Update Kubernetes dependencies

[renovate-rancher]

This PR contains the following updates:

Package	Change	Age	Confidence
k8s.io/api	v0.35.4 → v0.36.2
k8s.io/api	v0.35.1 → v0.36.2
k8s.io/apimachinery	v0.35.4 → v0.36.2
k8s.io/apimachinery	v0.35.1 → v0.36.2
k8s.io/client-go	v0.35.1 → v0.36.2
k8s.io/metrics	v0.35.2 → v0.36.2
sigs.k8s.io/controller-runtime	v0.23.1 → v0.24.1

---

Release Notes

kubernetes/api (k8s.io/api)

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/metrics (k8s.io/metrics)

v0.36.2

Compare Source

v0.36.1

Compare Source

v0.36.0

Compare Source

v0.35.6

Compare Source

v0.35.5

Compare Source

v0.35.4

Compare Source

v0.35.3

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.24.1

Compare Source

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in #​3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

Compare Source

⚠️ Breaking Changes

• Dependencies: Update to k8s.io/* v1.36 (#​3506 #​3462 #​3486 #​3450)

🐛 Bug Fixes

• Cache: Fix IndexField blocking until informer is synced (#​3445)
• Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#​3425)
• Client: Update typed ApplyConfigurations with server response (#​3475)
• Fakeclient: Fix SSA status patch resource version check (#​3443)
• Fakeclient: Fix panic when using CRs with embedded pointer structs (#​3431)
• Fakeclient: Fix status apply if existing object has managedFields set (#​3430)
• Fakeclient: Retry GenerateName on AlreadyExists collisions (#​3498)
• HTTP servers: Wire up base context into http servers (#​3452)

🌱 Others

• Builder/Webhooks: Remove deprecated custom path function (#​3465)
• Cache: Test cache reader waits for cache sync (#​3434)
• Certwatcher: Deflake certwatcher tests (#​3457)
• Dependencies: Use forked version of btree (#​3449)
• Envtest: Ensure envtest stops the whole process group (#​3447)
• Logging: Add missing space in zap-log-level flag description (#​3492)
• Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#​3489)
• Owners: Cleanup (#​3453)
• Recorder: Add logger into context for structured logging (#​3454)
• Recorder: Switch to StartLogging for event debug logs (#​3451)
• Scheme: Deprecate the scheme builder (#​3461)
• Source/Kind: Improve logging for dynamic type kind source (#​3494)
• Webhooks: Reduce memory usage of default webhooks (#​3463 #​3468)

🌱 CI & linters

• Chore: Update golangci-lint version to v2.8.0 (#​3448)
• Chore: Update golangci-lint version to v2.10.1 (#​3470)
• Chore: Update golangci-lint version to v2.11.3 (#​3482)
• Migrate away from custom GitHub action approval workflow (#​3491)
• Release: Auto-create git tags for the tools/setup-envtest submodule (#​3476)

📖 Additionally, there has been 1 contribution to our documentation. (#​3477)

Dependencies

Added

• github.com/cenkalti/backoff/v5: v5.0.3
• gonum.org/v1/gonum: v0.16.0
• k8s.io/streaming: v0.36.0

