build(deps): bump fabric8.version from 7.9.0 to 8.0.0 by dependabot[bot] · Pull Request #20532 · apache/druid

dependabot · 2026-10-08T23:56:33Z

Bumps fabric8.version from 7.9.0 to 8.0.0.
Updates io.fabric8:kubernetes-model-core from 7.9.0 to 8.0.0

Updates io.fabric8:kubernetes-model-batch from 7.9.0 to 8.0.0

Updates io.fabric8:kubernetes-client-api from 7.9.0 to 8.0.0

Release notes

Sourced from io.fabric8:kubernetes-client-api's releases.

8.0.0 (2026-09-24)

Bugs

Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.

Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide

Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"

Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server

Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)

Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them

Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it

Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server

Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server

Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again

Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)

Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations

Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide

Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>

Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked

Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it

Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen

Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

Fix #7374: Upgrade Jackson from 2.x to 3.2.1

Fix #8096: bump cert-manager from 1.20.2 to 1.21.2

Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a

Fix #8086: bump cluster-api from 1.12.2 to 1.13.6

Fix #8101: bump cluster-api from 1.13.6 to 1.14.2

Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0

Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3

Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1

Fix #8086: bump gateway-api from 1.6.1 to 1.6.2

Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0

Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)

Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396

Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e

Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9

Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf

Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5

Fix #6779: bump Jetty from 11.0.26 to 12.1.13

Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0

Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1

Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

Fix #8142: bump k8s.io/cloud-provider from 0.35.8 to 0.37.0

... (truncated)

Changelog

Sourced from io.fabric8:kubernetes-client-api's changelog.

8.0.0 (2026-09-24)

Bugs

Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.

Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide

Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"

Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server

Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)

Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them

Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it

Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server

Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server

Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again

Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)

Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations

Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide

Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>

Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked

Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it

Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen

Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

Fix #7374: Upgrade Jackson from 2.x to 3.2.1

Fix #8096: bump cert-manager from 1.20.2 to 1.21.2

Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a

Fix #8086: bump cluster-api from 1.12.2 to 1.13.6

Fix #8101: bump cluster-api from 1.13.6 to 1.14.2

Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0

Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3

Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1

Fix #8086: bump gateway-api from 1.6.1 to 1.6.2

Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0

Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)

Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396

Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e

Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9

Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf

Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5

Fix #6779: bump Jetty from 11.0.26 to 12.1.13

Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0

Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1

Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

... (truncated)

Commits

7527367 [RELEASE] Updated project version to v8.0.0
d69ef45 fix(httpclient): send WebSocket pings at Config#websocketPingInterval
1381c91 feat(kubernetes-client-api)!: complete the Kubernetes 1.37 typed DSL (8151)
424b387 feat(kubernetes-client-api,kubernetes-client): add typed DSL accessor… (8042)
cb86d62 chore(deps): update openshift (8148)
5acae27 chore(deps): update dependency org.apache.groovy:groovy-all from 5.1.2 to v5.1.3
0bb81e8 chore(deps): give k8s.io/kube-openapi its own monthly Renovate PR
0012338 chore(deps): update jackson
9730d15 chore(deps): update logging from 2.0.19 to v2.0.20
2afd413 chore(deps): update kubernetes (8142)
Additional commits viewable in compare view

Updates io.fabric8:kubernetes-client from 7.9.0 to 8.0.0

Release notes

Sourced from io.fabric8:kubernetes-client's releases.

8.0.0 (2026-09-24)

Bugs

Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.

Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide

Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"

Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server

Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)

Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them

Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it

Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server

Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server

Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again

Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)

Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations

Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide

Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>

Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked

Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it

Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen

Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

Fix #7374: Upgrade Jackson from 2.x to 3.2.1

Fix #8096: bump cert-manager from 1.20.2 to 1.21.2

Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a

Fix #8086: bump cluster-api from 1.12.2 to 1.13.6

Fix #8101: bump cluster-api from 1.13.6 to 1.14.2

Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0

Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3

Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1

Fix #8086: bump gateway-api from 1.6.1 to 1.6.2

Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0

Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)

Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396

Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e

Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9

Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf

Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5

Fix #6779: bump Jetty from 11.0.26 to 12.1.13

Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0

Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1

Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

Fix #8142: bump k8s.io/cloud-provider from 0.35.8 to 0.37.0

... (truncated)

Changelog

Sourced from io.fabric8:kubernetes-client's changelog.

