[dependabot]

Bumps the kustomize group with 2 updates in the / directory: sigs.k8s.io/kustomize/api and sigs.k8s.io/kustomize/kyaml.

Updates sigs.k8s.io/kustomize/api from 0.21.1 to 0.21.3

Release notes

Sourced from sigs.k8s.io/kustomize/api's releases.

api/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

cmd/config/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

kyaml/v0.21.3

#6309: fix: use uncompressed json for openapi schema definition #6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them

api/v0.21.2

#5831: Add labels to volumeClaimTemplates in StatefulSets if includeVolumeClaimTemplates is true #6029: Account for delimiters in structured data replacements #6056: kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped #6075: update go 1.25.7 #6078: bump go-git and x/crypt #6085: update otel lib to v1.40.0 #6087: Reject ambiguous resource paths with inner ".." to prevent silent misresolution #6134: drop 'go-spew' dependencies and update dependencies #6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson #6167: fix: match image digests with any algorithm, not only sha256 #6184: fix: do not panic on an invalid image name regexp #6186: bump/go v1.26.5 #6187: update vuln dependencies at 2026/07 #6236: chore: bump stretch/testify pkg to remove old yaml dependencies #6237: fix: preserve Secret stringData during generator merge #6239: fix: add CronJob Image Volume support to images transformer #6242: fix: reject flag-like helmCharts releaseName and name values #6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4 #6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 #6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 #6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0 #6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 #6273: bump go-git, kin-openapi and k8s.io #6274: build: use the golangci-lint v2 with release binary #6296: build: run Go tools with go tool #6305: Update kyaml to v0.21.2

cmd/config/v0.21.2

#6075: update go 1.25.7 #6078: bump go-git and x/crypt #6085: update otel lib to v1.40.0 #6134: drop 'go-spew' dependencies and update dependencies #6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson

... (truncated)

Commits

• fec5628 Merge pull request #6320 from koba1t/pinToCmdConfig
• 27c68bd Update cmd/config to v0.21.3
• 73218d9 Merge pull request #6318 from koba1t/pinToKyaml
• a056849 Update kyaml to v0.21.3
• 5d465f7 Merge pull request #6309 from koba1t/fix/reviewable-openapi-bundle
• 0f7a650 fix: use uncompressed json for openapi schema definition
• 0b060a1 Merge pull request #6310 from skitt/openapi
• f741041 Bump to the latest kube-openapi
• 77a76a9 Bump to Go 1.27
• 294c486 Merge pull request #6311 from skitt/slices
• Additional commits viewable in compare view

Updates sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.3

Release notes

Sourced from sigs.k8s.io/kustomize/kyaml's releases.

api/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

cmd/config/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

kyaml/v0.21.3

#6309: fix: use uncompressed json for openapi schema definition #6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them

api/v0.21.2

#5831: Add labels to volumeClaimTemplates in StatefulSets if includeVolumeClaimTemplates is true #6029: Account for delimiters in structured data replacements #6056: kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped #6075: update go 1.25.7 #6078: bump go-git and x/crypt #6085: update otel lib to v1.40.0 #6087: Reject ambiguous resource paths with inner ".." to prevent silent misresolution #6134: drop 'go-spew' dependencies and update dependencies #6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson #6167: fix: match image digests with any algorithm, not only sha256 #6184: fix: do not panic on an invalid image name regexp #6186: bump/go v1.26.5 #6187: update vuln dependencies at 2026/07 #6236: chore: bump stretch/testify pkg to remove old yaml dependencies #6237: fix: preserve Secret stringData during generator merge #6239: fix: add CronJob Image Volume support to images transformer #6242: fix: reject flag-like helmCharts releaseName and name values #6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4 #6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 #6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 #6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0 #6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 #6273: bump go-git, kin-openapi and k8s.io #6274: build: use the golangci-lint v2 with release binary #6296: build: run Go tools with go tool #6305: Update kyaml to v0.21.2

cmd/config/v0.21.2

#6075: update go 1.25.7 #6078: bump go-git and x/crypt #6085: update otel lib to v1.40.0 #6134: drop 'go-spew' dependencies and update dependencies #6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson

... (truncated)

Commits

• fec5628 Merge pull request #6320 from koba1t/pinToCmdConfig
• 27c68bd Update cmd/config to v0.21.3
• 73218d9 Merge pull request #6318 from koba1t/pinToKyaml
• a056849 Update kyaml to v0.21.3
• 5d465f7 Merge pull request #6309 from koba1t/fix/reviewable-openapi-bundle
• 0f7a650 fix: use uncompressed json for openapi schema definition
• 0b060a1 Merge pull request #6310 from skitt/openapi
• f741041 Bump to the latest kube-openapi
• 77a76a9 Bump to Go 1.27
• 294c486 Merge pull request #6311 from skitt/slices
• Additional commits viewable in compare view

[google-oss-prow]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a GoogleContainerTools member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[cowsking]

/ok-to-test

[cowsking]

/retest

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tiffanny29631 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[google-oss-prow]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
kpt-config-sync-presubmit-e2e-multi-repo-test-group3	0d487d0	link	true	/test kpt-config-sync-presubmit-e2e-multi-repo-test-group3
kpt-config-sync-presubmit-e2e-multi-repo-test-group2	0d487d0	link	true	/test kpt-config-sync-presubmit-e2e-multi-repo-test-group2
kpt-config-sync-presubmit	0d487d0	link	true	/test kpt-config-sync-presubmit
kpt-config-sync-presubmit-e2e-multi-repo-test-group1	0d487d0	link	true	/test kpt-config-sync-presubmit-e2e-multi-repo-test-group1

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.