build(deps): bump the k8s-dependencies group with 3 updates

[dependabot]

Bumps the k8s-dependencies group with 3 updates: sigs.k8s.io/controller-runtime, sigs.k8s.io/gateway-api and sigs.k8s.io/apiserver-network-proxy/konnectivity-client.

Updates sigs.k8s.io/controller-runtime from 0.16.2 to 0.16.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.16.3

What's Changed

• 🐛Update dependency go-restful to 3.11.0 by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#2516
• 🐛 Correctly identify if patch call was made on status by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#2515
• 🐛 Handle unstructured status update with fake client by @​troy0820 in kubernetes-sigs/controller-runtime#2523
• ✨ Cache: Allow defining options that apply to all namespaces that themselves have no explicit config by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#2539
• 🐛 bump golang.org/x/net to v0.17.0 by @​joelanford in kubernetes-sigs/controller-runtime#2541
• 🌱 Bump k8s to 1.28.3 by @​varshaprasad96 in kubernetes-sigs/controller-runtime#2552

Full Changelog: kubernetes-sigs/controller-runtime@v0.16.2...v0.16.3

Commits

• 5f8d96b Merge pull request #2552 from varshaprasad96/bump/k8s-1.28.3
• 5572514 [fix]: Bump k8s to 1.28.3
• 7c1e2d9 Merge pull request #2541 from joelanford/0.16-golang-x-net
• 5201923 🐛 bump golang.org/x/net to v0.17.0
• 8b5b1a2 Merge pull request #2539 from k8s-infra-cherrypick-robot/cherry-pick-2528-to-...
• b9c691d sparkles: Cache: Allow defining options that apply to all namespaces that the...
• 8361246 Merge pull request #2523 from troy0820/troy0820/cherry-pick-to-release-0.16
• f7b7450 🐛 Handle unstructured status update with fake client (#2495)
• 2d6b699 [release-0.16] 🐛 Correctly identify if patch call was made on status (#2515)
• da31104 Merge pull request #2516 from k8s-infra-cherrypick-robot/cherry-pick-2507-to-...
• Additional commits viewable in compare view

Updates sigs.k8s.io/gateway-api from 0.8.1 to 1.0.0

Release notes

Sourced from sigs.k8s.io/gateway-api's releases.

v1.0.0

On behalf of Kubernetes SIG Network, we are pleased to announce the v1.0 release! This release marks a huge milestone for this project. Several key APIs are graduating to GA (generally available), while other significant features have been added to the Experimental channel.

It's been four years since this project began, and we would never have gotten here without the support of a dedicated and active community. The maintainers would like to thanks everyone who's contributed to Gateway API, whether in the form of commits to the repo, discussion, ideas, or general support. We literally couldn't have gotten this far without you.

This project is nowhere near finished, as you can see from the large amount of features being added into the Experimental Channel. With such a big set of things still to do, contributors and contributions are more vital than ever. Please feel welcome to join our community!!

Gateway, GatewayClass, and HTTPRoute are GA 🎉

Gateway, GatewayClass, and HTTPRoute have all graduated to GA with a v1 API version. Although these APIs will continue to grow with future additions, the versions of these resources available via the Standard Channel are stable and recommended for use in production. Many implementations are fully passing conformance tests that cover the functionality of each of these resources. These APIs are graduating to GA with only minor spec clarifications since the v0.8.0 release.

CEL Migration

Starting in v0.8.0, Gateway API CRDs now include CEL validation. In this release the validating webhook is no longer bundled with CRD installation. Instead we include a separate webhook-install.yaml file as part of the release artifacts.

If you're running Kubernetes 1.25+, we do not recommend installing the webhook and additionally suggest that you uninstall any previously installed versions of the webhook.

If you're still running Kubernetes 1.23 or 1.24, we recommend installing the webhook until you can upgrade to Kubernetes 1.25 or newer.

New Experimental Features

There are several exciting new experimental features in this release:

BackendTLSPolicy

A new BackendTLSPolicy resource has been introduced for configuring TLS connections from Gateways to Backends. This allows you to configure the Gateway to validate the certificates served by Backends. For more information, refer to GEP 1897.

... (truncated)

Changelog

Sourced from sigs.k8s.io/gateway-api's changelog.

v1.0.0

On behalf of Kubernetes SIG Network, we are pleased to announce the v1.0 release! This release marks a huge milestone for this project. Several key APIs are graduating to GA (generally available), while other significant features have been added to the Experimental channel.

It's been four years since this project began, and we would never have gotten here without the support of a dedicated and active community. The maintainers would like to thanks everyone who's contributed to Gateway API, whether in the form of commits to the repo, discussion, ideas, or general support. We literally couldn't have gotten this far without you.

This project is nowhere near finished, as you can see from the large amount of features being added into the Experimental Channel. With such a big set of things still to do, contributors and contributions are more vital than ever. Please feel welcome to join our community!!

Gateway, GatewayClass, and HTTPRoute are GA 🎉

Gateway, GatewayClass, and HTTPRoute have all graduated to GA with a v1 API version. Although these APIs will continue to grow with future additions, the versions of these resources available via the Standard Channel are stable and recommended for use in production. Many implementations are fully passing conformance tests that cover the functionality of each of these resources. These APIs are graduating to GA with only minor spec clarifications since the v0.8.0 release.

CEL Migration

Starting in v0.8.0, Gateway API CRDs now include CEL validation. In this release the validating webhook is no longer bundled with CRD installation. Instead we include a separate webhook-install.yaml file as part of the release artifacts.

If you're running Kubernetes 1.25+, we do not recommend installing the webhook and additionally suggest that you uninstall any previously installed versions of the webhook.

If you're still running Kubernetes 1.23 or 1.24, we recommend installing the webhook until you can upgrade to Kubernetes 1.25 or newer.

New Experimental Features

There are several exciting new experimental features in this release:

BackendTLSPolicy

A new BackendTLSPolicy resource has been introduced for configuring TLS connections from Gateways to Backends. This allows you to configure the Gateway to validate the certificates served by Backends. For more information, refer to

... (truncated)

Commits

• a068498 Merge pull request #2546 from youngnick/v1.0-changelog
• 5592c85 Fixing a couple typos + indentation
• f82ba55 Bumping versions to v1.0.0
• 6f15ea1 fix: nav for changelog
• b8b91df Apply suggestions from code review
• 6b43fe1 Create v1 changelog
• 8f1b718 Merge pull request #2545 from kubernetes-sigs/dependabot/pip/mkdocs-material-...
• f58ed7b build(deps): bump mkdocs-material from 9.4.6 to 9.4.7
• 5fd8bec Merge pull request #2535 from arkodg/rm-accepted
• 8cf18e3 Merge pull request #2534 from robscott/experimental-status
• Additional commits viewable in compare view

Updates sigs.k8s.io/apiserver-network-proxy/konnectivity-client from 0.28.0 to 0.28.3

Commits

• c81f751 Merge pull request #545 from mborsz/28-golang
• 97bd51e Update to go1.20.12
• 31356ba Merge pull request #540 from jkh52/release-0.28-cves
• 445b64a Mitigate CVEs:
• b3c465f fixed tests
• 5a65a52 upgrade google.golang.org/grpc to v1.56.3
• b38d270 Merge pull request #533 from Argh4k/release-0.28
• 5f3778c Update golang.org/x/net to v0.17.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[k8s-ci-robot]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[msau42]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], msau42

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [msau42]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment