chore(deps): bump the k8s group with 2 updates

[dependabot]

Bumps the k8s group with 2 updates: k8s.io/apimachinery and k8s.io/client-go.

Updates k8s.io/apimachinery from 0.36.4 to 0.37.0

Commits

• 7164e39 Update dependencies to v0.37.0 tag
• e55f9ba feat(api): Update node restriction admission to use new API
• cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
• 97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
• f21afab Add validation for camelcase in reason field
• d7ad413 Merge pull request #140782 from dims/update-kube-openapi
• e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
• 464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
• 0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
• 95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.4 to 0.37.0

Commits

• 2807644 Update dependencies to v0.37.0 tag
• 50c6f9b metrics: Register: Fix incorrect assignment
• 49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
• 74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
• 2bf14f2 Merge pull request #140990 from xigang/revert-140448
• 7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
• df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
• 45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
• 9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
• 694f4eb apidiff: ignore adding entirely new API groups
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[saadqbal]

Checked the group is actually coherent: api, apimachinery, client-go and streaming all land on v0.37.0 together, no laggard, and the go directive stays at 1.26.0 so the README's Go floor and the golangci go: pin don't go stale.

This is a k8s minor rather than a patch, and we're a deep client-go consumer (typed clients in 8 packages, plus remotecommand exec and the spdy portforward path in internal/push), so the reassuring part is that Integration (kind) and Offboard teardown (k3d) both ran and passed on top of the 8-platform build — runtime evidence, not just a compile. No stated minimum cluster version anywhere to contradict, and no ServerVersion() gating in the tree.

Trivial, next time you're in there: the comment at go.mod:4 still attributes the 1.26 floor to "the k8s.io/* v0.36.x deps". Still true that the floor is 1.26, just now it's v0.37.0 holding it there.