fix(deps): update module github.com/kubernetes-sigs/kro to v0.9.4 (main)

[crossplane-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/kubernetes-sigs/kro	v0.9.2 → v0.9.4

---

Release Notes

kubernetes-sigs/kro (github.com/kubernetes-sigs/kro)

v0.9.4

Compare Source

What's Changed

• Use stdlib maps and slices instead of x/exp by @​v47 in #​1345
• fix(graph): key extended CEL env cache by schema, not just var name by @​pujitha24 in #​1340
• fix(helm): repair chart template gaps found during review by @​armanfeyzi in #​1307
• feat(chart): add user role aggregation to view, edit and admin ClusterRole by @​reshnm in #​1342
• fix(instance): set ResourcesReady=False with ReconciliationSuspended reason when suspended by @​RohanKaran in #​1282
• chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /tools/lsp/server in the go_modules group across 1 directory by @​dependabot[bot] in #​1336
• chore(deps): bump golang.org/x/net from 0.47.0 to 0.55.0 in the go-security-updates group across 1 directory by @​dependabot[bot] in #​1335
• fix(cel): prevent panic when uint/bytes CEL values reach deep-copy by @​pujitha24 in #​1346
• feat: add shortNames and categories in the RGD by @​fabianburth in #​1347
• helm: add extraEnv support to deployment template by @​n3rdc4ptn in #​1349
• feat(cel): add deepMerge() for recursive nested map merging by @​jakobmoellerdev in #​1348
• fix: Support ordered deletion without desired-state projection, CEL evaluation, GraphRevision resolution or external observation by @​tomasaschan in #​1318
• fix(logging): route klog to zap and make zap-devel configurable in Helm by @​jakobmoellerdev in #​1352
• test: raise coverage on pkg/cel/library and pkg/graph/crd/compat by @​jlbutler in #​1357
• chore(deps): bump all project dependencies by @​jakobmoellerdev in #​1356
• chore(deps): enable Dependabot version updates and widen module coverage by @​jlbutler in #​1358
• chore(deps): bump actions/setup-node from 5.0.0 to 7.0.0 by @​dependabot[bot] in #​1359
• chore(deps): bump actions/setup-go from 6.0.0 to 7.0.0 by @​dependabot[bot] in #​1361
• chore(deps): bump actions/checkout from 5.0.0 to 7.0.1 by @​dependabot[bot] in #​1360
• chore(deps): bump the npm-security-updates group across 1 directory with 6 updates by @​dependabot[bot] in #​1363
• refactor: scaffolding for graph development work; incremental from #​1355 by @​jlbutler in #​1365
• fix(simpleschema): sort synthesized CRD required fields for deterministic output by @​jlbutler in #​1366
• chore(deps): bump @​babel/core from 7.28.4 to 7.29.7 in /website in the npm-security-updates group across 1 directory by @​dependabot[bot] in #​1364
• lint: bump golangci-lint to v2.12.2 and update lint configuration by @​jakobmoellerdev in #​1368
• refactor(watch): extract shared informer-fleet Manager into pkg/watch by @​jakobmoellerdev in #​1370
• test: unify integration test suites under a single shared control plane by @​jakobmoellerdev in #​1371
• docs: note that lists built from maps need sort() for stable ordering by @​allamand in #​1375
• fix(crd): detect additionalPrinterColumns changes when updating CRDs by @​pujitha24 in #​1378
• chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 by @​dependabot[bot] in #​1383
• fix(helm): honor service account automount setting by @​immanuwell in #​1380
• chore(deps-dev): bump @​types/vscode from 1.125.0 to 1.134.0 in /tools/lsp/client in the npm-version-updates group across 1 directory by @​dependabot[bot] in #​1381
• chore(deps): bump softprops/action-gh-release from 2.4.1 to 3.0.2 by @​dependabot[bot] in #​1382
• chore: update e2e test for termination and fix ALLOW_CRD_DELETION correctly by @​Skarlso in #​1384
• chore(deps): bump the npm-version-updates group across 2 directories with 6 updates by @​dependabot[bot] in #​1387
• chore(deps): bump Go modules, npm packages and GitHub Actions by @​cheeseandcereal in #​1389
• Enable full CEL expressions support for external collection selectors by @​tbarizien in #​1230
• Bump kro version to 0.9.4 with docs cut by @​cheeseandcereal in #​1394

New Contributors

• @​v47 made their first contribution in #​1345
• @​pujitha24 made their first contribution in #​1340
• @​armanfeyzi made their first contribution in #​1307
• @​reshnm made their first contribution in #​1342
• @​RohanKaran made their first contribution in #​1282
• @​n3rdc4ptn made their first contribution in #​1349
• @​immanuwell made their first contribution in #​1380
• @​Skarlso made their first contribution in #​1384
• @​tbarizien made their first contribution in #​1230

Full Changelog: kubernetes-sigs/kro@v0.9.3...v0.9.4

v0.9.3

Compare Source

What's Changed

• cut docs v0.9.2 by @​michaelhtm in #​1281
• Bump upload-pages-artifact to v5 to fix SHA pinning violation by @​michaelhtm in #​1285
• chore(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 in /cmd/kro in the go_modules group across 1 directory by @​dependabot[bot] in #​1272
• Update gcb-docker-gcloud builder image to fix push-images job by @​michaelhtm in #​1286
• Reapply "Emit instance condition telemetry" by @​michaelhtm in #​1287
• update zoom link for community meeting by @​jlbutler in #​1291
• Fix nil pointer dereference in ExternalDocs conversion by @​NicholasBlaskey in #​1299
• fix: instance deletion stuck when SSA field manager owns finalizer by @​NicholasBlaskey in #​1260
• fix: recover panics in dynamic controller instance reconcile by @​cheeseandcereal in #​1311
• pkg/graph: expose options for NewBuilder() by @​neolit123 in #​1305
• fix(cel): accept whole-valued float64 for integer-typed schema fields by @​RanMarkovich in #​1304
• chore: bump go.opentelemetry.io/otel to v1.44.0 to patch CVE by @​NicholasBlaskey in #​1312
• Update 02-conditional-creation.md by @​deogratias-saidi in #​1306
• Update KRO version to 0.9.2 in docs by @​jehof in #​1297
• Fix RGD CRD description examples to match parser behavior by @​iammerus in #​1321
• Add author-defined custom status conditions to RGD instances by @​lalitg327 in #​1301
• fix: build package paths instead of single files in Makefile and CI by @​cheeseandcereal in #​1323
• docs(website): fix broken relative links in overview and resource-basics by @​numb86 in #​1315
• Update condition telemetry to reflect author conditions by @​lalitg327 in #​1325
• docs: Helm does not update CRDs when upgrading to latest by @​johanngoltz in #​1326
• chore(deps): bump the go_modules group across 2 directories with 1 update by @​dependabot[bot] in #​1320
• Compute condition duration metric at scrape time via a Collector by @​lalitg327 in #​1329
• Fix custom conditions status flow and tighten build-time validation by @​cheeseandcereal in #​1331
• KREP-024: Graph — atomic composition primitive by @​ellistarn in #​1302
• feat(graph): allow schema.* references in instance status expressions by @​jakobmoellerdev in #​1300
• cut docs v0.9.3 by @​NicholasBlaskey in #​1333
• set KRO version to 0.9.3 by @​NicholasBlaskey in #​1334

New Contributors

• @​cheeseandcereal made their first contribution in #​1311
• @​neolit123 made their first contribution in #​1305
• @​RanMarkovich made their first contribution in #​1304
• @​deogratias-saidi made their first contribution in #​1306
• @​jehof made their first contribution in #​1297
• @​iammerus made their first contribution in #​1321
• @​lalitg327 made their first contribution in #​1301
• @​numb86 made their first contribution in #​1315
• @​johanngoltz made their first contribution in #​1326

Full Changelog: kubernetes-sigs/kro@v0.9.2...v0.9.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[crossplane-renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading k8s.io/apiextensions-apiserver v0.36.3
go: downloading k8s.io/apimachinery v0.36.3
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading k8s.io/api v0.36.3
go: downloading k8s.io/client-go v0.36.3
go: downloading github.com/google/go-containerregistry v0.22.0
go: downloading k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3
go: downloading k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098
go: downloading k8s.io/apiserver v0.36.3
go: downloading github.com/kubernetes-sigs/kro v0.9.4
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.2
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a
go: downloading go.opentelemetry.io/otel/trace v1.46.0
go: downloading github.com/go-openapi/swag v0.29.1
go: downloading github.com/go-openapi/jsonreference v1.0.1
go: downloading go.opentelemetry.io/otel v1.46.0
go: downloading github.com/mattn/go-isatty v0.0.24
go: downloading github.com/go-openapi/jsonpointer v1.0.0
go: downloading github.com/google/cel-go v0.31.0
go: downloading k8s.io/component-base v0.36.3
go: downloading go.yaml.in/yaml/v3 v3.0.5
go: downloading github.com/fxamacker/cbor/v2 v2.9.3
go: downloading go.opentelemetry.io/otel/metric v1.46.0
go: downloading github.com/go-openapi/swag/cmdutils v0.29.1
go: downloading github.com/go-openapi/swag/conv v0.29.1
go: downloading github.com/go-openapi/swag/fileutils v0.29.1
go: downloading github.com/go-openapi/swag/jsonutils v0.29.1
go: downloading github.com/go-openapi/swag/loading v0.29.1
go: downloading github.com/go-openapi/swag/mangling v0.29.1
go: downloading github.com/go-openapi/swag/netutils v0.29.1
go: downloading github.com/go-openapi/swag/stringutils v0.29.1
go: downloading github.com/go-openapi/swag/typeutils v0.29.1
go: downloading github.com/go-openapi/swag/yamlutils v0.29.1
go: downloading github.com/fatih/color v1.19.0
go: downloading cel.dev/expr v0.25.3
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260831171406-18b4a7587f8a
go: downloading github.com/prometheus/client_golang v1.24.1
go: downloading github.com/prometheus/client_model v0.6.3
go: downloading github.com/prometheus/procfs v0.22.0
go: downloading k8s.io/code-generator v0.36.3
go: downloading k8s.io/streaming v0.36.3
go: downloading github.com/mattn/go-colorable v0.1.15
go: downloading github.com/prometheus/common v0.71.0
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0
go: downloading golang.org/x/exp v0.0.0-20260824195058-e88cd73687aa
go: downloading github.com/go-openapi/swag/pools v0.29.1
go: downloading k8s.io/api v0.37.0
go: github.com/crossplane/cli/v2/internal/project/helm imports
	helm.sh/helm/v3/pkg/action imports
	helm.sh/helm/v3/pkg/kube imports
	k8s.io/kubectl/pkg/cmd/util imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
go: downloading github.com/google/go-containerregistry v0.22.0
go: downloading github.com/kubernetes-sigs/kro v0.9.4
go: downloading github.com/stretchr/testify v1.12.1
go: downloading github.com/onsi/ginkgo/v2 v2.32.1
go: downloading github.com/onsi/gomega v1.43.0
go: downloading go.opentelemetry.io/otel v1.46.0
go: downloading github.com/go-openapi/swag/jsonutils v0.29.1
go: downloading github.com/go-openapi/swag v0.29.1
go: downloading github.com/google/pprof v0.0.0-20260830191439-4932ad3515ea
go: downloading k8s.io/apimachinery v0.36.3
go: downloading k8s.io/apiextensions-apiserver v0.36.3
go: downloading k8s.io/api v0.36.3
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3
go: downloading k8s.io/client-go v0.36.3
go: downloading k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098
go: downloading k8s.io/apiserver v0.36.3
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.2
go: downloading github.com/fxamacker/cbor/v2 v2.9.3
go: downloading go.yaml.in/yaml/v3 v3.0.5
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260831171406-18b4a7587f8a
go: downloading go.opentelemetry.io/otel/trace v1.46.0
go: downloading github.com/go-openapi/jsonreference v1.0.1
go: downloading github.com/go-openapi/jsonpointer v1.0.0
go: downloading github.com/mattn/go-isatty v0.0.24
go: downloading k8s.io/component-base v0.36.3
go: downloading github.com/google/cel-go v0.31.0
go: downloading go.opentelemetry.io/otel/metric v1.46.0
go: downloading github.com/prometheus/client_golang v1.24.1
go: downloading github.com/go-openapi/swag/cmdutils v0.29.1
go: downloading github.com/go-openapi/swag/conv v0.29.1
go: downloading github.com/go-openapi/swag/fileutils v0.29.1
go: downloading github.com/go-openapi/swag/loading v0.29.1
go: downloading github.com/go-openapi/swag/mangling v0.29.1
go: downloading github.com/go-openapi/swag/netutils v0.29.1
go: downloading github.com/go-openapi/swag/stringutils v0.29.1
go: downloading github.com/go-openapi/swag/typeutils v0.29.1
go: downloading github.com/go-openapi/swag/yamlutils v0.29.1
go: downloading github.com/go-openapi/testify/v2 v2.6.1
go: downloading github.com/fatih/color v1.19.0
go: downloading k8s.io/code-generator v0.36.3
go: downloading cel.dev/expr v0.25.3
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260831171406-18b4a7587f8a
go: downloading github.com/prometheus/client_model v0.6.3
go: downloading github.com/prometheus/procfs v0.22.0
go: downloading github.com/prometheus/common v0.71.0
go: downloading k8s.io/streaming v0.36.3
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.29.1
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.6.1
go: downloading github.com/mattn/go-colorable v0.1.15
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0
go: downloading github.com/coreos/go-systemd/v22 v22.7.0
go: downloading golang.org/x/exp v0.0.0-20260824195058-e88cd73687aa
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.1.0
go: downloading github.com/go-openapi/swag/pools v0.29.1
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3
go: finding module for package k8s.io/api/scheduling/v1alpha1
go: downloading k8s.io/api v0.37.0
go: github.com/crossplane/cli/v2/internal/project/helm imports
	helm.sh/helm/v3/pkg/action imports
	helm.sh/helm/v3/pkg/kube imports
	k8s.io/kubectl/pkg/cmd/util imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: module k8s.io/api@latest found (v0.37.0), but does not contain package k8s.io/api/scheduling/v1alpha1