Update module sigs.k8s.io/cluster-api to v1.11.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sigs.k8s.io/cluster-api	v1.1.4 -> v1.11.3

---

Release Notes

kubernetes-sigs/cluster-api (sigs.k8s.io/cluster-api)

v1.11.3

Compare Source

v1.11.2

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.30.x -> v1.34.x
• Workload Cluster: v1.28.x -> v1.34.x

More information about version support can be found here

Changes since v1.11.1

📈 Overview

• 6 new commits merged
• 1 feature addition ✨
• 1 bug fixed 🐛

✨ New Features

• KCP: Bump coredns/corefile-migration to v1.0.28 (#​12750)

🐛 Bug Fixes

• clusterctl: Verify providers need upgrade before applying (#​12768)

🌱 Others

• Autoscaling: Bump autoscaler in e2e tests to v1.33.1 (#​12792)
• clusterctl: Add Metal3 as an IPAMProvider (#​12760)
• Dependency: Bump go to v1.24.7 (#​12735)

📖 Additionally, there has been 1 contribution to our documentation and book. (#​12780)

Dependencies

Added

Nothing has changed.

Changed

• github.com/coredns/corefile-migration: v1.0.27 → v1.0.28

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.11.1

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.30.x -> v1.34.x
• Workload Cluster: v1.28.x -> v1.34.x

More information about version support can be found here

Changes since v1.11.0

📈 Overview

• 22 new commits merged
• 3 feature additions ✨
• 8 bugs fixed 🐛

✨ New Features

• CI: Bump autoscaler to a9cb59f (#​12707)
• CI: Bump Kubernetes in tests to v1.34.0 and claim support for v1.34 (#​12705)
• e2e: Bump Kubernetes version used for testing to v1.34.0-rc.2 (#​12659)

🐛 Bug Fixes

• API: Only try to convert infraRefs if they are set (#​12693)
• API: Register conversion funcs in schemes (#​12697)
• CABPK: Always use latest apiVersion when getting owner of KubeadmConfig in CABPK (#​12689)
• ClusterClass: Ensure holder field path in GeneratePatchRequest is set based on contract (#​12691)
• ClusterClass: Fix field paths in ClusterClass compatibility validation errors (#​12670)
• ClusterClass: Stop adding conversion-data annotation to Cluster object (#​12721)
• e2e/CAPD: Remove finalizers during deletion if ownerRef was never set (#​12678)
• Testing: Fix KubeadmConfig fuzz test flake (#​12682)

🌱 Others

• clusterctl: Allow metadata.yaml's Kind to be empty (#​12715)
• Dependency: Bump github.com/go-viper/mapstructure/v2 to fix CVE (#​12680)
• Dependency: Bump to envtest v1.34.0 (#​12706)
• e2e: Bump to kind v0.30.0 (#​12708)
• e2e: Get kind mgmt cluster logs in clusterctl upgrade test (#​12688)
• Misc: Log version and git commit on controller start (#​12696)
• Release/clusterctl: Add CAPRKE2 to release tool’s issue-opening providers list (#​12717)

📖 Additionally, there have been 4 contributions to our documentation and book. (#​12667, #​12668, #​12671, #​12674)

Dependencies

Added

Nothing has changed.

Changed

• github.com/go-viper/mapstructure/v2: v2.3.0 → v2.4.0

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.11.0

Compare Source

👌 Kubernetes version support

• Management Cluster: v1.30.x -> v1.33.x
• Workload Cluster: v1.28.x -> v1.33.x

More information about version support can be found here

Highlights

• Bumped to Go 1.24, controller-runtime v0.21, k8s.io/* v0.33, controller-gen v0.18 (also moved to sigs.k8s.io/randfill) (#​12191)
• v1beta2 API version has been introduced and considering the awesome amount of improvements it marks an important
  step in the journey towards graduating our API to v1.
  • Accordingly there is now a new v1beta2 version of our contract for providers.
  • Improve status:
    • The transition to the new K8s aligned conditions using metav1.Conditions types and the new condition semantic
      has been completed.
    • Replica counters are now consistent with new conditions and across all resources; new replica counters have been added at cluster level.
    • Semantic of contract fields in status have been improved and are now consistent across all resources.
    • The confusing FailureReason and FailureMessage fields have been dropped.
  • Support CC across namespaces: API changes planned for this feature have been implemented.
  • Improve object references:
    • Unnecessary fields have been dropped from object reference.
    • Object references are now GitOps friendly (API version is not overwritten anymore by controllers).
  • KubeadmConfig and KubeadmControlPlane APIs have been aligned with kubeadm v1beta4 API.
    • Additionally, fields inferred from top level objects have been removed, thus getting rid of a common source of confusion/issues.
• Compliance with K8s API guidelines:
  • Thanks to the adoption of the KAL linter compliance with K8s API guidelines has been greatly improved.
  • All Duration fields are now represented as *int32 fields with units being part of the field name.
  • All bool fields have been changed to *bool to preserve user intent.
  • Extensive work has been done to ensure required and optional is explicitly set in the API, and that
    both serialization and validation works accordingly:
    • Stop rendering empty structs (review of all occurrences of omitempty and introduction of omitzero)
    • Do not allow "" when it is not semantically different from value not set (either you have to provide a non-empty string value or not set the field at all).
    • Do not allow 0 when it is not semantically different from value not set (either you have to provide a non-0 int value or not set the field at all).
    • Do not allow {} when it is not semantically different from value not set (either you have to set at least one property in the object or not set the field at all).
    • Do not allow [] when it is not semantically different from value not set (either you have to set at least one item in the list or not set the field at all).
    • Ensure validation for all enum types.
  • Missing list markers have been added for SSA.
  • Drop unnecessary pointers:
    • After fixing required and optional according to K8s API guidelines, extensive work has been done to
      drop unnecessary pointers thus improving the usability of the API's Go structs.
  • Avoid embedding structs: Coupling between API types has been reduced by reducing the usage of embedded structs.
  • Extensive work has been done to improve consistency across all resources, e.g.:
    • Fields for Machine deletion are under a new deletion struct in all resources.
    • Settings about rollout have been logically grouped in all resources.
    • Settings about health checks and remediation have been logically grouped in all resources.
  • Missing validations have been added where required.
  • Tech debt has been reduced by dropping deprecated fields.

• ClusterClass: Fix continuous reconciles because of apiVersion differences in Cluster topology controller (#​12341)
• KCP/CABPK: Add CertificateValidityPeriod and CACertificateValidityPeriod to KubeadmConfig (#​12335)
• KCP: Fix timeout handling in GetAPIServerCertificateExpiry and DialContext (#​12554)
• Machine: fallback to InfraMachine providerID during deletion if Machine providerID is not set (#​11985)
• Runtime SDK:
  • Optimize size of Runtime Hook requests (#​12462)
  • Add mTLS support to Runtime Extension server and client (#​12517)
• Improved e2e test coverage, e.g.:
  • additional checks that resourceVersion stays stable after tests and that conditions are healthy (#​12546 #​12111)
  • test coverage for scaling from/to 0 with CAPD & cluster-autoscaler (#​12572)
• New providers in clusterctl: Scaleway (#​12357), cdk8s (#​12332)

See Cluster API v1.10 compared to v1.11 for more details

Notes for workload cluster upgrade to Kubernetes v1.34 with KCP

• Context: Kubernetes/kubeadm <=> etcd compatibility:
  • kubeadm v1.33 only supports etcd v3.5 for Kubernetes v1.33
  • kubeadm v1.34 only supports etcd v3.6 for Kubernetes v1.34
• The upgrade to etcd v3.6 requires etcd >= v3.5.20 (https://etcd.io/blog/2025/upgrade_from_3.5_to_3.6_issue/)
• Accordingly, when upgrading from Kubernetes v1.33 to v1.34:
  • ensure etcd >= v3.5.20 is used with Kubernetes v1.33 before the upgrade
  • upgrade to Kubernetes v1.34 and etcd v3.6 at the same time

Deprecation and Removals Warning

• Cluster: Remove deprecated index ByClusterClassName, ClusterByClusterClassClassName and ClusterClassNameField (#​12269)
• ClusterClass: Remove deprecated ClusterVariable.definitionFrom field (#​12202)
• ClusterClass: Remove deprecated Cluster.spec.topology.rolloutAfter field (#​12268)
• ClusterClass: Remove deprecated ClusterCacheTracker and corresponding types (#​12270)
• clusterctl: Remove deprecated clusterctl alpha topology plan command (#​12283)
• ClusterResourceSet: Remove deprecated ClusterResourceSetBinding.DeleteBinding method (#​12267)
• MachineDeployment: Removed deprecated revisionHistory (#​12274)
• MachineDeployment: Remove deprecated spec.progressDeadlineSeconds (#​12232)
• KCP/CABPK: Remove deprecated KubeadmConfig useExperimentalRetryJoin (#​12234)
• API: Deprecate v1alpha1 & v1beta1 API packages (#​12254)

Changes since v1.10.0

📈 Overview

• 360 new commits merged
• 88 breaking changes ⚠️
• 29 feature additions ✨
• 50 bugs fixed 🐛

📝 Proposals

• Core: Update autoscaling from zero enhancement proposal with support for platform-aware autoscale from zero (#​11962)

⚠️ Breaking Changes

• API: Add additional MinProperties & MinItems validation across multiple APIs (#​12538)
• API: Add CAPD v1beta2 types (#​12226)
• API: Add Minimum=0 marker to all MinReadySeconds fields (#​12474)
• API: Add omitempty to required string without zero value (#​12548)
• API: Add omitzero on struct without zero value (#​12550)
• API: Add v1beta2 types (#​12037)
• API: Align Spec fields to optionalfields API conventions (#​12431)
• API: Align Status fields to optionalfields API conventions (#​12435)
• API: Change .status.replicas fields to pointer + omitempty (#​12250)
• API: Change all *metav1.Time fields to metav1.Time (#​12518)
• API: Change bool to *bool for all API types (#​12436)
• API: Change type of *string fields with invalid zero value to string (#​12429)
• API: Change type of int32 fields with valid zero value to *int32 (#​12424)
• API/Conditions: add V1Beta1 suffix and remove V1Beta2 suffix from condition types and reasons in v1beta2 packages (#​12091)
• API: Drop unnecessary fields from contract-versioned object references (#​12356)
• API: Fix required fields linter findings (#​12558)
• API: Improve Cluster CRD Go type (#​12489)
• API: Migrate API to use *Seconds instead of metav1.Duration fields (#​12327)
• API: Move APIs to ./api (#​12262)
• API/Partially revert: Remove DefaulterRemoveUnknownOrOmitableFields mutating webhook option (#​12290)
• API: Promote v1beta2 conditions (#​12066)
• API: Remove DefaulterRemoveUnknownOrOmitableFields mutating webhook option (#​12231)
• API: Remove IPFamily from public APIs (move to CAPD/kind util) (#​12215)
• API: Remove pointers from ClusterClass and Cluster healthCheck fields (#​12525)
• API: Remove pointers from remaining pointer struct fields (#​12545)
• API: Rename namingStrategy => naming, machineNamingStrategy => machineNaming (#​12524)
• API: Restructure strategy fields (#​12506)
• CABPK: Align KubeadmConfig to kubeadm v1beta4 types (#​12282)
• CAPD: Align CAPD conversion to conversion of other providers (#​12481)
• CAPD/Conditions: add V1Beta1 suffix and remove V1Beta2 suffix from condition types and reasons in CAPD v1beta2 packages (#​12393)
• CAPD: Implement v1beta2 contract in CAPD (#​12409)
• CAPD: Keep using v1beta1 condition in CAPD Docker backend (#​12450)
• CAPD: Promote v1beta2 condition in CAPD (#​12362)
• CAPD: Stop using v1beta1 status in CAPD controllers (#​12438)
• CAPD: Update example manifests (#​12480)
• Cluster: Remove deprecated index ByClusterClassName, ClusterByClusterClassClassName and ClusterClassNameField (#​12269)
• ClusterClass: Drop unnecessary fields from ClusterClass template references (#​12358)
• ClusterClass: Move infrastructure namingStrategy field in ClusterClass (#​12216)
• ClusterClass: Remove ClusterVariable.DefinitionFrom field (#​12202)
• ClusterClass: Remove DefaulterRemoveUnknownOrOmitableFields mutating webhook option (again) (#​12404)
• ClusterClass: Remove deprecated Cluster.spec.topology.rolloutAfter field (#​12268)
• ClusterClass: Remove deprecated ClusterCacheTracker and corresponding types (#​12270)
• ClusterClass: Rename deprecated ClusterClass Metadata fields to DeprecatedV1Beta1Metadata (#​12273)
• ClusterClass: Rename runtime extension fields in ClusterClass ExternalPatchDefinition (#​12281)
• ClusterClass: Restructure classRef field in Cluster.spec.topology (#​12235)
• clusterctl: Clusterctl describe defaults to v1beta2 (#​12369)
• clusterctl: Remove clusterctl alpha topology plan (#​12283)
• ClusterResourceSet: Change ClusterResourceSetBinding Bindings field from []*ResourceSetBinding to []ResourceSetBinding (#​12476)
• ClusterResourceSet: Make clusterName field in ClusterResourceSetBinding required (#​12276)
• ClusterResourceSet: Remove deprecated ClusterResourceSetBinding.DeleteBinding method (#​12267)
• Conditions: Swap condition packages (#​12086)
• Dependency: Bump to controller-runtime v0.21 / controller-tools v0.18 / k8s.io/* v0.33 / move to randfill (#​12191)
• e2e: Migrate E2E tests to v1beta2 (#​12451)
• e2e/Test/e2e: default to strict field validation & fix unknown field in ClusterClass YAML (#​12501)
• IPAM: Refactor reference types for IPAM (#​12365)
• KCP: KCP tolerates diff not leading to changes on machines (#​12402)
• KCP: Rename LastRemediationStatus.Timestamp to Time in KCP (#​12452)
• Machine: Drop unnecessary fields from Machine status.nodeRef (#​12352)
• MachineDeployment: Drop revisionHistory in MachineDeployment (#​12274)
• MachineDeployment: Remove MD spec.progressDeadlineSeconds (#​12232)
• MachineHealthCheck: Drop unnecessary fields from remediationTemplate references (#​12368)
• MachineHealthCheck: Rename MHC unhealthyConditions to unhealthyNodeConditions (#​12245)
• MachineSet: Make Template in MachineSet & Spec in MachineTemplateSpec required (#​12420)
• API/CAPD: Update ControlPlaneEndpoint InfraCluster contract, align CAPD to infra contracts (#​12465)
• API/Cluster: Add initialization to Cluster status (#​12098)
• API/Control-plane/Bootstrap/KCP/CABPK/Cluster: Implement v1beta2 contract in cluster controller, KCP, CABPK (#​12094)
• API/KCP/CABPK/CI: Enable nomaps linter, Remove unused kubeadm ClusterStatus struct, Migrate Cluster.status.failureDomains to array (#​12083)
• API/Machine: Add initialization to Machine Status (#​12101)
• API/Machine: Move Machine deletion timeout fields into deletion group, move KCP machineTemplate spec fields to machineTemplate.spec (#​12499)
• API/MachinePool: Add initialization to MachinePool Status (#​12102)
• ClusterClass/MachineHealthCheck/Cluster: Restructure MHC fields in MHC, Cluster and ClusterClass CRDs (#​12504)
• clusterctl/Documentation: Remove reference and configurations for Packet (Equinix Metal) (#​12143)
• KCP/CABPK: Change BootstrapToken.Token from *BootstrapTokenString to BootstrapTokenString (#​12565)
• KCP/CABPK: Change envVars fields from []EnvVar to *[]EnvVar (#​12539)
• KCP/CABPK: Change User.PasswdFrom from *PasswdSource to PasswdSource + add omitzero, extend SSA patch helper to handle arrays (#​12560)
• KCP/CABPK: Inline ControlPlaneComponent struct in APIServer / ControllerManager / Scheduler in CABPK (#​12446)
• KCP/CABPK: Remove KubeadmConfig UseExperimentalRetryJoin (#​12234)
• KCP/CABPK: Remove more defaulting from KubeadmConfig/KubeadmConfigTemplate/KCP/KCPTemplate (#​12495)
• KCP/CABPK: Remove redundant fields from CABPK / KCP ClusterConfiguration (#​12319)
• KCP/CABPK: Remove TypeMeta from KubeadmConfigSpec (#​12350)
• KCP/MachineSet/CABPK/CAPD/e2e/Cluster: Cleanup version handling of unsupported Kubernetes releases (#​12303)
• Machine/Cluster: Stop using FailureReason and FailureMessage in controllers (#​12148)
• Machine/MachinePool/MachineSet/MachineDeployment: Add MinReadySeconds to Machine and remove it from MachineDeployment, MachineSet, MachinePool. (#​12153)
• Machine/MachineSet/MachineDeployment/Cluster: Stop using deprecated replica counters in controllers (#​12149)
• MachineSet/MachineDeployment: Use MachineSetDeletePolicy enum in MD & MS API (#​12419)
• Runtime SDK/MachineDeployment: Make DeletePolicy & FailurePolicy enum fields non-pointers (#​12453)
• Runtime SDK: Add v1beta2 API for ExtensionConfig (#​12197)
• Runtime SDK: Change ExtensionConfig handler timeoutSeconds from *int32 to int32 & add Minimum=1 (#​12475)

✨ New Features

• API: Block imports to internal packages in our API + restructure import restrictions (#​12302)
• API: Deprecate v1alpha1 & v1beta1 API packages (#​12254)
• API: Remove pointer, add omitzero & MinProperties for initialization fields/structs (#​12482)
• CAPD: Add scale from/to 0 support for CAPD (#​12591)
• CI: Add conflicting markers linter (#​12569)
• CI: Bump KAL & add the notimestamps linter (#​12520)
• clusterctl: Add Scaleway infrastructure provider to clusterctl (#​12357)
• clusterctl: Adding Addon Provider for cdk8s (CAAPC) to cluster-api (#​12332)
• clusterctl: Clearer diagnostics when provider metadata is missing or repo URL is stale (#​12238)
• clusterctl: Validate provider metadata (#​12242)
• Dependency: Bump controller-tools v0.17.3, conversion-gen v0.33.0 (#​12129)
• Dependency: Complete bump to Kubernetes v1.33 (#​12206)
• Dependency: Update KUBEBUILDER_ENVTEST_KUBERNETES_VERSION (#​12130)
• e2e: Bump Kubernetes version used for testing to v1.34.0-beta.0 (#​12516)
• e2e: Bump Kubernetes version used for testing to v1.34.0-rc.1 (#​12625)
• e2e: From 1.10 use GetStableReleaseOfMinor instead of GetLatestReleaseOfMinor (#​12118)
• KCP: Bump corefile-migration to v1.0.27 (#​12639)
• Machine: Implement v1beta2 contract in Machine controller (#​12038)
• MachinePool/Feat: set new replica fields for machine pools (#​12528)
• API/CI: Enable ssatags KAL linter (#​12470)
• KCP/CABPK/CI: Bump KAL to pick up latest requiredfields linter, add Min/MaxLength to BootstrapToken (#​12604)
• KCP/CABPK: Add CertificateValidityPeriod and CACertificateValidityPeriod to KubeadmConfig (#​12335)
• KCP/CABPK: Reintroduce KCP/CABPK ClusterConfiguration controlPlaneEndpoint (#​12423)
• KCP/CABPK: Stop requiring init or cluster configuration for first CP machine (#​12540)
• Runtime SDK/ClusterClass: Extend Cluster builtin to include metadata (#​12014)
• Runtime SDK/ClusterClass: Optimize size of runtime hook requests (#​12462)
• Runtime SDK: Add mTLS support to runtime extension server and client (#​12517)
• Runtime SDK: Extend cluster builtin to include classNamespace (#​12050)
• Testing: Bump Kubernetes in tests to v1.33.0 and claim support for v1.33 (#​12104)

🐛 Bug Fixes

• API: Ensure all pointer status fields are dereferenced correctly (#​12412)
• Bootstrap: Make joinConfiguration.discovery.bootstrapToken.token optional (#​12107)
• Bootstrap: Relax minLength for bootstrap.dataSecretName to 0 (#​12164)
• CABPK: Fix rendering of .Append = false in CABPK (#​12437)
• CABPK: Fix rendering of ntp.enabled & users.inactive *bool values in cloud init (#​12394)
• CABPK: Increase ignition additionalConfig maxSize from 10 to 32 KB (#​12222)
• CABPK: Make KubeadmConfig FileSystem.Label optional (#​12019)
• CAPD: Fix IPv6 CAPD e2e test (#​12488)
• CAPD: Fix worker machine count in CAPD template (#​12028)
• CAPD: Run CAPD conversion tests in CI (#​12588)
• CAPIM: Fix CAPD in-memory templates (#​12013)
• CAPIM/Mux: fix error check (#​12230)
• CI: Fix conversion-verifier and fix findings (#​12349)
• CI: Fixing failed to install kind for e2e tests (#​12361)
• ClusterClass: Fix continuous reconciles because of apiVersion differences in Cluster topology controller (#​12341)
• clusterctl: Accept upper case version (#​12237)
• clusterctl: Add missing API version to NS object (#​12200)
• clusterctl: Clusterctl upgrade hangs for a time on CRD migration when new version contains a number of new CRDs (#​11984)
• ClusterResourceSet: Fix potential panic if ClusterResourceSetStrategy is not defined or incorrect (#​12096)
• Conditions: Fix condition handling during controller start (#​12536)
• e2e: Bump cluster-autoscaler to v1.33, adjust RBAC, pin apiVersion to v1beta1 (#​12502)
• e2e: Fix autoscaler e2e test flake (#​12627)
• e2e: Fix Available/Ready checks on E2E test (#​12549)
• e2e: Fix e2e tests by fixing the etcd tag (#​12523)
• e2e: Stop overwriting ExtraPortMappings if WithDockerSockMount option is used (#​12012)
• IPAM: Enable conversion in CRDs (#​12198)
• IPAM: Revert condition func changes for IPAddressClaim v1beta1 (#​12223)
• KCP: Allow transition of KubeadmControlPlaneTemplate from defaulted rolloutStrategy to unset (#​12467)
• KCP: Fix ControlPlaneComponentHealthCheckSeconds validation in KubeadmConfigSpec.Validate (#​12624)
• KCP: Fix conversion issue in KubeadmControlPlaneTemplate with rolloutStrategy.type (#​12622)
• KCP: Fix nil pointer in conversion (#​12292)
• KCP: Fix rollout when init configuration in KCP is empty (#​12344)
• KCP: Fix timeout handling in GetAPIServerCertificateExpiry and DialContext (#​12554)
• Machine/Machine deletion: fallback to InfraMachine providerID if Machine providerID is not set (#​11985)
• MachineDeployment: Bug fix to set machinedeployment AvailableReplicas (#​12410)
• MachineDeployment: Fix second rolling update for MD rolloutAfter (#​12261)
• MachineSet: Fix v1beta1 MachinesReady condition on MachineSet (#​12535)
• API/ClusterClass: Fix MaxLength of worker topology Name fields (#​12072)
• ClusterClass/MachinePool: Fix MP error in desired state calculation during Cluster creation (#​12621)
• Dependency/CI: Upgrade golangci-lint to v2.1.0 (#​12170)
• Testing/CI: Fix the condition to check whether cluster has v1beta2 conditions (#​12100)
• Runtime SDK: Export ExtensionConfig webhook (#​12599)
• Testing: Fix flakes in TestAPIAndWebhookChanges unit test (#​12526)
• Testing: Fix flaky TestFuzzyConversion (Cluster) test (#​12630)
• Testing: Fix flaky TestReconcileMachinePhases unit test (#​12632)
• Testing: Fix flaky TestReconcileState unit test (#​12633)
• Testing: Fix race condition in InMemoryMachine controller tests (#​12347)
• Testing: Fix Test_ValidateCluster unit tests for mink8s (#​12564)
• util/CRD migration: Fix cases where update validation fails (#​11991)
• util: Fix typo for WithOwnedV1beta1Conditions to WithOwnedV1Beta1Conditions (#​12218)

🌱 Others

• API: Drop hardcoded v1beta1 references (#​12027)
• API: Enable optionalfields linter and fix remaining findings (#​12299)
• API: Move internal/apis to internal/api (#​12296)
• API: Remove old godoc comment, remove unnecessary cast in KCP (#​12479)
• API: Remove unused List conversion funcs (#​12054)
• API: Set minimum=1 on ObservedGeneration and KubeadmConfig APIEndpoint bindPort (#​12417)
• API: Set print columns for v1beta2 types (#​12534)
• CAPD: Ensure CAPD v1beta1 API package only imports core v1beta1 (#​12405)
• CAPIM/Mux: Ignore net.ErrClosed error during listener close & server shutdown (#​12212)
• CI: Add govulncheck to ensure vulnerability (#​12108)
• CI: Bump E2E to Kubernetes v1.33.0-rc.1 (#​12099)
• CI: Bump golangci-lint v2 (#​12088)
• CI: Bump KAL and remove enum exclude (#​12500)
• CI: Bump KAL to 2025060, cleanup excludes, fix IPAM prefix field, add MaxItems to Machine.status.addresses (#​12326)
• CI: Bump KAL to 2025062 + enable uniquemarkers linter (#​12427)
• CI/Chore: Update golangci-lint to v2.3.0 (#​12573)
• CI: Enable duplicatemarkers linter (#​12228)
• CI: Enable statusoptional linter (#​12229)
• CI: Fix make generate-go-openapi if parent directory name does not equal cluster-api (#​12461)
• CI: Remove govulncheck from the verify target (#​12348)
• CI: Restructure excludes in KAL linter config (#​12445)
• CI: Switch plugin to kube-api-linter (#​12089)
• CI: Update version matrix for github workflows for release-1.10 (#​11992)
• CI: Use release artifacts for CAPI v1.10 (#​12147)
• Cluster: Add validation for Cluster spec.controlPlaneRef, spec.infrastructureRef and spec.topology (#​12454)
• Cluster: Ensure Cluster.status.failureDomains are alphabetically sorted (#​12416)
• Cluster: Improve error message if rebase fails because target ClusterClass is not reconciled (#​12415)
• ClusterClass: Add DropEmptyStruct to ssa patch helper (#​12442)
• ClusterClass: Extend topology upgrade test: add bool removal test case (#​12484)
• ClusterClass: Improve CC RefVersionsUpToDate condition message (#​12472)
• ClusterClass: Improve validation of worker topology names in Cluster resource (#​12561)
• ClusterClass: Improve webhook output to include the names of the clusters blocking a deletion (#​12060)
• ClusterClass: Make infrastructure and controlPlane required in ClusterClass (#​12444)
• clusterctl: Add filename to clusterctl error about bad YAML (#​12189)
• clusterctl: Add support for compatible contracts to clusterctl (#​12018)
• clusterctl: Bump cert-manager to v1.17.1 (#​12044)
• clusterctl: Bump cert-manager to v1.17.2 (#​12210)
• clusterctl: Bump cert-manager to v1.18.0 (#​12342)
• clusterctl: Bump cert-manager to v1.18.1 (#​12378)
• clusterctl: Bump cert-manager to v1.18.2 (#​12478)
• clusterctl: Change k0smotron repo location (#​12225)
• clusterctl: Cleanup clusterctl tests assets (#​12510)
• clusterctl: Enforce skip upgrade policy in clusterctl (#​12017)
• Community meeting: Add JoelSpeed to approvers (#​12204)
• Conditions: Cleanup v1beta1 updateStatus functions (#​12190)
• Conditions: Drop usage of v1beta1 conditions (#​12109)
• Control-plane: Avoid large number of connection error traces in kubeadm controlplane controller (#​12106)
• Dependency: Bump Go 1.24 (#​12128)
• Dependency: Bump go to v1.23.8 (#​12052)
• Dependency: Bump Go to v1.24.5 (#​12509)
• Dependency: Bump Go to v1.24.6 (#​12615)
• Dependency: Bump kustomize to v5.7.0 (#​12432)
• Dependency: Bump several tool versions in Makefile (#​12433)
• Dependency: Bump sigs.k8s.io/kind to v0.28.0 (#​12243)
• Dependency: Bump sigs.k8s.io/kind to v0.29.0 (#​12257)
• Dependency: Bump to Go v1.24.4, github.com/cloudflare/circl v1.6.1 (#​12351)
• Dependency: Fix CVE-2025-54388 (#​12574)
• Dependency: Update github.com/go-viper/mapstructure/v2 to v2.3.0 (#​12421)
• Devtools: Add KubeVirt support to Tilt dev workflow (#​11697)
• Devtools: Fix Tiltfile (#​12541)
• Devtools/Metrics: use v1beta2 for condition metrics and add metrics for dockercluster devcluster dockermachine devmachine extensionconfig ipaddressclaim and crs (#​12006)
• e2e: Add an option to override custom node image name for kind cluster (#​12186)
• e2e: Add quickstart e2e test with v1beta1 with ClusterClass and RuntimeSDK (#​12590)
• e2e: Add resource version check to clusterctl upgrade tests (#​12546)
• e2e: Add retry for SSA requests against Kubernetes < v1.29 in clusterctl upgrade tests (#​12067)
• e2e: Bump clusterctl_upgrade_test.go main and 1.10 tests to k8s v1.33.0 (#​12193)
• e2e: Bump Kubernetes version used for testing to v1.33.0-rc.0 (#​12073)
• e2e: Fix ResourceVersion flake for MachinePools (#​12552)
• e2e: Improve check for Cluster Available condition in e2e tests (#​12596)
• e2e: Only run DescribeCluster if v1beta2 Cluster CRD is there (#​12279)
• e2e: Print the entire object diff if resource versions are not stable in e2e tests (#​12527)
• e2e: Remove redundant check in verifyV1Beta2ConditionsTrueV1Beta1 (#​12477)
• e2e: Set extraArgs in test extension (#​12557)
• e2e: Skipping test that is failing because of infra issues (#​12496)
• KCP: Add --etcd-client-log-level flag to KCP (#​12271)
• KCP: Allow unsetting etcd.local, etcd.external and dns (#​12065)
• KCP: Bump corefile-migration library to v1.0.26 (#​12058)
• KCP: Fix typo in forward etcd leadership error message (#​12056)
• Logging: Reduce noisy logs (#​12626)
• Misc: Remove jackfrancis from reviewers (#​12134)
• KCP/CABPK/KCP: Set MinItems=1 on ExternalEtcd.Endpoints (#​12411)
• KCP/CABPK: Remove unused updateClusterStatus (#​12295)
• KCP/CABPK: Stop using unsafe for EnvVar conversion (#​12631)
• KCP/MachineSet/MachineHealthCheck: Remove explicit defaulting of MS deletePolicy, MHC maxUnhealthy, KCPTemplate rolloutStrategy (#​12464)
• MachinePool/MachineSet/MachineDeployment: Add validation to ensure ClusterName fields are equal in MD/MS/MP (#​12447)
• Testing/CI/e2e: Add checker to validate conditions for v1beta2 (#​12111)
• Testing/CI: Fix e2e test capi-e2e-release-1.8 (#​12379)
• Testing/CI: Fix flaky test in extensionconfig_controller_test.go (#​12386)
• Release: Add validation for PREVIOUS_RELEASE_TAG in release-notes-tool (#​12380)
• Release: Postpone v1.11 code freeze by one week (#​12498)
• Release: Prepare main for v1.11 development (#​12000)
• Release: Use github.base_ref in markdown-link-check (#​12034)
• Runtime SDK: Block dependencies to internal packages for the RX implementation (#​12297)
• Runtime SDK: Fix lifecycle hooks conversions (#​12507)
• Runtime SDK: Stop registering API types in the runtime extension scheme (#​12042)
• Testing: Add test/framework/* tests in CI (#​12469)
• Testing/Framework: Watch logs from init containers (#​12208)
• Testing: Release Notes Generator - Test cases for main.go and ref.go (#​11882)
• Testing: Test changes planned to comply optionalrequired linter (#​12414)
• util: Move contract version & GetCompatibleVersions to contract package (#​12032)
• util: Recover v1.10 util packages for conditions, patch and paused to util/deprecated/v1beta1 for provider migrations (#​12224)

📖 Additionally, there have been 51 contributions to our documentation and book. (#​11029, #​11998, [#​12004](https://redirect.github.com/kubernetes-sigs/cluster-api/is

---

Configuration

📅 Schedule: Branch creation - "after 11pm every weekday,before 7am every weekday,every weekend" in timezone Europe/Brussels, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: downloading k8s.io/apimachinery v0.29.3
go: downloading sigs.k8s.io/controller-runtime v0.17.3
go: downloading github.com/ipfs/go-log/v2 v2.5.1
go: downloading github.com/ipfs/go-log v1.0.5
go: downloading github.com/mudler/edgevpn v0.19.2
go: downloading github.com/mudler/go-nodepair v0.0.0-20221223092639-ba399a66fdfb
go: downloading github.com/pkg/errors v0.9.1
go: downloading k8s.io/api v0.29.3
go: downloading k8s.io/client-go v0.29.3
go: downloading sigs.k8s.io/cluster-api v1.7.1
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/onsi/gomega v1.32.0
go: downloading github.com/onsi/ginkgo/v2 v2.17.1
go: downloading github.com/rancher-sandbox/ele-testhelpers v0.0.0-20220606123621-c453b2009412
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/google/gofuzz v1.2.0
go: downloading k8s.io/klog/v2 v2.110.1
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.4.1
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading go.uber.org/multierr v1.11.0
go: downloading go.uber.org/zap v1.26.0
go: downloading github.com/libp2p/go-libp2p v0.23.4
go: downloading github.com/libp2p/go-libp2p-kad-dht v0.20.0
go: downloading github.com/mudler/water v0.0.0-20221010214108-8c7313014ce0
go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible
go: downloading github.com/multiformats/go-multiaddr v0.7.0
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading github.com/hashicorp/golang-lru v0.5.4
go: downloading github.com/miekg/dns v1.1.50
go: downloading github.com/evanphx/json-patch v5.7.0+incompatible
go: downloading github.com/evanphx/json-patch/v5 v5.9.0
go: downloading github.com/go-logr/logr v1.4.1
go: downloading github.com/google/go-cmp v0.6.0
go: downloading golang.org/x/net v0.23.0
go: downloading k8s.io/utils v0.0.0-20231127182322-b307cd553661
go: downloading k8s.io/apiextensions-apiserver v0.29.3
go: downloading sigs.k8s.io/yaml v1.4.0
go: downloading github.com/go-logr/zapr v1.3.0
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
go: downloading golang.org/x/sys v0.18.0
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/opentracing/opentracing-go v1.2.0
go: downloading github.com/google/gopacket v1.1.19
go: downloading github.com/google/uuid v1.4.0
go: downloading github.com/ipfs/go-cid v0.3.2
go: downloading github.com/ipfs/go-datastore v0.6.0
go: downloading github.com/ipfs/go-ipfs-util v0.0.2
go: downloading github.com/jbenet/goprocess v0.1.4
go: downloading github.com/libp2p/go-libp2p-kbucket v0.5.0
go: downloading github.com/libp2p/go-libp2p-record v0.2.0
go: downloading github.com/libp2p/go-msgio v0.2.0
go: downloading github.com/libp2p/go-netroute v0.2.0
go: downloading github.com/multiformats/go-base32 v0.1.0
go: downloading github.com/multiformats/go-multihash v0.2.1
go: downloading go.opencensus.io v0.23.0
go: downloading github.com/multiformats/go-multiaddr-dns v0.3.1
go: downloading github.com/mr-tron/base58 v1.2.0
go: downloading github.com/multiformats/go-multicodec v0.6.0
go: downloading github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58
go: downloading github.com/libp2p/go-mplex v0.7.0
go: downloading github.com/benbjohnson/clock v1.3.0
go: downloading github.com/libp2p/go-yamux/v4 v4.0.0
go: downloading golang.org/x/sync v0.6.0
go: downloading github.com/raulk/go-watchdog v1.3.0
go: downloading github.com/creachadair/otp v0.4.0
go: downloading github.com/songgao/packets v0.0.0-20160404182456-549a10cd4091
go: downloading github.com/vishvananda/netlink v1.1.0
go: downloading golang.zx2c4.com/wireguard/windows v0.5.3
go: downloading github.com/google/btree v1.1.2
go: downloading golang.zx2c4.com/wireguard v0.0.0-20220703234212-c31a7b1ab478
go: downloading github.com/decred/dcrd/dcrec/secp256k1/v4 v4.1.0
go: downloading github.com/libp2p/go-openssl v0.1.0
go: downloading github.com/minio/sha256-simd v1.0.0
go: downloading github.com/libp2p/go-libp2p-pubsub v0.8.2
go: downloading github.com/c-robinson/iplib v1.0.3
go: downloading github.com/cenkalti/backoff/v4 v4.2.1
go: downloading github.com/multiformats/go-multibase v0.1.1
go: downloading github.com/multiformats/go-varint v0.0.6
go: downloading github.com/golang/protobuf v1.5.4
go: downloading github.com/google/gnostic-models v0.6.8
go: downloading golang.org/x/time v0.5.0
go: downloading k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00
go: downloading github.com/blang/semver v3.5.1+incompatible
go: downloading golang.org/x/tools v0.17.0
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading golang.org/x/term v0.18.0
go: downloading golang.org/x/oauth2 v0.18.0
go: downloading github.com/nxadm/tail v1.4.8
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading github.com/ipfs/go-ipns v0.2.0
go: downloading github.com/whyrusleeping/go-keyspace v0.0.0-20160322163242-5b898ac5add1
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/libp2p/go-cidranger v1.1.0
go: downloading github.com/libp2p/go-libp2p-asn-util v0.2.0
go: downloading github.com/libp2p/go-buffer-pool v0.1.0
go: downloading github.com/libp2p/go-flow-metrics v0.1.0
go: downloading github.com/multiformats/go-multistream v0.3.3
go: downloading github.com/multiformats/go-multiaddr-fmt v0.1.0
go: downloading github.com/flynn/noise v1.0.0
go: downloading golang.org/x/crypto v0.21.0
go: downloading github.com/klauspost/compress v1.15.10
go: downloading github.com/lucas-clemente/quic-go v0.29.1
go: downloading github.com/libp2p/go-reuseport v0.2.0
go: downloading github.com/marten-seemann/tcp v0.0.0-20210406111302-dfbc87cc63fd
go: downloading github.com/prometheus/client_golang v1.18.0
go: downloading github.com/mikioh/tcpinfo v0.0.0-20190314235526-30a79bb1804b
go: downloading github.com/gorilla/websocket v1.5.0
go: downloading github.com/containerd/cgroups v1.0.4
go: downloading github.com/elastic/gosigar v0.14.2
go: downloading github.com/libp2p/zeroconf/v2 v2.2.0
go: downloading github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74
go: downloading golang.zx2c4.com/wintun v0.0.0-20211104114900-415007cec224
go: downloading github.com/mattn/go-pointer v0.0.1
go: downloading github.com/spacemonkeygo/spacelog v0.0.0-20180420211403-2296661a0572
go: downloading github.com/klauspost/cpuid/v2 v2.1.1
go: downloading github.com/multiformats/go-base36 v0.1.0
go: downloading google.golang.org/protobuf v1.33.0
go: downloading github.com/whyrusleeping/timecache v0.0.0-20160911033111-cfcb2f1abfee
go: downloading github.com/emicklei/go-restful/v3 v3.11.0
go: downloading github.com/go-openapi/jsonreference v0.20.2
go: downloading github.com/go-openapi/swag v0.22.3
go: downloading github.com/gobuffalo/flect v1.0.2
go: downloading gomodules.xyz/jsonpatch/v2 v2.4.0
go: downloading github.com/imdario/mergo v0.3.13
go: downloading github.com/spf13/pflag v1.0.5
go: downloading k8s.io/component-base v0.29.3
go: downloading github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
go: downloading golang.org/x/exp v0.0.0-20230905200255-921286631fa9
go: downloading golang.org/x/text v0.14.0
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
go: downloading github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572
go: downloading github.com/ipld/go-ipld-prime v0.18.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/jbenet/go-temp-err-catcher v0.1.0
go: downloading github.com/libp2p/go-nat v0.1.0
go: downloading github.com/golang/mock v1.6.0
go: downloading github.com/mikioh/tcpopt v0.0.0-20190314235656-172688c1accc
go: downloading github.com/francoispqt/gojay v1.2.13
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.2.0
go: downloading github.com/prometheus/client_model v0.5.0
go: downloading github.com/prometheus/common v0.45.0
go: downloading github.com/prometheus/procfs v0.12.0
go: downloading github.com/coreos/go-systemd/v22 v22.5.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/godbus/dbus/v5 v5.1.0
go: downloading github.com/opencontainers/runtime-spec v1.0.2
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/go-openapi/jsonpointer v0.19.6
go: downloading github.com/mailru/easyjson v0.7.7
go: downloading github.com/fsnotify/fsnotify v1.7.0
go: downloading google.golang.org/appengine v1.6.7
go: downloading github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1
go: downloading github.com/polydawn/refmt v0.0.0-20201211092308-30ac6d18308e
go: downloading lukechampine.com/blake3 v1.1.7
go: downloading github.com/spaolacci/murmur3 v1.1.0
go: downloading github.com/davidlazar/go-crypto v0.0.0-20200604182044-b73af7476f6c
go: downloading golang.org/x/mod v0.14.0
go: downloading github.com/huin/goupnp v1.0.3
go: downloading github.com/jackpal/go-nat-pmp v1.0.2
go: downloading github.com/koron/go-ssdp v0.0.3
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.4
go: downloading github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0
go: downloading github.com/josharian/intern v1.0.0
go: downloading github.com/marten-seemann/qtls-go1-18 v0.1.2
go: downloading github.com/marten-seemann/qtls-go1-19 v0.1.0
go: github.com/kairos-io/cluster-api-provider-kairos imports
	sigs.k8s.io/cluster-api/api/v1alpha3: cannot find module providing package sigs.k8s.io/cluster-api/api/v1alpha3
go: github.com/kairos-io/cluster-api-provider-kairos/controllers tested by
	github.com/kairos-io/cluster-api-provider-kairos/controllers.test imports
	sigs.k8s.io/controller-runtime/pkg/envtest/printer: cannot find module providing package sigs.k8s.io/controller-runtime/pkg/envtest/printer