Merge pull request #136362 from dims/update-opentelemetry-v1.39.0

Update OpenTelemetry dependencies to latest versions Kubernetes-commit: 69eb15ee58c9cb20b90007e9b064dfb78b66a867
Update OpenTelemetry dependencies to latest versions
2026-02-04 00:06:14 +08:00 · 2026-01-21 22:14:22 +00:00 · 2026-01-20 17:20:21 -05:00 · 2026-01-16 14:04:42 +00:00 · 2026-01-13 23:08:03 -05:00 · 2026-01-14 02:05:02 +00:00
4 changed files with 61 additions and 62 deletions
--- a/go.mod
+++ b/go.mod
@@ -7,25 +7,24 @@ go 1.25.0
 godebug default=go1.25

 require (
-	golang.org/x/time v0.9.0
-	k8s.io/api v0.0.0-20251204222945-bbcbaa8f8665
-	k8s.io/apimachinery v0.0.0-20251204222403-72d71eac265e
-	k8s.io/client-go v0.0.0-20251204213705-891f94c690cb
-	k8s.io/code-generator v0.0.0-20251204225556-840eca38f423
+	golang.org/x/time v0.14.0
+	k8s.io/api v0.0.0-20260121173914-4f90c5e5fa65
+	k8s.io/apimachinery v0.0.0-20260116132332-7daad7080a68
+	k8s.io/client-go v0.0.0-20260121214359-511abf454ddf
+	k8s.io/code-generator v0.0.0-20260121215239-41a43eabae03
 	k8s.io/klog/v2 v2.130.1
-	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
+	k8s.io/utils v0.0.0-20251219084037-98d557b7f1e7
 )

 require (
-	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/emicklei/go-restful/v3 v3.12.2 // indirect
+	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+	github.com/emicklei/go-restful/v3 v3.13.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-openapi/jsonpointer v0.21.0 // indirect
 	github.com/go-openapi/jsonreference v0.20.2 // indirect
 	github.com/go-openapi/swag v0.23.0 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
-	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
@@ -33,20 +32,20 @@ require (
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/spf13/pflag v1.0.9 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/mod v0.29.0 // indirect
-	golang.org/x/net v0.47.0 // indirect
-	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sync v0.18.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/term v0.37.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
-	golang.org/x/tools v0.38.0 // indirect
-	google.golang.org/protobuf v1.36.8 // indirect
+	golang.org/x/mod v0.32.0 // indirect
+	golang.org/x/net v0.49.0 // indirect
+	golang.org/x/oauth2 v0.34.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
+	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
@@ -54,6 +53,6 @@ require (
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.3.1 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )
--- a/go.sum
+++ b/go.sum
@@ -2,10 +2,11 @@ github.com/Masterminds/semver/v3 v3.4.0 h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1
 github.com/Masterminds/semver/v3 v3.4.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU=
-github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/emicklei/go-restful/v3 v3.13.0 h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes=
+github.com/emicklei/go-restful/v3 v3.13.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/fxamacker/cbor/v2 v2.9.0 h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM=
 github.com/fxamacker/cbor/v2 v2.9.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
 github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
@@ -50,12 +51,13 @@ github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee h1:W5t00kpgFd
 github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/onsi/ginkgo/v2 v2.27.2 h1:LzwLj0b89qtIy6SSASkzlNvX6WktqurSHwkk2ipF/Ns=
-github.com/onsi/ginkgo/v2 v2.27.2/go.mod h1:ArE1D/XhNXBXCBkKOLkbsb2c81dQHCRcF5zwn/ykDRo=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/onsi/ginkgo/v2 v2.27.4 h1:fcEcQW/A++6aZAZQNUmNjvA9PSOzefMJBerHJ4t8v8Y=
+github.com/onsi/ginkgo/v2 v2.27.4/go.mod h1:ArE1D/XhNXBXCBkKOLkbsb2c81dQHCRcF5zwn/ykDRo=
+github.com/onsi/gomega v1.39.0 h1:y2ROC3hKFmQZJNFeGAMeHZKkjBL65mIZcvrLQBF9k6Q=
+github.com/onsi/gomega v1.39.0/go.mod h1:ZCU1pkQcXDO5Sl9/VVEGlDyp+zm0m1cmeG5TOzLgdh4=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/spf13/pflag v1.0.9 h1:9exaQaMOCwffKiiiYk6/BndUBv+iRViNW+4lEMi0PvY=
@@ -79,30 +81,30 @@ go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
 go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
-golang.org/x/mod v0.29.0 h1:HV8lRxZC4l2cr3Zq1LvtOsi/ThTgWnUk/y64QSs8GwA=
-golang.org/x/mod v0.29.0/go.mod h1:NyhrlYXJ2H4eJiRy/WDBO6HMqZQ6q9nk4JzS3NuCK+w=
-golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
-golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
-golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI=
-golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU=
-golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
-golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
-golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
-golang.org/x/time v0.9.0 h1:EsRrnYcQiGH+5FfbgvV4AP7qEZstoyrHB0DzarOQ4ZY=
-golang.org/x/time v0.9.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
-golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
-golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+golang.org/x/mod v0.32.0 h1:9F4d3PHLljb6x//jOyokMv3eX+YDeepZSEo3mFJy93c=
+golang.org/x/mod v0.32.0/go.mod h1:SgipZ/3h2Ci89DlEtEXWUk/HteuRin+HHhN+WbNhguU=
+golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
+golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
+golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
+golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/sync v0.19.0 h1:vV+1eWNmZ5geRlYjzm2adRgW2/mcpevXNg50YZtPCE4=
+golang.org/x/sync v0.19.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
+golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
+golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/term v0.39.0 h1:RclSuaJf32jOqZz74CkPA9qFuVTX7vhLlpfj/IGWlqY=
+golang.org/x/term v0.39.0/go.mod h1:yxzUCTP/U+FzoxfdKmLaA0RV1WgE0VY7hXBwKtY/4ww=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
+golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
+golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
+golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
+golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
 golang.org/x/tools/go/expect v0.1.1-deprecated h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM=
 golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated/go.mod h1:RVAQXBGNv1ib0J382/DPCRS/BPnsGebyM1Gj5VSDpG8=
-google.golang.org/protobuf v1.36.8 h1:xHScyCOEuuwZEc6UtSOvPbAT4zRh0xcNRYekJwfqyMc=
-google.golang.org/protobuf v1.36.8/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU=
+google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
