Bump io.fabric8:kubernetes-client from 7.9.0 to 8.0.0

[dependabot]

Bumps io.fabric8:kubernetes-client from 7.9.0 to 8.0.0.

Release notes

Sourced from io.fabric8:kubernetes-client's releases.

8.0.0 (2026-09-24)

Bugs

• Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.
• Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide
• Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"
• Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server
• Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)
• Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them
• Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it
• Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server
• Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server
• Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again
• Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)
• Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations
• Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide
• Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>
• Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked
• Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it
• Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

• Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen
• Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

• Fix #7374: Upgrade Jackson from 2.x to 3.2.1
• Fix #8096: bump cert-manager from 1.20.2 to 1.21.2
• Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a
• Fix #8086: bump cluster-api from 1.12.2 to 1.13.6
• Fix #8101: bump cluster-api from 1.13.6 to 1.14.2
• Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0
• Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3
• Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1
• Fix #8086: bump gateway-api from 1.6.1 to 1.6.2
• Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0
• Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)
• Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396
• Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e
• Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9
• Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf
• Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5
• Fix #6779: bump Jetty from 11.0.26 to 12.1.13
• Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0
• Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1
• Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0
• Fix #8142: bump k8s.io/cloud-provider from 0.35.8 to 0.37.0

... (truncated)

Changelog

Sourced from io.fabric8:kubernetes-client's changelog.

8.0.0 (2026-09-24)

Bugs

• Fix #8105: requests hanging when a retry action, retry decision, or response cleanup throws an exception.
• Fix #7374: (crd-generator) Generated CRDs no longer prune or reject what the client writes: Object, raw Map, List<Object>, raw collection, @JsonUnwrapped and polymorphic properties keep their content, and date and time types only declare a format their values match (Duration, LocalDateTime and the partial types lose date-time). Optional properties get their value type's schema instead of preserving unknown fields, see the migration guide
• Fix #6779: (httpclient-jetty) 401 responses without a WWW-Authenticate header, which is how the API server sends them, are returned with their body instead of failing with "HTTP protocol violation: Authentication challenge without WWW-Authenticate header"
• Fix #6779: (httpclient-jetty, httpclient-vertx, httpclient-vertx-5) A proxy password containing a colon, or a proxy URL with a user and no password, is now used to authenticate with the proxy, instead of falling back to a Proxy-Authorization request header that HTTPS requests carry through the proxy tunnel to the API server
• Fix #6779: A proxy username configured without a password is sent with an empty password instead of null, and a proxy URL with a user and no password as user: instead of user (RFC 7617)
• Fix #8134: (httpclient-jetty) A failed WebSocket handshake no longer calls the listener's onError, the returned future already fails with it. When the handshake was retried, this ended watches and exec/attach sessions before the retry could open them
• Fix #8134: (httpclient-jetty) Credentials for a SOCKS5 proxy are sent to it
• Fix #8134: (httpclient-jetty, httpclient-vertx) Proxy credentials that aren't Basic user:password are only added as a Proxy-Authorization header to the requests an HTTP proxy reads. HTTPS and WSS requests, WebSockets that Vert.x tunnels, and requests through a SOCKS proxy carried them to the API server
• Fix #8134: (httpclient-vertx-5) Proxy credentials that aren't Basic user:password are sent to the HTTP proxy by Vert.x, on the CONNECT too, so HTTPS and WebSocket requests through a proxy that requires them work, and they no longer reach the API server
• Fix #8134: (httpclient-okhttp) A 407 from the API server (through pods/proxy for example) is no longer answered with the proxy credentials, which went through the proxy tunnel to it, and credentials the proxy rejected aren't sent again
• Fix #8140: (httpclient-vertx-5) A request whose connection is closed before it could be written fails with an IOException, and is retried, instead of hanging until the request timeout (seen on Windows)
• Fix #8134: (httpclient-jetty) Cookies set by a response are no longer sent back on later requests and WebSocket upgrades, like with the other HttpClient implementations
• Fix #8109: A java.sql.Date written as yyyy-MM-dd is read as a local date instead of the previous day west of UTC. Year, Month, java.sql.Date and Locale keep their 7.x wire format, mappers you build yourself need the new Jackson2JdkTypesModule, see the migration guide
• Fix #8109: (crd-generator) byte[], ByteBuffer, char[], Year and java.sql.Date schemas match what the client writes (byte[] and ByteBuffer are format: byte strings), so the API server no longer rejects them. @PrinterColumn on a LocalDate is a string column instead of a date column that showed <invalid>
• Fix #8008: (httpclient-vertx-5) Requests with an InputStream body and Expect: 100-continue (binary builds) no longer hang, and an InputStream body of known length is sent with Content-Length instead of chunked
• Fix #8139: (httpclient-okhttp) WebSockets answer the server's Close frame even when the listener doesn't, so port forwarding and custom listeners release the connection instead of waiting for the server to drop it
• Fix #8152: (httpclient-vertx, httpclient-vertx-5, httpclient-jetty, httpclient-jdk) WebSockets send a ping every Config#websocketPingInterval (30s by default), like OkHttp already did, so load balancers that close idle connections no longer drop quiet watches

Improvements

• Fix #8109: (crd-generator) int/Integer and long/Long properties get format: int32 and format: int64, like controller-gen
• Fix #7987: (kubernetes-client-api) withShardSelector accepts a typed ShardSelector (ShardSelector.builder().addShard(0, 4).addShard(2, 4).build()) next to the raw expression String, so the shardRange(...) CEL grammar and its hexadecimal bounds don't have to be written by hand

Dependency Upgrade

• Fix #7374: Upgrade Jackson from 2.x to 3.2.1
• Fix #8096: bump cert-manager from 1.20.2 to 1.21.2
• Fix #8098: bump chaos-mesh api from 4db47f5 to d70b66a
• Fix #8086: bump cluster-api from 1.12.2 to 1.13.6
• Fix #8101: bump cluster-api from 1.13.6 to 1.14.2
• Fix #8101: bump cluster-api-provider-metal3 from 1.13.0 to 1.14.0
• Fix #8133: bump controller-runtime from 0.19.7 to 0.23.3
• Fix #8142: bump controller-runtime from 0.23.3 to 0.25.1
• Fix #8086: bump gateway-api from 1.6.1 to 1.6.2
• Fix #8127: bump istio.io/client-go from 1.30.0 to 1.31.0
• Fix #8148: bump openshift/api from 1cb53e3 (release-4.19) to 231177c (release-4.22)
• Fix #8148: bump openshift/cloud-credential-operator from 0e03b7a to 5c4a396
• Fix #8148: bump openshift/cluster-network-operator from 698e349 to 61de77e
• Fix #8148: bump openshift/cluster-node-tuning-operator from 2ed182b to 039bae9
• Fix #8148: bump openshift/hive/apis from 2d25383 to 8104fcf
• Fix #8148: bump openshift/installer from 1.4.21-pre to 1.4.22-ec5
• Fix #6779: bump Jetty from 11.0.26 to 12.1.13
• Fix #8086: bump k8s.io/api from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/api from 0.35.8 to 0.37.0
• Fix #8086: bump k8s.io/apiextensions-apiserver from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/apimachinery from 0.36.1 to 0.37.0
• Fix #8086: bump k8s.io/autoscaler/vertical-pod-autoscaler from 1.7.0 to 1.7.1
• Fix #8086: bump k8s.io/client-go from 0.35.2 to 0.35.8
• Fix #8142: bump k8s.io/client-go from 0.35.8 to 0.37.0

... (truncated)

Commits

• 7527367 [RELEASE] Updated project version to v8.0.0
• d69ef45 fix(httpclient): send WebSocket pings at Config#websocketPingInterval
• 1381c91 feat(kubernetes-client-api)!: complete the Kubernetes 1.37 typed DSL (8151)
• 424b387 feat(kubernetes-client-api,kubernetes-client): add typed DSL accessor… (8042)
• cb86d62 chore(deps): update openshift (8148)
• 5acae27 chore(deps): update dependency org.apache.groovy:groovy-all from 5.1.2 to v5.1.3
• 0bb81e8 chore(deps): give k8s.io/kube-openapi its own monthly Renovate PR
• 0012338 chore(deps): update jackson
• 9730d15 chore(deps): update logging from 2.0.19 to v2.0.20
• 2afd413 chore(deps): update kubernetes (8142)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)