build(deps): bump k8s.io/apimachinery from 0.34.1 to 0.36.2

Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.34.1 to 0.36.2.
- [Commits](kubernetes/apimachinery@v0.34.1...v0.36.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -10,8 +10,8 @@ on:
 
 env:
   # Common versions
-  GO_VERSION: "1.24.6"
-  GOLANGCI_VERSION: "v2.1.2"
+  GO_VERSION: "1.26.2"
+  GOLANGCI_VERSION: "v2.12.2"
   DOCKER_BUILDX_VERSION: "v0.23.0"
 
 jobs:

.github/workflows/publish-provider-package.yaml

@@ -9,7 +9,7 @@ on:
         required: false
       go-version:
         description: 'Go version to use if building needs to be done'
-        default: '1.24'
+        default: '1.26'
         required: false
 
 jobs:

.golangci.yml

@@ -75,6 +75,7 @@ linters:
           - errcheck
           - exportloopref
           - gocyclo
+          - goconst
           - gosec
           - unparam
         path: _test(ing)?\.go
@@ -88,6 +89,10 @@ linters:
       - linters:
           - staticcheck
         text: 'SA3000:'
+      - linters:
+          - staticcheck
+        path: internal/data-patcher/patch.go
+        text: 'SA1019:'
       - linters:
           - gosec
         text: 'G101:'
@@ -105,6 +110,8 @@ linters:
 issues:
   max-same-issues: 0
   new: false
+run:
+  go: "1.26"
 formatters:
   enable:
     - gofmt

Makefile

@@ -33,7 +33,7 @@ GO_STATIC_PACKAGES = $(GO_PROJECT)/cmd/provider
 GO_LDFLAGS += -X $(GO_PROJECT)/internal/version.Version=$(VERSION)
 GO_SUBDIRS += cmd internal apis
 GO111MODULE = on
-GOLANGCILINT_VERSION = 2.1.2
+GOLANGCILINT_VERSION = 2.12.2
 -include build/makelib/golang.mk
 
 # ====================================================================================

apis/common/constants.go

@@ -22,6 +22,8 @@ const (
 	ActionObserve = "OBSERVE"
 	ActionUpdate  = "UPDATE"
 	ActionRemove  = "REMOVE"
+
+	DefaultProviderConfigName = "default"
 )
 
 // ExpectedResponseCheckType constants define how response validation is performed

apis/common/secrets_injections.go

@@ -15,10 +15,12 @@ type SecretInjectionConfig struct {
 	SecretRef SecretRef `json:"secretRef"`
 
 	// SecretKey is the key within the Kubernetes secret where the data will be injected.
+	//
 	// Deprecated: Use KeyMappings for injecting single or multiple keys.
 	SecretKey string `json:"secretKey,omitempty"`
 
 	// ResponsePath is a jq filter expression representing the path in the response where the secret value will be extracted from.
+	//
 	// Deprecated: Use KeyMappings for injecting single or multiple keys.
 	ResponsePath string `json:"responsePath,omitempty"`
 

build

@@ -1,8 +1,6 @@
 module github.com/crossplane-contrib/provider-http
 
-go 1.24.0
-
-toolchain go1.24.6
+go 1.26.0
 
 tool sigs.k8s.io/controller-tools/cmd/controller-gen
 
@@ -13,7 +11,7 @@ require (
 	github.com/google/go-cmp v0.7.0
 	github.com/pkg/errors v0.9.1
 	gopkg.in/alecthomas/kingpin.v2 v2.2.6
-	k8s.io/apimachinery v0.34.1
+	k8s.io/apimachinery v0.36.2
 	k8s.io/client-go v0.34.1
 	sigs.k8s.io/controller-runtime v0.21.0
 )
@@ -29,22 +27,22 @@ require (
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/itchyny/timefmt-go v0.1.8 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
 	go.opentelemetry.io/otel v1.33.0 // indirect
 	go.opentelemetry.io/otel/trace v1.33.0 // indirect
-	go.yaml.in/yaml/v2 v2.4.2 // indirect
+	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/sync v0.13.0 // indirect
+	golang.org/x/sync v0.19.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20241209162323-e6fa225c2576 // indirect
 	google.golang.org/grpc v1.68.1 // indirect
-	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
+	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	k8s.io/code-generator v0.33.0 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250604051438-85fd79dbfd9f // indirect
 	sigs.k8s.io/controller-tools v0.18.0 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.3.2 // indirect
 )
 
 require (
@@ -57,7 +55,7 @@ require (
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/fsnotify/fsnotify v1.7.0 // indirect
-	github.com/go-logr/logr v1.4.2 // indirect
+	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/zapr v1.3.0 // indirect
 	github.com/go-openapi/jsonpointer v0.21.0 // indirect
 	github.com/go-openapi/jsonreference v0.20.2 // indirect
@@ -81,29 +79,29 @@ require (
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/cobra v1.9.1 // indirect
-	github.com/spf13/pflag v1.0.6 // indirect
+	github.com/spf13/pflag v1.0.9 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
 	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
-	golang.org/x/mod v0.24.0 // indirect
-	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/mod v0.31.0 // indirect
+	golang.org/x/net v0.49.0 // indirect
 	golang.org/x/oauth2 v0.27.0 // indirect
-	golang.org/x/sys v0.38.0 // indirect
-	golang.org/x/term v0.31.0 // indirect
-	golang.org/x/text v0.24.0 // indirect
-	golang.org/x/time v0.9.0 // indirect
-	golang.org/x/tools v0.32.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/time v0.14.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
-	google.golang.org/protobuf v1.36.5 // indirect
+	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/api v0.34.1
 	k8s.io/apiextensions-apiserver v0.33.0
 	k8s.io/component-base v0.33.0 // indirect
-	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect
-	k8s.io/utils v0.0.0-20250604170112-4c0f3b243397
-	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
+	k8s.io/klog/v2 v2.140.0 // indirect
+	k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a // indirect
+	k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2
+	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )