[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener	v1.154.2 → v1.154.3
github.com/gardener/gardener/pkg/apis	v1.154.2 → v1.155.0

---

Release Notes

gardener/gardener (github.com/gardener/gardener)

v1.154.3

Compare Source

[github.com/gardener/gardener:v1.154.3]

🐛 Bug Fixes

• [OPERATOR] Fixed a race during credentials rotation where a stale cache read could undo the ETCD encryption key switch or cause rotation steps (such as taking an ETCD snapshot or creating StorageVersionMigration resources) to be redundantly re-run. This affects both the ETCD peer CA rollout during CA rotation and the ETCD encryption key rotation for kube-apiserver and gardener-apiserver. by @rfranzke [#​16201]

🏃 Others

• [DEPENDENCY] The following dependencies have been updated:
  • europe-docker.pkg.dev/gardener-project/releases/gardener/fluent-bit-plugin from v1.7.0 to v1.7.1. by @iypetrov [#​16232]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/etcd-druid from v0.39.1 to v0.39.2. Release Notes
  • github.com/gardener/etcd-druid/api from v0.39.1 to v0.39.2. by @LucaBernstein [#​16230]

Helm Charts

• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.154.3
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.154.3
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.154.3

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.154.3
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.154.3
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.154.3
• gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.154.3
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.154.3
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.154.3
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.154.3
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.154.3
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.154.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 12 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
github.com/onsi/ginkgo/v2	v2.33.0 -> v2.34.0
k8s.io/apimachinery	v0.37.1 -> v0.37.2
k8s.io/client-go	v0.37.1 -> v0.37.2
k8s.io/component-base	v0.37.1 -> v0.37.2
k8s.io/utils	v0.0.0-20260707023825-cf1189d6abe3 -> v0.0.0-20261023123148-ca04ba58ecab
github.com/fxamacker/cbor/v2	v2.9.4 -> v2.9.6
github.com/gardener/etcd-druid/api	v0.39.1 -> v0.39.2
github.com/google/pprof	v0.0.0-20261008003335-7bae8d8c4c9e -> v0.0.0-20261016150608-1facf8f91b50
k8s.io/api	v0.37.1 -> v0.37.2
k8s.io/apiextensions-apiserver	v0.37.1 -> v0.37.2
k8s.io/apiserver	v0.37.1 -> v0.37.2
k8s.io/kube-openapi	v0.0.0-20260721132016-d427ff9ee9ad -> v0.0.0-20260821135717-be32def86098

[renovate]

/label skip-review

[gardener-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign grolu for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 31e13abe-8c5e-46d6-8cf3-bdf820691e0c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn