This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [registry.k8s.io/kube-state-metrics/kube-state-metrics](https://github.com/kubernetes/kube-state-metrics) | patch | `v2.19.0` → `v2.19.1` |
---
### Release Notes
<details>
<summary>kubernetes/kube-state-metrics (registry.k8s.io/kube-state-metrics/kube-state-metrics)</summary>
### [`v2.19.1`](https://github.com/kubernetes/kube-state-metrics/blob/HEAD/CHANGELOG.md#v2191--2026-06-10)
[Compare Source](https://github.com/kubernetes/kube-state-metrics/compare/v2.19.0...v2.19.1)
- This release builds with Go `v1.26.4`
- This release builds with `k8s.io/client-go`: `v0.35.4`
- \[SECURITY] Upgrade Go toolchain to address CVE-2026-42504 (GO-2026-5038) by [@​slessard](https://github.com/slessard) in [#​2982](https://github.com/kubernetes/kube-state-metrics/pull/2982)
- \[SECURITY] Fix several high-scoring CVEs (golang.org/x/net, oauth2, sys, term, text) by [@​slessard](https://github.com/slessard) in [#​2981](https://github.com/kubernetes/kube-state-metrics/pull/2981)
- \[BUGFIX] Fix watch-list bookmarks with sharding (WatchListClient compatibility) by [@​jfremy-openai](https://github.com/jfremy-openai) in [#​2974](https://github.com/kubernetes/kube-state-metrics/pull/2974)
- \[BUGFIX] Don't panic on CronJobs with unparseable schedules by [@​atosatto](https://github.com/atosatto) in [#​2978](https://github.com/kubernetes/kube-state-metrics/pull/2978)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIyMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v2.19.0→v2.19.1Release Notes
kubernetes/kube-state-metrics (registry.k8s.io/kube-state-metrics/kube-state-metrics)
v2.19.1Compare Source
This release builds with Go
v1.26.4This release builds with
k8s.io/client-go:v0.35.4[SECURITY] Upgrade Go toolchain to address CVE-2026-42504 (GO-2026-5038) by @slessard in #2982
[SECURITY] Fix several high-scoring CVEs (golang.org/x/net, oauth2, sys, term, text) by @slessard in #2981
[BUGFIX] Fix watch-list bookmarks with sharding (WatchListClient compatibility) by @jfremy-openai in #2974
[BUGFIX] Don't panic on CronJobs with unparseable schedules by @atosatto in #2978
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.