build(deps): bump the kube group across 1 directory with 6 updates by dependabot[bot] · Pull Request #15 · linkerd/linkerd-kubert

dependabot · 2026-07-08T10:07:32Z

Bumps the kube group with 5 updates in the / directory:

Package	From	To
k8s-openapi	`0.25.0`	`0.28.0`
kube-client	`1.1.0`	`4.0.0`
kube-core	`1.1.0`	`4.0.0`
kube-runtime	`1.1.0`	`4.0.0`
kube	`1.1.0`	`4.0.0`

Updates k8s-openapi from 0.25.0 to 0.28.0

Release notes

Sourced from k8s-openapi's releases.

v0.28.0

k8s-openapi

BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

BREAKING CHANGE: Dropped support for Kubernetes 1.31.

FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

v1.32.13

v1.33.13

v1.34.9

v1.35.6

v1.36.2

k8s-openapi-codegen-common

FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

v0.27.1

k8s-openapi

BUGFIX: apimachinery::pkg::api::resource::Quantity now supports deserializing from a JSON floating point literal as well.

Corresponding Kubernetes API server versions:

v1.31.14

v1.32.13

v1.33.9

v1.34.5

v1.35.2

k8s-openapi-codegen-common

No changes.

k8s-openapi-derive

No changes except to bump the k8s-openapi-codegen-common dependency to the new version.

v0.27.0

k8s-openapi

... (truncated)

Changelog

Sourced from k8s-openapi's changelog.

v0.28.0 (2026-06-14)

k8s-openapi

BREAKING CHANGE: Added support for Kubernetes 1.36 under the v1_36 feature.

BREAKING CHANGE: Dropped support for Kubernetes 1.31.

FEATURE: schemars v0.8 support has been restored under the schemars08 feature flag. This can be enabled independently of the existing schemars feature that enables schemars v1 support.

FEATURE: StatefulSetSpec::volume_claim_templates field now uses a map merge strategy using its .metadata.name as the key.

Corresponding Kubernetes API server versions:

v1.32.13

v1.33.13

v1.34.9

v1.35.6

v1.36.2

k8s-openapi-codegen-common

FEATURE: schemars v0.8 support has been restored via a new parameter to fn run().

k8s-openapi-derive

FEATURE: schemars v0.8 support has been restored via a new #[custom_resource_definition(generate_schema08)] attr.

v0.27.1 (2026-03-05)

k8s-openapi

BUGFIX: apimachinery::pkg::api::resource::Quantity now supports deserializing from a JSON floating point literal as well.

Corresponding Kubernetes API server versions:

v1.31.14

v1.32.13

v1.33.9

v1.34.5

v1.35.2

k8s-openapi-codegen-common

No changes.

k8s-openapi-derive

... (truncated)

Commits

b2c839b v0.28.0
ebea539 Update to v1.33.13, v1.34.9, v1.35.6, v1.36.2
b7acde4 Restore schemars 0.8 support.
366b480 Update kind to v0.32.0
f1b5881 Update to v1.33.12, v1.34.8, v1.35.5, v1.36.1
8a891b9 Add v1.36 and drop v1.31
bcd3499 Fix StatefulSet::volumeClaimTemplates to deep merge by name.
654a839 Update to v1.33.11, v1.34.7, v1.35.4
eda35ab Update to v1.33.10, v1.34.6, v1.35.3
2870d37 v0.27.1
Additional commits viewable in compare view

Updates kube-client from 1.1.0 to 4.0.0

Release notes

Sourced from kube-client's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube-client's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

b4f0cc4 re-hook cel feature and move dev-dep pin
163ade1 unhook dev-dep temporarily
2a14dec release 4.0.0
2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
3dd76bc bump k8s-openapi to 0.28 (#2009)
60ffe61 chore: group cel into the just hack feature-powerset (#2006)
c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
Additional commits viewable in compare view

Updates kube-core from 1.1.0 to 4.0.0

Release notes

Sourced from kube-core's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube-core's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

b4f0cc4 re-hook cel feature and move dev-dep pin
163ade1 unhook dev-dep temporarily
2a14dec release 4.0.0
2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
3dd76bc bump k8s-openapi to 0.28 (#2009)
60ffe61 chore: group cel into the just hack feature-powerset (#2006)
c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
Additional commits viewable in compare view

Updates kube-runtime from 1.1.0 to 4.0.0

Release notes

Sourced from kube-runtime's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube-runtime's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

b4f0cc4 re-hook cel feature and move dev-dep pin
163ade1 unhook dev-dep temporarily
2a14dec release 4.0.0
2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
3dd76bc bump k8s-openapi to 0.28 (#2009)
60ffe61 chore: group cel into the just hack feature-powerset (#2006)
c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
Additional commits viewable in compare view

Updates kube from 1.1.0 to 4.0.0

Release notes

Sourced from kube's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

b4f0cc4 re-hook cel feature and move dev-dep pin
163ade1 unhook dev-dep temporarily
2a14dec release 4.0.0
2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
3dd76bc bump k8s-openapi to 0.28 (#2009)
60ffe61 chore: group cel into the just hack feature-powerset (#2006)
c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
Additional commits viewable in compare view

Updates kube-derive from 1.1.0 to 4.0.0

Release notes

Sourced from kube-derive's releases.

4.0.0

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Changelog

Sourced from kube-derive's changelog.

4.0.0 / 2026-06-16

New Major

As per the release schedule to match up with the latest Kubernetes ハル release. Lots of fixes and improvements. Thanks to everyone who contributed!

Kubernetes v1_36 support via k8s-openapi 0.28

Please upgrade k8s-openapi along with kube to avoid conflicts.

CEL Validation

A new optional crate kube-cel is being re-exported through kube::core::cel via kube-rs/kube#1954

Kubernetes CRDs support CEL validation rules via x-kubernetes-validations, and were supported from 3.0 via KubeSchema, but these rules could only be evaluated server-side by the API server.

The new crate allows evaluating these rules locally using rules matching the upstream Kubernetes CEL libraries.

While low-level, a higher-level CEL validator integrates with CustomResource via #[kube(cel)] from kube-rs/kube#2011 and can be used as;
#[derive(CustomResource, Serialize, Deserialize, Clone, KubeSchema)]
#[kube(group = "example.com", version = "v1", kind = "Foo", namespaced)]
#[kube(cel, validation = "self.spec.replicas >= 0")] // cel trigger + validation rule
struct FooSpec { replicas: i32 }
let foo = Foo::new("test", FooSpec { replicas: -1 });
foo.validate_cel()?;                     // new impl; checks creation rules
new_foo.validate_cel_update(&old_foo)?;  // new impl; checks transition rules
See examples/crd_derive_cel.rs for more details.

This is available under the kube/cel feature, courtesy of @doxxx93.

Config

A lot of improvements to config handling;

better error handling of malformed client certs in kube-rs/kube#1966

add missing Kubeconfig fields in kube-rs/kube#1965

Kubeconfig future key compatibility for new fields by adding catch-all other key via kube-rs/kube#1964

deserialization changed from serde-yaml to serde-saphyr to get rid of the long-deprecated dependency. kube-rs/kube#1975

Retry and Timeouts

Better timeout and retry handling to better deal with flaky network conditions, and busy or initializing apiservers.

default global read timeouts has been unset in favor of watcher level timeouts in kube-rs/kube#1945 (see kube-rs/kube#1798 for context)

regular (non-watch) queries now respect the RetryPolicy - now enabled by default in kube-rs/kube#2007.

Client

... (truncated)

Commits

b4f0cc4 re-hook cel feature and move dev-dep pin
163ade1 unhook dev-dep temporarily
2a14dec release 4.0.0
2310a06 feat(derive): client-side CEL validation via #[kube(cel)] / #[x_kube(cel)] (#...
8d61784 Enable RetryPolicy::server_retry by default for Client (#2007)
a5b4f3f Box a large runtime error in ReconcilerErr (#1880)
3dd76bc bump k8s-openapi to 0.28 (#2009)
60ffe61 chore: group cel into the just hack feature-powerset (#2006)
c261d78 deps: bump kube-cel to 0.6.1 (validation surface flattened) (#2005)
6c26657 refactor(runtime): rename Store::state_with/state_filtered per review feedbac...
Additional commits viewable in compare view

Bumps the kube group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [k8s-openapi](https://github.com/Arnavion/k8s-openapi) | `0.25.0` | `0.28.0` | | [kube-client](https://github.com/kube-rs/kube) | `1.1.0` | `4.0.0` | | [kube-core](https://github.com/kube-rs/kube) | `1.1.0` | `4.0.0` | | [kube-runtime](https://github.com/kube-rs/kube) | `1.1.0` | `4.0.0` | | [kube](https://github.com/kube-rs/kube) | `1.1.0` | `4.0.0` | Updates `k8s-openapi` from 0.25.0 to 0.28.0 - [Release notes](https://github.com/Arnavion/k8s-openapi/releases) - [Changelog](https://github.com/Arnavion/k8s-openapi/blob/master/CHANGELOG.md) - [Commits](Arnavion/k8s-openapi@v0.25.0...v0.28.0) Updates `kube-client` from 1.1.0 to 4.0.0 - [Release notes](https://github.com/kube-rs/kube/releases) - [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md) - [Commits](kube-rs/kube@1.1.0...4.0.0) Updates `kube-core` from 1.1.0 to 4.0.0 - [Release notes](https://github.com/kube-rs/kube/releases) - [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md) - [Commits](kube-rs/kube@1.1.0...4.0.0) Updates `kube-runtime` from 1.1.0 to 4.0.0 - [Release notes](https://github.com/kube-rs/kube/releases) - [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md) - [Commits](kube-rs/kube@1.1.0...4.0.0) Updates `kube` from 1.1.0 to 4.0.0 - [Release notes](https://github.com/kube-rs/kube/releases) - [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md) - [Commits](kube-rs/kube@1.1.0...4.0.0) Updates `kube-derive` from 1.1.0 to 4.0.0 - [Release notes](https://github.com/kube-rs/kube/releases) - [Changelog](https://github.com/kube-rs/kube/blob/main/CHANGELOG.md) - [Commits](kube-rs/kube@1.1.0...4.0.0) --- updated-dependencies: - dependency-name: k8s-openapi dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: kube - dependency-name: kube dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: kube - dependency-name: kube-client dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: kube - dependency-name: kube-core dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: kube - dependency-name: kube-derive dependency-version: 4.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: kube - dependency-name: kube-runtime dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: kube ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 8, 2026

dependabot Bot force-pushed the dependabot/cargo/kube-3eb8181556 branch from cb1c992 to d619538 Compare July 8, 2026 15:24

cratelyn marked this pull request as draft July 8, 2026 15:46

dependabot Bot force-pushed the dependabot/cargo/kube-3eb8181556 branch from d619538 to 8eddb45 Compare July 9, 2026 10:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the kube group across 1 directory with 6 updates#15

build(deps): bump the kube group across 1 directory with 6 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/kube-3eb8181556

dependabot Bot commented on behalf of github Jul 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.28.0

k8s-openapi

k8s-openapi-codegen-common

k8s-openapi-derive

v0.27.1

k8s-openapi

k8s-openapi-codegen-common

k8s-openapi-derive

v0.27.0

k8s-openapi

v0.28.0 (2026-06-14)

k8s-openapi

k8s-openapi-codegen-common

k8s-openapi-derive

v0.27.1 (2026-03-05)

k8s-openapi

k8s-openapi-codegen-common

k8s-openapi-derive

4.0.0

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0 / 2026-06-16

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0 / 2026-06-16

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0 / 2026-06-16

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0 / 2026-06-16

New Major

Kubernetes v1_36 support via k8s-openapi 0.28

CEL Validation

Config

Retry and Timeouts

Client

4.0.0

New Major

dependabot Bot commented on behalf of github Jul 8, 2026 •

edited

Loading

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28

Kubernetes `v1_36` support via k8s-openapi 0.28