+google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
@@ -113,27 +115,27 @@ gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.0.0-20251204222945-bbcbaa8f8665 h1:yCdvBpHA4R+NYVHh6B+ZWOmN0FhnqP1uGX9oNLhDWLw=
-k8s.io/api v0.0.0-20251204222945-bbcbaa8f8665/go.mod h1:etlr1bA5uFLXrSHE4hq3fjX6JCVC4aD10YGu8kktjJM=
-k8s.io/apimachinery v0.0.0-20251204222403-72d71eac265e h1:j68TlPomsB5ecepACqUXTMgiob1Hmx4N+VTd+jzORI8=
-k8s.io/apimachinery v0.0.0-20251204222403-72d71eac265e/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
-k8s.io/client-go v0.0.0-20251204213705-891f94c690cb h1:Gmnk8nW3TujHGwQlJbW6PopRqO3f8XOcgMKxdxW5Ew0=
-k8s.io/client-go v0.0.0-20251204213705-891f94c690cb/go.mod h1:0kL/bLRZk0JJRWoFkLRiDWQQ4oW6arxaBBKV5yjuQh4=
-k8s.io/code-generator v0.0.0-20251204225556-840eca38f423 h1:6clZDQf+FySeFDCUwSV4SJxbmOp/IgZ4Skig8pXliJo=
-k8s.io/code-generator v0.0.0-20251204225556-840eca38f423/go.mod h1:j93lM7qU2mZla/7mpfibtIn/gB84VYkGpxLarzG35kk=
+k8s.io/api v0.0.0-20260121173914-4f90c5e5fa65 h1:sQVbR3zcjPhnrkpWG5M6Qh6uQsBNvz7O869vIpVCs+c=
+k8s.io/api v0.0.0-20260121173914-4f90c5e5fa65/go.mod h1:lmMnF2Ji6ZiKusBzdQOW0tLYy+bzNudofBpUXjn0Wm4=
+k8s.io/apimachinery v0.0.0-20260116132332-7daad7080a68 h1:Bu0nqDkpfRZ7fngY4VoyqtKhbqD4lnOU6ybw5SVGIEY=
+k8s.io/apimachinery v0.0.0-20260116132332-7daad7080a68/go.mod h1:wAmXZO6lPjbtt+U0gil0pnpZcEaspEmhvj1KBBRrJpI=
+k8s.io/client-go v0.0.0-20260121214359-511abf454ddf h1:VZX2W/OFQ2m88U9hVs3CZ1LFmS8u0CLwwcMrCS5ADF8=
+k8s.io/client-go v0.0.0-20260121214359-511abf454ddf/go.mod h1:pdvr6B9BEfiVeGrGa2kMFrDb4ZT3WDge8/VdoAwqk8E=
+k8s.io/code-generator v0.0.0-20260121215239-41a43eabae03 h1:SMCdPBoiuCxueyltX3auqIhIvdFjYwvZr0nFbjrt1cw=
+k8s.io/code-generator v0.0.0-20260121215239-41a43eabae03/go.mod h1:tlu2MxD7hTgs7bX1ED+oF/Lt15ZIDomx+su3E+dhvSA=
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b h1:gMplByicHV/TJBizHd9aVEsTYoJBnnUAT5MHlTkbjhQ=
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b/go.mod h1:CgujABENc3KuTrcsdpGmrrASjtQsWCT7R99mEV4U/fM=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE=
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
-k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
-k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+k8s.io/utils v0.0.0-20251219084037-98d557b7f1e7 h1:H6xtwB5tC+KFSHoEhA1o7DnOtHDEo+n9OBSHjlajVKc=
+k8s.io/utils v0.0.0-20251219084037-98d557b7f1e7/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
 sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
-sigs.k8s.io/structured-merge-diff/v6 v6.3.0 h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco=
-sigs.k8s.io/structured-merge-diff/v6 v6.3.0/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
+sigs.k8s.io/structured-merge-diff/v6 v6.3.1 h1:JrhdFMqOd/+3ByqlP2I45kTOZmTRLBUm5pvRjeheg7E=
+sigs.k8s.io/structured-merge-diff/v6 v6.3.1/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
 sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
 sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=
--- a/hack/tools.go
+++ b/hack/tools.go
@@ -1,5 +1,4 @@
 //go:build tools
-// +build tools

 /*
 Copyright 2019 The Kubernetes Authors.
--- a/pkg/signals/signal_posix.go
+++ b/pkg/signals/signal_posix.go
@@ -1,5 +1,4 @@
 //go:build !windows
-// +build !windows

 /*
 Copyright 2017 The Kubernetes Authors.
