electrocucaracha · github-actions · Jun 12, 2026 · Jun 19, 2026
diff --git a/.github/workflows/diagram.yml b/.github/workflows/diagram.yml
@@ -23,7 +23,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Update diagram

diff --git a/.github/workflows/distros.yml b/.github/workflows/distros.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write # for technote-space/create-pr-action to create a PR
     runs-on: vm-self-hosted
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # 5.0.5

diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -19,7 +19,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Setup Go
@@ -36,7 +36,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Check broken links
@@ -49,7 +49,7 @@ jobs:
       models: read
       issues: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -76,7 +76,7 @@ jobs:
         if: failure()
         run: |
           find ./super-linter-output/super-linter/ -name '*.json' -exec sh -c 'jq -e ".Exitval != 0" "$1" >/dev/null && printf "%s\0" "$1"' _ {} \; | xargs -0 jq -s '.' > linter-errors.json
-      - uses: actions/ai-inference@af6ad2c4ac4edf01884054fc3a6caa6d2567c13a # 2.0.8
+      - uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # 2.1.1
         id: ai-linter-analysis
         if: failure()
         with:
@@ -116,7 +116,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Install tox

diff --git a/.github/workflows/on-demand_ci.yml b/.github/workflows/on-demand_ci.yml
@@ -62,7 +62,7 @@ jobs:
             int_tests: "virtink"
             cert_manager_enabled: true
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: ./.github/actions/vagrant-up
@@ -88,7 +88,7 @@ jobs:
     outputs:
       scripts: ${{ steps.filter.outputs.scripts }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # 4.0.1
@@ -107,7 +107,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Run the sh-checker
@@ -126,7 +126,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Install ShellSpec

diff --git a/.github/workflows/on-demand_corner.yml b/.github/workflows/on-demand_corner.yml
@@ -40,7 +40,7 @@ jobs:
           - test: kubewarden
             cert-mgr: true
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: ./.github/actions/vagrant-up

diff --git a/.github/workflows/on-demand_molecule.yml b/.github/workflows/on-demand_molecule.yml
@@ -25,7 +25,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
@@ -52,7 +52,7 @@ jobs:
     outputs:
       environments: ${{ steps.filter.outputs.changes }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # 4.0.1
@@ -93,7 +93,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
         if: matrix.environment != 'reqs'

diff --git a/.github/workflows/on-demand_multus.yml b/.github/workflows/on-demand_multus.yml
@@ -36,7 +36,7 @@ jobs:
       KRD_MULTUS_ENABLED: true
       PKG_KREW_PLUGINS_LIST: "cert-manager"
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Deploy services

diff --git a/.github/workflows/scheduled_ci.yml b/.github/workflows/scheduled_ci.yml
@@ -24,7 +24,7 @@ jobs:
       KRD_ANSIBLE_DEBUG: true
       KRD_CONTAINER_RUNTIME: crio
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Deploy services

diff --git a/.github/workflows/scheduled_distros.yml b/.github/workflows/scheduled_distros.yml
@@ -19,7 +19,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Get matrix values
@@ -51,7 +51,7 @@ jobs:
       matrix:
         include: ${{ fromJson(needs.generate-json-matrix.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - name: Running Flannel CNI with ContainerD runtime

diff --git a/.github/workflows/spell.yml b/.github/workflows/spell.yml
@@ -24,7 +24,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: reviewdog/action-misspell@d6429416b12b09b4e2768307d53bef58d172e962 # 1.27.0
@@ -36,7 +36,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: false
       - uses: igsekor/pyspelling-any@44278deea34ea69d8f0d5179ac409c140b0a2f5a # 1.0.5

diff --git a/.github/workflows/triage.yml b/.github/workflows/triage.yml
@@ -17,6 +17,6 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # 6.0.1
+      - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # 6.1.0
         with:
           repo-token: "${{ secrets.GITHUB_TOKEN }}"
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write # for technote-space/create-pr-action to create a PR
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: true
           # Fine-grained PAT with contents:write and workflows:write scopes
@@ -41,7 +41,7 @@ jobs:
       contents: write # for technote-space/create-pr-action to push code
       pull-requests: write # for technote-space/create-pr-action to create a PR
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           persist-credentials: true
       - uses: technote-space/create-pr-action@91114507cf92349bec0a9a501c2edf1635427bc5 # 2.1.4

diff --git a/README.md b/README.md
@@ -118,7 +118,7 @@ KRD relies on environment variables to control behavior and customization. Below
 | KRD_ANSIBLE_DEBUG                     | false                                          | Enables Ansible verbose execution                                               |
 | PKG_DEBUG                             | false                                          | Enables cURL package installer verbose execution                                |
 | KRD_KUBE_VERSION                      | v1.33.7                                        | Specifies the Kubernetes version to be upgraded                                 |
-| KRD_KUBESPRAY_VERSION                 | v2.30.0                                        | Specifies the Kubespray version to be used during the upgrade process           |
+| KRD_KUBESPRAY_VERSION                 | v2.31.0                                        | Specifies the Kubespray version to be used during the upgrade process           |
 | KRD_KUBESPRAY_REPO                    | `https://github.com/kubernetes-sigs/kubespray` | Specifies the Git repository to fetch the Kubespray's source code               |
 | KRD_ENABLE_TESTS                      | false                                          | Enables the functional tests during the deployment process                      |
 | KRD_HELM_CHART                        |                                                | Specifies the Helm chart to be installed                                        |

diff --git a/ci/check.sh b/ci/check.sh
@@ -56,7 +56,7 @@ function _run_assertions {
         assert_contains "$(command -v kubectl)" "kubectl"
         assert_are_equal "${KRD_KUBE_VERSION:-1.33.7}" "$(kubectl version -o yaml | grep gitVersion | awk 'FNR==2{ print $2}')"
         pushd /opt/kubespray >/dev/null
-        assert_are_equal "${KRD_KUBESPRAY_VERSION:-v2.30.0}" "$(git describe --abbrev=0 --tags)"
+        assert_are_equal "${KRD_KUBESPRAY_VERSION:-v2.31.0}" "$(git describe --abbrev=0 --tags)"
         popd >/dev/null
     else
         assert_contains "$($VAGRANT_CMD_SSH_INSTALLER "command -v kubectl")" "kubectl"

diff --git a/galaxy-requirements.yml b/galaxy-requirements.yml
@@ -15,15 +15,15 @@ roles:
   - name: andrewrothstein.gcc-toolbox
     version: v1.1.10
   - name: andrewrothstein.kind
-    version: v1.2.17
+    version: v1.2.18
   - name: andrewrothstein.kubectl
-    version: v1.5.2
+    version: v1.5.5
 collections:
   - name: kubernetes.core
     version: 6.4.0
   - name: community.docker
-    version: 5.2.0
+    version: 5.2.1
   - name: ansible.posix
-    version: 2.1.0
+    version: 2.2.0
   - name: community.general
-    version: 12.6.0
+    version: 13.1.0
diff --git a/kubespray_images.tpl b/kubespray_images.tpl
@@ -1,7 +1,7 @@
 registry.k8s.io/coredns/coredns:v1.8.6
 registry.k8s.io/cpa/cluster-proportional-autoscaler-amd64:1.8.5
 registry.k8s.io/dns/k8s-dns-node-cache:1.25.0
-registry.k8s.io/ingress-nginx/controller:v1.13.3
+registry.k8s.io/ingress-nginx/controller:v
 registry.k8s.io/kube-apiserver:$kube_version
 registry.k8s.io/kube-controller-manager:$kube_version
 registry.k8s.io/kube-proxy:$kube_version

diff --git a/playbooks/configure-addons.yml b/playbooks/configure-addons.yml
@@ -20,7 +20,7 @@
       when: ansible_distribution == 'Ubuntu'
     - name: Install kubernetes python package
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
   roles:
     - sriov_cni
 - name: Install SR-IOV Network Device Plugin
@@ -36,7 +36,7 @@
       when: ansible_distribution == 'Ubuntu'
     - name: Install kubernetes python package
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
   roles:
     - sriov_plugin
 - name: Install Node Feature Discovery add-on
@@ -50,7 +50,7 @@
       when: ansible_distribution == 'Ubuntu'
     - name: Install kubernetes python package
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
   roles:
     - nfd
 - name: Label worker nodes with pmem devices
@@ -64,7 +64,7 @@
       when: ansible_distribution == 'Ubuntu'
     - name: Install kubernetes python package
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
     - name: Check if pmem device exists
       ansible.builtin.stat:
         path: /dev/pmem0
@@ -92,7 +92,7 @@
       when: ansible_distribution == 'Ubuntu'
     - name: Install kubernetes python package
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
   tags: pmem
   roles:
     - role: andrewrothstein.gcc-toolbox
@@ -196,6 +196,6 @@
       when: ansible_distribution == 'Ubuntu'
     - name: Install kubernetes python package
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
   roles:
     - qat_plugin
diff --git a/playbooks/krd-vars.yml b/playbooks/krd-vars.yml
@@ -7,33 +7,33 @@
 # which accompanies this distribution, and is available at
 # http://www.apache.org/licenses/LICENSE-2.0
 ##############################################################################
-kpt_version: 1.0.0-beta.62
+kpt_version: 1.0.0-beta.65
 go_version: 1.15.3
-kubespray_version: v2.30.0
-istio_version: 1.29.2
+kubespray_version: v2.31.0
+istio_version: 1.30.1
 cfssl_version: 1.6.5
 sonobuoy_version: 0.57.3
 mitogen_version: 0.2.10
 # Knative versions
-kn_version: knative-v1.21.0
-knative_serving_version: knative-v1.21.2
-knative_eventing_version: v0.48.2
+kn_version: knative-v1.22.1
+knative_serving_version: knative-v1.22.1
+knative_eventing_version: v0.49.2
 ## Knative Sandbox versions
-net_kourier_version: knative-v1.21.0
-net_istio_version: vknative-v1.21.3
+net_kourier_version: knative-v1.22.1
+net_istio_version: vknative-v1.22.1
 net_certmanager_version: vknative-v1.14.0
 octant_version: 0.25.1
-kube-ovn_version: v1.16.0
-kubevirt_version: v1.8.2
+kube-ovn_version: v1.16.2
+kubevirt_version: v1.8.4
 containerized_data_importer_version: v1.65.0
 virtink_version: v0.17.0
 kubesphere_version: v4.1.3
-metallb_version: v0.15.3
+metallb_version: v0.16.1
 qat_plugin_mode: "{{ lookup('env', 'KRD_QAT_PLUGIN_MODE') | default('dpdk') }}"
 qat_plugin_version: "0.15.0"
-argocd_version: v3.4.0-rc6
-tekton_version: v0.79.0
+argocd_version: v3.5.0-rc1
+tekton_version: v0.80.0
 kubevirt_tekton_tasks_version: v0.25.0
 action_runner_controller_version: 0.10.1
-kagent_version: 0.9.0
-external_snapshotter_version: v8.5.0
+kagent_version: 0.9.9
+external_snapshotter_version: v8.6.0
diff --git a/playbooks/roles/pmem/defaults/main.yml b/playbooks/roles/pmem/defaults/main.yml
@@ -9,7 +9,7 @@
 ##############################################################################
 pmem_template_folder: "/tmp/pmem_k8s"
 pmem_version: v1.1.0
-pmem_driver_registrar_version: v2.16.0
-pmem_csi_provisioner_version: v6.2.0
+pmem_driver_registrar_version: v2.17.0
+pmem_csi_provisioner_version: v6.3.0
 pmem_cfssl_version: 1.6.5
 pmem_namespace: pmem-csi
diff --git a/playbooks/roles/pmem/molecule/default/prepare.yml b/playbooks/roles/pmem/molecule/default/prepare.yml
@@ -32,7 +32,7 @@
     - name: Install kubernetes python package
       become: true
       ansible.builtin.pip:
-        name: kubernetes==35.0.0
+        name: kubernetes==36.0.2
     - name: Load krd variables
       ansible.builtin.include_vars:
         file: ../../../../krd-vars.yml