chore(deps): bump sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0

[dependabot]

Bumps sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0.

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.0

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature, which ensures that all writes are reflected in subsequent reads from the default cache-backed client. Stale client reads are arguably the biggest source of friction and sometimes bugs for controller authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

• Dependencies: Bump to k8s.io/* v1.37 (#3579 #3575 #3567 #3561 #3547 #3529 #3524)
• Events: Add new EventRecorder interface (#3509)

✨ New Features

• Client: Add a read-your-own-writes client (#3472)
• Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
• Fakeclient: Add scale subresource support for Apply (#3569)
• Metrics: Allow opt-in for client-go REST client metrics (#3510)
• Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
• Source: Add TypedInformer source (#3520)
• Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

• Cache: Fix goroutine leaks in cache Start() methods (#3565)
• Client: Fix regression in Apply typed error handling (#3515)
• Controller: Unlock when Controller.Start() returns with error (#3545)
• Envtest: Fix envtest process stop on Windows (#3519)
• Fakeclient: Allow updating managedFields through Update (#3585)
• Fakeclient: Fix AddIndex panic when wrapped with an interceptor (#3583)
• Fakeclient: Fix PartialObjectMeta handling (#3571)
• Fakeclient: Support scale subresource get/update for unstructured objects (#3546)
• Fakeclient: Update object on subresource apply (#3570)
• PriorityQueue: Fix PriorityQueue deadlock on shutdown (#3540)
• Testing/Process: Fix process Stop timeout error handling (#3523)

🌱 Others

• LeaderElection: Pass Managers Logger to Leader Elector via Context (#3576)

🌱 CI & linters

• Add copyright header validation & fix findings (#3544)
• Bump to golangci-lint v2.12.1 (#3514)
• Bump to golangci-lint v2.12.2 (#3532)
• Bump to golangci-lint v2.13.1 (#3580)

... (truncated)

Commits

• e8f9455 🐛 fakeclient: Allow updating managedFields through Update (#3585)
• 0cc1315 Merge pull request #3565 from dongjiang1989/fix-leak
• fa96780 🐛 Fix goroutine leaks in cache Start() methods
• 1f5514b ✨ Add a read-your-own-write client (#3472)
• df386c7 🌱 Bump to golangci-lint v2.13.1 (#3580)
• dc7618f Merge pull request #3583 from pujitha24/auto/issue-3582
• 37fe235 🐛 fake: fix AddIndex panic when client is wrapped with an interceptor
• 01c7782 ✨ Allow overriding REST client latency histogram buckets (#3573)
• 857be80 Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-logging
• b1387be Merge pull request #3581 from alvaroaleman/fake-consistent
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	6		0		0	0.07s
✅ ACTION	zizmor	6	0	0		0	1.85s
✅ BASH	bash-exec	13		0		0	0.06s
✅ BASH	shellcheck	13		0		0	2.96s
✅ BASH	shfmt	13	0	0		0	0.06s
✅ COPYPASTE	jscpd	yes		no		no	1.09s
✅ CSS	stylelint	2	0	0		0	2.44s
✅ DOCKERFILE	hadolint	2		0		0	0.13s
✅ EDITORCONFIG	editorconfig-checker	124		0		0	0.25s
✅ HTML	djlint	2		0		0	1.59s
✅ HTML	htmlhint	2		0		0	0.27s
✅ JSON	jsonlint	2		0		0	0.1s
✅ JSON	prettier	2	0	0		0	0.48s
✅ JSON	v8r	2		0		0	1.87s
⚠️ MARKDOWN	markdownlint	13	0	2		0	2.73s
✅ MARKDOWN	markdown-table-formatter	13	0	0		0	0.28s
✅ REPOSITORY	betterleaks	yes		no		no	0.68s
✅ REPOSITORY	checkov	yes		no		no	23.17s
✅ REPOSITORY	git_diff	yes		no		no	0.01s
✅ REPOSITORY	grype	yes		no		no	75.42s
✅ REPOSITORY	osv-scanner	yes		no		no	1.46s
✅ REPOSITORY	secretlint	yes		no		no	2.05s
✅ REPOSITORY	syft	yes		no		no	1.94s
✅ REPOSITORY	trivy	yes		no		no	13.96s
✅ REPOSITORY	trivy-sbom	yes		no		no	0.57s
✅ REPOSITORY	trufflehog	yes		no		no	5.83s
✅ SPELL	lychee	55		0		0	1.63s
✅ YAML	prettier	25	0	0		0	0.87s
✅ YAML	v8r	38		0		0	8.27s
✅ YAML	yamllint	29		0		0	1.05s

Detailed Issues

⚠️ MARKDOWN / markdownlint - 2 errors

CLAUDE.md:1 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "@AGENTS.md"]
GEMINI.md:1 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "@AGENTS.md"]

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[github-code-quality]

Code Coverage Overview

Languages: Go

Go / code-coverage/go

The overall line coverage in commit 9f82aa8 in the dependabot/go_module... branch is 49%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	main	dependabot/go_module... 9f82aa8	+/-
internal/httpsource/config.go	—	100%	—
internal/httpsource/service.go	—	95%	—
internal/contro...t_controller.go	—	91%	—
pkg/featureflag/featureflag.go	—	91%	—
tests/source/fixture/probe.go	—	89%	—
internal/provis.../v1/observer.go	—	73%	—
internal/demopr...duct/handler.go	—	66%	—
internal/registry/handler.go	—	62%	—
tests/source/fixture/source.go	—	41%	—
tests/source/fixture/main.go	—	35%	—