Author	SHA1	Message	Date
Kubernetes Publisher	50434c6a06	Merge pull request #136362 from dims/update-opentelemetry-v1.39.0 Update OpenTelemetry dependencies to latest versions Kubernetes-commit: 69eb15ee58c9cb20b90007e9b064dfb78b66a867	2026-01-21 22:14:22 +00:00
Davanum Srinivas	a2aea51475	Update OpenTelemetry dependencies to latest versions Core packages (opentelemetry-go): - go.opentelemetry.io/otel: v1.38.0 → v1.39.0 - go.opentelemetry.io/otel/metric: v1.38.0 → v1.39.0 - go.opentelemetry.io/otel/trace: v1.38.0 → v1.39.0 - go.opentelemetry.io/otel/sdk: v1.38.0 → v1.39.0 Exporters: - go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.39.0 - go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.39.0 Contrib instrumentation (opentelemetry-go-contrib): - go.opentelemetry.io/contrib/.../otelhttp: v0.61.0 → v0.64.0 - go.opentelemetry.io/contrib/.../otelrestful: v0.44.0 → v0.64.0 Protocol definitions (opentelemetry-proto-go): - go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0 Notable changes: - Go 1.24 is now the minimum required version (Go 1.23 support dropped) for OTEL components - Performance: ~4x improvement in histogram concurrent operations; xxhash replaces fnv for attribute hashing - Fixed goroutine leak in span processors when context is canceled - otelrestful migrated semantic conventions from v1.20.0 to v1.34.0 (e.g., http.method → http.request.method) - Partial OTLP export errors now surfaced instead of being silently dropped - otelrestful no longer depends on json-iterator/go, modern-go/concurrent, or modern-go/reflect2; unwanted-dependencies.json updated accordingly Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: c40ea60b9f193fbead586f9fd6cc26f7b77312ff	2026-01-20 17:20:21 -05:00
Kubernetes Publisher	2a236a856d	Merge pull request #136212 from dims/update-security-deps-jan2026-v2 Update security and stability dependencies Kubernetes-commit: a94970c0c5de0fa56b0ed82823850db7e0257685	2026-01-16 14:04:42 +00:00
Davanum Srinivas	5594bf5680	Update security and stability dependencies This PR updates several dependencies addressing security vulnerabilities, stability fixes, and authentication improvements. - golang.org/x/crypto: v0.46.0 -> v0.47.0 - Includes latest X509 root certificate bundle updates - Security hardening for cryptographic operations - Foundation dependency for TLS and authentication - github.com/golang-jwt/jwt/v5: v5.2.2 -> v5.3.0 - IMPORTANT: v5.2.2 patched vulnerability GHSA-mh63-6h87-95cp (token validation security issue) - this update ensures we have the fix - Adds multiple audience validation support for JWT tokens - Go 1.21 minimum requirement (code modernization) - Replaced legacy interface{} with modern any keyword - golang.org/x/net: v0.48.0 -> v0.49.0 - HTTP/2 priority scheduler improvements (RFC 9218) - WebSocket security enhancements - Network layer stability fixes - go.uber.org/zap: v1.27.0 -> v1.27.1 - Fix: Prevent Object from panicking on nils (PR #1501) - Fix: Race condition in WithLazy (PR #1511) - Both fixes improve logging stability in concurrent scenarios - github.com/godbus/dbus/v5: v5.2.0 -> v5.2.2 - Security: Disabled SHA1 authentication by default on non-Windows platforms (v5.2.0 change now inherited) - Performance: Multiple optimizations reducing memory allocations - Fix: Alignment issues in decoder operations - Fix: Allow more than 32 containers/struct fields in a signature Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: 5b478645cdb3be5ed92a21d2f7b417b6328cfa6e	2026-01-13 23:08:03 -05:00
Kubernetes Publisher	16cd5dbcd7	Merge pull request #136162 from dims/update-security-deps-jan2026 Update security-critical authentication and protobuf dependencies Kubernetes-commit: c29a5d73a6fd04896033fe615c259f2949c5e94f	2026-01-14 02:05:02 +00:00
Davanum Srinivas	1aa4a38e16	Update security-critical authentication and protobuf dependencies This PR updates security-critical dependencies addressing authentication and data parsing vulnerabilities. Authentication Security: - github.com/coreos/go-oidc: v2.3.0 -> v2.5.0 - Security fix: Now verifies token signature BEFORE validating payload - Prevents potential processing of tampered tokens before cryptographic verification - github.com/cyphar/filepath-securejoin: v0.6.0 -> v0.6.1 - Security fix: Fixed seccomp fallback logic - library now properly falls back to safer O_PATH resolver when openat2(2) is denied by seccomp-bpf - Fixed file descriptor leak in openat2 wrapper during RESOLVE_IN_ROOT - cyphar.com/go-pathrs: v0.2.1 -> v0.2.2 - Companion update to filepath-securejoin Protobuf Security: - google.golang.org/protobuf: v1.36.8 -> v1.36.11 - Security fix: Added recursion limit check in lazy decoding validation - Prevents potential stack exhaustion attacks via maliciously crafted protobuf messages - Also adds support for URL chars in type URLs in text-format These updates are critical for: - OIDC authentication in kube-apiserver - Container filesystem path resolution (used by container runtimes) - Protobuf message parsing throughout the codebase Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: c825d80bbf2c82666192c329478a686fa3a1d5dc	2026-01-11 16:50:37 -05:00
Kubernetes Publisher	81ae50c183	Merge pull request #136161 from dims/update-golang-x-deps-jan2026 Update golang.org/x dependencies to latest versions Kubernetes-commit: 1c894014ebe25e0b042efa91698284f527493d90	2026-01-13 02:28:31 +00:00
Davanum Srinivas	17baec1178	Update golang.org/x dependencies to latest versions updates the golang.org/x package family to newer releases: - golang.org/x/crypto: v0.45.0 -> v0.46.0 - golang.org/x/net: v0.47.0 -> v0.48.0 - golang.org/x/sys: v0.38.0 -> v0.40.0 - golang.org/x/time: v0.9.0 -> v0.14.0 - golang.org/x/oauth2: v0.30.0 -> v0.34.0 - golang.org/x/text: v0.31.0 -> v0.33.0 - golang.org/x/term: v0.37.0 -> v0.39.0 - golang.org/x/sync: v0.18.0 -> v0.19.0 - golang.org/x/mod: v0.29.0 -> v0.32.0 - golang.org/x/tools: v0.38.0 -> v0.40.0 - golang.org/x/exp: 8a7402abbf56 -> 944ab1f22d93 Security & Stability: - x/crypto: Updated X509 root certificate bundle - x/net: HTTP/2 PING optimization to reduce DoS detection triggers, data race fix in trace RenderEvents - x/sys: Fixed out-of-bounds memory access in sockaddrIUCVToAny - x/time: Fixed rate limiter overflow when using very low rates that could cause the limiter to jam open Performance: - x/time: ~19% improvement in Sometimes.Do when no interval configured Maintenance: - Various vet diagnostic fixes for Go 1.26 compatibility - Dependency updates across the golang.org/x ecosystem Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: 0e67c56a8f26ace2889fd24e098b78e13f9bbffe	2026-01-11 16:25:45 -05:00
Kubernetes Publisher	c5a510e1f3	Merge pull request #136108 from pohly/ginkgo-gomega-update dependencies: ginkgo v2.27.4, gomega v1.39.0 Kubernetes-commit: 758ef0ffbce5cbca7a893d839dde892d79c2738f	2026-01-08 23:41:35 +00:00
Patrick Ohly	268a6a7700	dependencies: ginkgo v2.27.4, gomega v1.39.0 Latest release of both. The CurrentTreeConstructionNodeReport fix is needed before being able to use it in the E2E framework. Kubernetes-commit: f8a0c80ed81711f6add7a765d22b56d2d41ac522	2026-01-08 16:53:03 +01:00
Kubernetes Publisher	6cb24270b0	Merge pull request #135391 from jpbetz/smd-6_3_1 Bump structured-merge-diff to pick up flake fix and bug fixes Kubernetes-commit: 6f92c01979b7666f6631a556a8626e21b88d1f2a	2025-12-23 15:00:23 +00:00
Kubernetes Publisher	1d34da02ca	Merge pull request #135867 from dims/pin-versions-of-dbus-and-otelgrpc-to-avoid-breakage Pin versions of dbus and otelgrpc to avoid breakage Kubernetes-commit: dce2e8cef737ebce3a4d13d74654c50bcb244846	2025-12-21 02:58:32 +00:00
Davanum Srinivas	5eb3267611	updated to last known good dependencies for otelgrpc and dbus Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: 60cce0abd05d31f74ece404e584f53c915a7f3d5	2025-12-20 15:27:53 -05:00
Kubernetes Publisher	af6ed48cf6	Merge pull request #135836 from pohly/ginkgo-gomega-update dependencies: ginkgo v2.27.3 + gomega v1.38.3 Kubernetes-commit: 268bdbe214ac64b5a31a59cfae6b96f3a1585bd3	2025-12-19 18:59:06 +00:00
Kubernetes Publisher	7eea9581c5	Merge pull request #135845 from skitt/drop-armon-circbuf Replace armon/circbuf with k8s.io/utils/buffer Kubernetes-commit: 0ea38248603ce745956d779787874cfd91ca29ae	2025-12-19 18:59:04 +00:00
Stephen Kitt	061bfb601d	Replace armon/circbuf with k8s.io/utils/buffer This uses the new generic fixed ring implementation in k8s.io/utils. Signed-off-by: Stephen Kitt <skitt@redhat.com> Kubernetes-commit: 3653ae2b9a7768da89e47ef84d503ae9cf0b910b	2025-12-19 09:59:41 +01:00
Kubernetes Publisher	15740c5a3c	Merge pull request #135531 from pohly/golangci-lint-bump golangci-lint: bump to v2.7.1 Kubernetes-commit: 430fef557f34c6145d4607f9d65d46ac5f7a7b66	2025-12-18 18:57:39 +00:00
Kubernetes Publisher	937ea5acb4	Merge pull request #135539 from dims/move-httpcache-to-third_party/forked move httpcache to third_party/forked Kubernetes-commit: 04d866b37de3aefac063b2b6e12f11b30701c9ff	2025-12-18 18:57:38 +00:00
Patrick Ohly	afeb98a2bf	dependencies: ginkgo v2.27.3 + gomega v1.38.3 This fixes some issues found in Kubernetes (data race in ginkgo CLI, gomega formatting) and helps with diagnosing OOM killing in CI jobs (exit status of processes). The modified gomega formatting shows up in some of the output tests for the E2E framework. They get updated accordingly. Kubernetes-commit: db841afdbb193ea7d612472c7cc4c7b3f58eb676	2025-12-16 14:32:00 +01:00
Davanum Srinivas	3b66c2e73c	move httpcache to third_party/forked Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: ab1ffaf12e243798df20a5c98192b8d108ba9a9b	2025-12-01 21:58:55 -05:00
Kubernetes Publisher	adad5a9caa	Merge pull request #133828 from dims/drop-unnecessary-usegocmp-build-tag Drop unnecessary `usegocmp` build tag Kubernetes-commit: 09e71afb4bc834cf08106517a528d9320c2cc94f	2025-12-18 02:55:39 +00:00
Kubernetes Publisher	625de3544c	Merge pull request #135536 from dims/bump-x/crypto-to-v0.45.0 Bump golang.org/x/crypto to v0.45.0 Kubernetes-commit: de61f598953ccd3e3950cdeda02740af2881048f	2025-12-04 23:32:36 +00:00
Davanum Srinivas	aa36c89596	Bump golang.org/x/crypto to v0.45.0 Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: 5302b929ae55e86ad40b57d74c326529792d0439	2025-12-01 14:11:01 -05:00
Patrick Ohly	aa6ab0a1a5	build: remove deprecated '// +build' tag This has been replaced by `//build:...` for a long time now. Removal of the old build tag was automated with: for i in $(git grep -l '^// +build' \| grep -v -e '^vendor/'); do if ! grep -q '^// Code generated' "$i"; then sed -i -e '/^\/\/ +build/d' "$i"; fi; done Kubernetes-commit: ad79e479c2314d1de91e54bc5630c52027f12e21	2025-12-01 15:54:18 +01:00
Kubernetes Publisher	23982ca363	Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix e2e/storage: deflake CSI Mock volume expansion quota validation Kubernetes-commit: 4c04786f746e349a34042a0d59ec432a8a46ddcc	2025-11-26 21:17:49 +00:00
Joe Betz	c443aac8ce	hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v6 v6.3.1 Kubernetes-commit: 5129fa152b3628ee65c060d3e2f59f69d271f7a6	2025-11-21 08:53:57 -05:00
Dev1622	65dd5388bc	vendor: update vendor and license metadata after replacing BeTrue usage in csi tests Kubernetes-commit: 216aaf76cba4b0cba05f0901d759dc017f833cd3	2025-11-13 05:11:59 +00:00
Davanum Srinivas	0e6064b565	Drop unnecessary usegocmp build tag Signed-off-by: Davanum Srinivas <davanum@gmail.com> Kubernetes-commit: 1f1d197701de6deb3641dd8df5bc4452a2949361	2025-09-01 17:59:52 -04:00