Skip to content

chore(deps): update kubernetes components to v1.36.3 (ansible/playbooks) - #10832

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ansible/playbooks-kubernetes-components
Open

chore(deps): update kubernetes components to v1.36.3 (ansible/playbooks)#10832
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ansible/playbooks-kubernetes-components

Conversation

@renovate

@renovaterenovateBot commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageUpdateChangePending
cri-o/cri-opatch1.36.11.36.3
kubernetes/kubernetespatch1.36.11.36.31.36.4

Release Notes

cri-o/cri-o (cri-o/cri-o)

v1.36.3

Compare Source

CRI-O v1.36.3

The release notes have been generated for the commit range
v1.36.2...v1.36.3 on Tue, 04 Aug 2026 00:41:01 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

The OpenVEX report for this release is available at:

The SLSA provenance attestation for this release is available at:

All release artifacts (bundles, SBOMs, VEX, and provenance) are also available as signed OCI artifacts at ghcr.io/cri-o/bundle:v1.36.3.

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.36.3.tar.gz \ --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-github-workflow-repository cri-o/packaging \ --certificate-github-workflow-ref refs/heads/main \ --bundle cri-o.amd64.v1.36.3.tar.gz.bundle

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.36.3.tar.gz
> bom validate -e cri-o.amd64.v1.36.3.tar.gz.spdx -d cri-o

To verify the OpenVEX vulnerability report, run:

> cosign verify-blob cri-o.v1.36.3.openvex.json \ --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-github-workflow-repository cri-o/packaging \ --certificate-github-workflow-ref refs/heads/main \ --bundle cri-o.v1.36.3.openvex.json.bundle

To verify the SLSA provenance attestation, run:

> cosign verify-blob cri-o.v1.36.3.provenance.json \ --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-github-workflow-repository cri-o/packaging \ --certificate-github-workflow-ref refs/heads/main \ --bundle cri-o.v1.36.3.provenance.json.bundle
Changelog since v1.36.2
Changes by Kind
Bug or Regression
Uncategorized
  • Add enable_cni_status_monitoring config option (default false) and
    cni_status_grace_period (default 60s) to gate continuous CNI STATUS
    monitoring and tolerate brief plugin disruptions during upgrades. (#​10069, @​openshift-cherrypick-robot)
  • Restores pre-1.34 behavior handling envvar values containing non-utf8 data (#​10185, @​liggitt)
Dependencies
Added

Nothing has changed.

Changed
  • k8s.io/api: v0.36.0-rc.0 → v0.36.3
  • k8s.io/apimachinery: v0.36.0-rc.0 → v0.36.3
  • k8s.io/client-go: v0.36.0-rc.0 → v0.36.3
  • k8s.io/component-base: v0.36.0-rc.0 → v0.36.3
  • k8s.io/cri-api: v0.36.0-rc.0 → v0.36.3
  • k8s.io/cri-client: v0.36.0-rc.0 → v0.36.3
  • k8s.io/cri-streaming: v0.36.0-rc.0 → v0.36.3
  • k8s.io/kubelet: v0.36.0-rc.0 → v0.36.3
  • k8s.io/streaming: v0.36.0-rc.0 → v0.36.3
  • sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.3.3
Removed

v1.36.2

Compare Source

CRI-O v1.36.2

The release notes have been generated for the commit range
v1.36.1...v1.36.2 on Thu, 02 Jul 2026 00:55:41 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

The OpenVEX report for this release is available at:

The SLSA provenance attestation for this release is available at:

All release artifacts (bundles, SBOMs, VEX, and provenance) are also available as signed OCI artifacts at ghcr.io/cri-o/bundle:v1.36.2.

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.36.2.tar.gz \ --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-github-workflow-repository cri-o/packaging \ --certificate-github-workflow-ref refs/heads/main \ --bundle cri-o.amd64.v1.36.2.tar.gz.bundle

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.36.2.tar.gz
> bom validate -e cri-o.amd64.v1.36.2.tar.gz.spdx -d cri-o

To verify the OpenVEX vulnerability report, run:

> cosign verify-blob cri-o.v1.36.2.openvex.json \ --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-github-workflow-repository cri-o/packaging \ --certificate-github-workflow-ref refs/heads/main \ --bundle cri-o.v1.36.2.openvex.json.bundle

To verify the SLSA provenance attestation, run:

> cosign verify-blob cri-o.v1.36.2.provenance.json \ --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-github-workflow-repository cri-o/packaging \ --certificate-github-workflow-ref refs/heads/main \ --bundle cri-o.v1.36.2.provenance.json.bundle
Changelog since v1.36.1
Changes by Kind
Uncategorized
  • Update gomaxprocs hook to ignore workload partitioning when considering whether to inject, as well as update the calculation to ensure containers get at least double the requested number of CPUs, to reduce potential go scheduler throttling. (#​10008, @​openshift-cherrypick-robot)
Dependencies
Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

kubernetes/kubernetes (kubernetes/kubernetes)

v1.36.3

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.36.2

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

This comment has been minimized.

@renovaterenovateBot changed the title Update Kubernetes components to v1.36.2 (ansible/playbooks)chore(deps): update kubernetes components to v1.36.2 (ansible/playbooks)Jul 20, 2026
@renovate
renovateBotforce-pushed the renovate/ansible/playbooks-kubernetes-components branch from 20a8895 to f50a559CompareJuly 26, 2026 03:57
@renovaterenovateBot changed the title chore(deps): update kubernetes components to v1.36.2 (ansible/playbooks)chore(deps): update kubernetes components (ansible/playbooks)Jul 26, 2026
@github-actions

This comment has been minimized.

@renovate
renovateBotforce-pushed the renovate/ansible/playbooks-kubernetes-components branch from f50a559 to e33a2b7CompareAugust 7, 2026 05:54
@renovaterenovateBot changed the title chore(deps): update kubernetes components (ansible/playbooks)chore(deps): update kubernetes components to v1.36.3 (ansible/playbooks)Aug 7, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Ansible Plan Results

Mode:--check --diff (dry run)

⚠️Changes detected


golyat-4: worker-image

HostOKChangedSkippedFailedUnreachable
golyat-48315500

1 changed

Changed Tasks (1)
#TaskModule
1user_management : Update package cacheunknown

shanghai-1: control-plane

HostOKChangedSkippedFailedUnreachable
shanghai-110123600

2 changed

Changed Tasks (2)
#TaskModule
1user_management : Update package cacheunknown
2kubernetes_components : Deploy kubeadm configuration with etcd tuningunknown

shanghai-1: node-shanghai-1

HostOKChangedSkippedFailedUnreachable
shanghai-190000

No changes

shanghai-2: control-plane

HostOKChangedSkippedFailedUnreachable
shanghai-210123600

2 changed

Changed Tasks (2)
#TaskModule
1user_management : Update package cacheunknown
2kubernetes_components : Deploy kubeadm configuration with etcd tuningunknown

shanghai-2: node-shanghai-2

HostOKChangedSkippedFailedUnreachable
shanghai-290000

No changes

shanghai-3: control-plane

HostOKChangedSkippedFailedUnreachable
shanghai-310123600

2 changed

Changed Tasks (2)
#TaskModule
1user_management : Update package cacheunknown
2kubernetes_components : Deploy kubeadm configuration with etcd tuningunknown

shanghai-3: node-shanghai-3

HostOKChangedSkippedFailedUnreachable
shanghai-390000

No changes


Plan executed on all nodes in parallel.

@renovaterenovateBot changed the title chore(deps): update kubernetes components to v1.36.3 (ansible/playbooks)Update Kubernetes components to v1.36.3 (ansible/playbooks)Aug 16, 2026
@renovaterenovateBot changed the title Update Kubernetes components to v1.36.3 (ansible/playbooks)chore(deps): update kubernetes components to v1.36.3 (ansible/playbooks)Aug 17, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants