chore(deps): eol unstable upgrades — 5 packages (unstable: 2 · minor: 3)

[gh-worker-campaigns-3e9aa4]

Summary: Security update — 5 packages upgraded (UNSTABLE changes included)

Manifests changed:

• . (go)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
k8s.io/api	v0.26.2	v0.35.4	unstable	Direct	-
k8s.io/apimachinery	v0.26.2	v0.35.4	unstable	Direct	-
github.com/go-logr/logr	v1.2.3	v1.4.3	minor	Transitive	-
k8s.io/klog/v2	v2.80.1	v2.140.0	minor	Transitive	-
sigs.k8s.io/yaml	v1.3.0	v1.6.0	minor	Transitive	-

Packages marked with "-" are updated due to dependency constraints.

---

Security Details

⚠️ Dependencies that have Reached EOL (5)

Dependency	Unsafe Version	EOL Date	New Version	Path
github.com/go-logr/logr	v1.2.3	-	v1.4.3	go.mod
k8s.io/api	v0.26.2	Mar 1, 2026	v0.35.4	go.mod
k8s.io/apimachinery	v0.26.2	Feb 15, 2026	v0.35.4	go.mod
k8s.io/klog/v2	v2.80.1	Sep 9, 2025	v2.140.0	go.mod
sigs.k8s.io/yaml	v1.3.0	-	v1.6.0	go.mod

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: EOL Remediation

🤖 Generated by DataDog Automated Dependency Management System

[campaigner-prod]

Release Notes

k8s.io/api (v0.26.2 → v0.35.4) — Commit comparison

• a814a2f Generated: PDB health policy
• 9c30363 Changes to pdb healthy policy api docs
• 6578ac3 update docs for ContainerStatus fields
• 0e595cd Update TestCompatibility
• b447fe1 generated
• 321adc8 dependencies: update klog v2.90.1
• 2ed8d24 Merge pull request https://github.com/kubernetes/api/issues/111856 from mengjiao-liu/improve-podSpec.restartPpolicy-description
• b5b22ca Merge pull request https://github.com/kubernetes/api/issues/102884 from vinaykul/restart-free-pod-vertical-scaling
• 2ffa6a6 Merge pull request https://github.com/kubernetes/api/issues/115996 from rayowang/autoscaling
• 6bcd73f update openapi-spec, generated proto and generated openapi
• f54f3b8 Fix API field references for autoscaling v1, v2 and v2beta2
• ec40acc Merge pull request https://github.com/kubernetes/api/issues/115928 from pohly/dra-resource-requirements-pvc
• 5717a84 Improve spec.template.spec.restartPolicy description
• f7c08e3 Merge pull request https://github.com/kubernetes/api/issues/115815 from Huang-Wei/pod-scheduling-readiness-beta
• e00fe37 api: generated files

... and 85 more commits

k8s.io/apimachinery (v0.26.2 → v0.35.4) — Commit comparison

• 8ac57a9 Merge pull request https://github.com/kubernetes/apimachinery/issues/115065 from apelisse/apimachinery-managed-fields
• 027c209 Detect and clean up unneeded after_roundtrip fixtures
• 279f5e8 Update kube-openapi to 15aac26d736a
• 0993673 Add a Clear() function to generic sets
• 9bf9334 wait: Group ExponentialBackoff* functions together in file
• 72a7bb1 replaced spew.Sprintf with a util pretty print function
• 75694b8 managedfields: Move most of fieldmanager package to managefields
• f357b1f Merge pull request https://github.com/kubernetes/apimachinery/issues/116166 from pohly/test-go-vet
• 5b1cff8 Merge pull request https://github.com/kubernetes/apimachinery/issues/116162 from apelisse/update-openapi
• 4e8035c Update kube-openapi to afdc3dddf62d31f5e3868d699379c571a6007920
• 76eb944 Merge pull request https://github.com/kubernetes/apimachinery/issues/115402 from p0lyn0mial/upstream-sendinitialevents-take-2
• 590a261 Merge pull request https://github.com/kubernetes/apimachinery/issues/115277 from pohly/klog-update
• 776e66c Merge pull request https://github.com/kubernetes/apimachinery/issues/116176 from aojea/testpingspdy
• b1ad786 start to count time since the connection was actually established
• 0fe4390 staging: fix "go vet" issues

... and 85 more commits

k8s.io/klog/v2 (v2.80.1 → v2.140.0) — GitHub Release

v2.140.0

What's Changed

• Add dependabot by @lucacome in Add dependabot kubernetes/klog#410
• Use strconv.AppendQuote instead of strconv.Quote for message formatting by @astef in Use strconv.AppendQuote instead of strconv.Quote for message formatting kubernetes/klog#413
• de-duplication of key/value pairs by @pohly in de-duplication of key/value pairs kubernetes/klog#415
• Fix: Ensure constant format strings in fmt and printf calls by @mikelolasagasti in Fix: Ensure constant format strings in fmt and printf calls kubernetes/klog#417
• Remove old note on Go version requirements by @guettli in Remove old note on Go version requirements kubernetes/klog#425
• test with 1.24 and 1.25 by @pohly in test with 1.24 and 1.25 kubernetes/klog#428
• ktesting: fix vmodule support by @pohly in ktesting: fix vmodule support kubernetes/klog#431
• ktesting: support multi-line result from AnyToStringHook by @pohly in ktesting: support multi-line result from AnyToStringHook kubernetes/klog#433
• textlogger: optionally turn off header by @pohly in textlogger: optionally turn off header kubernetes/klog#430
• feat: fix stderrthreshold not honored when logtostderr is set (stderrthreshold not honored when logtostderr is set kubernetes/klog#212) + two new flags by @pierluigilenoci in feat: fix stderrthreshold not honored when logtostderr is set (#212) + two new flags kubernetes/klog#432

New Contributors

• @lucacome made their first contribution in Add dependabot kubernetes/klog#410
• @astef made their first contribution in Use strconv.AppendQuote instead of strconv.Quote for message formatting kubernetes/klog#413
• @mikelolasagasti made their first contribution in Fix: Ensure constant format strings in fmt and printf calls kubernetes/klog#417
• @guettli made their first contribution in Remove old note on Go version requirements kubernetes/klog#425
• @pierluigilenoci made their first contribution in feat: fix stderrthreshold not honored when logtostderr is set (#212) + two new flags kubernetes/klog#432

Full Changelog: kubernetes/klog@v2.130.1...v2.140.0

v2.130.1

What's Changed

• data race: avoid unprotected access to sb.file by @pohly in data race: avoid unprotected access to sb.file kubernetes/klog#408

Full Changelog: kubernetes/klog@v2.130.0...v2.130.1

v2.130.0

What's Changed

• chore(*): fix spelling of Intel Corporation by @jsoref in chore(*): fix spelling of Intel Corporation kubernetes/klog#399
• build: fix some linter warnings by @pohly in build: fix some linter warnings kubernetes/klog#402
• examples: fix linter warning by @pohly in examples: fix linter warning kubernetes/klog#406
• Do not acquire lock for file.Sync() fsync call by @1978629634 in Do not acquire lock for file.Sync() fsync call kubernetes/klog#404
• ktesting: tone down warning about leaked test goroutine by @pohly in ktesting: tone down warning about leaked test goroutine kubernetes/klog#401

New Contributors

• @jsoref made their first contribution in chore(*): fix spelling of Intel Corporation kubernetes/klog#399
• @1978629634 made their first contribution in Do not acquire lock for file.Sync() fsync call kubernetes/klog#404

Full Changelog: kubernetes/klog@v2.120.1...v2.130.0

v2.120.1

What's Changed

• textlogger: allow caller to override stack unwinding by @pohly in textlogger: allow caller to override stack unwinding kubernetes/klog#397

Full Changelog: kubernetes/klog@v2.120.0...v2.120.1

v2.120.0

What's Changed

• OWNERS: remove serathius, add mengjiao-liu, promote pohly by @pohly in OWNERS: remove serathius, add mengjiao-liu, promote pohly kubernetes/klog#394
• docs: clarify relationship between different features by @pohly in docs: clarify relationship between different features kubernetes/klog#395
• Add SafePtr wrapper by @kaisoz in Add SafePtr wrapper kubernetes/klog#393
• logr v1.4.1 + SetSlogLogger by @pohly in logr v1.4.1 + SetSlogLogger kubernetes/klog#396

New Contributors

• @kaisoz made their first contribution in Add SafePtr wrapper kubernetes/klog#393

Full Changelog: kubernetes/klog@v2.110.1...v2.120.0

v2.110.1

What's Changed

• fix: SetLogger via klog.SetLogger will output an unexpected newline by @aimuz in fix: SetLogger via klog.SetLogger will output an unexpected newline kubernetes/klog#378
• resolve comments warning by @lowang-bh in resolve comments warning kubernetes/klog#379
• stderrthreshold: fix flag comment by @pohly in stderrthreshold: fix flag comment kubernetes/klog#376
• enable "go vet" checks for parameters by @pohly in enable "go vet" checks for parameters kubernetes/klog#390
• promote experimental code to stable by @pohly in promote experimental code to stable kubernetes/klog#392
• golangci-lint action by @pohly in golangci-lint action kubernetes/klog#380
• output: handle WithName like zapr does by @pohly in output: handle WithName like zapr does kubernetes/klog#391
• slog support + logr 1.3.0 update by @pohly in slog support + logr 1.3.0 update kubernetes/klog#384

New Contributors

• @aimuz made their first contribution in fix: SetLogger via klog.SetLogger will output an unexpected newline kubernetes/klog#378
• @lowang-bh made their first contribution in resolve comments warning kubernetes/klog#379

Full Changelog: kubernetes/klog@v2.100.1...v2.110.1

v2.100.1

What's Changed

• expose logBridge via NewStandardLog() by @mikedanese in expose logBridge via NewStandardLog() kubernetes/klog#369
• add Format wrapper by @pohly in add Format wrapper kubernetes/klog#374
• JSON as fallback encoding by @pohly in JSON as fallback encoding kubernetes/klog#375

New Contributors

• @mikedanese made their first contribution in expose logBridge via NewStandardLog() kubernetes/klog#369

Full Changelog: kubernetes/klog@v2.90.1...v2.100.1

v2.90.1

What's Changed

• buffer: restore dropping of too large buffers by @pohly in buffer: restore dropping of too large buffers kubernetes/klog#366
• ktesting improvements by @pohly in ktesting improvements kubernetes/klog#365
• ktesting + textlogger config api by @pohly in ktesting + textlogger config api kubernetes/klog#368
• textlogger write through by @pohly in textlogger write through kubernetes/klog#363

Full Changelog: kubernetes/klog@v2.90.0...v2.90.1

v2.90.0

What's Changed

• klog: benchmark the overhead when logging is off by @pohly in klog: benchmark the overhead when logging is off kubernetes/klog#355
• improve textlogger by @pohly in improve textlogger kubernetes/klog#362

Full Changelog: kubernetes/klog@v2.80.1...v2.90.0

There are some API differences from previous version

k8s.io/klog/v2/klogr contains incompatible changes:
 - klogger.Enabled: removed
 - klogger.Error: removed
 - klogger.Info: removed

k8s.io/klog/v2/test contains incompatible changes:
 - InitKlog: changed from func() to func(testing.TB) *flag.FlagSet

---

Generated by ADMS Sources: 1 GitHub Release, 2 Commit comparisons, 2 not available.

[seberm-6]

Hey, sorry for the noise. This was caused by a bug in our automated dependency update system that incorrectly included upstream changelog content in PR comments, triggering notifications to external contributors. The feature flag has been turned off and we're working on a fix. Sorry about that again.