build(deps): bump the k8s-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the k8s-dependencies group with 3 updates in the / directory: sigs.k8s.io/controller-runtime, sigs.k8s.io/gateway-api and sigs.k8s.io/apiserver-network-proxy/konnectivity-client.

Updates sigs.k8s.io/controller-runtime from 0.17.3 to 0.18.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.18.2

What's Changed

• 🐛 Reintroduce AddMetricsServerExtraHandler on manager by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#2817

Full Changelog: kubernetes-sigs/controller-runtime@v0.18.1...v0.18.2

v0.18.1

What's Changed

• [release-0.18] 🐛 Cache: Fix label defaulting of byObject when namespaces are configured by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#2808
• [release-0.18] 🐛 correct kind source type by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#2809

Full Changelog: kubernetes-sigs/controller-runtime@v0.18.0...v0.18.1

v0.18.0

⚠️ Breaking Changes

• Bump to k8s.io/* v1.30 (#2693 #2754 #2765 #2776 #2786)
• Remove deprecated v1alpha1.ControllerManagerConfiguration (#2648)
• admission.Decoder is now an interface (#2736)
• Source, Event, Predicate, Handler: Add generics support (#2783 #2796)
• client: Fix SubResourceCreateOptions signature in subresource client (#2766)

✨ New Features

• cache: Add TransformStripManagedFields transform func (#2791)
• client: Add client.WithFieldOwner to configure client-wide FieldManager (#2771 #2777)
• controller: Add NewQueue option (#2767)
• manager: Export HTTP server runnable implementation (#2473)
• metrics/server: Add ListenConfig option (#2519)

🐛 Bug Fixes

• builder/webhook: Return error if For() is used multiple times (#2740)
• cache: Keep selectors when byObject.Namespaces is defaulted (#2747)
• cache: Prevent race when informers are started more than once (#2758)
• fake client: Allow fakeclient to patch CR with no resourceVersion (#2725)
• fake client: Do not consider an apply patch to be a strategic merge patch (#2679)
• manager: Prevent leader election when shutting down a non-elected manager (#2724)
• manager: Runnable group should check if stopped before enqueueing (#2757)
• restmapper: Clean restmapper cache if a version is notFound (#2663)
• restmapper: Fix cache invalidation (#2687)

🌱 Others

• ci: Add OSSF scorecard action (#2714)
• ci: Improve github actions dependencies versions and permissions (#2715)
• ci: Pin checkout action in golangci-lint action, bump checkout action, use consistent tag format (#2729)
• ci: Update golangci-lint to v1.57.2 (#2708 #2751)

... (truncated)

Commits

• 834905b Merge pull request #2817 from k8s-infra-cherrypick-robot/cherry-pick-2813-to-...
• 6396a49 Reintroduce AddMetricsExtraHandler on manager
• cd2885e Merge pull request #2809 from k8s-infra-cherrypick-robot/cherry-pick-2806-to-...
• 06acde3 🐛 correct kind source type
• d6feaae Merge pull request #2808 from k8s-infra-cherrypick-robot/cherry-pick-2805-to-...
• 87cae4c bug: Cache: Fix label defaulting of byObject when namespaces are configured
• ed81fa6 Merge pull request #2796 from alvaroaleman/mark
• b35cd6b 📖 Mark Typed Handlers as experimental
• b74908f Merge pull request #2793 from kubernetes-sigs/dependabot/github_actions/actio...
• a9db208 Merge pull request #2794 from kubernetes-sigs/dependabot/github_actions/actio...
• Additional commits viewable in compare view

Updates sigs.k8s.io/gateway-api from 1.0.0 to 1.1.0

Release notes

Sourced from sigs.k8s.io/gateway-api's releases.

v1.1.0

On behalf of Kubernetes SIG Network, we are pleased to announce the v1.1 release! This release includes the graduation of several features to GA, including both GRPCRoute and Service Mesh. We are also introducing several new experimental features, including Session Persistence and Gateway Client Cert Verification.

The following represents the changes since v1.0.0:

Standard Channel

GRPCRoute has Graduated to GA 🎉

GRPCRoute has graduated to GA (v1) and is now part of the Standard Channel. If you are already using the experimental version GRPCRoute, we recommend holding off on upgrading to the standard channel version of GRPCRoute until the controllers you're using have been updated to support GRPCRoute v1. Until then, it is safe to upgrade to the experimental channel version of GRPCRoute in v1.1 that includes both v1alpha2 and v1 API versions.

Leading Contributor: @​gnossen

Service Mesh Support has Graduated to GA 🎉

The standard for using Gateway API for Mesh has formally graduated to GA (v1) and is now part of the Standard Channel.

Service mesh support in Gateway API allows service mesh users to use the same API to manage ingress traffic and mesh traffic, reusing the same policy and routing interfaces. In Gateway API v1.1, routes (such as HTTPRoute) can now have a Service as a parentRef, to control how traffic to specific services behave. For more information, read the service mesh documentation or see the list of implementations.

Leading Contributors: @​howardjohn, @​keithmattix, @​kflynn, @​mikemorris

Conformance Profiles and Reports

The Conformance Reports API and the corresponding test suite have been graduated to GA. The Conformance report API has been expanded with the mode field (intended to specify the working mode of the implementation), and the gatewayAPIChannel (standard or experimental). The gatewayAPIVersion and gatewayAPIChannel are now filled in automatically by the suite machinery, along with a brief description of the testing outcome. The Reports have been reorganized in a more structured way, and the implementations can now add information on how the tests have been run and provide reproduction steps.

Leading Contributors: @​mlavacca, @​shaneutt

ParentRef Port field Graduated to GA

... (truncated)

Commits

• 690f754 Adding changelog for v1.1.0 (#3062)
• a29ddd4 Contour conformance report updates (#3061)
• 70ef27e Splitting Changelogs for each minor version (#3060)
• 72e0a22 build(deps): bump sigs.k8s.io/controller-runtime in /gwctl (#3052)
• 95d865e SessionPersistence field should have omitempty tag (#3059)
• 6fc4f83 Adding changelog for v1.1.0-rc2 (#3046)
• c8218ff Conformance test for listener isolation (#3047)
• 654dde5 Make gwctl ReferenceGrant aware. Capture any errors observed while constructi...
• cd175ec Conformance display profiles on gatewayapi docs (#2874)
• ab850c3 Properly handle different versioned resources in gwctl (eg. v1beta1 v/s v1 AP...
• Additional commits viewable in compare view

Updates k8s.io/kube-openapi from 0.0.0-20240228011516-70dd3763d340 to 0.0.0-20240423202451-8948a665c108

Commits

• See full diff in compare view

Updates k8s.io/utils from 0.0.0-20230726121419-3b25d923346b to 0.0.0-20240423183400-0849a56e8f22

Commits

• See full diff in compare view

Updates sigs.k8s.io/apiserver-network-proxy/konnectivity-client from 0.30.2 to 0.30.3

Commits

• a419d24 Merge pull request #614 from avrittrohwer/avritt/CVE-2023-45288
• 8875e39 Merge pull request #617 from jkh52/release-0.30-fix-lint
• 0141ee4 Fix lint: upgrade to first version that supports go1.21
• 7ea1b7e Skip vendor directory in golangci
• 0421818 CVE-2023-45288 (release-0.30): update golang.org/x/net to 1.23.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[k8s-ci-robot]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[jsafrane]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], jsafrane

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [jsafrane]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment