build(deps): bump the k8s group across 1 directory with 4 updates

[dependabot]

Bumps the k8s group with 4 updates in the / directory: k8s.io/apimachinery, k8s.io/client-go, sigs.k8s.io/kind and sigs.k8s.io/knftables.

Updates k8s.io/apimachinery from 0.34.10 to 0.37.0

Commits

• 7164e39 Update dependencies to v0.37.0 tag
• e55f9ba feat(api): Update node restriction admission to use new API
• cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
• 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
• f21afab Add validation for camelcase in reason field
• d7ad413 Merge pull request #140782 from dims/update-kube-openapi
• e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
• 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
• 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
• 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.34.10 to 0.37.0

Commits

• 2807644 Update dependencies to v0.37.0 tag
• 50c6f9b metrics: Register: Fix incorrect assignment
• 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
• 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
• 2bf14f2 Merge pull request #140990 from xigang/revert-140448
• 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
• df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
• 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
• 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
• 694f4eb apidiff: ignore adding entirely new API groups
• Additional commits viewable in compare view

Updates sigs.k8s.io/kind from 0.32.0 to 0.33.0

Release notes

Sourced from sigs.k8s.io/kind's releases.

v0.33.0

This release contains critical dependency updates, bug fixes, and defaults to Kubernetes 1.36.1.

Breaking Changes

The default node image is now kindest/node:v1.37.0@sha256:a1ed56cfb0e7b93589bdf97c8cd566405a265939e3620fc4f5de89adff580ae5.

New Features

• Assorted dependency updates.

Images pre-built for this release:

• v1.37.0: kindest/node:v1.37.0@sha256:a1ed56cfb0e7b93589bdf97c8cd566405a265939e3620fc4f5de89adff580ae5
• v1.36.4: kindest/node:v1.36.4@sha256:099e049362a1526b2db71494e1947aae99bd16290d7c895f2b7ea312e3cbfaed
• v1.35.8: kindest/node:v1.35.8@sha256:07b2536e30b803ed61d1677a79df6115f798ce64c80f9e22f6ed45afd09323c0
• v1.34.11: kindest/node:v1.34.11@sha256:44e222ee2132dab25ff87301682f89eb82c7880ea3a1bf543bfe9708fd08d67d

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

• https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster
• https://kind.sigs.k8s.io/docs/user/quick-start/#building-images

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see #2718

Fixes

• Respect Docker client proxy config for docker nodes. (#4192)
• Preserve external load balancer CDS/LDS configuration across container restarts. (#4195)
• Improve local-path-provisioner helperPod tolerations. (#4210)
• Assorted documentation fixes and improvements.

Contributors

Committers for this release:

• @​antoineco
• @​BenTheElder
• @​christian-heusel
• @​erichorwath
• @​immanuwell
• @​jboero
• @​k8s-ci-robot
• @​liggitt
• @​null
• @​popsiclelmlm
• @​sestegra
• @​stmcginnis
• @​tom1299

... (truncated)

Commits

• 407a967 version v0.33.0
• 2f5bf7d Merge pull request #4248 from stmcginnis/v1.37.0
• 5bf2da5 bump default iamge to kindest/node:v1.37.0
• fed2688 Merge pull request #4242 from BenTheElder/node-v1.37.0-rc.1
• c20a04a bump default image to kindest/node:v1.37.0-rc.1
• 813e832 Merge pull request #4241 from BenTheElder/update-images
• 0d47763 Merge pull request #4233 from antoineco/picture-emoji
• 2200065 nodeimage: bump default local-path-provisioner image to v20260820-69b56db7
• d2dcab9 nodeimage: bump default kindnetd image to v20260820-69b56db7
• 4062f9c nodeimage: bump default base image to v20260820-69b56db7
• Additional commits viewable in compare view

Updates sigs.k8s.io/knftables from 0.0.18 to 0.0.22

Changelog

Sourced from sigs.k8s.io/knftables's changelog.

v0.0.22

• Add UseNetlink option to knftables.New() to make it use netlink for List* methods. This is much more efficient than using nft list, but is currently considered experimental. (@aojea)

v0.0.21

• Updated previous List() fix to pass the --terse flag to nft list, to avoid wasting memory and CPU parsing JSON that isn't relevant to List()'s output anyway. (@danwinship)

• Added a note about nft versions to README.md. (@danwinship)

v0.0.20

• List() has been changed to use nft list table rather than, e.g., nft list sets, to ensure that it doesn't try to parse objects in other tables (which may have been created by newer versions of nft and might trigger crashes in older versions of nft; see https://issues.k8s.io/136786). (@danwinship based on a previous PR from @kairosci).

• A new ListAll() method has been added to help work around the fact that List() is now much less efficient with large tables. (@danwinship).

• ListElements() now correctly handles maps/sets with concatenated keys/values including CIDR values. (#32 (@danwinship)

v0.0.19

• Added the ability to use a single knftables.Interface (and a single knftables.Transaction) with multiple tables/families. To do this, pass "" for the family and table name to knftables.New, and then manually fill in the Table and Family fields in all Objects you create. (@danwinship)

• Added tx.Destroy(), corresponding to nft destroy. Since nft destroy requires a new-ish kernel (6.3) and CLI (1.0.8), there are also two new knftables.New() options: RequireDestroy if you want construction to fail on older systems, or EmulateDestroy if you want knftables to try to emulate "destroy" on older systems, with some limitations. See README.md for more details. (@danwinship)

• Added Counter objects and the tx.Reset() verb, to support

... (truncated)

Commits

• 69a6e3f v0.0.22
• 2cbbcd2 Merge pull request #44 from danwinship/flip-netlink-default
• 9709962 Turn off netlink support by default, add UseNetlink option
• 2163caa Merge pull request #43 from aojea/netlinl_optional
• 4c307fc Fix response to blank "make"
• 2477e96 update golang modules
• f2c1170 Merge pull request #38 from aojea/netlink
• 5d30712 workflows: define global GO_VERSION variable
• a3859c6 bump golangci lint
• afc08a7 update vendor
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
k8s.io/apimachinery	[>= 0.30.a, < 0.31]
k8s.io/client-go	[>= 0.30.a, < 0.31]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions