chore(deps): update kubernetes monorepo to v0.37.1

[scality-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
k8s.io/api	v0.36.0 → v0.37.1
k8s.io/apimachinery	v0.36.0 → v0.37.1
k8s.io/client-go	v0.36.0 → v0.37.1

---

Release Notes

kubernetes/api (k8s.io/api)

v0.37.1

Compare Source

v0.37.0

Compare Source

v0.36.5

Compare Source

v0.36.4

Compare Source

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.1

Compare Source

v0.37.0

Compare Source

v0.36.5

Compare Source

v0.36.4

Compare Source

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.37.1

Compare Source

v0.37.0

Compare Source

v0.36.5

Compare Source

v0.36.4

Compare Source

v0.36.3

Compare Source

v0.36.2

Compare Source

v0.36.1

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[scality-renovate]

ℹ️ Artifact update notice

File name: agent/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 16 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
golang.org/x/sys	v0.46.0 -> v0.47.0
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.1
github.com/go-openapi/jsonpointer	v0.21.0 -> v1.0.0
github.com/go-openapi/jsonreference	v0.20.2 -> v1.0.0
github.com/go-openapi/swag	v0.23.0 -> v0.27.1
go.yaml.in/yaml/v2	v2.4.3 -> v2.4.4
golang.org/x/net	v0.56.0 -> v0.57.0
golang.org/x/sync	v0.21.0 -> v0.22.0
golang.org/x/term	v0.44.0 -> v0.45.0
golang.org/x/text	v0.38.0 -> v0.40.0
golang.org/x/time	v0.14.0 -> v0.15.0
golang.org/x/tools	v0.46.0 -> v0.47.0
k8s.io/kube-openapi	v0.0.0-20260317180543-43fb72c5454a -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/streaming	v0.36.0 -> v0.37.1
k8s.io/utils	v0.0.0-20260210185600-b8788abfbbc2 -> v0.0.0-20260626114624-be93311217bd
sigs.k8s.io/structured-merge-diff/v6	v6.3.2 -> v6.4.2

[github-actions]

Dependency Bump Evaluation

Version change: k8s.io/api, k8s.io/apimachinery, k8s.io/client-go v0.36.0 → v0.37.1 (minor, Kubernetes 1.36 → 1.37)

Changes (Kubernetes 1.37 highlights relevant to this project):

• AnnotatedEventf method added to EventRecorder and EventRecorderLogger interfaces in client-go/tools/events — only breaks code that implements the interface, not consumers
• New Node lifecycle conditions added (GracefulNodeShutdownInProgress, DrainInProgress, Drained, MaintenancePlanned, MaintenanceInProgress) — additive, non-breaking
• TypeMeta JSON struct tag changed from ,inline to empty — only affects code using reflection on struct tags
• Context-aware APIs added for REST mapping/discovery (old APIs deprecated, not removed)
• Nil pointer fix in event key generation — bug fix, safe
• Unused PodStatusResult type removed from API — not used by this project

Breaking changes: None affecting this codebase. The AnnotatedEventf interface addition is the most notable change, but this project only uses events.EventRecorder as a consumer (stores it as a field, calls Eventf() on it), and does not implement the interface. NewFakeRecorder in tests is a client-go-provided implementation that already includes the new method.

Security concerns: None. No changes to authentication, authorization, or cryptography paths used by this project.

Impact on codebase: This project uses a narrow subset of stable, core Kubernetes APIs:

• k8s.io/api/core/v1: Node, EventTypeWarning, EventTypeNormal — unchanged
• k8s.io/client-go/tools/events: EventRecorder, NewFakeRecorder — used as consumer only
• k8s.io/client-go/util/workqueue: TypedRateLimitingInterface — unchanged
• k8s.io/client-go/kubernetes/scheme: Scheme, AddToScheme — unchanged
• k8s.io/apimachinery/pkg/apis/meta/v1: TypeMeta, ObjectMeta — struct tag change is transparent to normal usage
• k8s.io/apimachinery/pkg/runtime, types, util/errors, util/validation — no breaking changes

Indirect dependency changes (go-openapi/swag split into sub-modules, josharian/intern and mailru/easyjson removed) are handled by Go modules and do not affect this project's code.

Recommendation: SAFE TO MERGE (once CI passes — checks are currently in progress)

Notes: CI checks (lint, test, rpm-ci) are still running. Verify they pass before merging. The golang.org/x/sys bump from v0.46.0 to v0.47.0 is also included — this is a standard minor bump of Go's extended stdlib.

— Claude Code