Skip to content

🤖 Update gardener/gardener to v1.148.0 - #237

Open
ske-renovate-operator[bot] wants to merge 1 commit into
mainfrom
renovate/gardenergardener
Open

🤖 Update gardener/gardener to v1.148.0#237
ske-renovate-operator[bot] wants to merge 1 commit into
mainfrom
renovate/gardenergardener

Conversation

@ske-renovate-operator

@ske-renovate-operator ske-renovate-operator Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/gardener/gardener v1.147.2v1.148.0 age confidence
github.com/gardener/gardener/hack/tools v1.147.2v1.148.0 age confidence
github.com/gardener/gardener/pkg/apis v1.147.2v1.148.0 age confidence

Release Notes

gardener/gardener (github.com/gardener/gardener)

v1.148.0

Compare Source

[github.com/gardener/gardener:v1.148.0]
⚠️ Breaking Changes
  • [OPERATOR] The GA-ed and unconditionally enabled VPAInPlaceUpdates feature gate is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @​ialidzhikov [#​15201]
  • [OPERATOR] ⚠️ Gardener is no longer compatible with gardener-discovery-server version < v0.11.0, if you are not using the default gardener-discovery-server managed by gardener operator, please update your gardener-discovery-server to version >= v0.11.0 before updating Gardener to this version. by @​vpnachev [#​15244]
📰 Noteworthy
  • [OPERATOR] gardenadm now enables SSH for all nodes in a self hosted shoot cluster. This is required to be able to bootstrap the control plane. by @​tobschli [#​15270]
  • [USER] All authenticated users are now allowed to read ControllerRegistrations in the garden cluster (these resources contain metadata information about the registered extensions in the system). by @​rfranzke [#​15316]
  • [DEVELOPER] Gardener's base images have been updated to Debian 13 (trixie). by @​timuthy [#​15286]
✨ New Features
  • [OPERATOR] A new alpha feature gate RemoveHTTPProxyLegacyPort is added to gardenlet. When enabled, it removes the legacy HTTP proxy port (tls-tunnel, 8132) and its supporting resources from the Seed ingress gateway. It can only be enabled once all Shoots on the Seed report the UsesUnifiedHTTPProxyPort constraint. by @​jamand [#​15132]
  • [DEVELOPER] The generate-kubeconfig.sh script now allows to specify the validity of the requested kubeconfig for shoots by passing the --expiration-minutes flag. by @​moritzfalke [#​15361]
  • [DEVELOPER] flow.TaskGroup is a new type in pkg/utils/flow for bundling tasks under a shared id and dependency set. Add it to a flow.Graph via Graph.AddGroup; the compiled Flow sees only individual tasks — groups are a build-time convenience. See the godoc on TaskGroup and Graph.AddGroup for the flattening rules. by @​rfranzke [#​15311]
🐛 Bug Fixes
  • [OPERATOR] fix(shoot-mutator): honor machine image providerConfig updates on unchanged name/version by @​MartinWeindel [#​15296]
  • [OPERATOR] Fix waitUntilWantedMachineDeploymentsAvailable logic so that the function returns an error when rolling updates are still in-progress. by @​thiyyakat [#​15344]
  • [DEVELOPER] Components that have added workarounds to call install scripts for tools from GARDENER_TOOL_DIR can now be removed. by @​vpnachev [#​15408]
  • [DEVELOPER] Fix warning about missing shasum in remote-local-setup by @​chrkl [#​15295]
🏃 Others
  • [OPERATOR] The global observability ingress secret is now managed by the gardener-operator and rotated later when the Garden resource is marked for credential rotation. by @​vicwicker [#​15284]
  • [OPERATOR] The update mode of the VerticalPodAutoscaler resources deployed by Gardener is now explicitly set to InPlaceOrRecreate, reflecting the actual runtime behavior after the unconditional enablement of the VPAInPlaceUpdates feature gate. by @​Velin-Todorov [#​15232]
  • [OPERATOR] Garden Prometheus now scrapes kubelet_volume_stats_* metrics, enabling PVC volume-usage monitoring, which can also be used by pvc-autoscaler. by @​RadaBDimitrova [#​15255]
  • [OPERATOR] A sporadic issue with stale secrets in the istio-basic-auth-server after credential rotation has been fixed. by @​vicwicker [#​15329]
  • [OPERATOR] The cherry-pick documentation now describes what kind of PRs are good candidates for cherry picks, and documents initiating cherry picks via the Prow cherrypicker plugin. by @​ialidzhikov [#​15261]
  • [OPERATOR] The etcd members of newly created shoot control planes are now prefixed with the seed name (spec.memberNamePrefix of the Etcd resource). by @​acumino [#​15233]
  • [OPERATOR] The following dependencies have been updated:
    • europe-docker.pkg.dev/gardener-project/releases/3rd/victoriametrics/victoria-logs from v1.37.2 to v1.50.0. by @​rrhubenov [#​15381]
  • [OPERATOR] containerd-logrotate.timer now fires once per day with up to 4h jitter instead of every 10 minutes. 14-day retention is unchanged. by @​marc1404 [#​15161]
  • [DEPENDENCY] The following dependencies have been updated:
    • registry.k8s.io/autoscaling/vpa-admission-controller from 1.7.0 to 1.7.1.
    • registry.k8s.io/autoscaling/vpa-recommender from 1.7.0 to 1.7.1.
    • registry.k8s.io/autoscaling/vpa-updater from 1.7.0 to 1.7.1. by @​gardener-ci-robot [#​15352]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • gcr.io/istio-release/pilot from 1.29.5 to 1.29.6.
    • gcr.io/istio-release/proxyv2 from 1.29.5 to 1.29.6.
    • istio.io/api from v1.29.5 to v1.29.6. by @​gardener-ci-robot [#​15293]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
    • europe-docker.pkg.dev/gardener-project/releases/3rd/victoriametrics/operator from v0.65.0 to v0.73.1.
    • github.com/VictoriaMetrics/operator/api from v0.65.0 to v0.73.1. by @​rrhubenov [#​15219]
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following module dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
  • [DEPENDENCY] The following dependencies have been updated:
application/spdx+json
  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:9299ef98380b1c12c63dfa81c4e90ddb13d9961da41745e79b13236ce0126597
  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:bb28bbba848d794c72b9e4521ea0ae894f567ff147157a449cc43b70508bf4eb
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:190aa0e26d72a7d621c2cb0091a36413db051f26a53cf2250df4113ddc871f1b
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:6582e8a90d03599be8b3ecb4f719fc22624b15d0dcaebdabee3be4084d40cabf
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:1d20f4d48518f2914cf3da068d67616054eba4807b2d3fc32204dd081bc0f195
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:332109abcf9a0f10435125684ae16cd7d0dd6526f949bb4d731dc3a6ccc31036
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:13ccee9036a1705db9c5a8803f36ce24c7c10ed2d0cc3fbc94a451db64adf850
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:3505a9b2f5ad6bb37b69b9b217dcbad2b198fc16623c76a0efc2f043c851e400
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:e3be04eedb2dc2b9acb30c6fcbc636165f7ff6f5f521f9de715a167def364e2f
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:f9c79e2e098baee8b2349b101d0dd4759cf4d2b172c2ac2c605955696171067c
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:28ca99a5cf9939b0dd50fe3530636ca53a0b52e24883be632e4e75758ae69d20
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:949cf6b10ab95c03a2aa2d22cb8c169b64f111592192a243eb2a2a5ef66cee93
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:80c39fa2f1eab9a2f441e703e108742db0aeb07f2b39d2803e06754c540cf066
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:ded85cf97e53e5a85c062892faf5aca807614abebdcf3e26ad71d5521d298cfb
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:62c67199bca1d34b98a75c96f1730fac17f43ac3d556a0a41ebc85ae40a12c5e
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:d39ef8ac6423e8d5052b727843461b1e66e10c89f3594ddc10c495ad6570b970
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:7ac5d23c3aab75263bc7a2d3e3e278de35fccbc9c8880f13aab7242b451106fc
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:d631435c9efb16f97ccbcd4269e895df369f1c451dd703ce58ef7516c6cbc7a6
application/vnd.cyclonedx+json
  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:91d62681013c8fbcd4cf92ca894f041ea20b7238b02064b625197117e28a893c
  • admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:c31c6c469b40c9b9f88df537d2ff62d53f2f74ebc8ed7d19245b6af5b9450aae
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:08117c8e31351b8e64a4f10698610f13f683bd9f620c6037053106fc3fe224ec
  • apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:9345b8aba4c63b1eda237f6d4bce3972b8a27172f3def5a53de42aa8f958c180
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:1b8639a6476a07f886ebfc1a57a165a9e66382faeda6d526f9b8015d9de92009
  • controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:298ad0ee8dcd189bb90b117e25d50697e41ff51c7ffe8fa1aac151eb24eb3d67
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:d4436053989d2e440eff9df9d62772e16dee17d4dc84c1832acb05720d91a3dc
  • gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:ffc5827992ea4ad961976618e171a056891d484c0dd330e0b6cc6715694a56b0
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:9a0f1188bb2aca16a032c64495b2c09623e866e9cd87b2d1eb318942cedaf535
  • gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:9c90cf6a471738cd8c3d6a58c605b649a6eda0be5057097630c15c28e5e7dcaa
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:98cfbb65bf0997a37da10c653464b4ecdbd346e9d6a5a9f8cdc5cc36885c7796
  • node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:ff3258bb355799abe6b40be004d160e061f8fc7d065b742792a4f61659cc90fb
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:6bad95a6c01e97aaa90649feb165a92b284249cd9c1bbfeabfabe019f6567a65
  • operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:819d1af0da844b3333d79c050c3c3057c375422abb1ae009e3b5b0071ba5f957
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:91209fc833040a07cbd228c93724b3a870eae766c1d6d900b8ab4d46ac96c5ec
  • resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:bb5e13c4be0925d2119b62d8016b5d7f6e641679b9cff3cd2012f5269b6a4773
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:655fb08b740487287a960954408c1437bd9c0ef813c4c17ee8931c23ac7b025c
  • scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:a0a15a694170342ab078113dc4ea5e76d5469b153ec6d7a8c7614fdb463d1391
Helm Charts
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.0
Container (OCI) Images
  • admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.0
  • apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.0
  • controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.0
  • gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.0
  • gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.0
  • node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.0
  • operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.0
  • resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.0
  • scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@ske-renovate-operator ske-renovate-operator Bot added the kind/upgrade Upgrading components or dependencies (e.g., by renovate) label Aug 3, 2026
@ske-renovate-operator
ske-renovate-operator Bot requested a review from a team August 3, 2026 16:34
@ske-renovate-operator

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 68 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.26.2 -> 1.26.4
github.com/gardener/etcd-druid/api v0.37.0 -> v0.37.1
k8s.io/api v0.36.2 -> v0.36.3
k8s.io/apiextensions-apiserver v0.36.2 -> v0.36.3
k8s.io/apimachinery v0.36.2 -> v0.36.3
k8s.io/autoscaler/vertical-pod-autoscaler v1.6.0 -> v1.7.1
k8s.io/client-go v0.36.2 -> v0.36.3
k8s.io/component-base v0.36.2 -> v0.36.3
k8s.io/kubelet v0.36.2 -> v0.36.3
cel.dev/expr v0.25.1 -> v0.25.2
github.com/VictoriaMetrics/VictoriaLogs v1.36.2-0.20251008164716-21c0fb3de84d -> v1.51.1-0.20260624061259-dc94972a8708
github.com/VictoriaMetrics/VictoriaMetrics v1.131.0 -> v1.147.0
github.com/VictoriaMetrics/easyproto v0.1.4 -> v1.2.0
github.com/VictoriaMetrics/metrics v1.40.2 -> v1.44.0
github.com/VictoriaMetrics/metricsql v0.84.8 -> v0.87.2
github.com/VictoriaMetrics/operator/api v0.66.1 -> v0.73.1
github.com/aws/aws-sdk-go-v2 v1.41.7 -> v1.42.0
github.com/aws/aws-sdk-go-v2/config v1.32.17 -> v1.32.25
github.com/aws/aws-sdk-go-v2/credentials v1.19.16 -> v1.19.24
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23 -> v1.18.29
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 -> v1.4.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 -> v2.7.29
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24 -> v1.4.30
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9 -> v1.13.12
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23 -> v1.13.29
github.com/aws/aws-sdk-go-v2/service/signin v1.0.11 -> v1.2.0
github.com/aws/aws-sdk-go-v2/service/sso v1.30.17 -> v1.31.3
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.21 -> v1.36.6
github.com/aws/aws-sdk-go-v2/service/sts v1.42.1 -> v1.43.3
github.com/aws/smithy-go v1.25.1 -> v1.27.2
github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
github.com/gardener/pvc-autoscaler v0.2.0 -> v0.3.0
github.com/go-openapi/jsonpointer v0.23.1 -> v0.23.2
github.com/go-openapi/jsonreference v0.21.5 -> v0.21.6
github.com/go-openapi/swag v0.26.0 -> v0.26.1
github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
github.com/go-openapi/swag/conv v0.26.0 -> v0.26.1
github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
github.com/go-openapi/swag/typeutils v0.26.0 -> v0.26.1
github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
github.com/google/cel-go v0.27.0 -> v0.29.0
github.com/mattn/go-colorable v0.1.14 -> v0.1.15
github.com/prometheus/alertmanager v0.29.0 -> v0.33.1
github.com/prometheus/client_golang v1.23.3-0.20260710134234-de192175ccd6 -> v1.24.0
github.com/prometheus/common v0.70.0 -> v0.70.1
github.com/prometheus/sigv4 v0.3.0 -> v0.4.1
github.com/valyala/fastjson v1.6.4 -> v1.6.10
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.65.0 -> v0.69.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 -> v0.69.0
golang.org/x/exp v0.0.0-20260527015227-08cc5374adb3 -> v0.0.0-20260611194520-c48552f49976
golang.org/x/net v0.56.0 -> v0.57.0
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260615183401-62b3387ff324
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260615183401-62b3387ff324
google.golang.org/grpc v1.81.1 -> v1.82.1
istio.io/api v1.29.5 -> v1.29.6
k8s.io/apiserver v0.36.2 -> v0.36.3
k8s.io/kms v0.36.2 -> v0.36.3
k8s.io/kube-aggregator v0.36.2 -> v0.36.3
k8s.io/metrics v0.36.2 -> v0.36.3
k8s.io/pod-security-admission v0.36.2 -> v0.36.3
k8s.io/streaming v0.36.2 -> v0.36.3
sigs.k8s.io/gateway-api v1.5.0 -> v1.6.0
sigs.k8s.io/structured-merge-diff/v6 v6.4.0 -> v6.4.2

@ske-prow

ske-prow Bot commented Aug 3, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ftl for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ske-prow ske-prow Bot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/upgrade Upgrading components or dependencies (e.g., by renovate) size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants