🤖 Update gardener/gardener to v1.148.2

[ske-renovate-operator]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gardener/gardener	v1.147.2 → v1.148.2
github.com/gardener/gardener/hack/tools	v1.147.2 → v1.148.2
github.com/gardener/gardener/pkg/apis	v1.147.2 → v1.148.2

---

Release Notes

gardener/gardener (github.com/gardener/gardener)

v1.148.2

Compare Source

[github.com/gardener/gardener:v1.148.2]

🐛 Bug Fixes

• [OPERATOR] A race condition during the global observability ingress secret rotation has been fixed. by @​vicwicker [#​15446]
• [USER] A bug preventing Shoot creation when the etcd-druid's UpgradeEtcdVersion feature gate is disabled (not explicitly enabled) has been fixed. by @​acumino [#​15447]

application/spdx+json

• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:a292254ed3ee9902330c048c3af02c99841b47fdaa2a5924f298b23129dcaed3
• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:af6238f80eb9f668d530e9aee5cd1b1b27d8165a80ae37f7d0841fb10d43c9e1
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:568d5412bfd9488aa8219711545b7e75366adc1b73881ce880f726e6f4927ee0
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b968faa016ec3312caa426f46fdd1c57d57632f6268d300625cd8c43e67cc755
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:43d109df6773e5273b6eee690fa89c63ba3dc504f7091a852b648d1c3beed5aa
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:8f7e09813cff0d0ea19645f4ea35a0dafe9b6dda55d19d7fd588bc0c830a949b
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:1318f83e99a83064fecae9c1b8dd3a90544a5b8c57b62683ccee4a79c76f28a7
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:4675365f0dd0e7d645b75829f1594c754046b8c0db23a5a18dcfd8cdbfbf7f88
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:452f966c35e47d56e86d16bc3810f70761e39e59b985bcf878f8de272d6f30a1
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:a483b33a233f0c520660c15b7becf821d359a1d0885fcc98adc7251c929dc456
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:71ba31e62deae287704b84bd0adb2dc29245c6cc8d73bef4379cb1b035dc29e5
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:f2942bb5a81f6db61ad6e5eec48de0cc2b2935e5aa50e3d8db3dd53054f54d3c
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:48b1e40428cbc40ef09b90deb4de1bc4df3ec6e890a4ec0eba0a551ba1e79a63
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:b45649991da1919596ede16c77f2a8401c2bc4f7fff73b08a1ba9c9ab545dec4
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:72a930979ac55758a47543dfa1170119f63bcf24ff054ca6567f5f48498609a9
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:7b1efa6f95d5e409b5ebc0f567e4af7de5338b71768f679acc8956fdd6ee5608
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:6695e153d1a8eb479f95fe777618d65f5d612f19b852bbff56fd06847307504f
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:dda1882c7b7ebca0233c7a0fe9df81069abb38560ba2b3b7b6b7d8fc5e3824c4

application/vnd.cyclonedx+json

• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:9c828975a0ec9b6fcadaf1d1f2f341e78a90c86153b209f7053d3ba4520bf20f
• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:d3f1d8740542eb226c721e58446f77d0c4911734dbfc2159beac47270ea56f3f
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:74b57955ea98ce23d56fca63ef30c5b514ccd80c11cf7ca12460c2f7a84dafc2
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:fd9d1e1b2fb94e71f98d0cf400555f2574caa2b685137c6500fb9342c539263d
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:6531082f14b486144ac829a4f544f1350b315d4d492775a0cf7b6cf75ba0467d
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:aa1117de4e6bc3ece519c30a03bf211ad56e53d13be367a260013456a77ed6c0
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:56c4ff7cd36dae1f23aacb363c74140832981c00c0a89e318336f0730b24b71f
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:81a8d8894495eee3a382cf5e3254e980e3cc9e128f892c84f86f4d8fb9db5b9f
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:0e3c34e7821991b9f8f29d4fd4ba57db10107186d5eca44aec2743727ce64bac
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:1f28cf6a3dbf6a5e6796fba3d4d5a1191452e8cf68911d3a998406cecc25f666
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:813aac1ec61f1f8f02df0f319d00b99fa5fd61352519bcbf6ae19c9a8eaf1b61
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:b73dcb002ab8b6fb096c658cf1de8e3815c6b2e369e0474fc69fe8f499914aa3
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:6ee7a2b13dd91d6554f353bb12eea19da9b0ee58d9899091880c9f3f21474154
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:d3a4b3871f49d046b9caa98eba9cc7d98b1c68c376bd6bee241a2c344183f28a
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:36175319c026d01094cb67ec08338f5eb94f221e545c2ce07d0d97967305b9df
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:83e9e7475dcb74e50c8c748dc75adde49c17ae1fff6ca5a3705b1be594c91660
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:46d8e15f2df630c8456b4ef6a7f7fd8aa08fbd8eb8f5606079c977e80fbd67ad
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:aa957ee0e808801c7b174677abe2f7f41be89a4b9ffd5f05033490a7c657c1e6

