fix(deps): align OpenShift and Kubernetes with Go 1.26

.github/workflows/check.yaml

@@ -12,6 +12,19 @@ permissions:
   pull-requests: read
 
 jobs:
+  minimum-go:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Read the minimum Go version
+        id: minimum-go
+        run: echo "version=$(awk '/^go / { print $2; exit }' go.mod)" >> "$GITHUB_OUTPUT"
+      - uses: actions/setup-go@v7
+        with:
+          go-version: ${{ steps.minimum-go.outputs.version }}
+      - name: Test the minimum supported Go version
+        run: GOTOOLCHAIN=local go test ./...
+
   build:
     runs-on: ubuntu-latest
     steps:

README.md

@@ -19,7 +19,7 @@ A lightweight framework for building Kubernetes admission webhooks with automati
 
 ## Requirements
 
-- **Go**: 1.25+
+- **Go**: 1.26.0+
 - **Kubernetes**: 1.16+ (uses `admissionregistration.k8s.io/v1` API)
 
 ## Installation
@@ -179,6 +179,11 @@ CA Bundle ConfigMap:
 
 ## Prerequisites
 
+OpenShift and Kubernetes modules are upgraded together. Keep `k8s.io/kube-openapi`
+at the revision required by Kubernetes: newer commits can use an incompatible
+`structured-merge-diff` major version. Renovate updates the toolchain separately
+while preserving the library's declared minimum Go version.
+
 The framework creates Secrets and ConfigMaps automatically. You need to create the WebhookConfiguration manually or via Helm/Kustomize.
 
 Important: The `MutatingWebhookConfiguration` and/or `ValidatingWebhookConfiguration` must have the same name as `Config.Name`. The framework uses this name to find and patch the `caBundle` field automatically.

go.mod

@@ -1,18 +1,20 @@
 module github.com/jimyag/auto-cert-webhook
 
-go 1.25.5
+go 1.26.0
+
+toolchain go1.27.3
 
 require (
 	github.com/appscode/jsonpatch v1.0.1
 	github.com/kelseyhightower/envconfig v1.4.0
-	github.com/openshift/library-go v0.0.0-20260204080437-623f3f25ebcb
+	github.com/openshift/library-go v0.0.0-20261019145849-b3e46fec8a08
 	github.com/prometheus/client_golang v1.24.1
 	github.com/prometheus/client_model v0.6.2
-	k8s.io/api v0.35.0
-	k8s.io/apimachinery v0.35.0
-	k8s.io/client-go v0.35.0
-	k8s.io/klog/v2 v2.130.1
-	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
+	k8s.io/api v0.37.1
+	k8s.io/apimachinery v0.37.1
+	k8s.io/client-go v0.37.1
+	k8s.io/klog/v2 v2.140.0
+	k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3
 )
 
 require (
@@ -21,7 +23,7 @@ require (
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/emicklei/go-restful/v3 v3.13.0 // indirect
-	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
+	github.com/fxamacker/cbor/v2 v2.9.1 // indirect
 	github.com/go-logr/logr v1.4.4 // indirect
 	github.com/go-openapi/jsonpointer v1.0.0 // indirect
 	github.com/go-openapi/jsonreference v1.0.1 // indirect
@@ -37,16 +39,15 @@ require (
 	github.com/go-openapi/swag/stringutils v0.29.1 // indirect
 	github.com/go-openapi/swag/typeutils v0.29.1 // indirect
 	github.com/go-openapi/swag/yamlutils v0.29.1 // indirect
-	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/gnostic-models v0.7.1 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/openshift/api v0.0.0-20260126183958-606bd613f9f7 // indirect
-	github.com/openshift/client-go v0.0.0-20260108185524-48f4ccfc4e13 // indirect
+	github.com/openshift/api v0.0.0-20261017003925-24b2699a9b32 // indirect
+	github.com/openshift/client-go v0.0.0-20261014115618-03a1e773ff3d // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/common v0.71.0 // indirect
 	github.com/prometheus/procfs v0.22.0 // indirect
@@ -66,11 +67,11 @@ require (
 	google.golang.org/protobuf v1.36.12 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	k8s.io/apiserver v0.35.0 // indirect
-	k8s.io/component-base v0.35.0 // indirect
-	k8s.io/kube-openapi v0.0.0-20251125145642-4e65d59e963e // indirect
+	k8s.io/apiserver v0.37.1 // indirect
+	k8s.io/component-base v0.37.1 // indirect
+	k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v6 v6.3.1 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.4.2 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )