chore(deps): bump k8s.io/component-base from 0.35.0 to 0.35.1

[dependabot]

Bumps k8s.io/component-base from 0.35.0 to 0.35.1.

Commits

• 112813f Update dependencies to v0.35.1 tag
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Walkthrough

This change updates four Kubernetes-related module versions in go.mod from v0.35.0 to v0.35.1: k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, and k8s.io/component-base (indirect). No functional code changes are introduced.

Changes

Cohort / File(s)	Summary
Dependency Version Bump go.mod	Bumps Kubernetes module versions (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, k8s.io/component-base) from v0.35.0 to v0.35.1.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is auto-generated by Dependabot and lacks the required template structure, including Summary, Change Type, and Check List sections specified in the repository template.	Use the repository's PR description template: add a Summary section, select a Change Type (likely 'Docs/Test' for dependency updates), and complete the Check List items.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: bumping k8s.io/component-base from 0.35.0 to 0.35.1, which aligns with the raw summary showing version updates to Kubernetes-related modules.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependabot/go_modules/k8s.io/component-base-0.35.1

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@go.mod`:
- Around line 11-15: Update the k8s module versions in go.mod so all k8s.io/*
entries use v0.35.1: change k8s.io/apiextensions-apiserver and k8s.io/apiserver
from v0.35.0 to v0.35.1 to align with k8s.io/api, k8s.io/apimachinery,
k8s.io/client-go, and k8s.io/component-base; after editing, run `go mod tidy` to
ensure dependencies are resolved and the module graph is updated.

[coderabbitai]

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

cat -n go.mod

Repository: package-operator/boxcutter

Length of output: 5385

---

🌐 Web query:

Kubernetes k8s.io module version compatibility alignment v0.35 release notes

💡 Result:

For Kubernetes v1.35.0 (released December 17, 2025), the Kubernetes “staging” Go libraries are published under matching k8s.io/* module tags v0.35.x and are intended to be version-aligned (same minor, ideally same patch) to avoid dependency/API skew. [4]

What “module version compatibility alignment” means for v0.35

• v0.35.x maps to Kubernetes v1.35.x for the staged Go modules (for example k8s.io/client-go@v0.35.0 was published Dec 17, 2025). [1]
• Several staged repos explicitly track each other; e.g. k8s.io/apiextensions-apiserver states its HEAD matches k8s.io/apiserver, k8s.io/apimachinery, and k8s.io/client-go (so mixing minors is discouraged). [2]
• Some modules (example: k8s.io/apimachinery) reiterate they are direct support of Kubernetes and do not offer independent compatibility guarantees, reinforcing that you should consume them as a matched set. [3]

Practical guidance

• If you upgrade one Kubernetes module to v0.35.*, upgrade the rest of your Kubernetes k8s.io/* dependencies to the same 0.35.* line (and preferably the same patch), rather than mixing v0.34.* with v0.35.*. [1][2][3]

Sources: k8s.io/client-go module docs (tag/release mapping + published v0.35.0) [1], k8s.io/apiextensions-apiserver module docs (tracks apiserver/apimachinery/client-go) [2], k8s.io/apimachinery repo README (no independent compatibility guarantees; tracks Kubernetes) [3], Kubernetes v1.35 release timeline/date [4].

---

Align k8s module versions to v0.35.1.

Kubernetes official guidance explicitly requires version alignment across k8s.io/* modules—they do not offer independent compatibility guarantees and are tightly coupled. Bump k8s.io/apiextensions-apiserver and k8s.io/apiserver from v0.35.0 to v0.35.1 to match k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, and k8s.io/component-base.

🤖 Prompt for AI Agents

In `@go.mod` around lines 11 - 15, Update the k8s module versions in go.mod so all
k8s.io/* entries use v0.35.1: change k8s.io/apiextensions-apiserver and
k8s.io/apiserver from v0.35.0 to v0.35.1 to align with k8s.io/api,
k8s.io/apimachinery, k8s.io/client-go, and k8s.io/component-base; after editing,
run `go mod tidy` to ensure dependencies are resolved and the module graph is
updated.

[dependabot]

Superseded by #455.