8.0.0 (2026-09-24)

Bugs

Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.

Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide

Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"

Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server

Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)

Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them

Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it

Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server

Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server

Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again

Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)

Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations

Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide

Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>

Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked

Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it

Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen

Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

Fix #7374: Upgrade Jackson from 2.x to 3.2.1

Fix #8096: bump cert-manager from 1.20.2 to 1.21.2

Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a

Fix #8086: bump cluster-api from 1.12.2 to 1.13.6

Fix #8101: bump cluster-api from 1.13.6 to 1.14.2

Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0

Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3

Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1

Fix #8086: bump gateway-api from 1.6.1 to 1.6.2

Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0

Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)

Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396

Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e

Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9

Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf

Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5

Fix #6779: bump Jetty from 11.0.26 to 12.1.13

Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0

Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1

Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

... (truncated)

Commits

7527367 [RELEASE] Updated project version to v8.0.0
d69ef45 fix(httpclient): send WebSocket pings at Config#websocketPingInterval
1381c91 feat(kubernetes-client-api)!: complete the Kubernetes 1.37 typed DSL (8151)
424b387 feat(kubernetes-client-api,kubernetes-client): add typed DSL accessor… (8042)
cb86d62 chore(deps): update openshift (8148)
5acae27 chore(deps): update dependency org.apache.groovy:groovy-all from 5.1.2 to v5.1.3
0bb81e8 chore(deps): give k8s.io/kube-openapi its own monthly Renovate PR
0012338 chore(deps): update jackson
9730d15 chore(deps): update logging from 2.0.19 to v2.0.20
2afd413 chore(deps): update kubernetes (8142)
Additional commits viewable in compare view

Updates io.fabric8:kubernetes-httpclient-jdk from 7.9.0 to 8.0.0

Release notes

Sourced from io.fabric8:kubernetes-httpclient-jdk's releases.

8.0.0 (2026-09-24)

Bugs

Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.

Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide

Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"

Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server

Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)

Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them

Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it

Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server

Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server

Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again

Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)

Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations

Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide

Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>

Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked

Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it

Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen

Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

Fix #7374: Upgrade Jackson from 2.x to 3.2.1

Fix #8096: bump cert-manager from 1.20.2 to 1.21.2

Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a

Fix #8086: bump cluster-api from 1.12.2 to 1.13.6

Fix #8101: bump cluster-api from 1.13.6 to 1.14.2

Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0

Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3

Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1

Fix #8086: bump gateway-api from 1.6.1 to 1.6.2

Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0

Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)

Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396

Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e

Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9

Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf

Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5

Fix #6779: bump Jetty from 11.0.26 to 12.1.13

Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0

Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0

Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1

Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8

Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

Fix #8142: bump k8s.io/cloud-provider from 0.35.8 to 0.37.0

... (truncated)

Changelog

Sourced from io.fabric8:kubernetes-httpclient-jdk's changelog.

8.0.0 (2026-09-24)

Bugs

Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.

Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide

Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"

Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server

Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)

Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them

Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it

Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server

Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server

Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again

Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)

Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementationsDescription has been truncated

Bumps `fabric8.version` from 7.9.0 to 8.0.0. Updates `io.fabric8:kubernetes-model-core` from 7.9.0 to 8.0.0 Updates `io.fabric8:kubernetes-model-batch` from 7.9.0 to 8.0.0 Updates `io.fabric8:kubernetes-client-api` from 7.9.0 to 8.0.0 - [Release notes](https://github.com/fabric8io/kubernetes-client/releases) - [Changelog](https://github.com/fabric8io/kubernetes-client/blob/main/CHANGELOG.md) - [Commits](fabric8io/kubernetes-client@v7.9.0...v8.0.0) Updates `io.fabric8:kubernetes-client` from 7.9.0 to 8.0.0 - [Release notes](https://github.com/fabric8io/kubernetes-client/releases) - [Changelog](https://github.com/fabric8io/kubernetes-client/blob/main/CHANGELOG.md) - [Commits](fabric8io/kubernetes-client@v7.9.0...v8.0.0) Updates `io.fabric8:kubernetes-httpclient-jdk` from 7.9.0 to 8.0.0 - [Release notes](https://github.com/fabric8io/kubernetes-client/releases) - [Changelog](https://github.com/fabric8io/kubernetes-client/blob/main/CHANGELOG.md) - [Commits](fabric8io/kubernetes-client@v7.9.0...v8.0.0) Updates `io.fabric8:kubernetes-httpclient-okhttp` from 7.9.0 to 8.0.0 - [Release notes](https://github.com/fabric8io/kubernetes-client/releases) - [Changelog](https://github.com/fabric8io/kubernetes-client/blob/main/CHANGELOG.md) - [Commits](fabric8io/kubernetes-client@v7.9.0...v8.0.0) Updates `io.fabric8:kubernetes-httpclient-vertx` from 7.9.0 to 8.0.0 - [Release notes](https://github.com/fabric8io/kubernetes-client/releases) - [Changelog](https://github.com/fabric8io/kubernetes-client/blob/main/CHANGELOG.md) - [Commits](fabric8io/kubernetes-client@v7.9.0...v8.0.0) Updates `io.fabric8:kubernetes-server-mock` from 7.9.0 to 8.0.0 Updates `io.fabric8:mockwebserver` from 7.9.0 to 8.0.0 --- updated-dependencies: - dependency-name: io.fabric8:kubernetes-model-core dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-model-batch dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-client-api dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-client dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-httpclient-jdk dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-httpclient-okhttp dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-httpclient-vertx dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: io.fabric8:kubernetes-server-mock dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: io.fabric8:mockwebserver dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

FrankChen021

This is an automated review by Codex GPT-5.6 Luna(Max).

Compatibility analysis

Fabric8 Kubernetes Client is upgraded from 7.9.0 to 8.0.0. ROUND_1 reviewed the actually published path 7.9.0 → 8.0.0; Maven Central metadata showed no intervening releases. The carried-forward verdict is SAFE for the repaired upgrade and its cumulative target behavior. The repair also reviewed every published Vert.x transition 4.5.31 → 4.5.32 → 4.5.33 → 4.5.34.

API/ABI and runtime: Fabric8 8 requires Java 17, below Druid's Java 25 baseline; Druid's consumed client/model APIs compile and pass extension tests. Fabric8's default transport changes to Vert.x 5, which conflicts with Druid's custom Vert.x 4 factory. The repair follows upstream's supported Vert.x 4 route: exclude the default Vert.x 5 provider and converge the retained modules at 4.5.34. Reviewed Vert.x patches contain release metadata, an HTTP stream-reset fix, TLS/PQC corrections and optional OpenSSL dependency updates, with no removal of Druid-consumed APIs.

Configuration, clients and extension/plugin SPI: Druid explicitly supplies its HTTP factory, preserving its Vert.x 4 options and existing JDK/OkHttp alternatives rather than adopting the new default provider. Factory/configuration tests pass. Serialization/wire and persistence: Fabric8's Jackson 3 compatibility mapper retains Jackson-2-style defaults; Druid uses Fabric8 unmarshalling for Kubernetes pod templates, while Druid task payloads retain the separate Jackson 2 mapper. Pod-template, task-adapter and mock-client tests pass; no Druid custom-resource or storage-format migration was identified.

Transitives and licenses: the repaired graph has consistent Vert.x 4.5.34, separately packaged Jackson 3.2.3 and SnakeYAML Engine 3.1.1. License coverage includes all 37 resolved changed-family runtime artifacts. Jackson's NOTICE and exact bundled FastDoubleParser/Schubfach MIT, Boost and BSD license texts are preserved.

Druid impact

The complete PR changes the root pom.xml Fabric8 property, extensions-core/kubernetes-overlord-extensions/pom.xml, licenses.yaml, and three licenses/bin/jackson3-*.LICENSE files. Relevant consumers include DruidKubernetesClient, DruidKubernetesVertxHttpClientFactory, DynamicConfigPodTemplateSelector, KubernetesPeonClient and task adapters. The bounded build repair retains the existing client transport and aligns test mock-server dependencies. No tracked production or test source code changed.

Validation

ROUND_1 compiled 65 production and 50 test files. The focused mock-client/task-adapter probe passed 54 tests. The full extension Maven test run with -Denforcer.skip=false passed dependency enforcement and ran 395 tests: zero failures, zero errors and one skipped integration test. Dependency tree/list inspection confirmed transport convergence and the resolved versions. The existing scoped license checker passed; its compile-report coverage was supplemented by an exact-version audit of all 37 changed-family runtime artifacts. Release-profile LICENSE/NOTICE generation passed; generated references and NOTICE content were verified, and the three license files match the published JAR byte-for-byte. The complete diff was reviewed and the worktree is clean. The committed whitespace check has only the deliberately preserved published license's trailing blank line; no other whitespace errors were found.

CI gate

Fresh live reads confirm exact head 4fe474a6a71252faabc13eed44fec8d4580b068f, OPEN/non-draft, MERGEABLE and CLEAN. The authoritative rollup state is SUCCESS: all 27 CheckRuns are COMPLETED/SUCCESS, with 0 StatusContexts. Complete GraphQL enumeration reports hasNextPage=false; every reported item succeeded. The old-head packaging, Maven static, strict-compilation and OpenRewrite failures were deterministic dependency-enforcer conflicts. After the repair, all four checks succeeded in Static Checks run 37882463501; unit/integration run 37882463633 also succeeded.

Automation actions

The automation changed the extension POM and license registry and added three published license-text files, then pushed commit 4fe474a6a71252faabc13eed44fec8d4580b068f (build: retain Vert.x 4 transport for Fabric8 8) without force. No jobs were manually rerun. This ROUND_2 approval reuses the recorded ROUND_1 compatibility analysis and updates only the exact-head CI evidence.

No merge was performed.

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 8, 2026

github-actions Bot added the Area - Dependencies label Oct 8, 2026

build: retain Vert.x 4 transport for Fabric8 8

4fe474a

github-actions Bot added the Kubernetes label Oct 9, 2026

FrankChen021 approved these changes Oct 9, 2026

View reviewed changes

FrankChen021 merged commit 66504db into master Oct 10, 2026
27 checks passed

dependabot Bot deleted the dependabot/maven/fabric8.version-8.0.0 branch October 10, 2026 02:11

github-actions Bot added this to the 39.0.0 milestone Oct 10, 2026

This was referenced Oct 11, 2026

Flaky test: QueryVirtualStorageTest.testQueryTooMuchData #20550

Closed

Flaky test dashboard #20437

Open

Navigation Menu

Repository navigation

build(deps): bump fabric8.version from 7.9.0 to 8.0.0 - #20532

build(deps): bump fabric8.version from 7.9.0 to 8.0.0#20532
FrankChen021 merged 2 commits into
masterfrom
dependabot/maven/fabric8.version-8.0.0

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

FrankChen021 left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026

8.0.0 (2026-09-24)

Bugs

Improvements

Dependency Upgrade

8.0.0 (2026-09-24)

Bugs

Improvements

Dependency Upgrade

8.0.0 (2026-09-24)

Bugs

Improvements

Dependency Upgrade

8.0.0 (2026-09-24)

Bugs

Improvements

Dependency Upgrade

8.0.0 (2026-09-24)

Bugs

Improvements

Dependency Upgrade

8.0.0 (2026-09-24)

Bugs

Uh oh!

FrankChen021 left a comment

Choose a reason for hiding this comment

Compatibility analysis

Druid impact

Validation

CI gate

Automation actions

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant