NO-JIRA: Bump the k8s-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the k8s-dependencies group with 2 updates in the / directory: k8s.io/api and k8s.io/apiextensions-apiserver.

Updates k8s.io/api from 0.36.0 to 0.36.3

Commits

• 3fde3c4 Update dependencies to v0.36.3 tag
• 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.0 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• See full diff in compare view

Updates k8s.io/client-go from 0.36.0 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Updated Kubernetes libraries and related tooling to newer patch releases.
  • Includes maintenance and compatibility improvements from the updated dependencies.

[openshift-ci-robot]

@dependabot[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Bumps the k8s-dependencies group with 2 updates in the / directory: k8s.io/api and k8s.io/apiextensions-apiserver.

Updates k8s.io/api from 0.36.0 to 0.36.3

Commits

• 3fde3c4 Update dependencies to v0.36.3 tag
• 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.0 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• See full diff in compare view

Updates k8s.io/client-go from 0.36.0 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Walkthrough

Updates direct Kubernetes dependencies from v0.36.0 to v0.36.3 and the indirect structured-merge-diff dependency from v6.3.2 to v6.3.3.

Changes

Kubernetes dependency updates

Layer / File(s)	Summary
Dependency version alignment go.mod	Direct Kubernetes modules are updated to v0.36.3, and the indirect structured-merge-diff module is updated to v6.3.3.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: enxebre, sjenning, joeavaikath

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR changes only Go module metadata and vendored production code; no test files or Ginkgo test titles were added or modified.
Test Structure And Quality	✅ Passed	The commit only updates go.mod/go.sum and vendored Kubernetes code; no test-related paths, Ginkgo constructs, or cluster-test operations were added or modified, so this check is not applicable.
Microshift Test Compatibility	✅ Passed	The PR changes only go.mod/go.sum and vendored dependency files; no Ginkgo e2e tests or new MicroShift-incompatible API references were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The PR adds no Ginkgo e2e tests; it only updates dependency metadata and vendored Kubernetes code, so SNO multi-node compatibility is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	The diff only updates go.mod/go.sum and vendored dependency code; no deployment manifests, operator/controllers, or scheduling constraints were added or modified.
Ote Binary Stdout Contract	✅ Passed	PASS: PR only updates Kubernetes dependencies/vendor code; root main has no stdout writes, and Velero’s framework logger defaults to os.Stderr for go-plugin protocol safety.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The commit changes only go.mod/go.sum and vendored dependency files; no test files, Ginkgo constructs, IPv4 assumptions, or external connectivity were added.
No-Weak-Crypto	✅ Passed	The PR only bumps Kubernetes dependencies and vendored logic; the exact added lines contain no MD5/SHA1/DES/RC4/Blowfish/ECB, custom crypto, or secret comparisons.
Container-Privileges	✅ Passed	PR changes only Go dependency metadata/vendor code; no container/Kubernetes manifests or privilege indicators were added.
No-Sensitive-Data-In-Logs	✅ Passed	The PR only updates Kubernetes dependency metadata and vendored dependency code; no new logging calls or sensitive-data logging were added.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the Kubernetes dependency updates and matches the four direct dependency changes in the pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/k8s-dependencies-64473ed926

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign kaovilai for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.