Bump the kube group across 1 directory with 3 updates

[dependabot]

Bumps the kube group with 3 updates in the / directory: kube, k8s-openapi and schemars.

Updates kube from 3.1.0 to 4.2.0

Release notes

Sourced from kube's releases.

4.2.0

What's Changed

Maintenance release for 4.0.0. Fixes, and https proxy. MSRV 1.89. All PRs here.

Added

• add support for https proxy by @​goenning in kube-rs/kube#2013

Fixed

• Update kube-cel requirement from 0.7.0 to 0.8.0 by @​dependabot[bot] in kube-rs/kube#2017
• client: include sources in CommitError's error message by @​iniw in kube-rs/kube#2020
• Include error sources in Display messages at client, core, runtime by @​doxxx93 in kube-rs/kube#2021
• Remove extraneous Sync bound in Controller::reconcile_all_on by @​bojidar-bg in kube-rs/kube#2029
• client: fall back to OS-native cert store via rustls-platform-verifier by @​aviramha in kube-rs/kube#2030
• Avoid deep-cloning ObjectMeta per event in trigger_owners by @​doxxx93 in kube-rs/kube#2039
• config: resolve relative exec plugin command paths by @​deepu105 in kube-rs/kube#2037
• Construct typed CustomResourceDefinition in derived crd() by @​doxxx93 in kube-rs/kube#2042

New Contributors

• @​iniw made their first contribution in kube-rs/kube#2020
• @​bojidar-bg made their first contribution in kube-rs/kube#2029
• @​deepu105 made their first contribution in kube-rs/kube#2037

Full Changelog: kube-rs/kube@4.0.0...4.2.0

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;

#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
</tr></table>

... (truncated)

Changelog

Sourced from kube's changelog.

4.2.0 / 2026-07-22

• see kube-rs/kube@4.0.0...main

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;

#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules

See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @​doxxx93.

Config

A lot of improvements to config handling;

• better error handling of malformed client certs in kube-rs/kube#1966
• add missing Kubeconfig fields in kube-rs/kube#1965
• Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964
• deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

... (truncated)

Commits

• 526f1f2 release 4.2.0
• 3b811b5 break circular dependency on explicit dev-dep versions
• 48d1ad5 Construct typed CustomResourceDefinition in derived crd() (#2042)
• d0328f7 config: resolve relative exec plugin command paths (#2037)
• 76fee02 ignore multiple versions of syn (#2046)
• fe44fa2 Amortize PredicateFilter cache eviction across polls (#2040)
• 5afcf19 Avoid deep-cloning ObjectMeta per event in trigger_owners (#2039)
• 660966e Chore(deps): Update serde-saphyr requirement from 0.0.27 to 0.0.29 (#2032)
• 0bcb4c7 bump msrv to 1.89 (#2035)
• f671d57 fix deny failures (#2034)
• Additional commits viewable in compare view

Updates k8s-openapi from 0.27.1 to 0.28.0

Release notes

Sourced from k8s-openapi's releases.

v0.28.0

k8s-openapi

• BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

• BREAKING CHANGE: Dropped support for Kubernetes 1.31.

• FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

• FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

• v1.32.13
• v1.33.13
• v1.34.9
• v1.35.6
• v1.36.2

k8s-openapi-codegen-common

• FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

• FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

Changelog

Sourced from k8s-openapi's changelog.

v0.28.0 (2026-06-14)

k8s-openapi

• BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

• BREAKING CHANGE: Dropped support for Kubernetes 1.31.

• FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

• FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

• v1.32.13
• v1.33.13
• v1.34.9
• v1.35.6
• v1.36.2

k8s-openapi-codegen-common

• FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

• FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

---

Commits

• b2c839b v0.28.0
• ebea539 Update to v1.33.13, v1.34.9, v1.35.6, v1.36.2
• b7acde4 Restore schemars 0.8 support.
• 366b480 Update kind to v0.32.0
• f1b5881 Update to v1.33.12, v1.34.8, v1.35.5, v1.36.1
• 8a891b9 Add v1.36 and drop v1.31
• bcd3499 Fix StatefulSet::volumeClaimTemplates to deep merge by name.
• 654a839 Update to v1.33.11, v1.34.7, v1.35.4
• eda35ab Update to v1.33.10, v1.34.6, v1.35.3
• See full diff in compare view

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

• Update to syn 3 in schemars_derive

Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

• Update to syn 3 in schemars_derive

Commits

• ed61863 v1.2.2
• ae618c3 Update syn to v3 (#528)
• c072ea0 docs: add missing attributes to table of contents (#517)
• 015272f Clippy fix (#512)
• 944f727 Bump bytes from 1.10.1 to 1.11.1 (#507)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions