Bump the all-go-mod-patch-and-minor group across 3 directories with 22 updates

[dependabot]

Bumps the all-go-mod-patch-and-minor group with 10 updates in the / directory:

Package	From	To
github.com/go-logr/logr	1.4.2	1.4.3
github.com/jellydator/ttlcache/v3	3.2.0	3.4.0
github.com/onsi/ginkgo/v2	2.22.2	2.25.2
github.com/spf13/pflag	1.0.5	1.0.9
go.uber.org/mock	0.5.1	0.6.0
k8s.io/api	0.31.3	0.31.12
k8s.io/client-go	0.31.3	0.31.12
k8s.io/component-base	0.31.3	0.31.12
sigs.k8s.io/cluster-api	1.9.6	1.9.11
sigs.k8s.io/controller-runtime	0.19.6	0.19.7

Bumps the all-go-mod-patch-and-minor group with 10 updates in the /hack/tools directory:

Package	From	To
github.com/go-logr/logr	1.4.2	1.4.3
github.com/onsi/ginkgo/v2	2.22.2	2.25.2
github.com/spf13/pflag	1.0.5	1.0.9
go.uber.org/mock	0.5.1	0.6.0
k8s.io/api	0.31.2	0.31.12
github.com/a8m/envsubst	1.4.2	1.4.3
honnef.co/go/tools	0.5.1	0.6.1
k8s.io/code-generator	0.31.7	0.31.12
sigs.k8s.io/controller-tools	0.16.5	0.19.0
sigs.k8s.io/kustomize/kustomize/v5	5.4.3	5.7.1

Bumps the all-go-mod-patch-and-minor group with 12 updates in the /test/e2e directory:

Package	From	To
github.com/apache/cloudstack-go/v2	2.17.0	2.17.1
github.com/go-logr/logr	1.4.2	1.4.3
github.com/onsi/ginkgo/v2	2.22.2	2.25.2
github.com/spf13/pflag	1.0.5	1.0.9
go.uber.org/mock	0.5.0	0.6.0
k8s.io/api	0.31.3	0.31.12
k8s.io/client-go	0.31.3	0.31.12
k8s.io/component-base	0.31.3	0.31.12
sigs.k8s.io/cluster-api	1.9.6	1.9.11
sigs.k8s.io/controller-runtime	0.19.6	0.19.7
github.com/Shopify/toxiproxy/v2	2.5.0	2.12.0
sigs.k8s.io/cluster-api/test	1.9.6	1.9.11

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

• Fix slog tests for 1.25 by @​hoeppi-google in go-logr/logr#361
• Remove one exception from Slog testing by @​thockin in go-logr/logr#362

New Contributors

• @​hoeppi-google made their first contribution in go-logr/logr#361

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits

• 38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
• f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
• 6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
• 028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
• 511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
• d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
• 158c311 Merge pull request #366 from thockin/master
• c79ddb3 Update to support golangci-lint v2
• 20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
• 0385e14 Add comments around slog exceptions
• Additional commits viewable in compare view

Updates github.com/jellydator/ttlcache/v3 from 3.2.0 to 3.4.0

Release notes

Sourced from github.com/jellydator/ttlcache/v3's releases.

v3.4.0

What's Changed

• Export NewItem function by @​hasfjord in jellydator/ttlcache#151
• Bump golang.org/x/sync from 0.8.0 to 0.9.0 by @​dependabot in jellydator/ttlcache#156
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in jellydator/ttlcache#157
• feat: New WithMaxCost option for custom cache capacity management strategies by @​dadrus in jellydator/ttlcache#152
• Bump golang.org/x/sync from 0.9.0 to 0.10.0 by @​dependabot in jellydator/ttlcache#158
• fix Range (and RangeBackwards) mutex usage by @​iurii-ssv in jellydator/ttlcache#164
• Make Cache.Get allocation-free by @​yiftachkarkason in jellydator/ttlcache#162
• Bump golang.org/x/sync from 0.10.0 to 0.11.0 by @​dependabot in jellydator/ttlcache#165
• Add GetOrSetFunc method by @​inpos in jellydator/ttlcache#161
• Handle empty cache while using Range or RangeBackwards by @​davseby in jellydator/ttlcache#176
• Allow subsequent calls to Start and Stop by @​davseby in jellydator/ttlcache#177
• Add OnUpdate method and metrics by @​davseby in jellydator/ttlcache#179
• Export NewItemWithOpts and bump go version in go.mod by @​swithek in jellydator/ttlcache#180
• Bump golang.org/x/sync from 0.11.0 to 0.14.0 by @​dependabot in jellydator/ttlcache#172
• fix: Deadlock during cost calculation by @​dadrus in jellydator/ttlcache#173
• Rewrite expired items tests to ensure expiration for Windows by @​davseby in jellydator/ttlcache#178
• Expose item cost by @​davseby in jellydator/ttlcache#181
• Add examples folder with httpcache example by @​davseby in jellydator/ttlcache#183
• Bump golang.org/x/sync from 0.14.0 to 0.15.0 by @​dependabot in jellydator/ttlcache#182

New Contributors

• @​hasfjord made their first contribution in jellydator/ttlcache#151
• @​dadrus made their first contribution in jellydator/ttlcache#152
• @​iurii-ssv made their first contribution in jellydator/ttlcache#164
• @​yiftachkarkason made their first contribution in jellydator/ttlcache#162
• @​inpos made their first contribution in jellydator/ttlcache#161

Full Changelog: jellydator/ttlcache@v3.3.0...v3.4.0

v3.3.0

What's Changed

• Add RangeBackwards method by @​k1LoW in jellydator/ttlcache#149
• Optimize Len method by counting expired items in expiration queue by @​hongkuancn in jellydator/ttlcache#150

New Contributors

• @​k1LoW made their first contribution in jellydator/ttlcache#149

Full Changelog: jellydator/ttlcache@v3.2.1...v3.3.0

v3.2.1

What's Changed

• Create dependabot.yaml by @​hkadakia in jellydator/ttlcache#128
• Add thread safety to features list by @​trajan0x in jellydator/ttlcache#137
• Fix update of expired items by @​Snawoot in jellydator/ttlcache#124
• Fix data race in Items method by @​hongkuancn in jellydator/ttlcache#146
• Exclude expired keys in data retrieval methods by @​hongkuancn in jellydator/ttlcache#148

New Contributors

... (truncated)

Commits

• 7145e12 add status section to README
• c2e22aa update feature list text
• 31efdf4 add examples and tutorials to README
• 9f1a275 Bump golang.org/x/sync from 0.14.0 to 0.15.0 (#182)
• 44a1fa2 Add examples folder with httpcache example (#183)
• 6978d5e Expose item cost (#181)
• b6a9e74 Rewrite expired items tests to ensure expiration for Windows (#178)
• b20a7fd fix: Deadlock during cost calculation (#173)
• fdc54f0 Bump golang.org/x/sync from 0.11.0 to 0.14.0 (#172)
• dd3c982 Export NewItemWithOpts (#180)
• Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.22.2 to 2.25.2

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.25.2

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

v2.25.1

2.25.1

Fixes

• fix(types): ignore nameless nodes on FullText() [10866d3]
• chore: fix some CodeQL warnings [2e42cff]

v2.25.0

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

• AroundNode(func()) - func will be called before the node is run.
• AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
• AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the PR.

... (truncated)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

2.25.1

Fixes

• fix(types): ignore nameless nodes on FullText() [10866d3]
• chore: fix some CodeQL warnings [2e42cff]

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

• AroundNode(func()) - func will be called before the node is run.
• AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
• AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the PR.

Fixes

• remove -o from run command [3f5d379]. fixes #1582

... (truncated)

Commits

• df6d755 v2.25.2
• 0ad3c4f bump gomega
• 83e2d4a add --github-output group for progress report content
• 1ec9114 v2.25.1
• 2e42cff chore: fix some CodeQL warnings
• 10866d3 fix(types): ignore nameless nodes on FullText()
• fcc0e74 v2.25.0
• 79e35c9 tidy up docs
• 6fef07c Document AroundNode
• 665e7ba AroundNode supports simpler signatures too
• Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.36.2 to 1.38.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.2

1.38.2

• roll back to go 1.23.0 [c404969]

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

v1.38.0

1.38.0

Features

• gstruct handles extra unexported fields [4ee7ed0]

Fixes

• support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

• Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]
• Fix typo [acd1f55]
• Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]
• Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]
• Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]
• Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]
• Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]
• Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]
• Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

v1.37.0

1.37.0

Features

• add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

v1.36.3

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
• remove spurious "toolchain" from go.mod (#819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.2

• roll back to go 1.23.0 [c404969]

1.38.1

Fixes

Numerous minor fixes and dependency bumps

1.38.0

Features

• gstruct handles extra unexported fields [4ee7ed0]

Fixes

• support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

• Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]
• Fix typo [acd1f55]
• Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]
• Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]
• Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]
• Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]
• Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]
• Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]
• Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

1.37.0

Features

• add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
• remove spurious "toolchain" from go.mod (#819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
• Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
• Fix typos (#813) [a1d518b]

Commits

• 79b8a75 v1.38.2
• c404969 roll back to go 1.23.0
• c36e89a v1.38.1
• 92eaa57 go mod tidy
• b9ed3cd deprecate CompileTest*
• 2a5bf77 fix invalid fmt.Errorf
• 3e9e385 bump ginkgo
• 7f37abe Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3
• 69e4761 fix(async_assertion): use correct error in errors.As
• 95737c0 Bump golang.org/x/net from 0.41.0 to 0.43.0 (#856)
• Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.5 to 1.0.9

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.9

What's Changed

• fix: Restore ParseErrorsWhitelist name for now by @​tomasaschan in spf13/pflag#446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

• Remove Redundant "Unknown-Flag" Error by @​vaguecoder in spf13/pflag#364
• Switching from whitelist to Allowlist terminology by @​dubrie in spf13/pflag#261
• Omit zero time.Time default from usage line by @​mologie in spf13/pflag#438
• implement CopyToGoFlagSet by @​pohly in spf13/pflag#330
• flag: Emulate stdlib behavior and do not print ErrHelp by @​tmc in spf13/pflag#407
• Print Default Values of String-to-String in Sorted Order by @​vaguecoder in spf13/pflag#365
• fix: Don't print ErrHelp in ParseAll by @​tomasaschan in spf13/pflag#443
• Reset args on re-parse even if empty by @​tomasaschan in spf13/pflag#444

New Contributors

• @​vaguecoder made their first contribution in spf13/pflag#364
• @​dubrie made their first contribution in spf13/pflag#261
• @​mologie made their first contribution in spf13/pflag#438
• @​pohly made their first contribution in spf13/pflag#330
• @​tmc made their first contribution in spf13/pflag#407
• @​tomasaschan made their first contribution in spf13/pflag#443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

v1.0.7

What's Changed

• Fix defaultIsZeroValue check for generic Value types by @​MidnightRocket in spf13/pflag#422
• feat: Use structs for errors returned by pflag. by @​eth-p in spf13/pflag#425
• Fix typos by @​co63oc in spf13/pflag#428
• fix #423 : Add helper function and some documentation to parse shorthand go test flags. by @​valdar in spf13/pflag#424
• add support equivalent to golang flag.TextVar(), also fixes the test failure as described in #368 by @​hujun-open in spf13/pflag#418
• add support for Func() and BoolFunc() #426 by @​LeGEC in spf13/pflag#429
• fix: correct argument length check in FlagSet.Parse by @​ShawnJeffersonWang in spf13/pflag#409
• fix usage message for func flags, fix arguments order by @​LeGEC in spf13/pflag#431
• Add support for time.Time flags by @​max-frank in spf13/pflag#348

New Contributors

• @​MidnightRocket made their first contribution in spf13/pflag#422

... (truncated)

Commits

• 1043857 Merge pull request #446 from spf13/fix-backwards-compat
• 7412009 fix: Restore ParseErrorsWhitelist name for now
• b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
• 40abc49 Merge pull request #443 from spf13/silence-errhelp
• 1bf832c Use errors.Is instead of equality check
• d25dd24 Reset args on re-parse even if empty
• 094909d Merge pull request #365 from vaguecoder/str2str-sorted
• ccb49e5 Print Default Values of String-to-String in Sorted Order
• b55ffb6 fix: Don't print ErrHelp in ParseAll
• 7c651d1 Merge pull request #407 from tmc/fix-errhelp
• Additional commits viewable in compare view

Updates go.uber.org/mock from 0.5.1 to 0.6.0

Release notes

Sourced from go.uber.org/mock's releases.

v0.6.0

0.6.0 (18 Aug 2025)

Added

• #258[]: Archive mode: a new mockgen mode that generates mocks out of archive files.

Fixed

• #276[]: Fixed mockgen errors with go1.25 due to outdated golang.org/x/tools dependency.

#258: uber-go/mock#258 #276: uber-go/mock#276

v0.5.2

0.5.2 (28 Apr 2025)

Fixed

• #248[]: Fixed an issue with type aliases not being included in generated code correctly.

#248: uber-go/mock#248

Changelog

Sourced from go.uber.org/mock's changelog.

0.6.0 (18 Aug 2025)

Added

• #258[]: Archive mode: a new mockgen mode that generates mocks out of archive files.
• #262[]: Support for specifying mock names when using the _gomock_archive bazel rule.

Fixed

• #276[]: Fixed mockgen errors with go1.25 due to outdated golang.org/x/tools dependency.

#258: uber-go/mock#258 #262: uber-go/mock#262 #276: uber-go/mock#276

0.5.2 (28 Apr 2025)

Fixed

• #248[]: Fixed an issue with type aliases not being included in generated code correctly.

#248: uber-go/mock#248

Commits

• 2d1c581 Prepare release v0.6.0 (#278)
• c654195 Update CI to run 1.24/1.25 (#277)
• 5900c74 update golang.org/x/tools to v0.36.0 (#276)
• 6a0445c feat(bazel): mock_names flag support in archive mode (#262)
• aa11bfc feat(bazel): support archive mode (#259)
• 359202c Support for archive mode (#258)
• 871d86b Back to development (#251)
• 0b8095f Prepare release v0.5.2 (#250)
• 8ce01ac Bump go.mod to 1.23 and remove alias replacements (#248)
• 6568d88 Back to development. (#242)
• See full diff in compare view

Updates golang.org/x/text from 0.23.0 to 0.28.0

Commits

• 425d715 go.mod: update golang.org/x dependencies
• b6d2645 go.mod: update golang.org/x dependencies
• 8072180 go.mod: update golang.org/x dependencies
• 6cacac1 go.mod: update tagx:ignore'd golang.org/x dependencies
• 700cc20 go.mod: update golang.org/x dependencies
• 4890c57 go.mod: update golang.org/x dependencies
• See full diff in compare view

Updates k8s.io/api from 0.31.3 to 0.31.12

Commits

• eb59dd7 Update dependencies to v0.31.12 tag
• See full diff in compare view

Updates k8s.io/apimachinery from 0.31.3 to 0.31.12

Commits

• See full diff in compare view

Updates k8s.io/client-go from 0.31.3 to 0.31.12

Commits

• 7823584 Update dependencies to v0.31.12 tag
• 8eaec8f Merge pull request #129519kishen-v/automated-cherry-pick-of-#127422
• e935feb Fix Go vet errors for master golang
• See full diff in compare view

Updates k8s.io/component-base from 0.31.3 to 0.31.12

Commits

• bab9068 Update dependencies to v0.31.12 tag
• 5d18b52 Merge pull request #130084richabanker/automated-cherry-pick-of-#128430
• 17efbda Add tests
• bbbee38 do not install handler for /metrics/slis using sync.Once
• See full diff in compare view

Updates sigs.k8s.io/cluster-api from 1.9.6 to 1.9.11

Release notes

Sourced from sigs.k8s.io/cluster-api's releases.

