fix(deps): bump the kubernetes group across 1 directory with 2 updates

[dependabot]

Bumps the kubernetes group with 2 updates in the / directory: sigs.k8s.io/kustomize/api and sigs.k8s.io/kustomize/kyaml.

Updates sigs.k8s.io/kustomize/api from 0.21.2 to 0.21.3

Release notes

Sourced from sigs.k8s.io/kustomize/api's releases.

api/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

cmd/config/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

kyaml/v0.21.3

#6309: fix: use uncompressed json for openapi schema definition #6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them

Commits

• fec5628 Merge pull request #6320 from koba1t/pinToCmdConfig
• 27c68bd Update cmd/config to v0.21.3
• 73218d9 Merge pull request #6318 from koba1t/pinToKyaml
• a056849 Update kyaml to v0.21.3
• 5d465f7 Merge pull request #6309 from koba1t/fix/reviewable-openapi-bundle
• 0f7a650 fix: use uncompressed json for openapi schema definition
• 0b060a1 Merge pull request #6310 from skitt/openapi
• f741041 Bump to the latest kube-openapi
• 77a76a9 Bump to Go 1.27
• 294c486 Merge pull request #6311 from skitt/slices
• Additional commits viewable in compare view

Updates sigs.k8s.io/kustomize/kyaml from 0.21.2 to 0.21.3

Release notes

Sourced from sigs.k8s.io/kustomize/kyaml's releases.

api/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

cmd/config/v0.21.3

#6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them #6318: Update kyaml to v0.21.3

kyaml/v0.21.3

#6309: fix: use uncompressed json for openapi schema definition #6310: chore: bump to Go 1.27 and latest kube-openapi #6311: chore: use slices functions instead of open-coding them

Commits

• fec5628 Merge pull request #6320 from koba1t/pinToCmdConfig
• 27c68bd Update cmd/config to v0.21.3
• 73218d9 Merge pull request #6318 from koba1t/pinToKyaml
• a056849 Update kyaml to v0.21.3
• 5d465f7 Merge pull request #6309 from koba1t/fix/reviewable-openapi-bundle
• 0f7a650 fix: use uncompressed json for openapi schema definition
• 0b060a1 Merge pull request #6310 from skitt/openapi
• f741041 Bump to the latest kube-openapi
• 77a76a9 Bump to Go 1.27
• 294c486 Merge pull request #6311 from skitt/slices
• Additional commits viewable in compare view

[github-actions]

✅MegaLinter analysis: Success

✅ Linters with no issues

actionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: coordinated Kubernetes dependency compatibility (#7259) | upstream | verified 15 October 2026 at head 3e1dfec9ae3b4ccedfd88d9a4e35892ca618917a.

The current native build fails because Kubernetes apimachinery v0.36.5 expects structured-merge-diff/v6 schema types while the selected kube-openapi update supplies v7 types. This head also raises the Go directive to 1.27.0. These are source-graph failures, so retrying the same head will not repair them.

Fresh official release and module reads still show Kyverno v1.19.1 on Kubernetes v0.36.3 and vcluster v0.37.3 on v0.36.0. The compatible coordinated graph required by #7259 remains unverified. Keep this PR blocked on that issue; no check, dependency contract or upstream pin was bypassed, and no unchanged retry was started.

[devantler]

🤖 Generated by the Agentic Engineer

Blocker: #7259 | upstream | last-verified 2026-10-19: 2026-10-19 Go module proxy: Kyverno v1.19.1 and every v1.19.2 release candidate (rc.1, rc.2, rc3) still require Kubernetes v0.36.x (rc.2: v0.36.4); vcluster v0.38.0-alpha.4 (newest) still requires v0.36.3. Issue #7259 is open. Earlier record (2026-10-17): At head bcc44c4 (Dependabot refresh): 15 checks fail and the branch conflicts with main. 2026-10-17 Go module proxy: stable Kyverno v1.19.1 and its v1.19.2-rc.1 still require Kubernetes v0.36.3; stable vcluster v0.37.3, v0.37.4-rc.1 and v0.38.0-alpha.4 still require v0.36.0 or v0.36.3. Issue #7259 is open. No unchanged retry or check waiver.