[dependabot]

Bumps github.com/siderolabs/go-kubernetes from 0.2.41 to 0.2.44.

Release notes

Sourced from github.com/siderolabs/go-kubernetes's releases.

v0.2.44

go-kubernetes 0.2.44 (2026-10-28)

Welcome to the v0.2.44 release of go-kubernetes!

Please try out the release binaries and report any issues at https://github.com/siderolabs/go-kubernetes/issues.

Contributors

• Andrey Smirnov
• Orzelius
• Noel Georgi
• Andrey Smirnov
• Oguz Kilcan
• Oscar Wieman
• Artem Chernyshev
• Utku Ozdemir

Changes

• 6a3c63b fix: do not uncordon nodes cordoned by someone else
• e2aea5c chore: rekres and bump dependencies
• 1a7f4fb fix: set a logger on the ssa controller-runtime client
• f752bb3 feat: add Kubernetes 1.38 compatibility
• 0caf1f2 feat: add Kubernetes 1.37 compatibility
• 822b7a2 feat: add nodedrain package for client-side cordon and drain
• 260bc0a fix: update authorization config apiVersion for K8s >= 1.32
• cc8c2c9 fix: return the apply results in a consistent order
• 131a2bd fix: handle cluster-scoped resources with a ns correctly
• 38c182f fix: normalize the changeset to be keyed without apiVersion
• ca35008 feat: update k8s api to 0.36.0
• 503792d chore: add retry to main kubernetes operations
• 6a00c4f feat: handle CR defined alongside their CRD in the same apply
• 4ff2602 feat: update deprecations to Kuberntes 1.36.0-beta.0
• 691a26b feat: add StateProvider for per-node COSI state in upgrade checks
• 92163c3 fix: set a the context logger
• 8364add chore: small improcements to ssa package
• a95f3bf chore: add helper functions for CLI applications
• f2c063b test: add integration tests for ssa logic
• 9de92cf refactor: drop k8s.io/utils
• 8e6f068 fix: bring back legacy sync
• de675a0 fix: stop using custom dialer for Kubernetes client
• e7a89c3 refactor: use fluxcd/ssa instead of kubernetes cli-utils for ssa
• 0a235c0 feat: add early support for Kubernetes 1.36
• 3bea212 fix: use new Myers diff algorithm

... (truncated)

Commits

• 6a3c63b fix: do not uncordon nodes cordoned by someone else
• e2aea5c chore: rekres and bump dependencies
• 1a7f4fb fix: set a logger on the ssa controller-runtime client
• f752bb3 feat: add Kubernetes 1.38 compatibility
• See full diff in compare view

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: #7259 | upstream | last-verified 2026-11-10: this bump requires the Kubernetes v0.37 client libraries (k8s.io/api v0.37.1 or structured-merge-diff v7); the build fails to compile against the v0.36 stack ksail#7259 keeps until Kyverno and vcluster support v0.37

Re-verified 2026-11-10 (Go module proxy): the newest stable Kyverno (v1.19.2) and vCluster (v0.37.7, tagged 2026-11-10) still require Kubernetes api/client-go v0.36.x. Kyverno v1.20.0-rc.4 now targets v0.37.1, but vCluster v0.38.0-rc.2 still targets v0.36.3, so ksail#7259 stays blocked and this PR stays parked. Main still maps k8s.io/apimachinery v0.37.1 => v0.36.6.

[github-actions]

✅MegaLinter analysis: Success

✅ Linters with no issues

actionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Rebasing onto main now that ksail#8243 cleared the vulnerability scan; this head was cut from an older base whose k8s.io/api/apimachinery mix fails to compile.

@dependabot rebase