v1.9.11

👌 Kubernetes version support

• Management Cluster: v1.28.x -> v1.32.x
• Workload Cluster: v1.26.x -> v1.32.x

More information about version support can be found here

Changes since v1.9.10

📈 Overview

• 7 new commits merged
• 1 feature addition ✨
• 1 bug fixed 🐛

✨ New Features

• KCP: Bump corefile-migration to v1.0.27 (#12638)

🐛 Bug Fixes

• MachineDeployment: Fix second rolling update for MD rolloutAfter (#12556)

🌱 Others

• Dependency: Bump github.com/docker/docker to v28.0.2+incompatible to fix CVE (#12645)
• Dependency: Bump Go to v1.23.11 (#12531)
• Dependency: Bump Go to v1.23.12 (#12620)
• Dependency/Security: Add CVE-2025-22868 to Trivy ignore file (#12508)
• Testing: Skipping test that is failing because of infra issues (#12567)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.26 → v1.0.27

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.9.10

👌 Kubernetes version support

• Management Cluster: v1.28.x -> v1.32.x
• Workload Cluster: v1.26.x -> v1.32.x

More information about version support can be found here

Changes since v1.9.9

📈 Overview

... (truncated)

Commits

• 01ece42 Merge pull request #12645 from sbueringer/pr-fix-cve-1.9
• 6a1f545 Bump github.com/docker/docker to v28.0.2+incompatible to fix CVE
• 514162c Merge pull request #12638 from sbueringer/pr-bump-corefile-1.0.27-1.9
• 22e5d3b Bump corefile-migration to v1.0.27
• 796ab82 Merge pull request #12620 from mboersma/bump-go-release-1.9
• 12c4d2c Bump Go to v1.23.12
• 6fa8d33 Merge pull request #12567 from k8s-infra-cherrypick-robot/cherry-pick-12496-t...
• a561b5e Skipping test that is failing because of infra issues.
• 9d820da Merge pull request #12556 from k8s-infra-cherrypick-robot/cherry-pick-12261-t...
• 102345f Fix second rolling update for MD rolloutAfter
• Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.19.6 to 0.19.7

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.19.7

What's Changed

• 🐛 fix: cache should list out of global cache when present and necessary by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3128
• 🐛 Fakeclient: Fix dataraces when writing to the scheme by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3146
• Revert "✨ Expose all Go runtime metrics" by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3148

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.6...v0.19.7

Commits

• 5fe7bb3 Merge pull request #3148 from k8s-infra-cherrypick-robot/cherry-pick-3147-to-...
• 97bb1ff Revert "[release-0.20] ✨ Expose all Go runtime metrics (#3100)"
• 56df553 Merge pull request #3146 from k8s-infra-cherrypick-robot/cherry-pick-3143-to-...
• d2145c0 bug: Fakeclient: Fix dataraces when writing to the scheme
• 13450ba Merge pull request #3128 from k8s-infra-cherrypick-robot/cherry-pick-3126-to-...
• a2a9f54 fix: cache should list out of global cache when present and necessary
• See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.22.2 to 2.25.2

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.25.2

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

v2.25.1

2.25.1

Fixes

• fix(types): ignore nameless nodes on FullText() [10866d3]
• chore: fix some CodeQL warnings [2e42cff]

v2.25.0

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

• AroundNode(func()) - func will be called before the node is run.
• AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
• AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the PR.

... (truncated)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

2.25.1

Fixes

• fix(types): ignore nameless nodes on FullText() [10866d3]
• chore: fix some CodeQL warnings [2e42cff]

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

• AroundNode(func()) - func will be called before the node is run.
• AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
• AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNod...

Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependabot. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign rohityadavcloud for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[netlify]

✅ Deploy Preview for kubernetes-sigs-cluster-api-cloudstack ready!

Name	Link
🔨 Latest commit	c9f5817
🔍 Latest deploy log	https://app.netlify.com/projects/kubernetes-sigs-cluster-api-cloudstack/deploys/68b76d0626dc7900096a5e4e
😎 Deploy Preview	https://deploy-preview-466--kubernetes-sigs-cluster-api-cloudstack.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[k8s-ci-robot]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dependabot]

Superseded by #468.