Bump sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0 in the kubernetes group

[dependabot]

Bumps the kubernetes group with 1 update: sigs.k8s.io/controller-runtime.

Updates sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

• Dependencies: Bump to k8s.io/* v1.37 (#3579 #3575 #3567 #3561 #3547 #3529 #3524)
• Events: Add new EventRecorder interface (#3509)

✨ New Features

• Client: Add a read-your-own-writes client (#3472)
• Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
• Fakeclient: Add scale subresource support for Apply (#3569)
• Metrics: Allow opt-in for client-go REST client metrics (#3510)
• Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
• Source: Add TypedInformer source (#3520)
• Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

• Cache: Fix goroutine leaks in cache Start() methods (#3565)
• Client: Fix regression in Apply typed error handling (#3515)
• Controller: Unlock when Controller.Start() returns with error (#3545)
• Envtest: Fix envtest process stop on Windows (#3519)
• Fakeclient: Allow updating managedFields through Update (#3585)
• Fakeclient: Fix AddIndex panic when wrapped with an interceptor (#3583)
• Fakeclient: Fix PartialObjectMeta handling (#3571)
• Fakeclient: Support scale subresource get/update for unstructured objects (#3546)
• Fakeclient: Update object on subresource apply (#3570)
• PriorityQueue: Fix PriorityQueue deadlock on shutdown (#3540)
• Testing/Process: Fix process Stop timeout error handling (#3523)

🌱 Others

• LeaderElection: Pass Managers Logger to Leader Elector via Context (#3576)

🌱 CI & linters

• Add copyright header validation & fix findings (#3544)
• Bump to golangci-lint v2.12.1 (#3514)
• Bump to golangci-lint v2.12.2 (#3532)
• Bump to golangci-lint v2.13.1 (#3580)

... (truncated)

Commits

• e8f9455 🐛 fakeclient: Allow updating managedFields through Update (#3585)
• 0cc1315 Merge pull request #3565 from dongjiang1989/fix-leak
• fa96780 🐛 Fix goroutine leaks in cache Start() methods
• 1f5514b ✨ Add a read-your-own-write client (#3472)
• df386c7 🌱 Bump to golangci-lint v2.13.1 (#3580)
• dc7618f Merge pull request #3583 from pujitha24/auto/issue-3582
• 37fe235 🐛 fake: fix AddIndex panic when client is wrapped with an interceptor
• 01c7782 ✨ Allow overriding REST client latency histogram buckets (#3573)
• 857be80 Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-logging
• b1387be Merge pull request #3581 from alvaroaleman/fake-consistent
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Updated an internal framework dependency to a newer version.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 83c5747b-666a-4491-9582-bdfd2db08714

📥 Commits

Reviewing files that changed from the base of the PR and between aacfe4e and d04724a.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

Walkthrough

The pull request updates the direct sigs.k8s.io/controller-runtime dependency from v0.24.1 to v0.25.0.

Changes

Controller Runtime Upgrade

Layer / File(s)	Summary
Update controller-runtime dependency go.mod	The direct sigs.k8s.io/controller-runtime dependency now uses v0.25.0 instead of v0.24.1.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to d0472

This updates controller-runtime from v0.24.1 to v0.25.0 with no identified current-head merge-blocking risk.

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and accurately describes the dependency version update from 0.24.1 to 0.25.0 in the Kubernetes group.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The pull request changes only dependency metadata in go.mod and go.sum. It adds no test files and changes no Ginkgo titles. The repository’s existing Ginkgo titles are static strings; no dynamic t…
Test Structure And Quality	✅ Passed	The pull request changes only dependency metadata: go.mod and go.sum. The diff contains no Go test files or Ginkgo test changes, so it introduces no single-responsibility, setup/cleanup, timeout, …
Microshift Test Compatibility	✅ Passed	The pull request changes only go.mod and go.sum to update sigs.k8s.io/controller-runtime from v0.24.1 to v0.25.0. It adds no Go files, Ginkgo tests, or test declarations. Therefore, it introduce…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The check is not triggered. The pull request changes only go.mod and go.sum to update sigs.k8s.io/controller-runtime from v0.24.1 to v0.25.0. The diff adds no Go, YAML, or other test files and a…
Topology-Aware Scheduling Compatibility	✅ Passed	PASS: The committed diff changes only go.mod and go.sum. It updates sigs.k8s.io/controller-runtime from v0.24.1 to v0.25.0 and replaces the related checksums. No deployment manifest, operato…
Ote Binary Stdout Contract	✅ Passed	PASS. The pull request changes only go.mod and go.sum; it changes no process-level Go code. The repository builds a validation-webhook binary, not an OTE binary that lists tests through JSON on st…
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The pull request changes only go.mod and go.sum. The diff updates sigs.k8s.io/controller-runtime from v0.24.1 to v0.25.0 and its checksums. It adds no Ginkgo e2e tests or other test co…
No-Weak-Crypto	✅ Passed	PASS. The pull request changes only go.mod and go.sum, and only updates sigs.k8s.io/controller-runtime from v0.24.1 to v0.25.0. The upgraded module contains no MD5, SHA1, DES, 3DES, RC4, Blowfis…
Container-Privileges	✅ Passed	The pull request changes only go.mod and go.sum to update sigs.k8s.io/controller-runtime from v0.24.1 to v0.25.0. It changes no container or Kubernetes manifest. Repository privilege declaration…
No-Sensitive-Data-In-Logs	✅ Passed	PASS. The pull request changes only go.mod and go.sum. It adds no application logging. The upgraded controller-runtime ReadYourWritesConsistency feature defaults to false, and the repository does not …

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/kubernetes-ede63b08d5

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign joshbranham for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.