Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 14, 2025

Bumps sigs.k8s.io/kustomize/kyaml from 0.17.0 to 0.20.0.

Release notes

Sourced from sigs.k8s.io/kustomize/kyaml's releases.

api/v0.20.0

#5630: Add static value source for replacement #5771: fix: Allow patches with empty files with multiple newlines or comments #5846: fix: Get version from the BuildInfo.Main.Version if not found in deps and build flag #5847: replace deplecated package github.com/google/shlex with github.com/carapace-sh/carapace-shlex #5859: fix: Don't panic on multiple $patch: delete strategic merge patches in a single patch file #5865: feat(helm): allow the use of devel alias for helmcharts #5873: Bump to github.com/spf13/viper v1.20.0 #5877: fix: make private one field in replacements transformer struct that had a missing JSON tag #5882: Set Git messages to English for TestRemoteLoad_LocalProtocol #5921: feat: Add suport for Image Volumes #5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3 #5934: Update kyaml to v0.20.0

cmd/config/v0.20.0

#5873: Bump to github.com/spf13/viper v1.20.0 #5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3 #5934: Update kyaml to v0.20.0

kyaml/v0.20.0

#5316: feat: add exec-plugin argument and environment support #5873: Bump to github.com/spf13/viper v1.20.0 #5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3

api/v0.19.0

Announce

This release introduces a unified internal package version (v0.19.0) across the entire kustomize repository. ref. kubernetes-sigs/kustomize#5800

Chore

#5810: Better error message on undefined loader behavior.

Dependencies

#5825: Update to latest kube-opeapi to drop govalidator dependency #5830: downgrade go-difflib and go-spew to tagged releases #5837: Update kyaml to v0.19.0

cmd/config/v0.19.0

Caution

This release of cmd/config module skipped a few versions(v0.15.0 -> v0.19.0) to unify each pkg version in the kustomize repo. ref. kubernetes-sigs/kustomize#5800

Announce

This release introduces a unified internal package version (v0.19.0) across the entire kustomize repository.

Dependencies

... (truncated)

Commits
  • b1bfac4 Merge pull request #5935 from koba1t/pinToCmdConfig
  • 40d1f35 Update cmd/config to v0.20.0
  • 1a51592 Merge pull request #5934 from koba1t/pinToKyaml
  • f54b2b4 Update kyaml to v0.20.0
  • 03ae5c9 Merge pull request #5846 from dmvolod/issue-5845-fix-version
  • 0fe722e Merge pull request #5931 from dims/drop-usage-of-forked-copies-of-goyaml.v2-a...
  • a7703f6 Drop usage of forked copies of goyaml.v2 and goyaml.v3
  • ba617e5 Merge pull request #5921 from ThisIsQasim/imagevolume
  • 7558804 Merge pull request #5918 from kubernetes-sigs/dependabot/github_actions/joela...
  • 832f873 Merge pull request #5927 from kubernetes-sigs/dependabot/go_modules/hack/gith...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) from 0.17.0 to 0.20.0.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.17.0...api/v0.20.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 14, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 28, 2025

A newer version of sigs.k8s.io/kustomize/kyaml exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 13, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/go_modules/sigs.k8s.io/kustomize/kyaml-0.20.0 branch December 13, 2025 02:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants