build(deps): bump the azure-github-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the azure-github-dependencies group with 2 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azidentity and github.com/Azure/azure-sdk-for-go/sdk/storage/azblob.

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.0

1.14.0 (2026-06-15)

Breaking Changes

These changes affect only code written against a beta version such as v1.14.0-beta.3

• Removed WorkloadIdentityCredentialOptions.EnableAzureProxy. It will return in v1.15.0-beta.1

Bugs Fixed

• AzureDeveloperCLICredential improved reporting of error messages returned from azd

Other Changes

• Returned azidentity errors include links to the troubleshooting guide when appropriate
• This module now requires a minimum Go version of 1.25
• Upgraded dependencies

Commits

• 0495c20 Prep azcore 1.14.0 for release (#23293)
• 217edee fix(generator tool): filter tsp-client diagnostics log (#23292)
• 023c88f Increment package version after release of azidentity (#23290)
• 17f3361 Sync eng/common directory with azure-sdk-tools for PR 8760 (#23271)
• f5f3234 bump proxy to one with an audit log and more correct locking (#23288)
• d707091 Prepare azidentity v1.8.0-beta.2 for release (#23289)
• 84d213c NewManagedIdentityCredential returns an error for unsupported ID options (#23...
• ea67e9c azcontainerregistry: move method to function (#23270)
• 40dad0a fix (#23287)
• a368082 fix generator tool: ExecuteGoGenerate func (#23286)
• Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.0

1.8.0 (2026-06-15)

Features Added

• Includes all features from 1.8.0-beta.1 and 1.8.0-beta.2

sdk/storage/azblob/v1.8.0-beta.2

1.8.0-beta.2 (2026-06-03)

Features Added

• Added support for the Expect: 100-continue HTTP header on requests with a body. The new ExpectContinueBehavior field on ClientOptions configures the behavior via ExpectContinueOptions. By default (ExpectContinueModeApplyOnThrottle) the header is sent for one minute after a 429, 500, or 503 response is received; the interval can be overridden via ExpectContinueOptions.ThrottleInterval. Other modes are ExpectContinueModeOn (always send) and ExpectContinueModeOff (never send). Set the environment variable AZURE_STORAGE_DISABLE_EXPECT_CONTINUE_HEADER=true to disable the feature regardless of ClientOptions.

Commits

• 42def97 Add breaking changes to release notes (#21696)
• 112db83 Azcore v1.8.0 (#21694)
• 204a3c4 Prep azcore v1.7.2 for release (#21506)
• 89497f5 Add changelog entry for WASM fix (#21493)
• 0414a4b Transport dialer: setting nil for wasm build (#21451)
• b1db0be Enable TLS renegotiation (#21182)
• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Updated Azure SDK dependencies to newer minor versions for improved compatibility and stability.
  • Updated Go module and toolchain-related dependencies to newer versions, improving security, performance, and overall maintenance.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 1ad31588-e4db-4076-a12b-350e42116b4e

📥 Commits

Reviewing files that changed from the base of the PR and between 68ff8b7 and e18d8b2.

⛔ Files ignored due to path filters (109)

• go.sum is excluded by !**/*.sum
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/TROUBLESHOOTING.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/authentication_record.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azidentity.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_cli_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_developer_cli_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/azure_pipelines_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/chained_token_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/ci.yml is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_assertion_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_certificate_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/client_secret_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/confidential_client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/default_azure_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/developer_credential_util.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/device_code_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/environment_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/errors.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/go.work is excluded by !**/*.work, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/interactive_browser_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/customtokenproxy/transport.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/logging.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/managed_identity_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/on_behalf_of_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/public_client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/username_password_credential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azidentity/workload_identity.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/appendblob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/assets.json is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blob/constants.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blob/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blockblob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/common.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/container/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/container/constants.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/container/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/base/clients.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/base/expect_continue.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/exported/expect_continue.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/exported/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/autorest.md is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/constants.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_appendblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_blob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_blockblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_constants.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_container_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_models.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_pageblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_responses.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_service_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/pageblob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/sas/service.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/service/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/service/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/blake2b/go125.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/chacha20poly1305/chacha20poly1305_amd64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/chacha20poly1305/chacha20poly1305_amd64.s is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/pkcs12/crypto.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/pkcs12/mac.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/certs.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/channel.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/cipher.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/client_auth.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/connection.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/control.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/kex.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/keys.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/mux.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/server.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/ssh/session.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/html/entity.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/html/escape.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/html/foreign.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/html/parse.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/html/token.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/server_wrap.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/transport_wrap.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sync/errgroup/errgroup.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sync/singleflight/singleflight.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_386.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_arm.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_mips.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/go/ast/edge/edge.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/go/packages/golist.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/go/packages/packages.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/go/types/objectpath/objectpath.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/gcimporter/ureader.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/gocommand/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/modules.txt is excluded by !vendor/**, !**/vendor/**

📒 Files selected for processing (1)

• go.mod

🚧 Files skipped from review as they are similar to previous changes (1)

• go.mod

---

📝 Walkthrough

Walkthrough

The go.mod file receives version bumps across two dependency groups. Azure SDK modules azidentity and azblob are incremented to v1.14.0 and v1.8.0 respectively. Direct golang.org/x dependencies crypto, net, and sync are updated to v0.53.0, v0.56.0, and v0.21.0. Indirect golang.org/x toolchain modules mod, sys, term, text, and tools each receive one minor version increment. No exported Go code is modified.

Possibly related PRs

• openshift/hypershift#8684: Also updates golang.org/x/net and golang.org/x/sys version pins in go.mod, overlapping directly with this PR's module version changes.

🚥 Pre-merge checks | ✅ 10 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Ipv6 And Disconnected Network Test Compatibility	⚠️ Warning	New e2e tests added include hardcoded IPv4 addresses (127.0.0.1, 192.168.x), IPv4-only IP parsing (To4()), and external registry references (quay.io, registry.redhat.io) incompatible with IPv6-only...	Use GetIPAddressFamily() to detect cluster IP family and adapt tests; replace hardcoded 127.0.0.1 with ::1 for IPv6; use net.JoinHostPort(); add [Skipped:Disconnected] tags for tests requiring external registries or internet access.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating Azure SDK dependencies (azidentity and azblob) in the go.mod file through a Dependabot group update.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	This PR only modifies go.mod with dependency version updates (Azure SDK and golang.org/x packages). No test files were added or modified, so the Ginkgo test name stability check is not applicable.
Test Structure And Quality	✅ Passed	Ginkgo test files in the PR demonstrate excellent quality: tests have single responsibility, use BeforeEach/DeferCleanup for setup/cleanup, include appropriate timeouts on cluster operations, and p...
Topology-Aware Scheduling Compatibility	✅ Passed	This PR only modifies go.mod dependency versions (azidentity v1.14.0, azblob v1.8.0, golang.org/x/* packages). It does not add/modify deployment manifests, operator code, or controllers that would...
No-Weak-Crypto	✅ Passed	No weak cryptography detected. The PR only updates go.mod dependencies (azidentity, azblob, golang.org/x modules) with no weak crypto algorithms (MD5, SHA1, DES, RC4, etc.), custom crypto implement...
Container-Privileges	✅ Passed	PR only updates Azure SDK dependencies in go.mod/go.sum with no modifications to container or K8s manifests. Container-privileges check not applicable.
No-Sensitive-Data-In-Logs	✅ Passed	PR only updates dependency versions in go.mod/go.sum files with no new logging code, no source code changes, and no sensitive data exposure.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/azure-github-dependencies-8c5c46436a

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[hypershift-jira-solve-ci]

I have all the evidence needed. Here is the analysis:

Test Failure Analysis Complete

Job Information

• Prow Job: pull-ci-openshift-hypershift-main-verify-deps
• Build ID: 2067618126400327680
• Target: verify-deps
• PR: build(deps): bump the azure-github-dependencies group across 1 directory with 2 updates #8775
• Status: error
• Description: Pod scheduling timeout.

Test Failure Analysis

Error

Pod scheduling timeout.

0/113 nodes are available: 1 node(s) didn't satisfy existing pods anti-affinity rules,
1 node(s) were unschedulable, 14 node(s) didn't match Pod's node affinity/selector,
5 Insufficient memory, 92 node(s) had untolerated taint(s).
no new claims to deallocate, preemption: 0/113 nodes are available:
107 Preemption is not helpful for scheduling, 2 Insufficient memory,
4 No preemption victims found for incoming pod.

Summary

This failure is not caused by the PR changes — it is a transient CI infrastructure issue. The verify-deps job pod was never scheduled onto a cluster node and timed out after 30 minutes in Pending state. The pod was created at 14:39:10 UTC and the job was terminated at 15:09:11 UTC with status error and description "Pod scheduling timeout." None of the 113 available nodes in the CI cluster could satisfy the pod's scheduling constraints: 92 nodes had untolerated taints, 14 didn't match the multi-arch node affinity/selector (amd64/arm64), 5 had insufficient memory, 1 was unschedulable, and 1 had anti-affinity conflicts. The test code itself (dependency verification) never executed.

Root Cause

The CI cluster experienced resource pressure at the time this job ran (2026-06-18 ~14:26–15:09 UTC). The pod required scheduling onto a node matching kubernetes.io/arch In [amd64, arm64] (with preferred affinity for amd64) and excluded a specific node (ip-10-0-191-142.ec2.internal). Of 113 cluster nodes:

• 92 nodes had taints the pod did not tolerate — the pod spec contains no tolerations, so any tainted node is excluded.
• 14 nodes didn't match the required node affinity/selector (likely non-amd64/arm64 architecture nodes).
• 5 nodes had insufficient memory to fit the pod.
• 1 node was cordoned/unschedulable.
• 1 node violated existing pod anti-affinity rules.

This left zero viable nodes. The Kubernetes scheduler also attempted preemption but could not free resources: 107 nodes were unhelpful for preemption, 2 still had insufficient memory after preemption, and 4 had no viable preemption victims.

After 30 minutes in Pending state, Prow's scheduling timeout killed the job with status error. The verify-deps container never started, and no build log was produced.

This is a CI infrastructure capacity issue, not a code or test defect. The PR's dependency bumps (Azure SDK packages) are unrelated to pod scheduling.

Recommendations

1. Retest the PR — This is a transient infrastructure issue. Re-trigger the job with /retest or /test verify-deps on the PR. The job will likely succeed when cluster capacity is available.
2. No code changes needed — The PR's dependency updates did not contribute to this failure. The pod never ran, so the verify-deps logic was never evaluated.
3. If the failure recurs repeatedly, it may indicate a systemic CI cluster capacity issue — escalate to the CI infrastructure team (Test Platform / DPTP) to investigate node pool sizing and taint configurations.

Evidence

Evidence	Detail
Job result	error (not failure) — indicates infrastructure issue, not test failure
Status description	"Pod scheduling timeout."
Pod phase	Pending — never reached Running
Pod condition	PodScheduled: False, Reason: Unschedulable
Pending duration	30.0 minutes (14:39:10 → 15:09:11 UTC)
Total job duration	42.8 minutes (14:26:25 → 15:09:11 UTC)
Container statuses	None — no containers ever started
Build log	Not produced (pod never ran)
Scheduling breakdown	92 untolerated taints, 14 affinity mismatch, 5 insufficient memory, 1 unschedulable, 1 anti-affinity conflict
Preemption result	Failed — 107 unhelpful, 2 insufficient memory, 4 no victims
Node affinity	Required: arch In [amd64, arm64]; Preferred: amd64 (weight 100)
Pod tolerations	None configured — cannot schedule on any tainted node
Resource requests	CPU: 10m (minimal)

---

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign csrwng for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[bryan-cox]

/close

Fixed in #8784

[openshift-ci]

@bryan-cox: Closed this PR.

Details

In response to this:

/close

Fixed in #8784

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml