deps(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.17.0 -> v1.17.1					require	patch
github.com/onsi/ginkgo/v2	v2.22.2 -> v2.23.3					require	minor
github.com/onsi/gomega	v1.36.2 -> v1.36.3					require	patch
golang	1.24.0-alpine3.20 -> 1.24.1-alpine3.20					final	patch
golang	1.24.0-alpine3.20 -> 1.24.1-alpine3.20					stage	patch
k8s.io/api	v0.32.2 -> v0.32.3					require	patch
k8s.io/apimachinery	v0.32.2 -> v0.32.3					require	patch
k8s.io/client-go	v0.32.2 -> v0.32.3					require	patch
sigs.k8s.io/cluster-api	v1.9.5 -> v1.9.6					require	patch
sigs.k8s.io/controller-runtime	v0.20.2 -> v0.20.4					require	patch

---

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.23.3

Compare Source

2.23.3

Fixes

• allow - as a standalone argument [cfcc1a5]
• Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
• ignore exit code for symbol test on linux [88e2282]

v2.23.2

Compare Source

2.23.2

🎉🎉🎉

At long last, some long-standing performance gaps between ginkgo and go test have been resolved!

Ginkgo operates by running go test -c to generate test binaries, and then running those binaries. It turns out that the compilation step of go test -c is slower than go test's compilation step because go test strips out debug symbols (ldflags=-w) whereas go test -c does not.

Ginkgo now passes the appropriate ldflags to go test -c when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and when ginkgo build is called explicitly.

This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.

v2.23.1

Compare Source

2.23.1

🚨 For users on MacOS 🚨

A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.

Fixes

Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:

• make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
• emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]

This might cause existing CI builds to fail. If so then it's likely that your CI build was misconfigured and should be corrected. Open an issue if you need help.

v2.23.0

Compare Source

2.23.0

Ginkgo 2.23.0 adds a handful of methods to GinkgoT() to make it compatible with the testing.TB interface in Go 1.24. GinkgoT().Context(), in particular, is a useful shorthand for generating a new context that will clean itself up in a DeferCleanup(). This has subtle behavior differences from the golang implementation but should make sense in a Ginkgo... um... context.

Features

• bump to go 1.24.0 - support new testing.TB methods and add a test to cover testing.TB regressions [37a511b]

Fixes

• fix edge case where build -o is pointing at an explicit file, not a directory [7556a86]
• Fix binary paths when precompiling multiple suites. [4df06c6]

Maintenance

• Fix: Correct Markdown list rendering in MIGRATING_TO_V2.md [cbcf39a]
• docs: fix test workflow badge (#​1512) [9b261ff]
• Bump golang.org/x/net in /integration/_fixtures/version_mismatch_fixture (#​1516) [00f19c8]
• Bump golang.org/x/tools from 0.28.0 to 0.30.0 (#​1515) [e98a4df]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#​1504) [60cc4e2]
• Bump github-pages from 231 to 232 in /docs (#​1447) [fea6f2d]
• Bump rexml from 3.2.8 to 3.3.9 in /docs (#​1497) [31d7813]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#​1501) [fc3bbd6]
• Code linting (#​1500) [aee0d56]
• change interface{} to any (#​1502) [809a710]

onsi/gomega (github.com/onsi/gomega)

v1.36.3

Compare Source

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#​822) [9fe5259]
• remove spurious "toolchain" from go.mod (#​819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#​823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#​772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#​778) [ced70d7]
• Bump rexml from 3.2.6 to 3.3.9 in /docs (#​788) [c8b4a07]
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#​812) [06431b9]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#​800) [b55a92d]
• Fix typos (#​813) [a1d518b]

kubernetes/api (k8s.io/api)

v0.32.3

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.32.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.32.3

Compare Source

kubernetes-sigs/cluster-api (sigs.k8s.io/cluster-api)

v1.9.6

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.28.x -> v1.32.x
• Workload Cluster: v1.26.x -> v1.32.x

More information about version support can be found here

Changes since v1.9.5

📈 Overview

• 13 new commits merged
• 1 feature addition ✨
• 3 bugs fixed 🐛

✨ New Features

• clusterctl: Add OpenNebula infrastructure provider to clusterctl (#​11886)

🐛 Bug Fixes

• CABPK: Ensure kubeadm controller always sets all v1beta2 conditions (#​11953)
• ClusterClass: Don't allow concurrent patch upgrades (#​11970)
• Testing: Fix flake TestMachineSetReconciler test (#​11917)

🌱 Others

• CAPD: Disable image garbage collection in kubelet to align with kind (#​11912)
• clusterctl: Add support infrastructure provider for Huawei Cloud (#​11876)
• clusterctl: Change k0smotron repo location (#​11888)
• Logging: Log version directly on controller startup (#​11964)
• MachineSet: delete Bootstrap object when creating InfraMachine object failed (#​11916)
• Security: Ignore CVE 2025 22870 (#​11976)
• Testing: Use inCluster kubeconfig if empty var provided (#​11885)

📖 Additionally, there have been 2 contributions to our documentation and book. (#​11880, #​11930)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.20.4

Compare Source

What's Changed

• [release-0.20] 🐛 Restmapper: Respect preferred version by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3159
• [release-0.20] 🌱 Mention the SkipNameValidation option in the name validation error by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3172
• [release-0.20] ✨ Controller: Retain the priority by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3173
• [release-0.20] ✨Add RELEASE_TAG to tools/setup-envtest to show binary version with setup-envtest version by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3175
• [release-0.20] 🌱 Handlers: Default to LowPriorityWhenUnchanged without a wrapper by @​alvaroaleman in https://github.com/kubernetes-sigs/controller-runtime/pull/3179

Full Changelog: kubernetes-sigs/controller-runtime@v0.20.3...v0.20.4

v0.20.3

Compare Source

What's Changed

• 🐛 fix: cache should list out of global cache when present and necessary by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3127
• 🌱 Export envtest.ReadCRDFiles by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3131
• 🐛 Fakeclient: Fix dataraces when writing to the scheme by @​k8s-infra-cherrypick-robot in https://github.com/kubernetes-sigs/controller-runtime/pull/3145
• Revert "✨ Expose all Go runtime metrics" by @​alvaroaleman in https://github.com/kubernetes-sigs/controller-runtime/pull/3147

Full Changelog: kubernetes-sigs/controller-runtime@v0.20.2...v0.20.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated

Details:

Package	Change
github.com/google/go-cmp	v0.6.0 -> v0.7.0
golang.org/x/crypto	v0.33.0 -> v0.36.0
golang.org/x/net	v0.35.0 -> v0.37.0
golang.org/x/sync	v0.11.0 -> v0.12.0
golang.org/x/sys	v0.30.0 -> v0.31.0
golang.org/x/term	v0.29.0 -> v0.30.0
golang.org/x/text	v0.22.0 -> v0.23.0
google.golang.org/protobuf	v1.36.1 -> v1.36.5