build(deps): bump the k8s group across 1 directory with 3 updates

[dependabot]

Bumps the k8s group with 3 updates in the / directory: k8s.io/apimachinery, k8s.io/client-go and sigs.k8s.io/controller-runtime.

Updates k8s.io/apimachinery from 0.36.0-alpha.2 to 0.38.0-alpha.1

Commits

• f55df1e Update dependencies to v0.38.0-alpha.1 tag
• 8a0dc0f Merge pull request #142410 from dims/grpc-unpin
• 7ec3fc2 Merge pull request #142277 from pohly/quantity-readonly
• 937a56d Bump etcd modules to v3.7.2, otelgrpc to v0.71.0, otlptracegrpc to v1.45.0
• fdc5462 Merge pull request #142419 from dims/cbor-v2.9.4
• ff8ad3f Merge pull request #142398 from Jefftree/deepequal-stdlib-unbox
• be1093d Merge pull request #142414 from dims/x-deps-2026-09
• 3828cff resource.Quantity: fix benchmarks
• a56b1a0 resource.Quantity: update benchmarks
• 6316d43 Merge pull request #142395 from antcybersec/restore-out-of-int32-exponent-decode
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.2 to 0.37.1

Commits

• 066ed4e Update dependencies to v0.37.1 tag
• 50c6f9b metrics: Register: Fix incorrect assignment
• 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
• 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
• 2bf14f2 Merge pull request #140990 from xigang/revert-140448
• 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
• df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
• 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
• 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
• 694f4eb apidiff: ignore adding entirely new API groups
• Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.23.3 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

• [release-0.25] 🐛 Fix SubResourceCreateOptions.ApplyToSubResourceCreate by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3600
• [release-0.25] ✨ Add metrics handler options by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3603
• [release-0.25] 📖 Document that ReadYourWrite doesn't work correctly with > 1 Namespace by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3610
• [release-0.25] ✨ Add a metric for the readyourwite consistency wait duration by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3613

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

v0.25.1

What's Changed

• 🐛 priorityqueue: fix data race on []*item in logState by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3593
• 🐛 client: fix subresource create RV parse error under read-your-writes consistency by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3596

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

• Dependencies: Bump to k8s.io/* v1.37 (#3579 #3575 #3567 #3561 #3547 #3529 #3524)
• Events: Add new EventRecorder interface (#3509)

✨ New Features

• Client: Add a read-your-own-writes client (#3472)
• Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
• Fakeclient: Add scale subresource support for Apply (#3569)
• Metrics: Allow opt-in for client-go REST client metrics (#3510)
• Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
• Source: Add TypedInformer source (#3520)
• Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

• Cache: Fix goroutine leaks in cache Start() methods (#3565)
• Client: Fix regression in Apply typed error handling (#3515)
• Controller: Unlock when Controller.Start() returns with error (#3545)
• Envtest: Fix envtest process stop on Windows (#3519)

... (truncated)

Commits

• 5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
• 7b211af sparkles: Add a metric for the readyourwite consistency wait duration
• dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
• c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
• d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
• 1b98304 sparkles: Add metrics handler options
• 8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
• ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
• 67b72c2 [release-0.25] 🐛 client: fix subresource create RV parse error under read-you...
• f997220 [release-0.25] 🐛 priorityqueue: fix data race on []*item in logState (#3593)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[Copilot]

Copilot review overview

🟡 Changes recommended

The Go 1.26 requirement conflicts with the Go 1.25 production builder, and Kubernetes dependencies are not on a compatible release line.

Review effort: Lite
Findings: 1

Open (1)

• Builder image uses Go 1.25 while module requires Go 1.26 · New

What changed in this PR

This PR upgrades Kubernetes and controller-runtime dependencies, refreshes checksums, and raises the required Go version to 1.26.

Changes:

• Updates Kubernetes and controller-runtime modules.
• Refreshes transitive dependencies and checksums.
• Aligns the production builder with Go 1.26.
• Resolves the mixed Kubernetes 0.38/0.37 dependency graph.

File	Summary
go.mod	Updates Go and dependency versions; contains the Go toolchain and Kubernetes version alignment findings.
go.sum	Refreshes dependency checksums.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.