Helm Charts

• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.2
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.2

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.2
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.2
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.2
• gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.2
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.2
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.2
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.2
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.2
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.2

v1.148.1

Compare Source

[github.com/gardener/gardener:v1.148.1]

🐛 Bug Fixes

• [OPERATOR] The logrotate systemd service now restarts automatically on failure, preventing missed log rotations after transient errors. by @​marc1404 [#​15436]

application/spdx+json

• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:715cb3e800abc9e76f11e14b5e089f429a3955c9a850c3f68830679d5b100980
• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:8197bf2d1eb7a780378ef43be87515ef653614d65fe5525e108c8789118db2ad
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:2b014cbc62358851dc3e2e88e0dea81c37881ddb0eb1edc7ff2bbb2f98ed660d
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:f89e5f002b1bab63f82cb01a4123c6cce53b991f5d3ca10eca7842bd677b90bb
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:12e983a146c16c7ce1cfb8259f1a9bfa5e717e87e15dbf67234138fc59ed66e5
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:4560f0eb5e98676c2c27b2ab481a72b8718a289f3554d97d29232dae01f3a48a
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:5d94a2c2b4a9f48e3413b3b805ee7f425eea9205e3440418069857c3fa68a92d
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:5dd089c3d02a5be2f8738053d590101bae09eef6c6f5d43f4c6c63f3fca8a338
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:128ab3cacb0b7e84bddfba2391b594846f01a2303312d68434d18f743f3eedc5
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:48d1801c14cda2075ae39e9229080506eeffb0b4878e624d0906e4691566597b
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:72d80074c19557b64937690149c11e97d75af950ff31dbd33e05ac8f0cd23e6c
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:9ff61dded840fc4c1b464cd5080c3da4c2533714da785193c97721da819495b6
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:4b58e87a21d0c8d8d1714fb6fb5d212843a907dc70096cb45302238e58486dd7
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:d24d87c52bb298e71f9610cdd19cf9c55766e784ab66ecc4b261327e95a9ee32
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:6e720b4322aa455485dfca71c00ec43047f4c5680778073d8f17380ca9e1df37
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:7d3114139854b5c0bf2640922c88cf8454ec6cf390c5c3714a7a891f863efafc
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:5c694b49de5b4733ba0bc9e1122bccebb925b133dc5d3471a4936facc3ab3530
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:bef1973dd2ac17384de518f4e23f431a4fa1ba516071eeb6e6ad64d5c36ac13b

application/vnd.cyclonedx+json

• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:e3aaed9387d6bd966f55e72ae252cd0e9c2333ca012df6dc0c58de6ee15e277a
• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:f6439c5872e8f733f8d5c4ef7cd731e5e72fd85f899fe70d75e379d08d697c19
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:06d0a2280e9572fed7e2fbce6429b92e0137854e632f6fe8a45d21eb34499517
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:b0d3068c0fe7675bf747496010dd7518d1a26f80c2fe20598a3936ed6ff8b58b
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:2ba6a02016f44e38b2c9b33a78fea3d8d5f487363d4016428fbf5bee0874a337
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:c78a3a79691e544c481167e88f294546dedb1ef95d2146d5f47d6c0b68003b40
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:3cc016ab21552ea1f2a613bc2d82045085962de76ceb573dde5310b17e6f227f
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:7f8a90b16090a6b670259724b7f040dfedbeeb95b39a01aa78e0d4010e099976
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:0f5af203d992d63399be06bf6c75449d95b5fc116f6239e1a140ba6c384377dc
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:e5c35d3d4a5d06e0070f92b14b8ad0cba1724c6d4250326aac115005fbd075c1
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:17df869def02ed303e345d4e8a658c778d506b7eae70b85740b403c5e9d24db6
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:c2c648722c26e4a6841deb47682236a7f17d029878b71c9570f86a14f5f0e6ff
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:03d602800e12dd581cffdc0e404a296cbe5ceaaf3ecbb0011820fd15b4641e6b
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:7bd0efd1356d4722416047d0db698c4cc848f6c557895a5fb099d739ddb9532d
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:a51e871b00bcddfa23ca86fe7eb6d73d3b269a3b1a13effe18fd7d25e54be83c
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:f6f250c2a7a02147d220d6c1427aacb8980400d1b4915c53e9f70b3e5d66ba14
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:641cab7b8e94df501c3a4f60804667b82d7cd1fc8180816d12f18fc2c67aff33
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:96269744953d78e5ba4042cf6204e5207937f8abe014ec35ea40ef81910d1948

Helm Charts

• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.1
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.1

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.1
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.1
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.1
• gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.1
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.1
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.1
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.1
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.1
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.1

v1.148.0

Compare Source

[github.com/gardener/gardener:v1.148.0]

⚠️ Breaking Changes

• [OPERATOR] The GA-ed and unconditionally enabled VPAInPlaceUpdates feature gate is removed. If you have references to this feature gate, clean them up before upgrading to this version of Gardener. by @​ialidzhikov [#​15201]
• [OPERATOR] ⚠️ Gardener is no longer compatible with gardener-discovery-server version < v0.11.0, if you are not using the default gardener-discovery-server managed by gardener operator, please update your gardener-discovery-server to version >= v0.11.0 before updating Gardener to this version. by @​vpnachev [#​15244]

📰 Noteworthy

• [OPERATOR] gardenadm now enables SSH for all nodes in a self hosted shoot cluster. This is required to be able to bootstrap the control plane. by @​tobschli [#​15270]
• [USER] All authenticated users are now allowed to read ControllerRegistrations in the garden cluster (these resources contain metadata information about the registered extensions in the system). by @​rfranzke [#​15316]
• [DEVELOPER] Gardener's base images have been updated to Debian 13 (trixie). by @​timuthy [#​15286]

✨ New Features

• [OPERATOR] A new alpha feature gate RemoveHTTPProxyLegacyPort is added to gardenlet. When enabled, it removes the legacy HTTP proxy port (tls-tunnel, 8132) and its supporting resources from the Seed ingress gateway. It can only be enabled once all Shoots on the Seed report the UsesUnifiedHTTPProxyPort constraint. by @​jamand [#​15132]
• [DEVELOPER] The generate-kubeconfig.sh script now allows to specify the validity of the requested kubeconfig for shoots by passing the --expiration-minutes flag. by @​moritzfalke [#​15361]
• [DEVELOPER] flow.TaskGroup is a new type in pkg/utils/flow for bundling tasks under a shared id and dependency set. Add it to a flow.Graph via Graph.AddGroup; the compiled Flow sees only individual tasks — groups are a build-time convenience. See the godoc on TaskGroup and Graph.AddGroup for the flattening rules. by @​rfranzke [#​15311]

🐛 Bug Fixes

• [OPERATOR] fix(shoot-mutator): honor machine image providerConfig updates on unchanged name/version by @​MartinWeindel [#​15296]
• [OPERATOR] Fix waitUntilWantedMachineDeploymentsAvailable logic so that the function returns an error when rolling updates are still in-progress. by @​thiyyakat [#​15344]
• [DEVELOPER] Components that have added workarounds to call install scripts for tools from GARDENER_TOOL_DIR can now be removed. by @​vpnachev [#​15408]
• [DEVELOPER] Fix warning about missing shasum in remote-local-setup by @​chrkl [#​15295]

🏃 Others

• [OPERATOR] The global observability ingress secret is now managed by the gardener-operator and rotated later when the Garden resource is marked for credential rotation. by @​vicwicker [#​15284]
• [OPERATOR] The update mode of the VerticalPodAutoscaler resources deployed by Gardener is now explicitly set to InPlaceOrRecreate, reflecting the actual runtime behavior after the unconditional enablement of the VPAInPlaceUpdates feature gate. by @​Velin-Todorov [#​15232]
• [OPERATOR] Garden Prometheus now scrapes kubelet_volume_stats_* metrics, enabling PVC volume-usage monitoring, which can also be used by pvc-autoscaler. by @​RadaBDimitrova [#​15255]
• [OPERATOR] A sporadic issue with stale secrets in the istio-basic-auth-server after credential rotation has been fixed. by @​vicwicker [#​15329]
• [OPERATOR] The cherry-pick documentation now describes what kind of PRs are good candidates for cherry picks, and documents initiating cherry picks via the Prow cherrypicker plugin. by @​ialidzhikov [#​15261]
• [OPERATOR] The etcd members of newly created shoot control planes are now prefixed with the seed name (spec.memberNamePrefix of the Etcd resource). by @​acumino [#​15233]
• [OPERATOR] The following dependencies have been updated:
  • europe-docker.pkg.dev/gardener-project/releases/3rd/victoriametrics/victoria-logs from v1.37.2 to v1.50.0. by @​rrhubenov [#​15381]
• [OPERATOR] containerd-logrotate.timer now fires once per day with up to 4h jitter instead of every 10 minutes. 14-day retention is unchanged. by @​marc1404 [#​15161]
• [DEPENDENCY] The following dependencies have been updated:
  • registry.k8s.io/autoscaling/vpa-admission-controller from 1.7.0 to 1.7.1.
  • registry.k8s.io/autoscaling/vpa-recommender from 1.7.0 to 1.7.1.
  • registry.k8s.io/autoscaling/vpa-updater from 1.7.0 to 1.7.1. by @​gardener-ci-robot [#​15352]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/dashboard from 1.84.3 to 1.84.4. Release Notes by @​gardener-ci-robot [#​15310]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/kiwigrid/k8s-sidecar from 2.9.0 to 2.10.0. by @​gardener-ci-robot [#​15371]
• [DEPENDENCY] The following dependencies have been updated:
  • quay.io/kiwigrid/k8s-sidecar from 2.8.1 to 2.9.0. by @​gardener-ci-robot [#​15367]
• [DEPENDENCY] The following dependencies have been updated:
  • gcr.io/istio-release/pilot from 1.29.5 to 1.29.6.
  • gcr.io/istio-release/proxyv2 from 1.29.5 to 1.29.6.
  • istio.io/api from v1.29.5 to v1.29.6. by @​gardener-ci-robot [#​15293]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/dashboard from 1.84.4 to 1.84.5. Release Notes by @​gardener-ci-robot [#​15375]
• [DEPENDENCY] The following dependencies have been updated:
  • europe-docker.pkg.dev/gardener-project/releases/3rd/victoriametrics/operator from v0.65.0 to v0.73.1.
  • github.com/VictoriaMetrics/operator/api from v0.65.0 to v0.73.1. by @​rrhubenov [#​15219]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/etcd-druid from v0.37.0 to v0.37.1. Release Notes
  • github.com/gardener/etcd-druid/api from v0.37.0 to v0.37.1. by @​gardener-ci-robot [#​15348]
• [DEPENDENCY] The following dependencies have been updated:
  • envoyproxy/envoy from distroless-v1.38.3 to v1.39.0. Release Notes
  • envoyproxy/envoy from v1.38.3 to v1.39.0. by @​gardener-ci-robot [#​15266]
• [DEPENDENCY] The following module dependencies have been updated:
  • k8s.io/autoscaler/vertical-pod-autoscaler from v1.6.0 to v1.7.0. by @​ialidzhikov [#​15203]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/vpn2 from 0.50.1 to 0.51.0. Release Notes by @​gardener-ci-robot [#​15318]
• [DEPENDENCY] The following dependencies have been updated:
  • registry.k8s.io/coredns/coredns from v1.14.4 to v1.14.6. by @​gardener-ci-robot [#​15281]
• [DEPENDENCY] The following dependencies have been updated:
  • gardener/pvc-autoscaler from v0.2.0 to v0.3.0. Release Notes
  • github.com/gardener/pvc-autoscaler from v0.2.0 to v0.3.0. by @​gardener-ci-robot [#​15315]

application/spdx+json

• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:9299ef98380b1c12c63dfa81c4e90ddb13d9961da41745e79b13236ce0126597
• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:bb28bbba848d794c72b9e4521ea0ae894f567ff147157a449cc43b70508bf4eb
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:190aa0e26d72a7d621c2cb0091a36413db051f26a53cf2250df4113ddc871f1b
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:6582e8a90d03599be8b3ecb4f719fc22624b15d0dcaebdabee3be4084d40cabf
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:1d20f4d48518f2914cf3da068d67616054eba4807b2d3fc32204dd081bc0f195
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:332109abcf9a0f10435125684ae16cd7d0dd6526f949bb4d731dc3a6ccc31036
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:13ccee9036a1705db9c5a8803f36ce24c7c10ed2d0cc3fbc94a451db64adf850
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:3505a9b2f5ad6bb37b69b9b217dcbad2b198fc16623c76a0efc2f043c851e400
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:e3be04eedb2dc2b9acb30c6fcbc636165f7ff6f5f521f9de715a167def364e2f
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:f9c79e2e098baee8b2349b101d0dd4759cf4d2b172c2ac2c605955696171067c
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:28ca99a5cf9939b0dd50fe3530636ca53a0b52e24883be632e4e75758ae69d20
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:949cf6b10ab95c03a2aa2d22cb8c169b64f111592192a243eb2a2a5ef66cee93
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:80c39fa2f1eab9a2f441e703e108742db0aeb07f2b39d2803e06754c540cf066
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:ded85cf97e53e5a85c062892faf5aca807614abebdcf3e26ad71d5521d298cfb
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:62c67199bca1d34b98a75c96f1730fac17f43ac3d556a0a41ebc85ae40a12c5e
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:d39ef8ac6423e8d5052b727843461b1e66e10c89f3594ddc10c495ad6570b970
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:7ac5d23c3aab75263bc7a2d3e3e278de35fccbc9c8880f13aab7242b451106fc
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:d631435c9efb16f97ccbcd4269e895df369f1c451dd703ce58ef7516c6cbc7a6

application/vnd.cyclonedx+json

• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:91d62681013c8fbcd4cf92ca894f041ea20b7238b02064b625197117e28a893c
• admission-controller-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller@sha256:c31c6c469b40c9b9f88df537d2ff62d53f2f74ebc8ed7d19245b6af5b9450aae
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:08117c8e31351b8e64a4f10698610f13f683bd9f620c6037053106fc3fe224ec
• apiserver-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver@sha256:9345b8aba4c63b1eda237f6d4bce3972b8a27172f3def5a53de42aa8f958c180
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:1b8639a6476a07f886ebfc1a57a165a9e66382faeda6d526f9b8015d9de92009
• controller-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager@sha256:298ad0ee8dcd189bb90b117e25d50697e41ff51c7ffe8fa1aac151eb24eb3d67
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:d4436053989d2e440eff9df9d62772e16dee17d4dc84c1832acb05720d91a3dc
• gardenadm-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm@sha256:ffc5827992ea4ad961976618e171a056891d484c0dd330e0b6cc6715694a56b0
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:9a0f1188bb2aca16a032c64495b2c09623e866e9cd87b2d1eb318942cedaf535
• gardenlet-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet@sha256:9c90cf6a471738cd8c3d6a58c605b649a6eda0be5057097630c15c28e5e7dcaa
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:98cfbb65bf0997a37da10c653464b4ecdbd346e9d6a5a9f8cdc5cc36885c7796
• node-agent-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent@sha256:ff3258bb355799abe6b40be004d160e061f8fc7d065b742792a4f61659cc90fb
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:6bad95a6c01e97aaa90649feb165a92b284249cd9c1bbfeabfabe019f6567a65
• operator-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/operator@sha256:819d1af0da844b3333d79c050c3c3057c375422abb1ae009e3b5b0071ba5f957
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:91209fc833040a07cbd228c93724b3a870eae766c1d6d900b8ab4d46ac96c5ec
• resource-manager-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager@sha256:bb5e13c4be0925d2119b62d8016b5d7f6e641679b9cff3cd2012f5269b6a4773
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:655fb08b740487287a960954408c1437bd9c0ef813c4c17ee8931c23ac7b025c
• scheduler-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler@sha256:a0a15a694170342ab078113dc4ea5e76d5469b153ec6d7a8c7614fdb463d1391

Helm Charts

• gardenlet: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.148.0
• operator: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.148.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.148.0

Container (OCI) Images

• admission-controller: europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.148.0
• apiserver: europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.148.0
• controller-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.148.0
• gardenadm: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.148.0
• gardenlet: europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.148.0
• node-agent: europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.148.0
• operator: europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.148.0
• resource-manager: europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.148.0
• scheduler: europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.148.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ske-renovate-operator]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 68 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26.2 -> 1.26.4
github.com/gardener/etcd-druid/api	v0.37.0 -> v0.37.1
k8s.io/api	v0.36.2 -> v0.36.3
k8s.io/apiextensions-apiserver	v0.36.2 -> v0.36.3
k8s.io/apimachinery	v0.36.2 -> v0.36.3
k8s.io/autoscaler/vertical-pod-autoscaler	v1.6.0 -> v1.7.1
k8s.io/client-go	v0.36.2 -> v0.36.3
k8s.io/component-base	v0.36.2 -> v0.36.3
k8s.io/kubelet	v0.36.2 -> v0.36.3
cel.dev/expr	v0.25.1 -> v0.25.2
github.com/VictoriaMetrics/VictoriaLogs	v1.36.2-0.20251008164716-21c0fb3de84d -> v1.51.1-0.20260624061259-dc94972a8708
github.com/VictoriaMetrics/VictoriaMetrics	v1.131.0 -> v1.147.0
github.com/VictoriaMetrics/easyproto	v0.1.4 -> v1.2.0
github.com/VictoriaMetrics/metrics	v1.40.2 -> v1.44.0
github.com/VictoriaMetrics/metricsql	v0.84.8 -> v0.87.2
github.com/VictoriaMetrics/operator/api	v0.66.1 -> v0.73.1
github.com/aws/aws-sdk-go-v2	v1.41.7 -> v1.42.0
github.com/aws/aws-sdk-go-v2/config	v1.32.17 -> v1.32.25
github.com/aws/aws-sdk-go-v2/credentials	v1.19.16 -> v1.19.24
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.23 -> v1.18.29
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.23 -> v1.4.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.23 -> v2.7.29
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.24 -> v1.4.30
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.9 -> v1.13.12
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.23 -> v1.13.29
github.com/aws/aws-sdk-go-v2/service/signin	v1.0.11 -> v1.2.0
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.17 -> v1.31.3
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.21 -> v1.36.6
github.com/aws/aws-sdk-go-v2/service/sts	v1.42.1 -> v1.43.3
github.com/aws/smithy-go	v1.25.1 -> v1.27.2
github.com/felixge/httpsnoop	v1.0.4 -> v1.1.0
github.com/gardener/pvc-autoscaler	v0.2.0 -> v0.3.0
github.com/go-openapi/jsonpointer	v0.23.1 -> v0.23.2
github.com/go-openapi/jsonreference	v0.21.5 -> v0.21.6
github.com/go-openapi/swag	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/cmdutils	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/conv	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/fileutils	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/jsonname	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/jsonutils	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/loading	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/mangling	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/netutils	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/stringutils	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/typeutils	v0.26.0 -> v0.26.1
github.com/go-openapi/swag/yamlutils	v0.26.0 -> v0.26.1
github.com/google/cel-go	v0.27.0 -> v0.29.0
github.com/mattn/go-colorable	v0.1.14 -> v0.1.15
github.com/prometheus/alertmanager	v0.29.0 -> v0.33.1
github.com/prometheus/client_golang	v1.23.3-0.20260710134234-de192175ccd6 -> v1.24.0
github.com/prometheus/common	v0.70.0 -> v0.70.1
github.com/prometheus/sigv4	v0.3.0 -> v0.4.1
github.com/valyala/fastjson	v1.6.4 -> v1.6.10
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.65.0 -> v0.69.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.68.0 -> v0.69.0
golang.org/x/exp	v0.0.0-20260527015227-08cc5374adb3 -> v0.0.0-20260611194520-c48552f49976
golang.org/x/net	v0.56.0 -> v0.57.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260615183401-62b3387ff324
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260615183401-62b3387ff324
google.golang.org/grpc	v1.81.1 -> v1.82.1
istio.io/api	v1.29.5 -> v1.29.6
k8s.io/apiserver	v0.36.2 -> v0.36.3
k8s.io/kms	v0.36.2 -> v0.36.3
k8s.io/kube-aggregator	v0.36.2 -> v0.36.3
k8s.io/metrics	v0.36.2 -> v0.36.3
k8s.io/pod-security-admission	v0.36.2 -> v0.36.3
k8s.io/streaming	v0.36.2 -> v0.36.3
sigs.k8s.io/gateway-api	v1.5.0 -> v1.6.0
sigs.k8s.io/structured-merge-diff/v6	v6.4.0 -> v6.4.2

[breuerfelix]

Tested in an ondemand

[ske-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: breuerfelix

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [breuerfelix]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ske-prow]

LGTM label has been added.

Details

Git tree hash: eafb8728912df4651d586d8494be5a07b91da097

[breuerfelix]

/lgtm