fix(deps): bump the k8s-deps group across 1 directory with 7 updates

[dependabot]

Bumps the k8s-deps group with 3 updates in the / directory: k8s.io/apiextensions-apiserver, k8s.io/autoscaler/vertical-pod-autoscaler and sigs.k8s.io/controller-runtime.

Updates k8s.io/apiextensions-apiserver from 0.32.13 to 0.36.3

Commits

• 2e78d6f Update dependencies to v0.36.3 tag
• 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• c8a9346 Add e2e test for setting maps and slices to null via SSA
• b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 4cd8c3d Merge remote-tracking branch 'origin/master' into release-1.36
• c2fd557 Merge pull request #138346 from dashpole/update_otel_prop
• 1daa309 Merge remote-tracking branch 'origin/master' into release-1.36
• 1551264 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 6c97d2b update go.opentelemetry.io/otel to v1.41.0
• 862c52a update google.golang.org/grpc to v1.79.3
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.32.13 to 0.36.3

Commits

• 40bf4b2 Update dependencies to v0.36.3 tag
• 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
• 6a88102 Fix wrong marking of errors
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• Additional commits viewable in compare view

Updates k8s.io/autoscaler/vertical-pod-autoscaler from 1.2.2 to 1.7.1

Release notes

Sourced from k8s.io/autoscaler/vertical-pod-autoscaler's releases.

vertical-pod-autoscaler-1.7.1

Changes by Kind

Regression

• Fixed the VPA recommender ignoring the --history-cpu-metric and --history-memory-metric flags when using the Prometheus history provider, which caused the historical queries to omit the configured metric name. (#9753, @​ulascansenturk)
• Fixed VPA checkpoint loading to prevent recommendations from restarting from scratch (#10052, @​adrianmoisey)

Bug

• Fix bug where VPA Checkpoint GC error message wasn't logging correctly (#9886, @​adrianmoisey)
• Add reasons to in-place update deferred log messages (#9964, @​omerap12)

Other (Cleanup or Flake)

• [vpa-release-1.7] Bump the actions group across 3 directories with 1 update by @​k8s-infra-cherrypick-robot in kubernetes/autoscaler#9735
• Bump the patch-updates group across 2 directories with 19 updates by @​dependabot[bot] in kubernetes/autoscaler#9776
• Bump the patch-updates group across 2 directories with 37 updates by @​dependabot[bot] in kubernetes/autoscaler#9938
• Bump the actions group across 3 directories with 1 update by @​dependabot[bot] in kubernetes/autoscaler#9979
• Bump the patch-updates group across 2 directories with 3 updates by @​dependabot[bot] in kubernetes/autoscaler#9982
• Bump to k8s 1.36.3 patch versions by @​adrianmoisey in kubernetes/autoscaler#10046
• Bump VPA to 1.7.1 by @​adrianmoisey in kubernetes/autoscaler#10053
• Bump to VPA 1.7.1 by @​adrianmoisey in kubernetes/autoscaler#10058

Full Changelog: kubernetes/autoscaler@vertical-pod-autoscaler-1.7.0...vertical-pod-autoscaler-1.7.1

vertical-pod-autoscaler-1.7.0

Changes by Kind

API Change

• Added MemoryAggregationIntervalSeconds for the VPA object (#9317, @​omerap12)
• EvictAfterOOMThreshold is now per vpa (#9071, @​omerap12)
• The VPA support InPlace update mode. VPA will not evict any pods and only try to resize pods inplace. (#8888, @​omerap12)
• Users can configure a startupBoost policy in the VPA spec. (#9141, @​kamarabbas99)
• VPA now stores a observedGeneration in both status and condition fields. (#9524, @​adrianmoisey)

Bug or Regression

• Fix bug where VPA admission-controller could write a webhook with an empty cert for a brief period. (#9599, @​adrianmoisey)
• Fixed OOM detection for pods with restartPolicy: Never (#7955, @​tkukushkin)
• Fixed a bug where the presence of a LimitRange object with CPU constraints in the cluster prevented VPA from recreating Pods managed by the targeted controllers. The updated code section, which proportionally reduces resource requests and limits, could result in the loss of sub-millicore values. (#8946, @​iamzili)
• Fixed a bug where users could use alpha (off-by-default) features by updating an existing VPA resource, bypassing the feature gate check. (#9557, @​adrianmoisey)

Other (Cleanup or Flake)

• Bump Kubernetes dependencies to 1.36.0 (#9547, @​adrianmoisey)

... (truncated)

Commits

• 3523658 Merge pull request #10058 from adrianmoisey/vpa-release-1.7.1
• 741c809 Bump to VPA 1.7.1
• 9568371 Merge pull request #10053 from adrianmoisey/release-1.7.1
• 90028bd Bump VPA to 1.7.1
• 86a69bd Merge pull request #10052 from k8s-infra-cherrypick-robot/cherry-pick-10045-t...
• 16fadf1 Ensure that VPA checkpoint is loaded in the correct order
• c385263 Merge pull request #10046 from adrianmoisey/vpa-release-1.7-k8s-1.36.3
• 98b0150 Bump to k8s 1.36.3 patch versions
• 1db6027 Merge pull request #9982 from kubernetes/dependabot/go_modules/vertical-pod-a...
• 7cff63b Merge pull request #9979 from kubernetes/dependabot/docker/vertical-pod-autos...
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.32.13 to 0.36.3

Commits

• 44a8af2 Update dependencies to v0.36.3 tag
• f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
• a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
• df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
• 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
• 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
• 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
• Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20260210185600-b8788abfbbc2

Commits

• See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.20.4 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

v0.24.0

⚠️ Breaking Changes

• Dependencies: Update to k8s.io/* v1.36 (#3506 #3462 #3486 #3450)

🐛 Bug Fixes

• Cache: Fix IndexField blocking until informer is synced (#3445)
• Cache: Wait for cache sync when ReaderFailOnMissingInformer is true (#3425)
• Client: Update typed ApplyConfigurations with server response (#3475)
• Fakeclient: Fix SSA status patch resource version check (#3443)
• Fakeclient: Fix panic when using CRs with embedded pointer structs (#3431)
• Fakeclient: Fix status apply if existing object has managedFields set (#3430)
• Fakeclient: Retry GenerateName on AlreadyExists collisions (#3498)
• HTTP servers: Wire up base context into http servers (#3452)

🌱 Others

• Builder/Webhooks: Remove deprecated custom path function (#3465)
• Cache: Test cache reader waits for cache sync (#3434)
• Certwatcher: Deflake certwatcher tests (#3457)
• Dependencies: Use forked version of btree (#3449)
• Envtest: Ensure envtest stops the whole process group (#3447)
• Logging: Add missing space in zap-log-level flag description (#3492)
• Misc: Adopt new(x) over ptr.To(x) and re-enable newexpr lint (#3489)
• Owners: Cleanup (#3453)
• Recorder: Add logger into context for structured logging (#3454)
• Recorder: Switch to StartLogging for event debug logs (#3451)
• Scheme: Deprecate the scheme builder (#3461)
• Source/Kind: Improve logging for dynamic type kind source (#3494)
• Webhooks: Reduce memory usage of default webhooks (#3463 #3468)

🌱 CI & linters

• Chore: Update golangci-lint version to v2.8.0 (#3448)
• Chore: Update golangci-lint version to v2.10.1 (#3470)
• Chore: Update golangci-lint version to v2.11.3 (#3482)
• Migrate away from custom GitHub action approval workflow (#3491)
• Release: Auto-create git tags for the tools/setup-envtest submodule (#3476)

📖 Additionally, there has been 1 contribution to our documentation. (#3477)

Dependencies

... (truncated)

Commits

• 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
• 0f7b33d Fix regression in Apply typed error handling
• d3eaef3 Merge pull request #3475 from alvaroaleman/fixfix
• 3296f32 🐛 Update typed Applyconfigurations with server response
• c8b4b9d Merge pull request #3506 from troy0820/troy0820/update-deps-k8s
• 557c314 update to k8s.io v1.36.0
• e4a998c Merge pull request #3499 from kubernetes-sigs/dependabot/github_actions/all-g...
• 1a31c56 Merge pull request #3498 from vieux/fix-fake-client-generatename-retry
• 80bc294 fakeclient: retry GenerateName on AlreadyExists collisions (match K8s 1.32 be...
• 77b730a 🌱 Bump the all-github-actions group with 2 updates
• Additional commits viewable in compare view

Updates k8s.io/apiserver from 0.32.13 to 0.36.3

Commits

• 72f5171 Update dependencies to v0.36.3 tag
• 8f96c52 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
• ace7be2 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• 1c9198d Merge remote-tracking branch 'origin/master' into release-1.36
• 6f83612 Merge pull request #138346 from dashpole/update_otel_prop
• 690e679 Merge remote-tracking branch 'origin/master' into release-1.36
• 66ef378 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• bb1f8b5 update go.opentelemetry.io/otel to v1.41.0
• e0b6d8f Merge remote-tracking branch 'origin/master' into release-1.36
• c8527f7 Downgrade log level from Error to Info for unserved GVRs in peer proxy
• Additional commits viewable in compare view