Skip to content

fix(deps): Update module sigs.k8s.io/gateway-api to v1.7.0 - #32

Open
wall-e-one[bot] wants to merge 1 commit into
mainfrom
renovate/sigs.k8s.io-gateway-api-1.x
Open

wall-e-one[bot] wants to merge 1 commit into
mainfrom
renovate/sigs.k8s.io-gateway-api-1.x

Conversation

@wall-e-one

@wall-e-one wall-e-one Bot commented Oct 29, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
sigs.k8s.io/gateway-api v1.6.3 → v1.7.0 age confidence

Release Notes

kubernetes-sigs/gateway-api (sigs.k8s.io/gateway-api)

v1.7.0

Compare Source

Major Themes

Graduating to Standard
  • HTTPRoute Retries (GEP-1731): the retry configuration of an HTTPRoute rule (codes, attempts and backoff) is promoted to the Standard channel, together with the HTTPRouteRetryCodes and HTTPRouteRetryConnectionError conformance features. The backoff field is implementation-specific because backoff behavior, especially jitter, varies between implementations. (#​5357, @​snorwin, #​5359, @​mikemorris)
New in Experimental
  • Gateway Address Routability (GEP-5093): routability is expressed per Gateway address, so a single Gateway can serve addresses of different scopes. Valid values are empty (implementation default), Cluster, or a domain-prefixed implementation-specific value. (#​5304, @​rikatz)
  • Standardized Attribute Dictionary (GEP-5253): a shared, vendor-neutral set of traffic attributes, based on OpenTelemetry semantic conventions, for use by features such as XTelemetryPolicy. (#​5256, @​gkhom)
  • Session Persistence on Backend (GEP-1619 and GEP-4894): session persistence is configured on the XBackend resource, and the route-inline and BackendTrafficPolicy attachment points are deprecated. (#​4876, #​5298, @​gcs278)
  • Pre-routing Filters (GEP-5224): listener filters that run before routing decisions, for use cases such as external authentication and payload processing, with the new GatewayListenerFilters feature. Filters can be set on both Gateway and ListenerSet listeners. (#​5315, @​jaellio, #​5370, @​snorwin)
  • ClusterTrustBundle in caCertificateRefs (GEP-5075): BackendTLSPolicy and Gateway frontend TLS validation can reference a ClusterTrustBundle through the existing caCertificateRefs field, instead of copying CA bundles into every namespace. (#​5272, #​5356, @​davidesalerno)
  • TelemetryPolicy for Distributed Tracing (GEP-4768): the XTelemetryPolicy API standardizes tracing configuration for Gateways without vendor-specific CRDs. Metrics and access logs are not covered yet. (#​5323, @​gkhom)

Major Changes Since v1.6.3

Breaking Changes
  • Experimental API changes (no effect on the Standard channel):
    • SessionPersistence API: sessionName moved to cookie.name (Extended, optional) and header.name (Core, required), cookieConfig renamed to cookie, and HeaderConfig added. (#​4873, @​gcs278)
    • SessionPersistence API: the cookie Path now defaults to / instead of being computed from route matches, and the new cookie.path field (Extended) allows explicit path configuration. (#​5046, @​gcs278)
    • SessionPersistence: route-inline and BackendTrafficPolicy session persistence are deprecated in favor of the Backend resource. (#​4876, @​gcs278)
    • XBackend: spec.port.port was renamed to spec.port.number, spec.port.name was removed, and backendRef.port is now prohibited when referencing an XBackend. (#​5287, @​gcs278)
  • Go types:
    • BackendAncestorStatus.AncestorRef was renamed in the generated Go types for consistency with docs and JSON/YAML serialization. (#​5187, @​Stevenjin8)
    • ForwardBodyConfig.MaxSize changed type from uint16 to int32. (#​5099, @​arjunxplorer)
  • Conformance features:
    • The HTTPRouteRetry and HTTPRouteRetryBackendTimeout features were removed. HTTPRouteRetryCodes was added and HTTPRouteRetryConnectionError is retained. (#​5167, @​snorwin)
    • The HTTPRouteBackendRequestRedirect feature and its test were removed. (#​5279, @​snorwin)
  • Go was upgraded to 1.27 (go 1.27.0 directive in go.mod and conformance/go.mod) and Kubernetes dependencies to v0.37. (#​5297, @​snorwin, #​5232, @​snorwin, #​5388, @​howardjohn)
GEP & API Graduation
Feature
  • New Experimental APIs and Fields:
  • API & Validation Enhancements:
    • HTTPRouteRetry.Attempts now defaults to 1, and its minimum was lowered from 1 to 0 so retries can be disabled per rule. (#​5269, @​snorwin, #​5387, @​mikemorris)
    • Added CEL validation enforcing that TLS is disabled for H2C and enabled for HTTP2. Added a new WSS protocol value for WebSockets over TLS. (#​5312, @​snorwin)
    • Added the GatewayRouteHostnameIntersectionPrecedence feature so implementations can opt in to resolving *Route precedence using the original Route hostnames instead of the calculated Listener/Route intersection. (#​5212, @​rostislavbobo)
    • Replaced immutable CEL validation rules with the +k8s:immutable marker. (#​4902, @​chinmaychahar)
  • Release Artifacts:
Documentation
  • New and Updated Documentation:
  • Site & Project:
  • Implementations & Conformance Reports:
    • Added or updated conformance reports for Agentgateway, Airlock Microgateway, AWS Load Balancer Controller, Calico, Cilium, Cloudflare Tunnel Gateway Controller, GKE Gateway, Gravitee, Higress, Istio, Kgateway, Kong Operator, Linkerd, NGINX Gateway Fabric, Traefik Proxy and WSO2 Gateway.
    • Envoy Gateway moved to Conformant. (#​5186, @​zirain)
    • HAProxy Ingress was renamed to N42 Gateway. (#​5268, @​jcmoraisjr)
Bug or Regression
  • Fixed the generator so that inline references are supported on experimental validation, and fixed generator tag recognition for experimental markers. (#​5288, #​5303, @​rikatz)
  • Fixed the backend port name CEL expression and added a unit test. (#​5193, @​snorwin)
  • Fixed an always-true scheme check in conformance redirect port validation. (#​5201, @​immanuwell)
  • Added CEL validation for LabelKey in XBackend's endpointSelector.matchLabels. (#​5397, @​snorwin)
Test & Conformance
  • New Conformance Tests:
    • Added a conformance test for GRPCRouteFilterRequestHeaderModifier (new GRPCRouteRequestHeaderModifier feature). (#​4060, @​salonichf5)
    • Added a BackendTLSPolicy conformance test for GRPCRoute. (#​4882, @​Thealisyed)
    • Added a BackendTLSPolicy with TLSRoute Terminate conformance test. (#​4875, @​davidesalerno)
    • Added a Gateway maximum name length conformance test. (#​5035, @​arjunexplorer)
    • Added an HTTPRoute rule precedence conformance test. (#​5128, @​thorn3r)
    • Added a conformance test covering shared and dedicated routes across multiple Gateways for GRPCRoute. (#​5281, @​snorwin)
    • Added conformance tests validating that Gateway resolves HTTPRoute precedence using original route hostname specificity rather than the calculated listener/route hostname intersection. (#​5124, @​rostislavbobo)
    • Added conformance tests validating that Gateway resolves GRPCRoute precedence using original route hostname specificity rather than the calculated listener/route hostname intersection. (#​5346, @​rostislavbobo)
    • Added conformance tests validating that Gateway resolves TLSRoute precedence using original route hostname specificity rather than the calculated listener/route hostname intersection. (#​5361, @​rostislavbobo)
    • Extended the HTTPRoute same-hostname intersection conformance test to cover path prefix and header matching across multiple attached Routes. (#​5410, @​rostislavbobo)
    • Added conformance tests for URLRewrite filters at HTTPBackendRef level (HTTPRouteBackendURLRewrite). (#​4823, @​Srujan-rai)
    • Added unit tests for the echo response parser. (#​4635, @​archy-rock3t-cloud)
  • Test Machinery & Framework Updates:
    • The conformance suite now supports an injectable WebSocket dialer (ConformanceOptions.WebSocketDialer). It defaults to the previous websocket.Dial behavior when unset. (#​4936, @​lexfrei)
    • The conformance gRPC DefaultClient is now safe for concurrent SendRPC and reusable after Close. (#​4946, @​lexfrei)
    • Base-resource cleanup now waits for deletion to complete, so the suite can be re-run in a single process (go test -count>1). (#​4948, @​lexfrei)
    • RouteMustHaveParents now runs the observedGeneration check against the status it just read. Implementations whose status lags the Route generation may now fail where they previously passed. (#​5206, @​lexfrei)
    • Report an error when a conformance manifest is missing from every configured filesystem. (#​5216, @​immanuwell)
    • Conformance report Implementation.URL is now validated as a well-formed http(s) URL. (#​5209, @​yashrajshuklaaa)
    • The conformance echo server images moved to a dedicated repository (kubernetes-sigs/gateway-api-conformance-images). (#​5090, @​snorwin)
    • Use the timeout config more consistently. (#​5150, @​howardjohn)
    • Preserve = in conformance key-value flags. (#​5034, @​immanuwell)
  • Updates & Fixes to Existing Tests:
    • Expect RefNotPermitted for a cross-namespace certificateRef to a nonexistent secret. (#​5306, @​PetrMc)
    • Wait for mesh weighted routes to be programmed. (#​5214, @​Automaat)
    • Retry the failure-path assertion in the client certificate validation test. (#​5097, @​yashrajshuklaaa)
    • Added containerPorts to the echo pod in the mesh conformance manifest. (#​5055, @​AnirbanNandi)
    • Foreign status entries on HTTPRoutes, BackendTLSPolicy and Gateway are now preserved by conformance tests. (#​5206, @​lexfrei)
    • Removed the HTTPRoute retry tests that required unsafe retries and added a retry-with-backend-timeout case. (#​5339, @​snorwin)
    • Fixed a nil Group pointer dereference panic in gatewayListenersMatch and listenerSetListenersMatch when the actual SupportedKinds list is empty. (#​5411, @​Ujjwaljain16)
    • Fixed parentRefToString in the conformance helpers printing a pointer address instead of the namespace name. (#​5399, @​Ujjwaljain16)
    • Replaced coredns with echo-basic in the UDPRoute conformance tests and base manifests. (#​5408, @​linolayani)
    • Updated TCPRoute conformance test manifests and helpers from v1alpha2 to v1. (#​5365, @​davidjumani)
    • Removed remaining references to removed alpha APIs from conformance and CEL/CRD/VAP tests. (#​5368, @​rikatz)
Other (Cleanup or Flake)

Full Changelog

Full Changelog: kubernetes-sigs/gateway-api@v1.6.3...v1.7.0


Dependencies

Only changes to modules directly required by the root, conformance, tests and tools modules are listed below.

Added
  • github.com/spf13/cobra: v1.10.2
  • sigs.k8s.io/gateway-api-conformance-images: v0.2.0
Changed
  • github.com/stretchr/testify: v1.11.1 → v1.12.1
  • golang.org/x/mod: v0.36.0 → v0.42.0
  • golang.org/x/net: v0.55.0 → v0.61.0
  • golang.org/x/sync: v0.20.0 → v0.24.0
  • golang.org/x/tools: v0.45.0 → v0.52.0
  • google.golang.org/grpc: v1.81.1 → v1.84.0
  • k8s.io/api: v0.36.1 → v0.37.1
  • k8s.io/apiextensions-apiserver: v0.36.1 → v0.37.1
  • k8s.io/apimachinery: v0.36.1 → v0.37.1
  • k8s.io/client-go: v0.36.1 → v0.37.1
  • k8s.io/code-generator: v0.36.1 → v0.37.1
  • k8s.io/kube-openapi: 927ab1f → d427ff9
  • k8s.io/utils: 28399d8 → be93311
  • sigs.k8s.io/controller-runtime: v0.24.1 → v0.25.2
  • sigs.k8s.io/controller-tools: v0.21.0 → v0.22.0
  • sigs.k8s.io/structured-merge-diff/v6: v6.4.0 → v6.4.2
Removed
  • github.com/miekg/dns: v1.1.72

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@wall-e-one

wall-e-one Bot commented Oct 29, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 31 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.26.4 -> 1.27.0
k8s.io/api v0.36.4 -> v0.37.1
k8s.io/apimachinery v0.36.4 -> v0.37.1
k8s.io/client-go v0.36.4 -> v0.37.1
github.com/go-openapi/jsonpointer v0.23.1 -> v1.0.0
github.com/go-openapi/jsonreference v0.21.5 -> v1.0.0
github.com/go-openapi/swag v0.26.0 -> v0.27.1
github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/conv v0.26.0 -> v0.27.1
github.com/go-openapi/swag/fileutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/loading v0.26.0 -> v0.27.1
github.com/go-openapi/swag/mangling v0.26.0 -> v0.27.1
github.com/go-openapi/swag/netutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/stringutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.1
github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.27.1
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
golang.org/x/mod v0.37.0 -> v0.41.0
golang.org/x/net v0.56.0 -> v0.61.0
golang.org/x/oauth2 v0.36.0 -> v0.37.0
golang.org/x/sync v0.21.0 -> v0.24.0
golang.org/x/sys v0.46.0 -> v0.49.0
golang.org/x/term v0.44.0 -> v0.47.0
golang.org/x/text v0.39.0 -> v0.43.0
golang.org/x/time v0.15.0 -> v0.16.0
golang.org/x/tools v0.47.0 -> v0.51.0
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af -> v1.36.12
k8s.io/kube-openapi v0.0.0-20260501160325-927ab1f70cd6 -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/streaming v0.36.4 -> v0.37.1
k8s.io/utils v0.0.0-20260319190234-28399d86e0b5 -> v0.0.0-20260626114624-be93311217bd
sigs.k8s.io/structured-merge-diff/v6 v6.4.0 -> v6.4.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant