chore(deps): update k8s.io (main)

[renovate-sh-app]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
k8s.io/api	v0.36.3 → v0.37.0			replace	minor
k8s.io/apimachinery	v0.36.3 → v0.37.0			indirect	minor
k8s.io/client-go	v0.36.3 → v0.37.0			replace	minor
k8s.io/client-go	v0.36.3 → v0.37.0			indirect	minor
k8s.io/kube-openapi	d427ff9 → 7970a1e			indirect	digest

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

kubernetes/api (k8s.io/api)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.0

Compare Source

v0.36.4

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.37.0

Compare Source

v0.36.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[renovate-sh-app]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 18 additional dependencies were updated
• The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
go	1.26.5 -> 1.27.0
github.com/davecgh/go-spew	v1.1.2-0.20180830191138-d8f796af33cc -> v1.1.2-0.20180830191138-d8f796af33cc
github.com/hashicorp/go-hclog	v1.6.3 -> v1.6.3
github.com/opentracing-contrib/go-grpc	v0.1.2 -> v0.1.2
github.com/opentracing/opentracing-go	v1.2.0 -> v1.2.0
github.com/pierrec/lz4/v4	v4.1.26 -> v4.1.26
github.com/pkg/errors	v0.9.1 -> v0.9.1
go.yaml.in/yaml/v2	v2.4.4 -> v2.4.4
golang.org/x/net	v0.58.0 -> v0.58.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260630182238-925bb5da69e7 -> v0.0.0-20260630182238-925bb5da69e7
github.com/Microsoft/go-winio	v0.6.2 -> v0.6.2
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.36 -> v1.4.36
github.com/google/jsonschema-go	v0.4.2 -> v0.4.2
github.com/hashicorp/golang-lru/v2	v2.0.7 -> v2.0.7
go.opentelemetry.io/contrib/exporters/autoexport	v0.69.0 -> v0.69.0
gopkg.in/ini.v1	v1.67.2 -> v1.67.2
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.1
github.com/stretchr/objx	v0.5.2 -> v0.5.3
sigs.k8s.io/structured-merge-diff/v6	v6.4.1 -> v6.4.2

[tempo-ci-app]

🤖 fix-renovate-prs no_fix: Lint fails because k8s.io/kube-openapi's go 1.27.0 requirement bumped go.mod's go directive, but the grafana/tempo-ci-tools docker image ships a golangci-lint built with go1.26 that refuses to load a config targeting go1.27 — the tools image needs a rebuild, not a PR change. The failing backendscheduler test TestCompactionProvider_EmptyStart is a flaky timing race unrelated to the k8s.io bump (passes locally with -count=1; the PR only touches vendor/ and go.mod).

[tempo-ci-app]

🤖 fix-renovate-prs no_fix: Lint fails because the pinned grafana/tempo-ci-tools image ships a golangci-lint built with Go 1.26, but the k8s.io v0.37 bump raised go.mod's Go directive to 1.27.0 and golangci-lint refuses to load the config. Fix requires rebuilding tempo-ci-tools with a newer golangci-lint (out of scope for this repo); a rerun won't help.

[tempo-ci-app]

🤖 fix-renovate-prs rerun_failed_actions: Both e2e failures are transient infra — the log shows docker: Error response from daemon: pull access denied for minio/minio for minio-9000, and the api tests cascade from the same missing backend. The one unit failure (TestCompactionProvider_EmptyStart) is a timing flake in a package that doesn't import k8s.io and passed 5 consecutive local runs, so it's unrelated to the k8s.io v0.37.0 bump.

[tempo-ci-app]

🤖 fix-renovate-prs rerun_failed_actions: Both integration jobs fail with docker container minio-9000 failed to start because pulling minio/minio:RELEASE.2021-10-13T00-23-17Z returns pull access denied for minio/minio — a Docker Hub image-pull failure on the runner, unrelated to this k8s.io vendor bump.

[tempo-ci-app]

🤖 fix-renovate-prs no_fix: Lint fails because the k8s.io v0.37 bump pushed go.mod's directive to go 1.27.0, but the pinned TEMPO_CI_TOOLS_IMAGE ships a golangci-lint built with Go 1.26 that refuses to load its config against 1.27 code. The fix is to bump the tools image tag in Makefile (a separate Renovate PR), not to edit anything in this k8s.io dep bump.

[tempo-ci-app]

🤖 fix-renovate-prs failed_to_fix: The k8s.io bump forces go.mod to go 1.27.0 (kube-openapi requires it), but the pinned grafana/tempo-ci-tools image ships a golangci-lint built with go1.26 that refuses to lint go1.27 code. Next step for a human: bump tools/go.mod to go 1.27.0, let docker-ci-tools.yml republish the ci-tools image, and update TEMPO_CI_TOOLS_IMAGE in the Makefile to the new tag before this PR can pass Lint.

[tempo-ci-app]

🤖 fix-renovate-prs failed_to_fix: Lint fails because the pinned tempo-ci-tools:main-3f54f1c-20260716-212549 image bundles a golangci-lint built with Go 1.26 while this PR bumps go.mod to go 1.27.0 (transitively required by k8s.io v0.37.0) — the tools image needs to be rebuilt/re-tagged in the Makefile, which is infra out of scope for a Renovate patch. The single e2e-storage test failure isn't identifiable from the log tail (only setup/shutdown noise visible, no --- FAIL: line), so a human needs to inspect the full test output to decide whether it's flake or a real regression.