull request
Jul 29, 2026
* feat: override discovered CoreDNS exposed IPs via EDGE_DNS_EXPOSED_IPS Bare-metal / colo clusters behind 1:1 static NAT only see private node IPs in the CoreDNS Service / Ingress status. k8gb published those private IPs as the zone-delegation NS glue records (gslb-ns-<geoTag>-<loadBalancedZone>), so external resolvers following the delegation timed out. Add a cluster-level override: when EDGE_DNS_EXPOSED_IPS (Helm value k8gb.edgeDNSExposedIPs) is set, the ipresolver returns these operator-provided public IPs instead of discovering them from the CoreDNS Service / Ingress. The override is applied in ipresolver.readIPs so every NS-glue consumer (ExternalDNS and Infoblox) receives the public IPs with no provider-specific code. The per-Gslb k8gb.io/exposed-ip-addresses annotation remains the mechanism for overriding application localtargets-* / final A records. Closes #2360 Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: add edgeDNSExposedIPs to values schema and de-flake NS glue test The new k8gb.edgeDNSExposedIPs Helm value was rejected by values.schema.json (additionalProperties: false on the k8gb object), failing the schema check and breaking chainsaw/terratest at helm upgrade before any e2e test ran. Add the property to the schema. TestResolveNSNames/provide_NS_records was order-dependent: it mapped external cluster IPs via gomock.InOrder while GetClusterGlueAResults ranges a map in random order, so the eu/za IPs were assigned non-deterministically. Key the mock off the queried NS name instead, making the test order-independent. Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: extend EDGE_DNS_EXPOSED_IPS override to application A records Address PR review on #2402: - Constrain EDGE_DNS_EXPOSED_IPS to IPv4 (validate ipv4, was ip). Both delegation paths publish A records, so an IPv6 value would render an invalid A-record target until AAAA glue is supported. - Propagate the cluster-level override into Gslb application target resolution, not just the NS glue records. Previously localtargets-* / final A records still resolved to the discovered (private) IPs, so issue #2360 was only half solved. resolveGslbExposedIPs now applies the override for both the reconciliation and legacy controllers, with explicit precedence: per-Gslb annotations (k8gb.io/exposed-hostnames, k8gb.io/exposed-ip-addresses) > EDGE_DNS_EXPOSED_IPS > discovered service/ingress IPs. - Add precedence unit tests and an IPv6-rejection config test; update chart values/schema/README and docs to reflect both-path behavior. Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Update kubernetes monorepo to v0.36.2 (#2332) * Update kubernetes monorepo to v0.36.2 * Align Terratest Kubernetes dependencies Signed-off-by: Yury Tsarev <yury@0ttl.ai> --------- Signed-off-by: Yury Tsarev <yury@0ttl.ai> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Update all non-major dependencies (#2400) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Update all non-major dependencies (#2403) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Bump CoreDNS CRD Plugin to v0.5.0 (#2405) Signed-off-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * [create-pull-request] automated change (#2407) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: ytsarev <518532+ytsarev@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * feat: move k8gb.io/v1beta1 to /v1beta1io (#2408) Signed-off-by: Michal K <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: Skip GSLB reconciliation when ZoneDelegation is removed (#2409) Signed-off-by: Michal K <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * feat: not reconcile immediatelly when error occurs there is no reason to run reconciliation immediatelly after error. Such behavior loops errors and potentionally could halt DNS etc. Signed-off-by: Michal Kuritka <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * feat: rename CreateZoneDelegation to SaveZoneDelegation Signed-off-by: Michal Kuritka <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * feat: remove .conf from ZoneDelegation name Signed-off-by: Michal Kuritka <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: make legacy migration cleanup reliable (#2414) * fix: make legacy migration cleanup reliable Legacy Gslb deletion could stall when the migration controller only observed an update after deletion had already started. The update predicate accepted only the transition into deletion, so subsequent updates to a terminating object were filtered and the migration protection finalizer could remain indefinitely. Reconcile every update for a terminating legacy Gslb and cover that behavior with a regression test. Make the Chainsaw retry change a watched migration label, report useful state before its outer timeout, and serialize workflow runs per source branch. Also repair the Renovate guard so duplicate workflows no longer amplify the flake. Signed-off-by: Yury Tsarev <yury@0ttl.ai> * test: handle deletion at timeout boundary Recheck the legacy Gslb after kubectl reports a delete timeout. Fail when the object remains, but continue when it has already disappeared so a successful boundary deletion does not fail Chainsaw. Signed-off-by: Yury Tsarev <yury@0ttl.ai> --------- Signed-off-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * ci: run Chainsaw for Renovate PRs (#2416) Remove the Renovate job exclusion so branch concurrency leaves one runnable Chainsaw job instead of cancelling the push run and skipping the pull request run. Signed-off-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Update all non-major dependencies (#2410) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * ci: use GitHub-generated release notes (#2417) * ci: use GitHub-generated release notes Replace the legacy changelog generator with GitHub's release-notes API and reuse the published release body for the offline changelog. Categorize dependency and project changes while excluding automated changelog noise. Fixes #2092 Signed-off-by: Yury Tsarev <yury@0ttl.ai> * ci: prioritize project changes in release notes List features, fixes, and maintenance before dependency updates while keeping dependency PRs in their dedicated category. Signed-off-by: Yury Tsarev <yury@0ttl.ai> * ci: add AI-generated release summaries Use GitHub Models to prepend a concise factual summary to generated release notes. Keep inference time-boxed and non-blocking so deterministic notes remain the fallback. Signed-off-by: Yury Tsarev <yury@0ttl.ai> --------- Signed-off-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Update dependency k8gb-io/k8gb to v0.20.0 (#2421) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * [create-pull-request] automated change (#2420) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: ytsarev <518532+ytsarev@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * Add 2026-07-08 community meeting agenda (#2422) * add 2026-07-08 community meeting agenda Signed-off-by: elohmrow <bradley.andersen@pm.me> * add 2026-07-08 community meeting notes Signed-off-by: elohmrow <bradley.andersen@pm.me> --------- Signed-off-by: elohmrow <bradley.andersen@pm.me> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: coredns reads metrics local address instead external IP or LB Signed-off-by: Michal Kuritka <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: make DNSZones optional Signed-off-by: Michal K <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix: stop reconciliation when ZoneDelegation not found Signed-off-by: Michal K <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * ZoneDelegation: dynamic geotags refactor Dynamic geotags are available only for IBX when ext GSLB cluster geotag is empty Signed-off-by: Michal K <kuritka@gmail.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * docs: clarify dynamic zone cluster participation (#2404) Signed-off-by: Dejan Stajic <8886210+dejoski@users.noreply.github.com> Co-authored-by: Dejan Stajic <8886210+dejoski@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * ci: avoid cancelled Chainsaw checks (#2429) Signed-off-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * fix(deps): update all non-major dependencies (#2419) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * chore(deps): update go module directive to v1.26.5 (#2423) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * [create-pull-request] automated change (#2433) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: ytsarev <518532+ytsarev@users.noreply.github.com> Signed-off-by: Arya Soni <aryasoni98@gmail.com> * refactor: move exposed-IP precedence into refresolver Keep application address resolution out of reconciliation and align Helm schema uniqueItems with runtime validation. Signed-off-by: Arya Soni <aryasoni98@gmail.com> * refactor: rename cluster exposed IP override Signed-off-by: Yury Tsarev <yury@0ttl.ai> * test: cover cluster exposed IP override with Chainsaw Signed-off-by: Yury Tsarev <yury@0ttl.ai> * test: fix Chainsaw array assertions Signed-off-by: Yury Tsarev <yury@0ttl.ai> --------- Signed-off-by: Arya Soni <aryasoni98@gmail.com> Signed-off-by: Yury Tsarev <yury@0ttl.ai> Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Signed-off-by: Michal K <kuritka@gmail.com> Signed-off-by: Michal Kuritka <kuritka@gmail.com> Signed-off-by: elohmrow <bradley.andersen@pm.me> Signed-off-by: Dejan Stajic <8886210+dejoski@users.noreply.github.com> Signed-off-by: Arya Soni <18515597+aryasoni98@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Yury Tsarev <yury@0ttl.ai> Co-authored-by: Yury Tsarev <yury@upbound.io> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: ytsarev <518532+ytsarev@users.noreply.github.com> Co-authored-by: Kuritka <kuritka@gmail.com> Co-authored-by: Bradley Andersen <bradley.andersen@pm.me> Co-authored-by: Dejan Stajic <dejanstajic12@gmail.com> Co-authored-by: Dejan Stajic <8886210+dejoski@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.53.0→6.55.01.46.0→1.46.1v4.3.0→v4.4.0v1.15.0→v1.16.0v4.36.3→v4.37.1v4.2.2→v4.2.3v1.30.2→v1.30.31.30.2→1.30.31.6.0→1.6.129.14.0→29.17.0v1.6.0→v1.6.1v2.19.4→v2.20.0Release Notes
hashicorp/terraform-provider-aws (aws)
v6.55.0Compare Source
6.55.0 (July 15, 2026)
FEATURES:
aws_elasticache_service_updates(#44608)aws_autoscaling_group(#48928)aws_cloudwatch_log_stream(#48878)aws_kinesis_firehose_delivery_stream(#48946)aws_network_interface(#48887)aws_rds_cluster(#48948)aws_sfn_state_machine(#48840)ENHANCEMENTS:
updated_atattribute (#48881)allowed_workload_configuration,private_endpoint, andprivate_endpoint_overridesconfiguration blocks toauthorizer_configuration.custom_jwt_authorizer, and the read-onlyrequire_service_s3_endpointattribute tonetwork_configuration.network_mode_config(#48654)allowed_workload_configuration,private_endpoint, andprivate_endpoint_overridesconfiguration blocks toauthorizer_configuration.custom_jwt_authorizer(#48654)allowed_workload_configuration,private_endpoint, andprivate_endpoint_overridesconfiguration blocks toauthorizer_configuration.custom_jwt_authorizer(#48654)require_service_s3_endpointargument tonetwork_configuration.network_mode_config(#48654)allowed_workload_configuration,private_endpoint, andprivate_endpoint_overridesconfiguration blocks toauthorizer_configuration.custom_jwt_authorizer(#48654)consumer_group_offset_sync_modeattribute toconsumer_group_replicationblock (#47670)BUG FIXES:
Unsupported Typeerrors when nomemoryis configured (#48654)interface conversion: interface {} is nil, not *configservice.DescribeOrganizationConfigRuleStatusesOutputpanics on delete (#48845)v6.54.0Compare Source
NOTES:
capacity_reservation_config, it is best effort and we ask for community help in testing (#45926)FEATURES:
aws_route53profiles_profile(#48780)aws_bedrockagentcore_browser_profile(#46862)aws_codepipeline(#48808)aws_lambda_function_scaling_config(#48229)aws_scheduler_schedule(#48828)aws_ssoadmin_region(#48126)aws_workspaces_pool(#42678)aws_bedrockagentcore_browser_profile(#46862)aws_lambda_function_scaling_config(#48229)aws_ssoadmin_region(#48126)aws_workspaces_pool(#42678)ENHANCEMENTS:
