Update k8s packages to v1.149.0 by renovate[bot] · Pull Request #293 · stackitcloud/gardener-extension-acl

renovate · 2026-06-04T16:29:35Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener	`v1.143.4` → `v1.149.0`
github.com/gardener/gardener/pkg/apis	`v1.143.4` → `v1.149.0`

Release Notes

gardener/gardener (github.com/gardener/gardener)

`v1.149.0`

Compare Source

[github.com/gardener/gardener:v1.149.0]

⚠️ Breaking Changes

[DEPENDENCY] The github.com/gardener/gardener/pkg/utils/imagevector functions Read, ReadFile, and WithEnvOverride now return an additional *CABundle value. Additionally, the WithEnvOverride function accepts a new caBundle *CABundle parameter. Extensions using these functions must update on their side accordingly. by @shafeeqes [#15150]

📰 Noteworthy

[OPERATOR] The initial PVC size for VictoriaLogs is now reduced to 5Gi for Seed and Shoot control plane instances when the PVC autoscaler is enabled. by @RadaBDimitrova [#15385]
[OPERATOR] The DisableNginxIngressInGarden and DisableNginxIngressInSeed feature gates have been promoted to beta. by @ScheererJ [#15325]

✨ New Features

[OPERATOR] HSTS (Strict-Transport-Security: max-age=31536000) response header is now injected for all Istio-managed ingress endpoints (kube-apiserver, Gardener Dashboard, Plutono, Prometheus, Alertmanager, Vali, OTel Collector) via dedicated Envoy filters. by @marc1404 [#15377]
[OPERATOR] Operators can now configure a custom registry CA bundle by adding a caBundle.inline field (PEM-encoded) to the gardenlet image vector overwrite file (IMAGEVECTOR_OVERWRITE). Gardenlet distributes this CA to the worker nodes of all its shoots, enabling containerd to trust private registries. The same caBundle field is supported in IMAGEVECTOR_OVERWRITE_CHARTS for both gardenlet and gardener-operator to secure OCI Helm chart pulls from private registries. See image vector documentation for details. by @shafeeqes [#15150]
[OPERATOR] OpenTelemetry Collector instances in the Seed and Garden clusters can now scale vertically by using VPA. by @TeodorDichev [#15319]
[OPERATOR] Encrypt traffic between the Istio ingress gateway and the OpenTelemetry collector by enabling TLS on the kube-rbac-proxy sidecars (both the Vali and OTLP receiver endpoints) and configuring Istio's DestinationRule to use TLS termination with CA verification. by @TeodorDichev [#15394]
[OPERATOR] A new --backup-data-path flag is introduced to gardenadm init. It loads the etcd snapshot data from a local path on the host into the bootstrap etcd. The flag will be used in future self-hosted Shoot cluster disaster recovery scenarios. by @Kostov6 [#14993]
[USER] Users can now configure the minimum TLS version for the kube-apiserver in the Shoot spec. Supported values: VersionTLS12, VersionTLS13. by @mahmud2011 [#15356]
[USER] The kubelet configuration in the Shoot API (.spec.kubernetes.kubelet and .spec.provider.workers[].kubernetes.kubelet) now supports the fields imagePullCredentialsVerificationPolicy and preloadedImagesVerificationAllowlist to control credential verification for container images already present on a Node. Both of the newly introduced fields can only be specified for Shoot clusters with Kubernetes 1.35+. by @dimitar-kostadinov [#15327]

🐛 Bug Fixes

[OPERATOR] The logrotate service now correctly enforces 14-day log retention: notifempty has been removed so pruning always runs, and a find command cleans up kubelet size-rotated log files (*.log.*) that logrotate cannot prune itself. by @marc1404 [#15384]
[OPERATOR] The logrotate systemd service now restarts automatically on failure, preventing missed log rotations after transient errors. by @marc1404 [#15376]
[OPERATOR] Missing get, list, watch permissions for internalsecrets and shootstates have been granted to gardener-admission-controller. by @oliver-goetz [#15478]
[OPERATOR] The IstioTLSTermination feature gate can now be disabled safely, fixing the issues reported in gardener/gardener#15103. by @hammadzf [#15317]
[OPERATOR] A race condition during the global observability ingress secret rotation has been fixed. by @vicwicker [#15437]
[OPERATOR] Fixed MaintenanceTimeWindow validation pattern to correctly allow negative UTC offsets (e.g. -0700) and all positive offsets up to +1400. The pattern now accurately reflects the valid UTC offset range (-12:00 to +14:00). Affects CRD-based consumers such as the Garden operator resource and downstream projects embedding ShootTemplate. by @marc1404 [#15388]
[USER] Worker nodes no longer risk joining the cluster with a stale CA during RotationPreparing — the gardenlet now waits until all kube-root-ca.crt ConfigMaps contain the new CA bundle before rolling worker pools. by @rfranzke [#15430]
[USER] Fixed a bug where the deployInfrastructure task annotation on a Shoot was incorrectly removed when the Shoot spec was changed by an external actor while the infrastructure was being reconciled, causing the Infrastructure extension to never pick up the new generation. by @rfranzke [#15456]
[USER] A bug preventing Shoot creation when the etcd-druid's UpgradeEtcdVersion feature gate is disabled (not explicitly enabled) has been fixed. by @acumino [#15445]

🏃 Others

[OPERATOR] HTTP keep-alive in istio-ingressgateway is now disabled when the CPU utilization of its Nodes exceeds 85%. by @oliver-goetz [#15417]
[OPERATOR] Remove deprecated VM_ENABLEDPROMETHEUSCONVERTER_* environment variables from the victoria_operator and migrate to the --controller.disableReconcileFor flag, as required by VictoriaMetrics operator v0.69+. by @TeodorDichev [#15391]
[OPERATOR] Add plutono dashboard for MutatingAdmissionPolicies and ValidatingAdmissionPolicies by @voelzmo [#15323]
[OPERATOR] VPN watchdog threshold has been reduced to 8 (from 10) to improve reaction time under bad network conditions. by @domdom82 [#15396]
[DEVELOPER] VictoriaLogs ServiceMonitor excludes any additional services managed by the operator, avoiding duplicate metrics. by @nickytd [#15398]
[DEVELOPER] Replaced deprecated hub CLI with gh in hack/cherry-pick-pull.sh and improved patch detection to exit early when a patch is already applied to the target branch. by @DobromirNPeev [#15433]
[DEPENDENCY] The following dependencies have been updated:
- perses/perses from v0.53.1 to v0.54.0. Release Notes by @gardener-ci-robot [#15392]
[DEPENDENCY] The following dependencies have been updated:
- gardener/vpn2 from 0.51.0 to 0.52.0. Release Notes by @gardener-ci-robot [#15429]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 2.10.0 to 2.10.1. by @gardener-ci-robot [#15427]
[DEPENDENCY] The following dependencies have been updated:
- gardener/terminal-controller-manager from v0.37.0 to v0.38.0. Release Notes
- github.com/gardener/terminal-controller-manager from v0.37.0 to v0.38.0. by @gardener-ci-robot [#15414]

application/spdx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:ca07aba22e1771bb2de08251be6f461b0232c24775e60f850b437d995f7a29ac
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:ccc36531d18d0ef7c95a49c2645ac00363bda379fbf6517a932209b2037056dc
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:8e98927e33aa247529eea3d1db2e4568b4cc8bf6a1f4938ef4cb25fc61663d42
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b504036216246624844d555a2e7cac98ac2f77a08c26a6446245b38deff1558a
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a4555c6e5196a55317fd3619e774c4b953342416c564864eda5c3bb282323d47
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:dba2be75f8f9cff6e71e61e89328c0565de7fc8f7c46717fce1bf87f794c3c64
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:271dc6c18cb938d6aa14f7675b9efb799343caeb0e53318d0e2f686748f9b499
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:f0b4464fc017279671045596047ed28838b902bce0f6333c6a017650cfd1ec9f
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:019e35db818fb653963b1323d2f00989a40dfb192eb3ebc480bc3e7c6d3c6a86
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:7aacf6ba7b26ad7217243c9be38b06ee5b4a3cb59ad1af8c7fc240699c734ae1
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:a2c87e56e00888fbbb5cc5ccb5d9ca7ed843aa9092679cace144cc9ba4c3aff2
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:fe9acca52c6f61de4c6470d0f17b7af3baab6f24dcf8ef413e807a512113dc81
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:2689106dbaec31470f33359774973546af862ce4aba13128c7ae31c72c77fcb7
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:274a3075be6cf73248cd5a05aac6cd79de4f79df38a7741241464c519cf42681
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:53a0ba8c7310c565b8b03b0d3173396a9d099e30efb6d05d4db0e7d1f6f0cf0f
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:d089eeacc90fb21b3cb7ee29cbb872175fb4ce711b105de83bf7ad36ef2d4d77
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:8186952d9e6b0b6cec00c1f168d368fe4089172cd9e3c24651fa1a9be309753d
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:bcac5c634a89a6e117a23bb3eac68975ce865e1dbd0c007a754ab5a4c92032ea

application/vnd.cyclonedx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:b36964128fba2988bdd211c9e266c68164b457ebb56332f9b0bdef148d283ffb
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:effe0a6a5f55a984a7c14a68bbf93874504cfb6870809ed5eb2d0e587f030540
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:78bb8a9b09f71e55313f3a39be79a08aaf0f9d4eff1664cbe68d701dc20d4062
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:c2c43fedeb23f8f81b803ea9db0fd225cb6749d0ea44209fd93292c7fa51b2e9
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:3d1a422bed49111fdd8be94a3f9a1a836a4fb84a86d1ddc68e25bb8d1416b95c
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:a2e83e2b7b5e37e17ffb85da40f00389e27dfa2a2f7a6f1c366c8d857ba110e7
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:1efbdfd1111ec71bb95232b5a9bf666131d742334208970e700841e358f60b39
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:ecf7efd597647368f3dab4f7d61d7b21a6394e38507d889daebd86c9131ea2b8
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:cd5e0faf396c98238c1100c5c469784fa47982e159a5606f220d747d59e61923
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:db03987ba6dee653b9f6b41d3f94aa0cfdff3610528b07b0f1c8b81602075010
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:32b0763e66eb53ab0202971ad7676481fee5c7a2fa3625d121f9c935e64d117b
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:862f374f765d04d17ac5bd805a73df45a462000f3bd67cc54ea629e535dbd1a2
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:33fffdadb410ecde8908d66ac6465aac228298299741be73020e36c0a3dc5f61
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:a782d583b9a3ca324139545aad72d7badff1cfc3c2b400928eb2ddfb8239fb16
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:01b6c183223786746a426202dabd985ae330a822e42e4d7837939fa226b5205d
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:5877981b24936e45ee434937dd781b667eac0921017dabc6f6916eb414afd60b
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:211450ca9606478c7fbe566a1332f2af8e33b2ae3867215c7299a7e6b3d1581f
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:98109453e411761283416b5fb435ce934d13b81e147809b6e55c43895726873e

Helm Charts

gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.149.0
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.149.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.149.0

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.149.0
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.149.0
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.149.0
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.149.0
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.149.0
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.149.0
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.149.0
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.149.0
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.149.0

`v1.148.3`

Compare Source

[github.com/gardener/gardener:v1.148.3]

🐛 Bug Fixes

[USER] Fixed a bug where the deployInfrastructure task annotation on a Shoot was incorrectly removed when the Shoot spec was changed by an external actor while the infrastructure was being reconciled, causing the Infrastructure extension to never pick up the new generation. by @rfranzke [#15475]

application/spdx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:170f3a1970b5e6ef4b046eafe0c3faa859fda226c5b6e6cd52e1aaaad910d828
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:25fa9a24f149dcf8df499b20a5439066948d12258bb508621f24a02e19f7a4e2
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:ca534d2bcd99ae25b25d70f517f5a5b085b05baa39734feb56e4267f5d6b5442
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:f97d90018a1bd30787820d02ae5d97627135e06b7a03ab8140a0cf16ba0b1fec
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:58419ddb2c9b335bfb0f5dfce9ea2407ca03121fece7d453be5efb56ee6b09ea
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:957c698e02657817bf197201fb4119186bd1b8f146829cda9978d120f8557d15
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:82e96a085bb9eebbf8692f5cf208f08b29fd0cb068895561c6fdefaca809c481
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:f132e52dee80248ec9df63a1341c9ca30f81b6ced1ae000311dd4fd40f1749e1
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:7a32c8cfd96a5a682204f195db955b409f52d3f45aa04a160578590107b00001
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:fe6d0ac97d85b2902c0e96f9bce057712097439315c8fca62c67ef2b0734d927
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:1b45d2576f2061a703c2a3730bcfa065f2116af8c33d6fd368b84896ea4bbe7f
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:84a79ab4a347250000e7f02554117a4f9b97534d302e1b127fb7fdb34c4568a6
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:2f12f89e87f64c6096d9e98a0a98553d90b00d6b0b9ebd685d12ef05f8945fbe
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:94056f4d5ccbf310e8f002317e03c3fd748377c34de96f26b5468d7cf4b62ef3
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:31560ce792dd6f5a1c77fd483c389ee860b13dd7e7f05f34300ad2b8a57d746c
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:b3d560a625c1117ba13b8f6d4dc1d3a257de5bae3196429d167eb87367b3a262
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:0a8f3e40be89c2ee389fbe4a64064cb23e5c27a648994a5e4c371eef914ebbe9
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:90995de437625ac07388ed0337367266e27741ef8c9157bb303d3916ec0d02c9

application/vnd.cyclonedx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:bfd6928b5c4e106b5e28a901786a4871ce2b569685c13c660044a3d8f0e73f45
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:c4ae04385441ead6332001c25cefed45fdcc6835a8002f25d8704c0b39946ccb
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:a1a3a70eb88b6bf39a960e1ff90f90f30453f859f4d9de7bf18b672c51259f5a
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:ebb3d7f4dc2075c8ab0feac4e7b766c36201bb10172ad03c1c43d80312462075
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:045ea90585cd6df2921455072d284160883071e1e8362027ae5e737b5b25709b
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:09f8fadcc2360addb97f7683475725cd235c0104ab40f303abe0f9cb9e3cfc3d
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:b9a5b8f31d3d604bfe4b12fbf6b8570240f63e79179835c771d42f93c216a25d
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:e358e93992876def1a0223da7e640d3343aa460afb2e129316c32ec6f0423386
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:32aba1e386995d8b0de9b60543a6375495accede1d4eed6726625025a1b450b1
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:c861acf55bb8351735f4d695f23fc1a73fae28e2345586681f691553e4ba543b
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:23f76c0a9ccb71ef8cb77088781fc82d53b0f055ec510658614fef3f820b8f94
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:e7e8c29ad0c96a89227c74a5a9479a7a8a135e3615a2c849944b90ff2a085439
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:243c07bc02dbfd59efc7b36799770884d52e783a7c3052252bc1f03d57255ec1
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:31ac227ef2954239bbc62091156e863712212cd339ab2b69c59d437530c69577
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:2e987fa0546767bfb8a5fc52d5b6b257cd4b0f8d096561444319efb63d4d8982
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:c8c5ac8455fb1e26ad9d564693e8f3ff3858e45eb8482579a272105888f89f10
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:0876a8486407c0a5d387e327764b10dc42eb1f9d4377ad33e1d0497ae7bced88
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:102f78adb46f4537b542c9101214fba759a61aa5b97c081f6d88925c1aa3e03e

Helm Charts

gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.3
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.3

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.3
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.3
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.3
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.3
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.3
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.3
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.3
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.3
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.3

`v1.148.2`

Compare Source

[github.com/gardener/gardener:v1.148.2]

🐛 Bug Fixes

[OPERATOR] A race condition during the global observability ingress secret rotation has been fixed. by @vicwicker [#15446]
[USER] A bug preventing Shoot creation when the etcd-druid's UpgradeEtcdVersion feature gate is disabled (not explicitly enabled) has been fixed. by @acumino [#15447]

application/spdx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:a292254ed3ee9902330c048c3af02c99841b47fdaa2a5924f298b23129dcaed3
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:af6238f80eb9f668d530e9aee5cd1b1b27d8165a80ae37f7d0841fb10d43c9e1
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:568d5412bfd9488aa8219711545b7e75366adc1b73881ce880f726e6f4927ee0
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b968faa016ec3312caa426f46fdd1c57d57632f6268d300625cd8c43e67cc755
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:43d109df6773e5273b6eee690fa89c63ba3dc504f7091a852b648d1c3beed5aa
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:8f7e09813cff0d0ea19645f4ea35a0dafe9b6dda55d19d7fd588bc0c830a949b
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:1318f83e99a83064fecae9c1b8dd3a90544a5b8c57b62683ccee4a79c76f28a7
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:4675365f0dd0e7d645b75829f1594c754046b8c0db23a5a18dcfd8cdbfbf7f88
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:452f966c35e47d56e86d16bc3810f70761e39e59b985bcf878f8de272d6f30a1
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:a483b33a233f0c520660c15b7becf821d359a1d0885fcc98adc7251c929dc456
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:71ba31e62deae287704b84bd0adb2dc29245c6cc8d73bef4379cb1b035dc29e5
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:f2942bb5a81f6db61ad6e5eec48de0cc2b2935e5aa50e3d8db3dd53054f54d3c
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:48b1e40428cbc40ef09b90deb4de1bc4df3ec6e890a4ec0eba0a551ba1e79a63
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:b45649991da1919596ede16c77f2a8401c2bc4f7fff73b08a1ba9c9ab545dec4
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:72a930979ac55758a47543dfa1170119f63bcf24ff054ca6567f5f48498609a9
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:7b1efa6f95d5e409b5ebc0f567e4af7de5338b71768f679acc8956fdd6ee5608
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:6695e153d1a8eb479f95fe777618d65f5d612f19b852bbff56fd06847307504f
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:dda1882c7b7ebca0233c7a0fe9df81069abb38560ba2b3b7b6b7d8fc5e3824c4

application/vnd.cyclonedx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:9c828975a0ec9b6fcadaf1d1f2f341e78a90c86153b209f7053d3ba4520bf20f
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:d3f1d8740542eb226c721e58446f77d0c4911734dbfc2159beac47270ea56f3f
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:74b57955ea98ce23d56fca63ef30c5b514ccd80c11cf7ca12460c2f7a84dafc2
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:fd9d1e1b2fb94e71f98d0cf400555f2574caa2b685137c6500fb9342c539263d
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:6531082f14b486144ac829a4f544f1350b315d4d492775a0cf7b6cf75ba0467d
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:aa1117de4e6bc3ece519c30a03bf211ad56e53d13be367a260013456a77ed6c0
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:56c4ff7cd36dae1f23aacb363c74140832981c00c0a89e318336f0730b24b71f
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:81a8d8894495eee3a382cf5e3254e980e3cc9e128f892c84f86f4d8fb9db5b9f
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:0e3c34e7821991b9f8f29d4fd4ba57db10107186d5eca44aec2743727ce64bac
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:1f28cf6a3dbf6a5e6796fba3d4d5a1191452e8cf68911d3a998406cecc25f666
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:813aac1ec61f1f8f02df0f319d00b99fa5fd61352519bcbf6ae19c9a8eaf1b61
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:b73dcb002ab8b6fb096c658cf1de8e3815c6b2e369e0474fc69fe8f499914aa3
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:6ee7a2b13dd91d6554f353bb12eea19da9b0ee58d9899091880c9f3f21474154
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:d3a4b3871f49d046b9caa98eba9cc7d98b1c68c376bd6bee241a2c344183f28a
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:36175319c026d01094cb67ec08338f5eb94f221e545c2ce07d0d97967305b9df
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:83e9e7475dcb74e50c8c748dc75adde49c17ae1fff6ca5a3705b1be594c91660
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:46d8e15f2df630c8456b4ef6a7f7fd8aa08fbd8eb8f5606079c977e80fbd67ad
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:aa957ee0e808801c7b174677abe2f7f41be89a4b9ffd5f05033490a7c657c1e6

Helm Charts

gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.2
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.2

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.2
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.2
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.2
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.2
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.2
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.2
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.2
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.2
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.2

`v1.148.1`

Compare Source

[github.com/gardener/gardener:v1.148.1]

🐛 Bug Fixes

[OPERATOR] The logrotate systemd service now restarts automatically on failure, preventing missed log rotations after transient errors. by @marc1404 [#15436]

application/spdx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:715cb3e800abc9e76f11e14b5e089f429a3955c9a850c3f68830679d5b100980
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:8197bf2d1eb7a780378ef43be87515ef653614d65fe5525e108c8789118db2ad
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:2b014cbc62358851dc3e2e88e0dea81c37881ddb0eb1edc7ff2bbb2f98ed660d
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:f89e5f002b1bab63f82cb01a4123c6cce53b991f5d3ca10eca7842bd677b90bb
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:12e983a146c16c7ce1cfb8259f1a9bfa5e717e87e15dbf67234138fc59ed66e5
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:4560f0eb5e98676c2c27b2ab481a72b8718a289f3554d97d29232dae01f3a48a
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:5d94a2c2b4a9f48e3413b3b805ee7f425eea9205e3440418069857c3fa68a92d
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:5dd089c3d02a5be2f8738053d590101bae09eef6c6f5d43f4c6c63f3fca8a338
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:128ab3cacb0b7e84bddfba2391b594846f01a2303312d68434d18f743f3eedc5
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:48d1801c14cda2075ae39e9229080506eeffb0b4878e624d0906e4691566597b
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:72d80074c19557b64937690149c11e97d75af950ff31dbd33e05ac8f0cd23e6c
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:9ff61dded840fc4c1b464cd5080c3da4c2533714da785193c97721da819495b6
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:4b58e87a21d0c8d8d1714fb6fb5d212843a907dc70096cb45302238e58486dd7
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:d24d87c52bb298e71f9610cdd19cf9c55766e784ab66ecc4b261327e95a9ee32
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:6e720b4322aa455485dfca71c00ec43047f4c5680778073d8f17380ca9e1df37
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:7d3114139854b5c0bf2640922c88cf8454ec6cf390c5c3714a7a891f863efafc
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:5c694b49de5b4733ba0bc9e1122bccebb925b133dc5d3471a4936facc3ab3530
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:bef1973dd2ac17384de518f4e23f431a4fa1ba516071eeb6e6ad64d5c36ac13b

application/vnd.cyclonedx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:e3aaed9387d6bd966f55e72ae252cd0e9c2333ca012df6dc0c58de6ee15e277a
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:f6439c5872e8f733f8d5c4ef7cd731e5e72fd85f899fe70d75e379d08d697c19
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:06d0a2280e9572fed7e2fbce6429b92e0137854e632f6fe8a45d21eb34499517
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b0d3068c0fe7675bf747496010dd7518d1a26f80c2fe20598a3936ed6ff8b58b
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:2ba6a02016f44e38b2c9b33a78fea3d8d5f487363d4016428fbf5bee0874a337
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:c78a3a79691e544c481167e88f294546dedb1ef95d2146d5f47d6c0b68003b40
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:3cc016ab21552ea1f2a613bc2d82045085962de76ceb573dde5310b17e6f227f
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:7f8a90b16090a6b670259724b7f040dfedbeeb95b39a01aa78e0d4010e099976
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:0f5af203d992d63399be06bf6c75449d95b5fc116f6239e1a140ba6c384377dc
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:e5c35d3d4a5d06e0070f92b14b8ad0cba1724c6d4250326aac115005fbd075c1
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:17df869def02ed303e345d4e8a658c778d506b7eae70b85740b403c5e9d24db6
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:c2c648722c26e4a6841deb47682236a7f17d029878b71c9570f86a14f5f0e6ff
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:03d602800e12dd581cffdc0e404a296cbe5ceaaf3ecbb0011820fd15b4641e6b
operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:7bd0efd1356d4722416047d0db698c4cc848f6c557895a5fb099d739ddb9532d
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:a51e871b00bcddfa23ca86fe7eb6d73d3b269a3b1a13effe18fd7d25e54be83c
resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:f6f250c2a7a02147d220d6c1427aacb8980400d1b4915c53e9f70b3e5d66ba14
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:641cab7b8e94df501c3a4f60804667b82d7cd1fc8180816d12f18fc2c67aff33
scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:96269744953d78e5ba4042cf6204e5207937f8abe014ec35ea40ef81910d1948

Helm Charts

gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.1
operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.1

Container (OCI) Images

admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.1
apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.1
controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.1
gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.1
gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.1
node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.1
operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.1
resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.1
scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.1

`v1.148.0`

Compare Source

[github.com/gardener/gardener:v1.148.0]

⚠️ Breaking Changes

[OPERATOR] The GA-ed and unconditionally enabled VPAInPlaceUpdates feature gate is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @ialidzhikov [#15201]
[OPERATOR] ⚠️ Gardener is no longer compatible with gardener-discovery-server version < v0.11.0, if you are not using the default gardener-discovery-server managed by gardener operator, please update your gardener-discovery-server to version >= v0.11.0 before updating Gardener to this version. by @vpnachev [#15244]

📰 Noteworthy

[OPERATOR] gardenadm now enables SSH for all nodes in a self hosted shoot cluster. This is required to be able to bootstrap the control plane. by @tobschli [#15270]
[USER] All authenticated users are now allowed to read ControllerRegistrations in the garden cluster (these resources contain metadata information about the registered extensions in the system). by @rfranzke [#15316]
[DEVELOPER] Gardener's base images have been updated to Debian 13 (trixie). by @timuthy [#15286]

✨ New Features

[OPERATOR] A new alpha feature gate RemoveHTTPProxyLegacyPort is added to gardenlet. When enabled, it removes the legacy HTTP proxy port (tls-tunnel, 8132) and its supporting resources from the Seed ingress gateway. It can only be enabled once all Shoots on the Seed report the UsesUnifiedHTTPProxyPort constraint. by @jamand [#15132]
[DEVELOPER] The generate-kubeconfig.sh script now allows to specify the validity of the requested kubeconfig for shoots by passing the --expiration-minutes flag. by @moritzfalke [#15361]
[DEVELOPER] flow.TaskGroup is a new type in pkg/utils/flow for bundling tasks under a shared id and dependency set. Add it to a flow.Graph via Graph.AddGroup; the compiled Flow sees only individual tasks — groups are a build-time convenience. See the godoc on TaskGroup and Graph.AddGroup for the flattening rules. by @rfranzke [#15311]

🐛 Bug Fixes

[OPERATOR] fix(shoot-mutator): honor machine image providerConfig updates on unchanged name/version by @MartinWeindel [#15296]
[OPERATOR] Fix waitUntilWantedMachineDeploymentsAvailable logic so that the function returns an error when rolling updates are still in-progress. by @thiyyakat [#15344]
[DEVELOPER] Components that have added workarounds to call install scripts for tools from GARDENER_TOOL_DIR can now be removed. by @vpnachev [#15408]
[DEVELOPER] Fix warning about missing shasum in remote-local-setup by @chrkl [#15295]

🏃 Others

[OPERATOR] The global observability ingress secret is now managed by the gardener-operator and rotated later when the Garden resource is marked for credential rotation. by @vicwicker [#15284]
[OPERATOR] The update mode of the VerticalPodAutoscaler resources deployed by Gardener is now explicitly set to InPlaceOrRecreate, reflecting the actual runtime behavior after the unconditional enablement of the VPAInPlaceUpdates feature gate. by @Velin-Todorov [#15232]
[OPERATOR] Garden Prometheus now scrapes kubelet_volume_stats_* metrics, enabling PVC volume-usage monitoring, which can also be used by pvc-autoscaler. by @RadaBDimitrova [#15255]
[OPERATOR] A sporadic issue with stale secrets in the istio-basic-auth-server after credential rotation has been fixed. by @vicwicker [#15329]
[OPERATOR] The cherry-pick documentation now describes what kind of PRs are good candidates for cherry picks, and documents initiating cherry picks via the Prow cherrypicker plugin. by @ialidzhikov [#15261]
[OPERATOR] The etcd members of newly created shoot control planes are now prefixed with the seed name (spec.memberNamePrefix of the Etcd resource). by @acumino [#15233]
[OPERATOR] The following dependencies have been updated:
- europe-docker.pkg.dev/gardener-project/releases/3rd/victoriametrics/victoria-logs from v1.37.2 to v1.50.0. by @rrhubenov [#15381]
[OPERATOR] containerd-logrotate.timer now fires once per day with up to 4h jitter instead of every 10 minutes. 14-day retention is unchanged. by @marc1404 [#15161]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/autoscaling/vpa-admission-controller from 1.7.0 to 1.7.1.
- registry.k8s.io/autoscaling/vpa-recommender from 1.7.0 to 1.7.1.
- registry.k8s.io/autoscaling/vpa-updater from 1.7.0 to 1.7.1. by @gardener-ci-robot [#15352]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.84.3 to 1.84.4. Release Notes by @gardener-ci-robot [#15310]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 2.9.0 to 2.10.0. by @gardener-ci-robot [#15371]
[DEPENDENCY] The following dependencies have been updated:
- quay.io/kiwigrid/k8s-sidecar from 2.8.1 to 2.9.0. by @gardener-ci-robot [#15367]
[DEPENDENCY] The following dependencies have been updated:
- gcr.io/istio-release/pilot from 1.29.5 to 1.29.6.
- gcr.io/istio-release/proxyv2 from 1.29.5 to 1.29.6.
- istio.io/api from v1.29.5 to v1.29.6. by @gardener-ci-robot [#15293]
[DEPENDENCY] The following dependencies have been updated:
- gardener/dashboard from 1.84.4 to 1.84.5. Release Notes by @gardener-ci-robot [#15375]
[DEPENDENCY] The following dependencies have been updated:
- europe-docker.pkg.dev/gardener-project/releases/3rd/victoriametrics/operator from v0.65.0 to v0.73.1.
- github.com/VictoriaMetrics/operator/api from v0.65.0 to v0.73.1. by @rrhubenov [#15219]
[DEPENDENCY] The following dependencies have been updated:
- gardener/etcd-druid from v0.37.0 to v0.37.1. Release Notes
- github.com/gardener/etcd-druid/api from v0.37.0 to v0.37.1. by @gardener-ci-robot [#15348]
[DEPENDENCY] The following dependencies have been updated:
- envoyproxy/envoy from distroless-v1.38.3 to v1.39.0. Release Notes
- envoyproxy/envoy from v1.38.3 to v1.39.0. by @gardener-ci-robot [#15266]
[DEPENDENCY] The following module dependencies have been updated:
- k8s.io/autoscaler/vertical-pod-autoscaler from v1.6.0 to v1.7.0. by @ialidzhikov [#15203]
[DEPENDENCY] The following dependencies have been updated:
- gardener/vpn2 from 0.50.1 to 0.51.0. Release Notes by @gardener-ci-robot [#15318]
[DEPENDENCY] The following dependencies have been updated:
- registry.k8s.io/coredns/coredns from v1.14.4 to v1.14.6. by @gardener-ci-robot [#15281]
[DEPENDENCY] The following dependencies have been updated:
- gardener/pvc-autoscaler from v0.2.0 to v0.3.0. Release Notes
- github.com/gardener/pvc-autoscaler from v0.2.0 to v0.3.0. by @gardener-ci-robot [#15315]

application/spdx+json

admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:9299ef98380b1c12c63dfa81c4e90ddb13d9961da41745e79b13236ce0126597
admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:bb28bbba848d794c72b9e4521ea0ae894f567ff147157a449cc43b70508bf4eb
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:190aa0e26d72a7d621c2cb0091a36413db051f26a53cf2250df4113ddc871f1b
apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:6582e8a90d03599be8b3ecb4f719fc22624b15d0dcaebdabee3be4084d40cabf
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:1d20f4d48518f2914cf3da068d67616054eba4807b2d3fc32204dd081bc0f195
controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:332109abcf9a0f10435125684ae16cd7d0dd6526f949bb4d731dc3a6ccc31036
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:13ccee9036a1705db9c5a8803f36ce24c7c10ed2d0cc3fbc94a451db64adf850
gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:3505a9b2f5ad6bb37b69b9b217dcbad2b198fc16623c76a0efc2f043c851e400
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:e3be04eedb2dc2b9acb30c6fcbc636165f7ff6f5f521f9de715a167def364e2f
gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:f9c79e2e098baee8b2349b101d0dd4759cf4d2b172c2ac2c605955696171067c
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:28ca99a5cf9939b0dd50fe3530636ca53a0b52e24883be632e4e75758ae69d20
node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:949cf6b10ab95c03a2aa2d22cb8c169b64f111592192a243eb2a2a5ef66cee93
operator-sbom-ref: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:80

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-06-04T16:29:38Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

26 additional dependencies were updated

Details:

Package	Change
`istio.io/api`	`v1.29.3` -> `v1.29.4`
`github.com/aws/aws-sdk-go-v2`	`v1.41.2` -> `v1.41.7`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.10` -> `v1.32.17`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.19.10` -> `v1.19.16`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.18` -> `v1.18.23`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.18` -> `v1.4.23`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.18` -> `v2.7.23`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.5` -> `v1.13.9`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.18` -> `v1.13.23`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.0.6` -> `v1.0.11`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.11` -> `v1.30.17`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.15` -> `v1.35.21`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.41.7` -> `v1.42.1`
`github.com/aws/smithy-go`	`v1.24.1` -> `v1.25.1`
`github.com/gardener/cert-management`	`v0.22.0` -> `v0.23.0`
`github.com/go-openapi/swag/conv`	`v0.25.5` -> `v0.26.0`
`github.com/go-openapi/swag/fileutils`	`v0.25.5` -> `v0.26.0`
`github.com/go-openapi/swag/jsonutils`	`v0.25.5` -> `v0.26.0`
`github.com/go-openapi/swag/stringutils`	`v0.25.5` -> `v0.26.0`
`github.com/go-openapi/swag/typeutils`	`v0.25.5` -> `v0.26.0`
`github.com/mattn/go-isatty`	`v0.0.20` -> `v0.0.22`
`github.com/prometheus/client_golang`	`v1.23.3-0.20260518105423-c9d5bc4c50a9` -> `v1.23.3-0.20260602051030-3537b20ac86b`
`github.com/prometheus/common`	`v0.67.6-0.20260224092343-e4c38a0aea47` -> `v0.68.1`
`golang.org/x/exp`	`v0.0.0-20260312153236-7ab1446f8b90` -> `v0.0.0-20260527015227-08cc5374adb3`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260406210006-6f92a3bedf2d` -> `v0.0.0-20260526163538-3dc84a4a5aaa`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260406210006-6f92a3bedf2d` -> `v0.0.0-20260526163538-3dc84a4a5aaa`

renovate · 2026-07-03T18:03:04Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod tidy
go: downloading github.com/golang/mock v1.6.0
go: downloading k8s.io/code-generator v0.36.3
go: downloading go.uber.org/mock v0.6.0
go: downloading github.com/google/gofuzz v1.2.0
go: downloading go.uber.org/goleak v1.3.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading golang.org/x/telemetry v0.0.0-20260625142307-59b4966ccb57
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/spf13/afero v1.15.0
go: downloading github.com/stretchr/objx v0.5.3
go: downloading k8s.io/gengo/v2 v2.0.0-20260408192533-25e2208e0dc3
go: downloading github.com/evanphx/json-patch v5.9.11+incompatible
go: downloading github.com/gkampitakis/go-snaps v0.5.15
go: downloading github.com/joshdk/go-junit v1.0.0
go: downloading github.com/mfridman/tparse v0.18.0
go: downloading github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
go: downloading github.com/xyproto/randomstring v1.0.5
go: downloading github.com/kr/pretty v0.3.1
go: downloading golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated
go: downloading github.com/gkampitakis/ciinfo v0.3.2
go: downloading github.com/gkampitakis/go-diff v1.3.2
go: downloading github.com/maruel/natural v1.1.1
go: downloading github.com/tidwall/gjson v1.19.0
go: downloading github.com/tidwall/pretty v1.2.1
go: downloading github.com/dlclark/regexp2 v1.12.0
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.15.0
go: downloading github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/go-openapi/testify/v2 v2.6.0
go: downloading golang.org/x/tools/go/expect v0.1.1-deprecated
go: downloading github.com/tidwall/sjson v1.2.5
go: downloading github.com/tidwall/match v1.1.1
go: downloading k8s.io/apiserver v0.36.3
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading github.com/twmb/franz-go/pkg/kfake v0.0.0-20260515175617-8268a5d078c0
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.26.1
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.5.1
go: downloading github.com/golang/snappy v1.0.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.44.0
go: downloading github.com/pascaldekloe/goe v0.1.0
go: downloading github.com/hashicorp/go-uuid v1.0.3
go: downloading gonum.org/v1/gonum v0.17.0
go: finding module for package github.com/gardener/gardener/hack
go: github.com/stackitcloud/gardener-extension-acl/hack imports
	github.com/gardener/gardener/hack: module github.com/gardener/gardener@latest found (v1.149.0), but does not contain package github.com/gardener/gardener/hack

renovate Bot requested a review from a team as a code owner June 4, 2026 16:29

renovate Bot added the dependencies Upgrade dependencies and tools label Jun 4, 2026

renovate Bot force-pushed the renovate/k8s-go branch from b4fd2e5 to 5975fe9 Compare June 11, 2026 11:39

renovate Bot changed the title ~~Update k8s packages to v1.144.0~~ Update k8s packages to v1.144.1 Jun 11, 2026

renovate Bot force-pushed the renovate/k8s-go branch 2 times, most recently from 13cf109 to 30c5b9c Compare June 18, 2026 20:10

renovate Bot changed the title ~~Update k8s packages to v1.144.1~~ Update k8s packages to v1.144.2 Jun 18, 2026

renovate Bot force-pushed the renovate/k8s-go branch 2 times, most recently from 2209e41 to 18b75bc Compare June 19, 2026 19:52

renovate Bot changed the title ~~Update k8s packages to v1.144.2~~ Update k8s packages to v1.145.0 Jun 19, 2026

renovate Bot force-pushed the renovate/k8s-go branch 4 times, most recently from bc752ec to 8f4480e Compare June 25, 2026 11:14

renovate Bot changed the title ~~Update k8s packages to v1.145.0~~ Update k8s packages to v1.145.1 Jul 3, 2026

renovate Bot force-pushed the renovate/k8s-go branch 2 times, most recently from cc36fee to 7b45fd7 Compare July 3, 2026 18:03

renovate Bot changed the title ~~Update k8s packages to v1.145.1~~ Update k8s packages to v1.146.0 Jul 3, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 7b45fd7 to d18433e Compare July 7, 2026 07:45

renovate Bot changed the title ~~Update k8s packages to v1.146.0~~ Update k8s packages to v1.146.1 Jul 7, 2026

renovate Bot force-pushed the renovate/k8s-go branch from d18433e to c65e4c6 Compare July 8, 2026 20:08

renovate Bot changed the title ~~Update k8s packages to v1.146.1~~ Update k8s packages to v1.146.2 Jul 8, 2026

renovate Bot force-pushed the renovate/k8s-go branch from c65e4c6 to 36b9a3e Compare July 13, 2026 10:38

renovate Bot changed the title ~~Update k8s packages to v1.146.2~~ Update k8s packages to v1.146.3 Jul 13, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 36b9a3e to af78ea3 Compare July 17, 2026 11:07

renovate Bot changed the title ~~Update k8s packages to v1.146.3~~ Update k8s packages to v1.147.0 Jul 17, 2026

renovate Bot force-pushed the renovate/k8s-go branch from af78ea3 to 9797165 Compare July 20, 2026 19:02

renovate Bot changed the title ~~Update k8s packages to v1.147.0~~ Update k8s packages to v1.147.1 Jul 20, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 9797165 to 4042b42 Compare July 21, 2026 10:35

renovate Bot force-pushed the renovate/k8s-go branch from 4042b42 to 711de72 Compare July 29, 2026 13:46

renovate Bot changed the title ~~Update k8s packages to v1.147.1~~ Update k8s packages to v1.147.2 Jul 29, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 711de72 to 18e6d9d Compare July 31, 2026 18:59

renovate Bot changed the title ~~Update k8s packages to v1.147.2~~ Update k8s packages to v1.148.0 Jul 31, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 18e6d9d to 6f891c0 Compare August 5, 2026 00:41

renovate Bot changed the title ~~Update k8s packages to v1.148.0~~ Update k8s packages to v1.148.1 Aug 5, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 6f891c0 to 774e5ff Compare August 6, 2026 10:07

renovate Bot changed the title ~~Update k8s packages to v1.148.1~~ Update k8s packages to v1.148.2 Aug 6, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 774e5ff to 60503ba Compare August 11, 2026 23:30

renovate Bot changed the title ~~Update k8s packages to v1.148.2~~ Update k8s packages to v1.148.3 Aug 11, 2026

renovate Bot force-pushed the renovate/k8s-go branch from 60503ba to e0937e8 Compare August 13, 2026 15:45

renovate Bot changed the title ~~Update k8s packages to v1.148.3~~ Update k8s packages to v1.149.0 Aug 13, 2026

Update k8s packages to v1.149.0

cfbb4d3

renovate Bot force-pushed the renovate/k8s-go branch from e0937e8 to cfbb4d3 Compare August 14, 2026 16:41

Navigation Menu

Uh oh!

Update k8s packages to v1.149.0 - #293

Update k8s packages to v1.149.0#293
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/k8s-go

renovate Bot commented Jun 4, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jun 4, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.149.0

[github.com/gardener/gardener:v1.149.0]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

application/spdx+json

application/vnd.cyclonedx+json

Helm Charts

Container (OCI) Images

v1.148.3

[github.com/gardener/gardener:v1.148.3]

🐛 Bug Fixes

application/spdx+json

application/vnd.cyclonedx+json

Helm Charts

Container (OCI) Images

v1.148.2

[github.com/gardener/gardener:v1.148.2]

🐛 Bug Fixes

application/spdx+json

application/vnd.cyclonedx+json

Helm Charts

Container (OCI) Images

v1.148.1

[github.com/gardener/gardener:v1.148.1]

🐛 Bug Fixes

application/spdx+json

application/vnd.cyclonedx+json

Helm Charts

Container (OCI) Images

v1.148.0

[github.com/gardener/gardener:v1.148.0]

⚠️ Breaking Changes

📰 Noteworthy

✨ New Features

🐛 Bug Fixes

🏃 Others

application/spdx+json

Configuration

Uh oh!

renovate Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

renovate Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 4, 2026 •

edited

Loading

`v1.149.0`

`v1.148.3`

`v1.148.2`

`v1.148.1`

`v1.148.0`

renovate Bot commented Jun 4, 2026 •

edited

Loading

renovate Bot commented Jul 3, 2026 •

edited

Loading