Changed

• cel.dev/expr: v0.24.0 → v0.25.1
• cloud.google.com/go/compute/metadata: v0.6.0 → v0.9.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0 → v1.30.0
• github.com/alecthomas/units: b94a6e3 → 0f3dac3
• github.com/cncf/xds/go: 2f00578 → ee656c7
• github.com/coreos/go-oidc: v2.3.0+incompatible → v2.5.0+incompatible
• github.com/coreos/go-systemd/v22: v22.5.0 → v22.7.0
• github.com/davecgh/go-spew: v1.1.1 → d8f796a
• github.com/emicklei/go-restful/v3: v3.12.2 → v3.13.0
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4 → v1.36.0
• github.com/envoyproxy/go-control-plane: v0.13.4 → v0.14.0
• github.com/envoyproxy/protoc-gen-validate: v1.2.1 → v1.3.0
• github.com/go-jose/go-jose/v4: v4.0.4 → v4.1.3
• github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
• github.com/golang/glog: v1.2.4 → v1.2.5
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1 → v1.1.0
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0 → v2.3.3
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.3 → v2.27.7
• github.com/moby/spdystream: v0.5.0 → v0.5.1
• github.com/onsi/ginkgo/v2: v2.27.2 → v2.27.4
• github.com/onsi/gomega: v1.38.2 → v1.39.0
• github.com/pmezard/go-difflib: v1.0.0 → 5d4384e
• github.com/prometheus/common: v0.66.1 → v0.67.5
• github.com/prometheus/procfs: v0.16.1 → v0.19.2
• github.com/spf13/cobra: v1.10.0 → v1.10.2
• github.com/spiffe/go-spiffe/v2: v2.5.0 → v2.6.0
• go.etcd.io/etcd/api/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/client/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/client/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/pkg/v3: v3.6.5 → v3.6.8
• go.etcd.io/etcd/server/v3: v3.6.5 → v3.6.8
• go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.39.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.60.0 → v0.65.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.61.0 → v0.65.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.40.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.40.0
• go.opentelemetry.io/otel/metric: v1.36.0 → v1.41.0
• go.opentelemetry.io/otel/sdk/metric: v1.36.0 → v1.40.0
• go.opentelemetry.io/otel/sdk: v1.36.0 → v1.40.0
• go.opentelemetry.io/otel/trace: v1.36.0 → v1.41.0
• go.opentelemetry.io/otel: v1.36.0 → v1.41.0
• go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
• go.uber.org/zap: v1.27.0 → v1.27.1
• golang.org/x/crypto: v0.45.0 → v0.47.0
• golang.org/x/exp: 8a7402a → 944ab1f
• golang.org/x/mod: v0.29.0 → v0.32.0
• golang.org/x/net: v0.47.0 → v0.49.0
• golang.org/x/oauth2: v0.30.0 → v0.34.0
• golang.org/x/sync: v0.18.0 → v0.19.0
• golang.org/x/sys: v0.38.0 → v0.40.0
• golang.org/x/telemetry: 078029d → bd525da
• golang.org/x/term: v0.37.0 → v0.39.0
• golang.org/x/text: v0.31.0 → v0.33.0
• golang.org/x/time: v0.9.0 → v0.14.0
• golang.org/x/tools/go/expect: v0.1.0-deprecated → v0.1.1-deprecated
• golang.org/x/tools: v0.38.0 → v0.41.0
• google.golang.org/genproto/googleapis/api: a0af3ef → 8636f87
• google.golang.org/genproto/googleapis/rpc: 200df99 → 8636f87
• google.golang.org/grpc: v1.72.2 → v1.79.3
• google.golang.org/protobuf: v1.36.8 → f2248ac
• k8s.io/api: v0.35.0 → v0.36.0
• k8s.io/apiextensions-apiserver: v0.35.0 → v0.36.0
• k8s.io/apimachinery: v0.35.0 → v0.36.0
• k8s.io/apiserver: v0.35.0 → v0.36.0
• k8s.io/client-go: v0.35.0 → v0.36.0
• k8s.io/code-generator: v0.35.0 → v0.36.0
• k8s.io/component-base: v0.35.0 → v0.36.0
• k8s.io/klog/v2: v2.130.1 → v2.140.0
• k8s.io/kms: v0.35.0 → v0.36.0
• k8s.io/kube-openapi: 589584f → 43fb72c
• k8s.io/utils: bc988d5 → b8788ab
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.2 → v0.34.0
• sigs.k8s.io/structured-merge-diff/v6: v6.3.0 → v6.3.2

Removed

• github.com/cenkalti/backoff/v4: v4.3.0
• github.com/gregjones/httpcache: 901d907
• github.com/grpc-ecosystem/go-grpc-prometheus: v1.2.0
• github.com/zeebo/errs: v1.4.0
• golang.org/x/xerrors: 9bdfabe

Thanks to all our contributors! 😊

v0.23.3

Compare Source

What's Changed

• 🐛 Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if objects are equal by @​k8s-infra-cherrypick-robot in #​3469

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

v0.23.2

Compare Source

What's Changed

• 🐛 Fix fake client's SSA status patch resource version check by @​k8s-infra-cherrypick-robot in #​3446
• ✨ Reduce memory usage of default webhooks by @​k8s-infra-cherrypick-robot in #​3467

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[renovate-rancher]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module k8s.io/api@v0.36.2 requires go >= 1.26.0; switching to go1.26.4
go: downloading go1.26.4 (linux/amd64)
go: downloading k8s.io/apimachinery v0.36.2
go: downloading k8s.io/client-go v0.36.2
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading k8s.io/api v0.36.2
go: downloading k8s.io/metrics v0.36.2
go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2
go: downloading k8s.io/klog/v2 v2.140.0
go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
go: downloading k8s.io/apiextensions-apiserver v0.36.0
go: downloading github.com/prometheus/procfs v0.19.2
go: downloading k8s.io/apiserver v0.36.0
go: downloading k8s.io/component-base v0.36.0
go: downloading go.opentelemetry.io/proto/otlp v1.9.0
go: github.com/rancher/rancher-ai-mcp/pkg/toolsets/fleet imports
	github.com/rancher/fleet/pkg/troubleshooting imports
	github.com/rancher/fleet/internal/cmd/controller/gitops/reconciler imports
	github.com/rancher/fleet/internal/cmd/cli/apply imports
	github.com/rancher/fleet/internal/bundlereader imports
	github.com/rancher/fleet/internal/helmupdater imports
	helm.sh/helm/v4/pkg/action imports
	helm.sh/helm/v4/pkg/kube imports
	k8s.io/kubectl/pkg/cmd/util imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1