fix(deps): update non-minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/sap/go-generics	v0.2.54 → v0.2.56			require	patch
go (source)	1.26.0 → 1.26.1			golang	patch
k8s.io/api	v0.35.1 → v0.35.3			require	patch
k8s.io/apiextensions-apiserver	v0.35.1 → v0.35.3			require	patch
k8s.io/apimachinery	v0.35.1 → v0.35.3			require	patch
k8s.io/cli-runtime	v0.35.1 → v0.35.3			require	patch
k8s.io/client-go	v0.35.1 → v0.35.3			require	patch
k8s.io/kube-aggregator	v0.35.1 → v0.35.3			require	patch
node (source)	25.8.0 → 25.8.1			dependencies	patch
postcss (source)	8.5.6 → 8.5.8			devDependencies	patch
sigs.k8s.io/controller-runtime	v0.23.1 → v0.23.3			require	patch

---

Release Notes

sap/go-generics (github.com/sap/go-generics)

v0.2.56

Compare Source

v0.2.55

Compare Source

golang/go (go)

v1.26.1

kubernetes/api (k8s.io/api)

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/cli-runtime (k8s.io/cli-runtime)

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.35.3

Compare Source

v0.35.2

Compare Source

kubernetes/kube-aggregator (k8s.io/kube-aggregator)

v0.35.3

Compare Source

v0.35.2

Compare Source

nodejs/node (node)

v25.8.1: 2026-03-11, Version 25.8.1 (Current), @​aduh95

Compare Source

Notable Changes

• [ea87eea71a] - module: fix extensionless CJS files in "type": "module" packages (Matteo Collina) #​62083

Commits

• [bab750d1b3] - build: do not depend on V8 deps on --without-bundled-v8 builds (Antoine du Hamel) #​62033
• [b26d1c7fcb] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #​60678
• [e362635abf] - crypto: add missing AES dictionaries (Filip Skokan) #​62099
• [6f975db8af] - crypto: fix importKey required argument count check (Filip Skokan) #​62099
• [3beaf9c5fc] - deps: update amaro to 1.1.8 (Node.js GitHub Bot) #​62151
• [53afb0edd8] - deps: update sqlite to 3.52.0 (Node.js GitHub Bot) #​62150
• [a13ed052a1] - deps: update merve to 1.2.0 (Node.js GitHub Bot) #​62149
• [2c850577b7] - deps: patch resb crate (Richard Lau) #​62138
• [37862a6728] - deps: V8: cherry-pick aa0b288 (Richard Lau) #​62136
• [09191ad8b4] - deps: update ada to 3.4.3 (Node.js GitHub Bot) #​62049
• [8d63a178fd] - doc: copyedit addons.md (Antoine du Hamel) #​62071
• [83719ffb64] - doc: correct util.convertProcessSignalToExitCode validation behavior (René) #​62134
• [eeee7c7fb1] - doc: add efekrskl as triager (Efe) #​61876
• [db150b2e69] - doc: fix markdown for expectFailure values (Jacob Smith) #​62100
• [d55a441e60] - doc: add title to index (Aviv Keller) #​62046
• [cc46204b48] - doc: include url.resolve() in DEP0169 application deprecation (Mike McCready) #​62002
• [1d91a7261e] - doc,module: add missing doc for syncHooks.deregister() (Joyee Cheung) #​61959
• [5198573bee] - http: fix use-after-free when freeParser is called during llhttp_execute (Gerhard Stöbich) #​62095
• [f8793f80df] - lib: fix source map url parse in dynamic imports (Chengzhong Wu) #​61990
• [5439d0e0cf] - meta: bump actions/download-artifact from 7.0.0 to 8.0.0 (dependabot[bot]) #​62063
• [27fd21943a] - meta: bump actions/upload-artifact from 6.0.0 to 7.0.0 (dependabot[bot]) #​62062
• [5b266f3295] - meta: bump step-security/harden-runner from 2.14.2 to 2.15.0 (dependabot[bot]) #​62064
• [ea87eea71a] - module: fix extensionless CJS files in "type": "module" packages (Matteo Collina) #​62083
• [851228cd60] - sqlite: handle stmt invalidation (Guilherme Araújo) #​61877
• [19efe60548] - src: expose async context frame debugging helper to JS (Anna Henningsen) #​62103
• [0257e8072f] - src: make AsyncWrap subclass internal field counts explicit (Anna Henningsen) #​62103
• [975dafbe3b] - src: release context frame in AsyncWrap::EmitDestroy (Gerhard Stöbich) #​61995
• [f2c08c7888] - src: use validate_ascii_with_errors instead of validate_ascii (Сковорода Никита Андреевич) #​61122
• [0278461d83] - stream: optimize webstreams pipeTo (Mattias Buelens) #​62079
• [4d62e95bfa] - stream: fix brotli error handling in web compression streams (Filip Skokan) #​62107
• [4bdcaf2865] - stream: improve Web Compression spec compliance (Filip Skokan) #​62107
• [a5b1be2045] - stream: fix UTF-8 character corruption in fast-utf8-stream (Matteo Collina) #​61745
• [5632446c4e] - stream: fix TransformStream race on cancel with pending write (Marco) #​62040
• [f90fa9cd1a] - stream: accept ArrayBuffer in CompressionStream and DecompressionStream (조수민) #​61913
• [00319eaa3a] - test: update WPT for url to c928b19 (Node.js GitHub Bot) #​62148
• [456abc7d20] - test: update WPT for WebCryptoAPI to c9e9558 (Node.js GitHub Bot) #​62147
• [82770cb7d3] - test: improve WPT report runner (Filip Skokan) #​62107
• [cfc847d233] - test: update WPT compression to ae05f5c (Filip Skokan) #​62107
• [80f78f2737] - test: update WPT for WebCryptoAPI to 42e4732 (Node.js GitHub Bot) #​62048
• [8048e0508c] - test: fix skipping behavior for test-runner-run-files-undefined (Antoine du Hamel) #​62026
• [699a6214c6] - tools: revert timezone update GHA workflow to ubuntu-latest (Richard Lau) #​62140
• [1a453b550c] - tools: improve error handling in test426 update script (Rich Trott) #​62121
• [710dde5ee2] - tools: fix --node-builtin-modules-path value in shell.nix (Antoine du Hamel) #​62102
• [dcb1cbb21f] - tools: bump the eslint group across 1 directory with 2 updates (dependabot[bot]) #​62092
• [7d0b758583] - tools: fix daily wpt workflow nighly release version lookup (Filip Skokan) #​62076
• [3e8c816f2e] - tools: fix example in release proposal linter (Richard Lau) #​62074
• [772d3d270d] - tools: bump minimatch from 3.1.3 to 3.1.5 in /tools/clang-format (dependabot[bot]) #​62013
• [92f3b42672] - tools: bump eslint to v10, babel to v8.0.0-rc.2 (Huáng Jùnliàng) #​61905
• [deead95ec5] - url: suppress warnings from url.format/url.resolve inside node_modules (René) #​62005

postcss/postcss (postcss)

v8.5.8

Compare Source

• Fixed Processor#version.

v8.5.7

Compare Source

• Improved source map annotation cleaning performance (by CodeAnt AI).

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.23.3

Compare Source

What's Changed

• 🐛 Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if objects are equal by @​k8s-infra-cherrypick-robot in #​3469

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

v0.23.2

Compare Source

What's Changed

• 🐛 Fix fake client's SSA status patch resource version check by @​k8s-infra-cherrypick-robot in #​3446
• ✨ Reduce memory usage of default webhooks by @​k8s-infra-cherrypick-robot in #​3467

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
k8s.io/code-generator	v0.35.1 -> v0.35.3