Update dependency-updates (master) (patch)

[marvin-tigera]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
calico/base		patch	ubi9-1784675397 → ubi9-1788975324
golang (source)		patch	1.26.5 → 1.26.8
k8s.io/api	require	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/apiextensions-apiserver	require	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/apiextensions-apiserver	indirect	patch	v0.36.2 → v0.36.4
k8s.io/apimachinery	require	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/apiserver	require	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/cli-runtime	indirect	patch	v0.36.2 → v0.36.4
k8s.io/client-go	require	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/component-base	indirect	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/kube-aggregator	require	patch	v0.37.0-beta.0 → v0.37.0
k8s.io/kubectl	indirect	patch	v0.36.2 → v0.36.4

---

Release Notes

kubernetes/api (k8s.io/api)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/apiserver (k8s.io/apiserver)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/cli-runtime (k8s.io/cli-runtime)

v0.36.4

Compare Source

v0.36.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/component-base (k8s.io/component-base)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/kube-aggregator (k8s.io/kube-aggregator)

v0.37.0

Compare Source

v0.37.0-rc.1

Compare Source

v0.37.0-rc.0

Compare Source

kubernetes/kubectl (k8s.io/kubectl)

v0.36.4

Compare Source

v0.36.3

Compare Source

---

• If you want to rebase/retry this PR, check this box

[marvin-tigera]

ℹ️ Artifact update notice

File name: api/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 14 additional dependencies were updated

Details:

Package	Change
github.com/go-openapi/jsonpointer	v0.22.4 -> v1.0.0
github.com/go-openapi/jsonreference	v0.21.4 -> v1.0.0
github.com/go-openapi/swag	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/cmdutils	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/conv	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/fileutils	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/jsonutils	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/loading	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/mangling	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/netutils	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/stringutils	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/typeutils	v0.25.4 -> v0.27.1
github.com/go-openapi/swag/yamlutils	v0.25.4 -> v0.27.1
k8s.io/kube-openapi	v0.0.0-20260618221249-bc653b64f974 -> v0.0.0-20260721132016-d427ff9ee9ad

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/go-openapi/swag	v0.27.0 -> v0.27.1
github.com/go-openapi/swag/cmdutils	v0.27.0 -> v0.27.1
github.com/go-openapi/swag/netutils	v0.27.0 -> v0.27.1
k8s.io/kube-openapi	v0.0.0-20260706235625-cdb1db5517a0 -> v0.0.0-20260721132016-d427ff9ee9ad

[Copilot]

🟡 Changes recommended

The Makefile’s K8S_VERSION still points to v1.37.0-beta.0 while Go modules were moved to stable v0.37.0, which can desynchronize the containerized build toolchain from the dependency set.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates the operator’s build/toolchain and Kubernetes-related Go module dependencies to newer patch versions, keeping the repo aligned with upstream Kubernetes libraries and base build images.

Changes:

• Bump Go version from 1.26.5 to 1.26.8 in the root module and api/ submodule.
• Update Kubernetes Go modules from v0.37.0-beta.0 to v0.37.0 (plus related indirect dependency refreshes).
• Update Calico base image tag to a newer ubi9-* revision.

File summaries

File	Description
Makefile	Updates GO_VERSION and CALICO_BASE_VER used by containerized build targets.
go.mod	Bumps Go version and upgrades Kubernetes module dependencies to v0.37.0.
go.sum	Refreshes dependency checksums for the updated module graph.
api/go.mod	Bumps Go version and upgrades Kubernetes (and related indirect) dependencies for the API submodule.
api/go.sum	Refreshes checksums for the API submodule dependency graph.

Review details

• Files reviewed: 3/5 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.