chore(deps): bump the kubernetes group across 1 directory with 3 updates - #37
dependabot[bot] wants to merge 1 commit into
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Kusari Analysis Results:
Both dependency and code security analyses returned clean results with no issues identified. The PR updates four Kubernetes ecosystem packages (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, k8s.io/streaming) from v0.36.1 to v0.36.2 as minor patch updates. These are indirect transitive dependencies pulled in via sigs.k8s.io/controller-runtime@v0.24.1. No CVEs or security advisories exist for either the old or new versions, all licenses (Apache-2.0, BSD-3-Clause, MIT) are permissive and compatible, and the packages are already at the latest available version. The code analysis of go.mod and go.sum found zero issues across all severity levels with no exposed secrets or workflow concerns. The combined risk profile remains low, and this update is safe to merge. Note View full detailed analysis result for more information on the output and the checks that were run.
Found this helpful? Give it a 👍 or 👎 reaction! |
|
Kusari PR Analysis rerun based on - af74eda performed at: 2026-06-16T17:43:14Z - link to updated analysis |
Bumps the kubernetes group with 2 updates in the / directory: [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/client-go](https://github.com/kubernetes/client-go). Updates `k8s.io/api` from 0.36.1 to 0.36.2 - [Commits](kubernetes/api@v0.36.1...v0.36.2) Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2 - [Commits](kubernetes/apimachinery@v0.36.1...v0.36.2) Updates `k8s.io/client-go` from 0.36.1 to 0.36.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.1...v0.36.2) --- updated-dependencies: - dependency-name: k8s.io/api dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kubernetes - dependency-name: k8s.io/apimachinery dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kubernetes - dependency-name: k8s.io/client-go dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kubernetes ... Signed-off-by: dependabot[bot] <support@github.com>
af74eda to
acea0e0
Compare
Bumps the kubernetes group with 2 updates in the / directory: k8s.io/api and k8s.io/client-go.
Updates
k8s.io/apifrom 0.36.1 to 0.36.2Commits
2f4cefdUpdate dependencies to v0.36.2 tagUpdates
k8s.io/apimachineryfrom 0.36.1 to 0.36.2Commits
ae3f98eUpdate dependencies to v0.36.2 tag2ec982dMerge pull request #139508lalitc375/automated-cherry-pick-of-#1394806a88102Fix wrong marking of errorsUpdates
k8s.io/client-gofrom 0.36.1 to 0.36.2Commits
877f535Update dependencies to v0.36.2 tag