host_kernel_overrideargument (#48777)resource_share_arnsandshared_resourcesattributes (#48729)tagsandtags_allattributes (#48458)host_kernelargument to theenvironmentconfiguration block (#48777)use_resource_timeout_for_propagationargument (#46405)10mforcreateandupdate,5mfordelete. (#46405)use_resource_timeout_for_propagationargument (#46405)5mforcreate,read, anddelete. (#46405)resource_share_arnsargument andshared_resourcesattribute (#48729)out_of_order_time_window_in_secondsandrule_query_offset_in_secondsarguments (#48659)auto_minor_version_upgradeargument (#42472)production_variants.capacity_reservation_configandshadow_production_variants.capacity_reservation_configconfiguration blocks (#45926)BUG FIXES:
content_policy_configblock. (#48772)topic_policy_configblock. (#48772)content_policy_config.filters_config.input_modalitiesvalues. (#48772)content_policy_config.filters_config.output_modalitiesvalues. (#48772)etagon Import. (#48782)etagwhen onlytagsupdated. (#48782)UnsupportedOperationExceptionerror when readingenable_directory_data_accessin regions where Directory Service Data is not available (e.g. GovCloud) (#47660)coredns/helm (coredns)
v1.46.1Compare Source
CoreDNS is a DNS server that chains plugins and provides Kubernetes DNS Services
What's Changed
New Contributors
Full Changelog: coredns/helm@coredns-1.46.0...coredns-1.46.1
docker/login-action (docker/login-action)
v4.4.0Compare Source
alecthomas/kong (github.com/alecthomas/kong)
v1.16.0Compare Source
github/codeql-action (github/codeql-action)
v4.37.1Compare Source
v4.37.0Compare Source
config-fileinput for thecodeql-action/initstep will soon support a new[owner/]repo[@​ref][:path]format. All components except the repository name are optional. If omitted,ownerdefaults to the same owner as the repository the analysis is running for,reftomain, andpathto.github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973helm/helm (helm)
v4.2.3Compare Source
istio/client-go (istio.io/client-go)
v1.30.3Compare Source
istio/istio (istio/istio)
v1.30.3: Istio 1.30.3Compare Source
Artifacts
Release Notes
kubernetes-sigs/gateway-api (kubernetes-sigs/gateway-api)
v1.6.1Compare Source
v1.6.1
Major Changes Since v1.6.0
Test & Conformance
TCPRouteMultipleRoutesAttachment. (#5053, @davidjumani)CleanupTestResourcesforBackendTLSPolicy,TCPRouteMultipleRoutesAttachmentandUDPRouteMultipleRoutesAttachment(#5065, @snorwin)SetupTimeoutConfig()not respecting defaults forListenerSetMustHaveCondition,ListenerSetListenersMustHaveConditions, andRequiredConsecutiveSuccesses. (#5066, @immanuwell)tcpRouteMustHaveConditionandudpRouteMustHaveConditiontimeouts which were silently ignore. (#5067, @immanuwell)Other (Cleanup or Flake)
GatewayStaticAddressestest flake by waiting for status.addresses to be published instead of assuming it appears atomically with Programmed. (#5038, @howardjohn)GatewayInfrastructuretest flake by polling for generated infrastructure resources instead of assuming immediate visibility after the gateway is accepted. (#5047, @howardjohn)TCPRouteWeightedRoutingandUDPRouteWeightedRoutingconformance tests by adding a data-plane readiness check before performing weighted routing assertions. (#5064, @arybolovlev)prometheus-community/helm-charts (prometheus-community/helm-charts)
v29.17.0Compare Source
Prometheus is a monitoring system and time series database.
What's Changed
Full Changelog: prometheus-community/helm-charts@prometheus-node-exporter-4.56.0...prometheus-29.17.0
v29.16.0Compare Source
Prometheus is a monitoring system and time series database.
What's Changed
Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-87.14.0...prometheus-29.16.0
v29.15.0Compare Source
Prometheus is a monitoring system and time series database.
What's Changed
Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-87.13.0...prometheus-29.15.0
step-security/harden-runner (step-security/harden-runner)
v2.20.0Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.