NO-JIRA: Bump the k8s-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the k8s-dependencies group with 2 updates in the / directory: k8s.io/api and k8s.io/apiextensions-apiserver.

Updates k8s.io/api from 0.36.0 to 0.36.3

Commits

• 3fde3c4 Update dependencies to v0.36.3 tag
• 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.0 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• See full diff in compare view

Updates k8s.io/client-go from 0.36.0 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Updated Kubernetes components and related tooling to newer patch versions.
  • Includes maintenance updates to improve compatibility and stability.

[openshift-ci-robot]

@dependabot[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Bumps the k8s-dependencies group with 2 updates in the / directory: k8s.io/api and k8s.io/apiextensions-apiserver.

Updates k8s.io/api from 0.36.0 to 0.36.3

Commits

• 3fde3c4 Update dependencies to v0.36.3 tag
• 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.0 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• See full diff in compare view

Updates k8s.io/client-go from 0.36.0 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 47a9b305-bae2-4f69-87ff-aa4d7b0e1a0f

📥 Commits

Reviewing files that changed from the base of the PR and between f8c5bfb and 87a3e33.

⛔ Files ignored due to path filters (4)

• go.sum is excluded by !**/*.sum
• vendor/k8s.io/apimachinery/pkg/api/validation/objectmeta.go is excluded by !**/vendor/**, !vendor/**
• vendor/modules.txt is excluded by !**/vendor/**, !vendor/**
• vendor/sigs.k8s.io/structured-merge-diff/v6/typed/remove.go is excluded by !**/vendor/**, !vendor/**

📒 Files selected for processing (1)

• go.mod

---

Walkthrough

Updates direct Kubernetes dependencies from v0.36.0 to v0.36.3 and the indirect structured-merge-diff dependency from v6.3.2 to v6.3.3.

Changes

Kubernetes dependency updates

Layer / File(s)	Summary
Dependency version alignment go.mod	Direct Kubernetes modules are updated to v0.36.3, and the indirect structured-merge-diff module is updated to v6.3.3.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: enxebre, sjenning

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the PR’s Kubernetes dependency version bumps in the root directory.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR only updates dependency/vendor files; no Ginkgo test definitions or titles were changed, so no unstable test names were introduced.
Test Structure And Quality	✅ Passed	No Ginkgo test code was changed; this PR only updates go.mod/go.sum and vendored dependency files, so the test-structure check is not applicable.
Microshift Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added; the PR only bumps dependencies and vendor files, so MicroShift test compatibility isn’t affected.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only bumps Kubernetes dependencies in go.mod/vendor files; it adds no new Ginkgo e2e tests or SNO-sensitive cluster assumptions.
Topology-Aware Scheduling Compatibility	✅ Passed	Only Go dependency/vendor bumps were changed; no manifests, controllers, or scheduling constraints were added or modified.
Ote Binary Stdout Contract	✅ Passed	Patch only bumps deps and vendored code; no main/suite/init/TestMain setup or stdout/logging writes were added.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added; the PR only bumps dependencies and vendor code, with no IPv4-only or external connectivity assumptions in test code.
No-Weak-Crypto	✅ Passed	Changed files only bump Kubernetes deps and vendor code; no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB, custom crypto, or secret comparison code found.
Container-Privileges	✅ Passed	Diff only updates Go deps/vendor files; no container/K8s manifests or privilege flags were added or changed.
No-Sensitive-Data-In-Logs	✅ Passed	PR only bumps Kubernetes deps and vendor code; no new logging or data-exposure paths were added, and no sensitive-data logging was introduced.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/k8s-dependencies-64473ed926

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign kaovilai for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.