chore(deps): bump the kubernetes group across 1 directory with 12 updates

[dependabot]

Bumps the kubernetes group with 8 updates in the / directory:

Package	From	To
k8s.io/api	0.36.0	0.36.1
k8s.io/apiserver	0.36.0	0.36.1
k8s.io/code-generator	0.36.0	0.36.1
k8s.io/component-helpers	0.36.0	0.36.1
sigs.k8s.io/controller-runtime	0.24.0	0.24.1
sigs.k8s.io/jobset	0.11.1	0.12.0
sigs.k8s.io/kind	0.31.0	0.32.0
sigs.k8s.io/scheduler-plugins	0.34.4-devel-sg	0.35.4-devel

Updates k8s.io/api from 0.36.0 to 0.36.1

Commits

• 25001c8 Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.36.1

Commits

• 7af103a Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/apiserver from 0.36.0 to 0.36.1

Commits

• f5c87c5 Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/client-go from 0.36.0 to 0.36.1

Commits

• 55ef15a Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/code-generator from 0.36.0 to 0.36.1

Commits

• 5f4d453 Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/component-base from 0.36.0 to 0.36.1

Commits

• 8b55240 Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/component-helpers from 0.36.0 to 0.36.1

Commits

• 58f41a0 Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

Commits

• 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
• 0f7b33d Fix regression in Apply typed error handling
• See full diff in compare view

Updates sigs.k8s.io/jobset from 0.11.1 to 0.12.0

Release notes

Sourced from sigs.k8s.io/jobset's releases.

v0.12.0

What's Changed

New Features

• Elastic JobSets: Pod-level scaling support (#1179, @​aniket2405)
  • Implement elastic scaling at the Pod level for JobSets
• Add restart actions RestartJob and RestartJobAndIgnoreMaxRestarts (#1177, #1191, @​GiuseppeTT)
  • New restart action types for finer-grained failure recovery control
  • KEP: Add restart actions KEP (#1152, @​GiuseppeTT)
• Add condition RestartingJobSet (#1225, @​GiuseppeTT)
  • New condition to track when a JobSet is actively restarting
• Add support for custom annotations in JobSet controller (#1148, @​dabico)
  • Allow users to configure custom annotations on JobSet resources
• Add sidecar container mode to the in-place restart agent (#1140, @​GiuseppeTT)
  • Alternative deployment mode for the restart agent as a sidecar
• Enable tlsMinVersion and tlsCipherSuites configuration in JobSet configuration (#1127, @​kannon92)
  • Configurable TLS settings for the controller manager
• Add patchStrategy markers to JobSet API for SMP (#1185, @​andreyvelich)
  • Server-side apply / Structured Merge Patch support for API fields

Bug Fixes

• Fix admission webhook to return Invalid instead of Forbidden (#1207, @​JerryHu1994)
• Trigger reconciliation if status update fails (#1194, @​GiuseppeTT)
• List child Jobs by JobSet UID instead of JobSet name + namespace (#1167, @​GiuseppeTT)
• Filter out Pods that do not have the same owner reference (#1154, @​GiuseppeTT)
• Fix Helm installation command in docsite (#1142, @​janekmichalik)
• Add timeout for waiting for PVC to fight flakes (#1134, @​kannon92)
• Fix test: Check JobSet name before listing Jobs (#1163, @​andreyvelich)
• Fix PR #1195 (#1199, @​GiuseppeTT)

Helm/Deployment

• Auto-generate Helm templates from kustomize using yaml-processor (#1166, @​IrvingMg)
• Update Helm chart maintainers to match real maintainers (#1156, @​kannon92)
• Align JobSet Webhooks with Controller-Runtime Conventions (#1159, @​andreyvelich)

Documentation

• Add troubleshooting section: follower pod node selector not set (#1189, @​0xlen)
• Add KEP for Elastic JobSets (#1147, @​aniket2405)
• Add deepwiki link for code overviews (#1214, @​kannon92)
• Add Copilot Instructions (#1161, @​andreyvelich)
• Create symlink for CLAUDE.md (#1160, @​andreyvelich)
• Fix TOC for KEP-262 (#1180, @​GiuseppeTT)
• Improve the issue template for releases (#1176, @​GiuseppeTT)
• Fix image (#1220, @​GiuseppeTT)

Build/CI Improvements

... (truncated)

Commits

• f22e565 update cloud build image (#1228)
• 09e9a3b prepare for release-0.12 (#1226)
• 18128a7 Add condition RestartingJobSet (#1225)
• 4f953e1 chore(api): Add patchStrategy markers to JobSet API for SMP (#1185)
• bc3ce1f update k8s to 0.36.0 (#1212)
• 83ea3bd Bump postcss from 8.5.6 to 8.5.13 in /site (#1224)
• 9283136 Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 (#1222)
• 3b246ed feat(controller,webhook): implement Elastic JobSets (Pod-level scaling) (#1179)
• 4e195e2 Fix image (#1220)
• 009a667 add deepwiki link for code overviews (#1214)
• Additional commits viewable in compare view

Updates sigs.k8s.io/kind from 0.31.0 to 0.32.0

Release notes

Sourced from sigs.k8s.io/kind's releases.

v0.32.0

This release contains critical dependency updates, bug fixes, and defaults to Kubernetes 1.36.1.

Breaking Changes

• The default node image is now kindest/node:v1.36.1@sha256:3489c7674813ba5d8b1a9977baea8a6e553784dab7b84759d1014dbd78f7ebd5
• New node images requiring upgrading kind to kind load ...: Due to a containerd upgrade, you must upgrade kind to this release or newer to use kind load ... with the newly published node images. As always, we cannot gurantee full compatibility of node images between kind releases. You can use the digests from previous releases, upgrade kind, or build your own node-images.
• kubeadm v1beta4 config format is now used for Kubernetes 1.36.0+ If you are using versioned config patches, you must update to target v1beta4. Unversioned patches kind will attempt to convert as needed (more below in New Features). This change is required for Kubernetes 1.37+ which drops kubeadm v1beta3 config.
• Adoption of Envoy for Load Balancing in multi-control-plane node clusters: HAProxy has been replaced by Envoy (docker.io/envoyproxy/envoy:v1.36.2) as the load balancer in multi-control-plane (HA) clusters. If you rely on custom HAProxy loadbalancer configurations or images, please note that Envoy is now used.
• cgroup v1 warning: A warning is now printed if cgroup v1 is detected on the host. Kubernetes has deprecated support for cgroup v1, and at some point in the future KIND releases / node-images will also drop support for cgroup v1.

New Features

• kubeadm v1beta4 configuration support: KIND now uses the v1beta4 config format for Kubernetes v1.36.0+ while maintaining v1beta3 for v1.23.0 up to v1.35.x, and v1beta2 for older versions.
• Custom Merging & Version-Awareness for Kubeadm Config Patches:
  • KIND now automatically translates old-style map-based extraArgs / kubeletExtraArgs patches to the list-based v1beta4 format when targeting v1beta4 configs.
  • Config patches now append to extraArgs / kubeletExtraArgs / certSANs reliably. To overwrite or make other more precise patching, use json6902 patches.
• Support for containerd config v4 format: Enabled support for containerd's config v4 format in kind load and snapshotter parsing, which is required for newer containerd versions.
• Building Node Images from CI Artifacts: Added support to build node images from Kubernetes CI artifacts (resolving endpoints like https://dl.k8s.io/ci/latest.txt or CI build prefixes).
• Support for containerd version-aware containerd config patching: Like kubeadmConfigPatches, containerd config patching is now aware of version and if specified in patches will only apply patches that match the containerd config being used.
• Assorted dependency updates.

Images pre-built for this release:

• v1.36.1: kindest/node:v1.36.1@sha256:3489c7674813ba5d8b1a9977baea8a6e553784dab7b84759d1014dbd78f7ebd5
• v1.35.5: kindest/node:v1.35.5@sha256:ce977ae6d65918d0b58a5f8b5e940429c2ce42fa3a5619ec2bbc60b949c0ac95
• v1.34.8: kindest/node:v1.34.8@sha256:02722c2dedddcfc00febf5d27fbeb9b7b2c14294c82109ff4a85d89ac9ba3256
• v1.33.12: kindest/node:v1.33.12@sha256:3f5c8443c620245e4d355cfe09e96a91ead32ceaa569d3f1ca9edf0cb2fe2ff4

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

Fixes

• Fix permission error when creating pods with hostUsers: false (Kubernetes 1.36+).
• Handle registry ports correctly in image normalization logic (e.g., registry running on ports like localhost:5000/...).
• Handle empty port mapping listen addresses correctly (defaults to wildcard address).
• Skip /dev/mapper mount on rootless Docker.
• Assorted documentation fixes and improvements.

See also:

• https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster
• https://kind.sigs.k8s.io/docs/user/quick-start/#building-images

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see #2718

Contributors

Committers for this release:

• @​AnjaliMishra1st
• @​aojea

... (truncated)

Changelog

Sourced from sigs.k8s.io/kind's changelog.

kind Release Process

This document describes the steps to cut a new kind release. It is intended for maintainers who have push access to the upstream repository and the staging image registry.

Prerequisites

• GNU sed (macOS: brew install gnu-sed)
• Docker with buildx support
• crane installed (for image promotion to Docker Hub)
• Push access to github.com/kubernetes-sigs/kind
• Push access to gcr.io/k8s-staging-kind
• Push access to kindest on Docker Hub

---

Phase 1 - Publish Node Images

Node images must be built, tested, and promoted to Docker Hub before the kind release so their digest hashes are known and can be embedded in the release binary.

1.1 Build and push to staging

Use hack/release/push-node.sh for Kubernetes v1.31 and later:

./hack/release/push-node.sh v1.35.0

This builds amd64 and arm64 node images and pushes them to gcr.io/k8s-staging-kind/node:v1.35.0, then creates a multi-arch manifest list.

You can override the registry or add architectures:

REGISTRY=gcr.io/k8s-staging-kind ARCHES="amd64 arm64" ./hack/release/push-node.sh v1.35.0

1.2 Test with the staging image

Update the default image in pkg/apis/config/defaults/image.go to point to the staging image with its digest, then run CI to validate:

const Image = "gcr.io/k8s-staging-kind/node:v1.35.0@sha256:<digest-from-push>"

... (truncated)

Commits

• cda67ef version v0.32.0
• a335a9e Merge pull request #4182 from stmcginnis/kindest/node-v1.36.1
• 645b868 bump default image to kindest/node:v1.36.1
• d1b84e8 Merge pull request #4181 from BenTheElder/base-fix
• 25d94fa bump staging node image
• 088013a update base image with permissions fix
• 995e8fa Fix: Permission error when creating pod with hostUsers: false (#4179)
• b029a2b Merge pull request #4149 from BenTheElder/bump-images-asdf
• 140186f Merge pull request #4174 from BenTheElder/ci-builds
• 811ea84 Merge pull request #4173 from BenTheElder/kubeadm-v1beta4-special-patch
• Additional commits viewable in compare view

Updates sigs.k8s.io/scheduler-plugins from 0.34.4-devel-sg to 0.35.4-devel

Release notes

Sourced from sigs.k8s.io/scheduler-plugins's releases.

v0.34.7

What's Changed

• update helm chart index to include version 0.33.5 by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#938
• Upgrade k8s to v1.34 by @​astefanutti in kubernetes-sigs/scheduler-plugins#933
• bump version of controller-runtime by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#939
• fix: pogGroupController panic when no selected pod by @​Colvin-Y in kubernetes-sigs/scheduler-plugins#941
• logs: increase log level of frequent log messages by @​Tal-or in kubernetes-sigs/scheduler-plugins#947
• Fix head-of-line blocking in coscheduling QueueSort by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#949
• Exclude scheduling-gated pods from PodGroup quorum in PreFilter by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#952
• coscheduling: restrict controller-runtime scheme to PodGroup types only by @​jzhaojieh in kubernetes-sigs/scheduler-plugins#954
• feat: Add configurable pgRejectThreshold to Coscheduling plugin by @​ravikumarrvit in kubernetes-sigs/scheduler-plugins#953
• coscheduling: fix data race in Permit() by upgrading RLock to Lock by @​binacs in kubernetes-sigs/scheduler-plugins#957
• bump k8s deps to v1.34.7 by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#959
• build: fix deprecated cloudbuild base image by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#962
• fix: allow scheduler SA to access resource.k8s.io API group by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#963
• doc update for v0.34.7 by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#960
• release: pin gh actions to commit SHAs and replace softprops/action-gh-release with gh CLI by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#964
• docs: clarify that scoringStrategy affects worker node selection by @​Tal-or in kubernetes-sigs/scheduler-plugins#965
• fix: create GitHub release before uploading helm chart asset by @​Huang-Wei in kubernetes-sigs/scheduler-plugins#966

New Contributors

• @​astefanutti made their first contribution in kubernetes-sigs/scheduler-plugins#933
• @​Colvin-Y made their first contribution in kubernetes-sigs/scheduler-plugins#941
• @​jzhaojieh made their first contribution in kubernetes-sigs/scheduler-plugins#954
• @​ravikumarrvit made their first contribution in kubernetes-sigs/scheduler-plugins#953

Full Changelog: kubernetes-sigs/scheduler-plugins@v0.33.5...v0.34.7

Commits

• 2c75c8b Merge pull request #970 from fanyang-real/yan9fan/upgrade-go
• 57a9678 fix gofmt issues when upgrading k8s to v1.35
• 8b585ef upgrade k8s to v1.35
• 5ba5c31 Merge pull request #968 from Huang-Wei/update-chart-index
• 481a377 update helm chart index to include version 0.34.7
• 8283b14 Merge pull request #966 from Huang-Wei/fix-github-action-1
• b2c31e6 Merge pull request #965 from Tal-or/update_scoring_strategy_docs
• fb27c09 fix: create GitHub release before uploading helm chart asset
• 46ad5a1 Merge pull request #964 from Huang-Wei/fix-github-action
• f51c66e docs: clarify that scoringStrategy affects worker node selection, not NUMA no...
• Additional commits viewable in compare view

Updates sigs.k8s.io/structured-merge-diff/v6 from 6.3.2 to 6.4.0

Commits

• d56620e Merge pull request #323 from aramase/aramase/f/fix_generators_inline
• 6e51105 fix(value): detect inline fields structurally instead of matching ",inline" tag
• 8fd4c42 Merge pull request #312 from alvaroaleman/unexported
• eedc536 Merge pull request #320 from inteon/use_slices_funcs
• ee54385 Merge pull request #322 from inteon/typed_allocator
• f0a2e6e add benchmark for FromValue function
• 7ba0b4e Merge pull request #314 from inteon/tests_add_state
• 138fc0a fully clear freed objects
• f7fc3d8 make freelist typed
• 910648e Code cleanup: use modern slices.BinarySearchFunc and slices.Insert where poss...
• Additional commits viewable in compare view

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tenzen-y for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

🎉 Welcome to the Kubeflow Trainer! 🎉

Thanks for opening your first PR! We're happy to have you as part of our community 🚀

Here's what happens next:

• If you haven't already, please check out our Contributing Guide for repo-specific guidelines and the Kubeflow Contributor Guide for general community standards.
• Our team will review your PR soon! cc @kubeflow/kubeflow-trainer-team

Join the community:

• Slack: Join our #kubeflow-trainer Slack channel.
• Meetings: Attend the Kubeflow AutoML and Training Working Group bi-weekly meetings.

Feel free to ask questions in the comments if you need any help or clarification!
Thanks again for contributing to Kubeflow! 🙏