fix(deps): bump the k8s-deps group across 1 directory with 6 updates

[dependabot]

Bumps the k8s-deps group with 3 updates in the / directory: k8s.io/apiextensions-apiserver, k8s.io/autoscaler/vertical-pod-autoscaler and sigs.k8s.io/controller-runtime.

Updates k8s.io/apiextensions-apiserver from 0.30.14 to 0.36.2

Commits

• e4eb159 Update dependencies to v0.36.2 tag
• 4cd8c3d Merge remote-tracking branch 'origin/master' into release-1.36
• c2fd557 Merge pull request #138346 from dashpole/update_otel_prop
• 1daa309 Merge remote-tracking branch 'origin/master' into release-1.36
• 1551264 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 6c97d2b update go.opentelemetry.io/otel to v1.41.0
• 862c52a update google.golang.org/grpc to v1.79.3
• abac065 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 7acee75 Merge pull request #137843 from pacoxu/cobra-v1.10.2
• 612f1d8 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.30.14 to 0.36.2

Commits

• ae3f98e Update dependencies to v0.36.2 tag
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• Additional commits viewable in compare view

Updates k8s.io/autoscaler/vertical-pod-autoscaler from 1.2.2 to 1.7.0

Release notes

Sourced from k8s.io/autoscaler/vertical-pod-autoscaler's releases.

vertical-pod-autoscaler-1.7.0

Changes by Kind

API Change

• Added MemoryAggregationIntervalSeconds for the VPA object (#9317, @​omerap12)
• EvictAfterOOMThreshold is now per vpa (#9071, @​omerap12)
• The VPA support InPlace update mode. VPA will not evict any pods and only try to resize pods inplace. (#8888, @​omerap12)
• Users can configure a startupBoost policy in the VPA spec. (#9141, @​kamarabbas99)
• VPA now stores a observedGeneration in both status and condition fields. (#9524, @​adrianmoisey)

Bug or Regression

• Fix bug where VPA admission-controller could write a webhook with an empty cert for a brief period. (#9599, @​adrianmoisey)
• Fixed OOM detection for pods with restartPolicy: Never (#7955, @​tkukushkin)
• Fixed a bug where the presence of a LimitRange object with CPU constraints in the cluster prevented VPA from recreating Pods managed by the targeted controllers. The updated code section, which proportionally reduces resource requests and limits, could result in the loss of sub-millicore values. (#8946, @​iamzili)
• Fixed a bug where users could use alpha (off-by-default) features by updating an existing VPA resource, bypassing the feature gate check. (#9557, @​adrianmoisey)

Other (Cleanup or Flake)

• Bump Kubernetes dependencies to 1.36.0 (#9547, @​adrianmoisey)
• Reduce VPA memory usage by stripping away unnecessary managed fields from informer cache (#9634, @​adrianmoisey)
• Update flag in-place-skip-disruption-budget is now beta (#9655, @​omerap12)
• Improved VPA validation error messages now pinpoint exactly which fields are invalid, making it faster to diagnose and resolve configuration issues in your VerticalPodAutoscaler specs. (#9591, @​adrianmoisey)

vertical-pod-autoscaler-1.6.0

Changes by Kind

API Change

• Correctly mark the VPA UpdateMode "Auto" as deprecated, that was deprecated in VPA 1.5 (#9073, @​adrianmoisey)

Feature

• Adds --in-place-skip-disruption-budget flag that skips disruption budget checks for in-place pod updates when all containers have NotRequired resize policy (#8987, @​omerap12)
• Promote InPlaceOrRecreate feature to GA, defaulted to enabled (#9082, @​adrianmoisey)

