[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sigs.k8s.io/kustomize/api	v0.21.1 → v0.21.3

---

Release Notes

kubernetes-sigs/kustomize (sigs.k8s.io/kustomize/api)

v0.21.3

#​6310: chore: bump to Go 1.27 and latest kube-openapi
#​6311: chore: use slices functions instead of open-coding them
#​6318: Update kyaml to v0.21.3

v0.21.2

#​5831: Add labels to volumeClaimTemplates in StatefulSets if includeVolumeClaimTemplates is true
#​6029: Account for delimiters in structured data replacements
#​6056: kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped
#​6075: update go 1.25.7
#​6078: bump go-git and x/crypt
#​6085: update otel lib to v1.40.0
#​6087: Reject ambiguous resource paths with inner ".." to prevent silent misresolution
#​6134: drop 'go-spew' dependencies and update dependencies
#​6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson
#​6167: fix: match image digests with any algorithm, not only sha256
#​6184: fix: do not panic on an invalid image name regexp
#​6186: bump/go v1.26.5
#​6187: update vuln dependencies at 2026/07
#​6236: chore: bump stretch/testify pkg to remove old yaml dependencies
#​6237: fix: preserve Secret stringData during generator merge
#​6239: fix: add CronJob Image Volume support to images transformer
#​6242: fix: reject flag-like helmCharts releaseName and name values
#​6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4
#​6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1
#​6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1
#​6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12
#​6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0
#​6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0
#​6273: bump go-git, kin-openapi and k8s.io
#​6274: build: use the golangci-lint v2 with release binary
#​6296: build: run Go tools with go tool
#​6305: Update kyaml to v0.21.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.27 -> 1.27.0
sigs.k8s.io/kustomize/kyaml	v0.21.1 -> v0.21.3
github.com/google/gnostic-models	v0.7.0 -> v0.7.1
k8s.io/kube-openapi	v0.0.0-20260721132016-d427ff9ee9ad -> v0.0.0-20261001230523-97fa35140926

[QuentinBisson]

Sweep: unrecognised failure (marge), signature 705499e650fb: ci/circleci: go-build, pre-commit

[QuentinBisson]

AI rescue blocked (claude), cost not reported: kustomize v0.21.3 requires kube-openapi 20261001, which moved to structured-merge-diff/v7; k8s.io/apimachinery v0.37.1 still builds on smd/v6 and only v0.38.0-alpha uses v7. Lands together with #1093 and the k8s.io v0.38.0 bump once 1.38 is released