[dependabot]

Bumps the kubernetes group with 2 updates in the / directory: sigs.k8s.io/kustomize/api and sigs.k8s.io/kustomize/kyaml.

Updates sigs.k8s.io/kustomize/api from 0.21.2 to 0.21.3

Release notes

Sourced from sigs.k8s.io/kustomize/api's releases.

api/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

cmd/config/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

kyaml/v0.21.3

#6309: fix: use uncompressed json for openapi schema definition #6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them

Commits

• fec5628 Merge pull request #6320 from koba1t/pinToCmdConfig
• 27c68bd Update cmd/config to v0.21.3
• 73218d9 Merge pull request #6318 from koba1t/pinToKyaml
• a056849 Update kyaml to v0.21.3
• 5d465f7 Merge pull request #6309 from koba1t/fix/reviewable-openapi-bundle
• 0f7a650 fix: use uncompressed json for openapi schema definition
• 0b060a1 Merge pull request #6310 from skitt/openapi
• f741041 Bump to the latest kube-openapi
• 77a76a9 Bump to Go 1.27
• 294c486 Merge pull request #6311 from skitt/slices
• Additional commits viewable in compare view

Updates sigs.k8s.io/kustomize/kyaml from 0.21.2 to 0.21.3

Release notes

Sourced from sigs.k8s.io/kustomize/kyaml's releases.

api/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

cmd/config/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

kyaml/v0.21.3

#6309: fix: use uncompressed json for openapi schema definition #6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them

Commits

• fec5628 Merge pull request #6320 from koba1t/pinToCmdConfig
• 27c68bd Update cmd/config to v0.21.3
• 73218d9 Merge pull request #6318 from koba1t/pinToKyaml
• a056849 Update kyaml to v0.21.3
• 5d465f7 Merge pull request #6309 from koba1t/fix/reviewable-openapi-bundle
• 0f7a650 fix: use uncompressed json for openapi schema definition
• 0b060a1 Merge pull request #6310 from skitt/openapi
• f741041 Bump to the latest kube-openapi
• 77a76a9 Bump to Go 1.27
• 294c486 Merge pull request #6311 from skitt/slices
• Additional commits viewable in compare view

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

⚠️ BASH / bash-exec - 1 error

Results of bash-exec linter (version 5.3.9)
See documentation on https://megalinter.io/10.1.0/descriptors/bash_bash_exec/
-----------------------------------------------

✅ [SUCCESS] .github/actions/cleanup-hetzner/cleanup-hetzner.sh
✅ [SUCCESS] .github/actions/cleanup-hetzner/cleanup-hetzner.test.sh
✅ [SUCCESS] .github/actions/free-disk-space/free-disk-space.sh
✅ [SUCCESS] .github/actions/ksail-cluster/hetzner-inventory-config.sh
✅ [SUCCESS] .github/actions/ksail-system-test/autoscaler-audit-trial.sh
✅ [SUCCESS] .github/actions/ksail-system-test/calico-migration.sh
✅ [SUCCESS] .github/actions/ksail-system-test/calico-migration.test.sh
✅ [SUCCESS] .github/actions/ksail-system-test/chart-values-drift.sh
✅ [SUCCESS] .github/actions/ksail-system-test/helm-values-precedence.sh
✅ [SUCCESS] .github/actions/ksail-system-test/offline-ecr-upstream.sh
✅ [SUCCESS] .github/actions/ksail-system-test/offline-ecr-upstream.test.sh
✅ [SUCCESS] .github/actions/ksail-system-test/talos-kubernetes-upgrade.sh
✅ [SUCCESS] .github/actions/ksail-system-test/verify-offline-ecr-pull.sh
✅ [SUCCESS] .github/actions/ksail-system-test/verify-offline-ecr-pull.test.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/install-with-recovery.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/install-with-recovery.test.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/reject-remote-kustomize-resources.sh
✅ [SUCCESS] .github/actions/ksail-test-workload/remote-resource-guard.test.sh
✅ [SUCCESS] .github/actions/pull-registry-image/pull-registry-image.sh
✅ [SUCCESS] .github/actions/rate-limit-gate/wait-for-rate-limit.sh
✅ [SUCCESS] .github/actions/rate-limit-gate/wait-for-rate-limit.test.sh
✅ [SUCCESS] .github/actions/warm-mirror-cache/cache-validation.test.sh
✅ [SUCCESS] .github/actions/warm-mirror-cache/mirror-artifact.sh
✅ [SUCCESS] .github/actions/warm-mirror-cache/pull-helper-image.sh
✅ [SUCCESS] .github/actions/warm-mirror-cache/pull-helper-image.test.sh
✅ [SUCCESS] .github/scripts/assert-gitops-deployed.sh
✅ [SUCCESS] .github/scripts/assert-gitops-deployed.test.sh
✅ [SUCCESS] .github/scripts/assert-k3k-server-creator.sh
✅ [SUCCESS] .github/scripts/assert-k3k-server-creator.test.sh
✅ [SUCCESS] .github/scripts/build-calico-migration-baseline.sh
✅ [SUCCESS] .github/scripts/cask-pr-handoff-workflow.test.sh
✅ [SUCCESS] .github/scripts/cask-rendering.test.sh
✅ [SUCCESS] .github/scripts/check-eks-capacity.sh
✅ [SUCCESS] .github/scripts/check-eks-capacity.test.sh
✅ [SUCCESS] .github/scripts/codeql-autobuild-prepare.sh
✅ [SUCCESS] .github/scripts/codeql-autobuild-prepare.test.sh
✅ [SUCCESS] .github/scripts/codeql-source.sh
✅ [SUCCESS] .github/scripts/collect-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/collect-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/delete-eks-smoke-cluster.sh
✅ [SUCCESS] .github/scripts/delete-eks-smoke-cluster.test.sh
✅ [SUCCESS] .github/scripts/delete-old-workflow-runs.sh
✅ [SUCCESS] .github/scripts/delete-old-workflow-runs.test.sh
✅ [SUCCESS] .github/scripts/download-go-modules.sh
✅ [SUCCESS] .github/scripts/eks-report-test-lib.sh
✅ [SUCCESS] .github/scripts/find-merged-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/find-merged-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/finish-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/finish-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/install-release.test.sh
✅ [SUCCESS] .github/scripts/list-link-check-files.sh
✅ [SUCCESS] .github/scripts/profile-codeql-cohort.sh
✅ [SUCCESS] .github/scripts/profile-codeql-compare.sh
✅ [SUCCESS] .github/scripts/profile-codeql-compare.test.sh
✅ [SUCCESS] .github/scripts/profile-codeql-files.sh
✅ [SUCCESS] .github/scripts/profile-codeql-files.test.sh
✅ [SUCCESS] .github/scripts/profile-codeql-go.sh
✅ [SUCCESS] .github/scripts/profile-codeql-go.test.sh
✅ [SUCCESS] .github/scripts/profile-codeql-swap.sh
✅ [SUCCESS] .github/scripts/profile-codeql-swap.test.sh
✅ [SUCCESS] .github/scripts/publish-mcp-registry.sh
✅ [SUCCESS] .github/scripts/publish-mcp-registry.test.sh
✅ [SUCCESS] .github/scripts/publish-operator-chart.sh
✅ [SUCCESS] .github/scripts/redraft-evergreen-cask-prs.sh
✅ [SUCCESS] .github/scripts/redraft-evergreen-cask-prs.test.sh
✅ [SUCCESS] .github/scripts/report-eks-account-capacity.sh
✅ [SUCCESS] .github/scripts/report-eks-account-capacity.test.sh
✅ [SUCCESS] .github/scripts/report-eks-create-failure.sh
✅ [SUCCESS] .github/scripts/report-eks-create-failure.test.sh
✅ [SUCCESS] .github/scripts/resolve-cask-publication.sh
✅ [SUCCESS] .github/scripts/resolve-cask-publication.test.sh
✅ [SUCCESS] .github/scripts/resolve-release-publish-state.sh
✅ [SUCCESS] .github/scripts/resolve-release-publish-state.test.sh
❌ [ERROR] .github/scripts/resolve-release-replay.sh
    Error: File:[.github/scripts/resolve-release-replay.sh] is not executable

✅ [SUCCESS] .github/scripts/strict-link-transport.sh
✅ [SUCCESS] .github/scripts/strict-link-transport.test.sh
✅ [SUCCESS] .github/scripts/style-clean-cask-branch.sh
✅ [SUCCESS] .github/scripts/style-clean-cask-branch.test.sh
✅ [SUCCESS] .github/scripts/upload-release-assets.sh
✅ [SUCCESS] .github/scripts/upload-release-assets.test.sh
✅ [SUCCESS] .github/scripts/validate-cask-pr-handoff.sh
✅ [SUCCESS] .github/scripts/validate-cask-pr-handoff.test.sh
✅ [SUCCESS] .github/scripts/validate-release-ref.sh
✅ [SUCCESS] .github/scripts/validate-release-ref.test.sh
✅ [SUCCESS] .github/scripts/verify-desktop-codeql.sh
✅ [SUCCESS] .github/scripts/verify-desktop-codeql.test.sh
✅ [SUCCESS] .github/scripts/verify-go-archive-parity.sh
✅ [SUCCESS] .github/scripts/verify-go-archive-parity.test.sh
✅ [SUCCESS] .github/scripts/verify-otelzap-parity.sh
✅ [SUCCESS] .github/scripts/verify-otelzap-parity.test.sh
✅ [SUCCESS] .github/scripts/verify-vendored-comment-scan.sh
✅ [SUCCESS] .github/scripts/wait-for-github-api-budget.sh
✅ [SUCCESS] .github/scripts/wait-for-github-api-budget.test.sh
✅ [SUCCESS] desktop/scripts/make-icns.sh
✅ [SUCCESS] desktop/scripts/make-info-plist.sh
✅ [SUCCESS] desktop/scripts/make-macos-app.sh
✅ [SUCCESS] docs/demos/render.sh
✅ [SUCCESS] images/ksail-analysis-runner/smoke.sh
✅ [SUCCESS] install.sh
✅ [SUCCESS] internal/ciharness/testdata/schematic_fake_ksail.sh
✅ [SUCCESS] pkg/svc/provisioner/cluster/vcluster/containerd_registry_hosts.sh
✅ [SUCCESS] scripts/stage-webui.sh

✅ Linters with no issues

actionlint, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: coordinated Kubernetes dependency compatibility (#7259) | upstream | verified 15 October 2026 at head 3e1dfec9ae3b4ccedfd88d9a4e35892ca618917a.

The current native build fails because Kubernetes apimachinery v0.36.5 expects structured-merge-diff/v6 schema types while the selected kube-openapi update supplies v7 types. This head also raises the Go directive to 1.27.0. These are source-graph failures, so retrying the same head will not repair them.

Fresh official release and module reads still show Kyverno v1.19.1 on Kubernetes v0.36.3 and vcluster v0.37.3 on v0.36.0. The compatible coordinated graph required by #7259 remains unverified. Keep this PR blocked on that issue; no check, dependency contract or upstream pin was bypassed, and no unchanged retry was started.

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: #7259 | upstream | last-verified 2026-10-26: 2026-10-26 Go module proxy: the newest Kyverno release is still v1.19.2 (newest candidate v1.19.2-rc.5) and the newest vcluster is still v0.37.4 (newest candidate v0.38.0-alpha.7); both still require k8s.io/api and client-go v0.36. Issue 7259 is open. Dependabot rebased this PR to head 83b04a6 at 2026-10-26 17:16Z, and CI at that head was still running when this was written. Earlier records: (2026-10-25) the same upstream versions; (2026-10-20) checks failed at head a511054; (2026-10-17, 2026-10-19) the same at heads bcc44c4 and later. No unchanged retry or check waiver.