Bug or Regression

• Avoid returning error when annotation patch for InPlaceOrResize fails, that would cause Pods to get unnecessarily evicted after resize (#9115, @​adrianmoisey)
• Optimize memory usage in VPA components by scoping informers to configured namespaces. (#9122, @​adrianmoisey)
• Vertical-pod-autoscaler: Fix the version of the k8s.io/client-go module. (#8579, @​ialidzhikov)
• Vpa-updater and vpa-admission-controller no longer excessively log fail to get pod controller: (...) last error node is not a valid owner (#8611, @​adrianmoisey)
• VPA: Fix recommender race conditions for vpa Conditions and Recommendations (#8967, @​jkyros)

Other (Cleanup or Flake)

• Update Kubernetes libraries to v1.35.0 (#8955, @​adrianmoisey)

vertical-pod-autoscaler-1.5.1

... (truncated)

Commits

• 6a616ea Update VPA defaults to 1.7.0
• 439373c Merge pull request #9669 from morshielt/single_ng_opt
• a84315d Merge pull request #9562 from iamzili/remove-InPlaceOrRecreate-feature-flag
• c879977 Don't call SchedulablePodGroups when only 1 node group gets created
• 0eaf4ec Refactor planScaleUp returns
• 56bb3bb Extract scale up planning to separate method
• e52f5c4 address nits
• a33dd7a Merge pull request #9308 from MartynaGrotek/failures_and_backoff
• ea2be0b Merge pull request #9594 from ttetyanka/feature/fix_reaction_time
• 17ecaa7 ScaleUpFailuresRegistry implements NodeGroupChangeObserver and Observer inter...
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.30.14 to 0.36.2

Commits

• 877f535 Update dependencies to v0.36.2 tag
• f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
• a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
• df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
• 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
• 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
• 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
• ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
• 4a9c878 Add ResourcePoolStatusRequest API types and generated code
• Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20260319190234-28399d86e0b5

Commits

• See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.18.7 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

⚠️ Breaking Changes

• Dependencies: Update to k8s.io/* v1.36 (#3506 #3462 #3486 #3450)

🐛 Bug Fixes

• Cache: Fix IndexField blocking until informer is synced (#3445)
• Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
• Client: Update typed ApplyConfigurations with server response (#3475)
• Fakeclient: Fix SSA status patch resource version check (#3443)
• Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
• Fakeclient: Fix status apply if existing object has managedFields set (#3430)
• Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
• HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

• Builder/Webhooks: Remove deprecated custom path function (#3465)
• Cache: Test cache reader waits for cache sync (#3434)
• Certwatcher: Deflake certwatcher tests (#3457)
• Dependencies: Use forked version of btree (#3449)
• Envtest: Ensure envtest stops the whole process group (#3447)
• Logging: Add missing space in zap-log-level flag description (#3492)
• Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
• Owners: Cleanup (#3453)
• Recorder: Add logger into context for structured logging (#3454)
• Recorder: Switch to StartLogging for event debug logs (#3451)
• Scheme: Deprecate the scheme builder (#3461)
• Source/Kind: Improve logging for dynamic type kind source (#3494)
• Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

• Chore: Update golangci-lint version to v2.8.0 (#3448)
• Chore: Update golangci-lint version to v2.10.1 (#3470)
• Chore: Update golangci-lint version to v2.11.3 (#3482)
• Migrate away from custom GitHub action approval workflow (#3491)
• Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

... (truncated)

Commits

• 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
• 0f7b33d Fix regression in Apply typed error handling
• d3eaef3 Merge pull request #3475 from alvaroaleman/fixfix
• 3296f32 🐛 Update typed Applyconfigurations with server response
• c8b4b9d Merge pull request #3506 from troy0820/troy0820/update-deps-k8s
• 557c314 update to k8s.io v1.36.0
• e4a998c Merge pull request #3499 from kubernetes-sigs/dependabot/github_actions/all-g...
• 1a31c56 Merge pull request #3498 from vieux/fix-fake-client-generatename-retry
• 80bc294 fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...
• 77b730a 🌱 Bump the all-github-actions group with 2 updates
• Additional commits viewable in compare view