[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/onsi/ginkgo/v2	v2.33.1 → v2.34.0
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	v0.94.2 → v0.95.2
golang.org/x/mod	v0.42.0 → v0.43.0
sigs.k8s.io/controller-tools	v0.22.0 → v0.23.0

---

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.34.0

Compare Source

Features

• DeferOnFailure registers a callback that runs only when a spec fails - as soon as the failing node returns and before any teardown (JustAfterEach, AfterEach, AfterAll, DeferCleanup) - so it can capture the state teardown is about to destroy. It takes exactly what DeferCleanup takes and shares its scoping: called in BeforeEach/JustBeforeEach/It it covers the spec, in BeforeAll the ordered container, and in BeforeSuite the whole suite. It is also available on GinkgoT(); note that this adds a method to FullGinkgoTInterface, so hand-written implementations of that interface need to add it. See https://onsi.github.io/ginkgo/#capturing-failure-state-deferonfailure

Fixes

• Progress reporters (AttachProgressReporter) are no longer called while Ginkgo holds an internal lock, so a reporter that calls CurrentSpecReport() or AddReportEntry() no longer stalls for 5 seconds and has its output dropped.
• --sleep-on-failure now runs after any DeferOnFailure callbacks, also pauses when a spec times out, and no longer pauses if the suite has already been interrupted.

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.95.2

Compare Source

v0.95.1: 0.95.1 / 2026-11-05

Compare Source

Maintenance release because the CI workflow failed to publish the v0.95.0 container images.

v0.95.0: 0.95.0 / 2026-11-04

Compare Source

• [CHANGE] Add alertmanagerConfigFileSystemMode field to the Alertmanager CRD controlling how to process AlertmanagerConfig resources which have references to files from the Alertmanager container's filesystem.
• [FEATURE] Add extraScrapeMetrics field to the Prometheus and PrometheusAgent CRDs. #​8810
• [FEATURE] Add extraScrapeMetrics field to the ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #​8892
• [FEATURE] Reconcile ScrapeConfig status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #​8910
• [FEATURE] Reconcile ServiceMonitor status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #​8860
• [FEATURE] Reconcile PodMonitor status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #​8859
• [FEATURE] Reconcile Probe status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #​8930
• [FEATURE] Reconcile AlertmanagerConfig status subresource on Alertmanager reconciliations (requires the StatusForConfigurationResources feature gate). #​8261
• [FEATURE] Add labels field to the AlertmanagerConfig to manage route labels. #​8761
• [FEATURE] Add support for route labels in the Alertmanager configuration Secret. #​8865
• [FEATURE] Add botToken support for the global Telegram configuration in the Alertmanager CRD. #​8403
• [ENHANCEMENT] Add distroless images (available under the <version>-distroless tag). #​8815
• [ENHANCEMENT] Add --disable-pprof CLI argument. #​8920
• [ENHANCEMENT] Configure the log level via the runtime configuration section instead of the --log.level flag for Prometheus >= 3.15.0. #​8881
• [BUGFIX] Reject AlertmanagerConfig resources where PagerDuty routingKey and serviceKey references resolve to empty strings. #​8842
• [BUGFIX] Rollout Alertmanager pods when the cluster TLS configuration is updated. #​8840
• [BUGFIX] Pass imagePullPolicy to the ThanosRuler config-reloader sidecar. #​8916
• [BUGFIX] Make the ordering of the ts and level keys consistent in the config-reloader logs (the ts key always comes first). #​8913
• [BUGFIX] Reject MSTeamsV2 receivers without a webhook URL. #​8908
• [BUGFIX] Add credentials validation for Webex receivers in the AlertmanagerConfig CRD. #​8906 #​8897
• [BUGFIX] Preserve HTTP client configuration for Azure SD in the ScrapeConfig CRD. #​8898
• [BUGFIX] Reject AlertmanagerConfig custom resources with duplicated time interval names. #​8896
• [BUGFIX] Improve validation for the PagerDuty receiver in the AlertmanagerConfig CRD. #​8842
• [BUGFIX] Add validation for the clientAuthType field in Prometheus, PrometheusAgent, Alertmanager and ThanosRuler CRDs. #​8823
• [BUGFIX] Discard unsupported fields in remote-write configuration for the ThanosRuler CRD. #​8813
• [BUGFIX] Add zone information to the generated kubelet EndpointSlice. #​8864
• [BUGFIX] Preserve the Pushover ttl field when converting AlertmanagerConfig resources. #​8866
• [BUGFIX] Handle unset email threading fields when converting AlertmanagerConfig resources. #​8858
• [BUGFIX] Add URL validation for the PagerDuty receiver in the Alertmanager configuration Secret. #​8221
• [BUGFIX] Add URL validation for the RocketChat receiver in the Alertmanager configuration Secret. #​8224
• [BUGFIX] Log errors when namespace flags conflict. #​8931

kubernetes-sigs/controller-tools (sigs.k8s.io/controller-tools)

v0.23.0

Compare Source

This is an additional minor release independent of the Kubernetes release cadence to deliver
#​1474 because this bug fix is a breaking change so it was not possible to backport it.

What's Changed

• ✨ Add option to omit controller-gen version in generated output by @​pedjak in #​1437
• 🐛 Fix +listType marker not working on type alias fields by @​sivchari in #​1359
• 🐛 Inject min boundaries for +k8s:required on strings, maps, and slices by @​lalitc375 in #​1458
• 🐛 crd: support Kubernetes declarative validation bounds by @​kannon92 in #​1474

Dependency bumps

• 🌱 Bump github.com/onsi/gomega from 1.43.1 to 1.44.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1480
• 🌱 Bump golang.org/x/tools from 0.50.0 to 0.51.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1487
• 🌱 Bump golangci-lint to v2.14.0 and enable promlinter, reassign linters by @​dongjiang1989 in #​1488
• 🌱 Bump sigs.k8s.io/controller-runtime from v0.24.0 to v0.25.0 by @​dongjiang1989 in #​1476
• 🌱 Bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the all-github-actions group by @​dependabot[bot] in #​1475
• 🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 3 updates by @​dependabot[bot] in #​1478

Full Changelog: kubernetes-sigs/controller-tools@v0.22.0...v0.23.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 14 additional dependencies were updated

Details:

Package	Change
k8s.io/api	v0.37.1 -> v0.37.2
k8s.io/apiextensions-apiserver	v0.37.1 -> v0.37.2
k8s.io/apimachinery	v0.37.1 -> v0.37.2
k8s.io/client-go	v0.37.1 -> v0.37.2
k8s.io/code-generator	v0.37.1 -> v0.37.2
golang.org/x/crypto	v0.57.0 -> v0.58.0
golang.org/x/net	v0.60.0 -> v0.61.0
golang.org/x/sync	v0.23.0 -> v0.24.0
golang.org/x/sys	v0.48.0 -> v0.49.0
golang.org/x/term	v0.46.0 -> v0.47.0
golang.org/x/text	v0.42.0 -> v0.43.0
golang.org/x/tools	v0.51.0 -> v0.52.0
k8s.io/streaming	v0.37.1 -> v0.37.2
k8s.io/utils	v0.0.0-20260707023825-cf1189d6abe3 -> v0.0.0-20261023123148-ca04ba58ecab