Who contributed to Kubernetes on July 20, 2026?

11 developers shipped this update, including sunya-ch, neolit123, alaypatel07, romanbaron, kubernetes-prow[bot], 12345lcr, zhanggbj, and dependabot, and 3 more.

What were the notable Kubernetes updates?

Fix DRA CapacityRequestPolicyRange not support fractional quantities, kubeadm: add MergeMethod to ExtraArgs in v1, and kep-5304: add roundtripping test for metadata API.

@kubernetes

Container orchestration — what platform teams ship on

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

KUBERNETES CORE FIXES DRA FRACTIONAL QUANTITIES, VSPHERE STRIPS MD5 CRYPTO

By RepoJournal · Filed 06:56 UTC on July 20, 2026 · About Kubernetes

11 people shipped this

sunya-ch @sunya-ch 1 cited

neolit123 @neolit123 1 cited

alaypatel07 @alaypatel07 1 cited

romanbaron @romanbaron 1 cited

kubernetes-prow[bot] @kubernetes-prow[bot] 1 cited

12345lcr @12345lcr 1 cited

zhanggbj @zhanggbj 1 cited

esunn0412 @esunn0412 1 cited

LD07P @LD07P 1 cited

dependabot @dependabot

Kubernetes Publisher @k8s-publishing-bot

Dynamic Resource Allocation now handles fractional resource requests, while vSphere cloud provider rips out cryptographically weak MD5 hashing and patches critical CVEs.

In brief

Kubernetes DRA now handles fractional resource quantities. CapacityRequestPolicyRange was silently dropping decimals. that's a real problem for GPU time-slicing and other fine-grained allocation.
vSphere provider ripped out MD5 hashing. it was never doing crypto work, but using a weak hash for anything is a code smell. glad someone cleaned it up.
vSphere cloud provider bumped Go to 1.26.5 and OTel-Go to 1.43.0 to close CVEs. dependency hygiene matters, especially in infrastructure.
Kubernetes fixed mirror pod grace period handling. graceful shutdown for static pods was broken. sounds small. it's not.
kubeadm v1 now supports MergeMethod in ExtraArgs. this is a quality-of-life win for people managing cluster init scripts at scale.

The Dynamic Resource Allocation subsystem shipped a fix for CapacityRequestPolicyRange that now correctly supports fractional quantities [1], resolving a gap in how resource capacity policies handle non-integer requests. This lands alongside a broader set of core improvements: kubeadm gains a MergeMethod for ExtraArgs in v1 [2] to give operators finer control over configuration merging, and the scheduler framework refactored SortedScoredNodes into the framework package [4] to improve code organization as KEP-5304 adds roundtripping tests for metadata API stability [3]. On the infrastructure side, vSphere cloud provider merged critical security work: MD5 hashing has been completely removed [6] after years of cryptographic weakness, and Go was upgraded to 1.26.5 with OpenTelemetry-Go bumped to 1.43.0 to patch a high-severity path hijacking vulnerability and a privacy leak in crypto/tls [7]. Static pod timeout handling got a boost to prevent flake in e2e tests [5]. Documentation continues its steady march with new contributor guides for Configuration API reference generation [9] and Korean localization updates [8].

Action items

→ Review and plan DRA upgrades if using fractional resource policies kubernetes/kubernetes [plan]
→ Upgrade vSphere cloud provider for MD5 removal and CVE fixes before next cluster refresh kubernetes/cloud-provider-vsphere [immediate]
→ Monitor kubeadm MergeMethod behavior in your bootstrap configs kubernetes/kubernetes [monitor]

References

[1] Fix DRA CapacityRequestPolicyRange not support fractional quantities ↗ kubernetes/kubernetes
[2] kubeadm: add MergeMethod to ExtraArgs in v1 ↗ kubernetes/kubernetes
[3] kep-5304: add roundtripping test for metadata API. ↗ kubernetes/kubernetes
[4] Moved SortedScoredNodes to framework package ↗ kubernetes/kubernetes
[5] Merge pull request #139984 from Nordix/fix-MirrorPodWithGracePeriod kubernetes/kubernetes
[6] ✨Remove the use of the cryptographically weak MD5 hash ↗ kubernetes/cloud-provider-vsphere
[7] Upgrade Go to 1.26.5 and OpenTelemetry-Go to 1.43.0 to fix CVEs ↗ kubernetes/cloud-provider-vsphere
[8] [ko] Update content/ko/docs/concepts/extend-kubernetes/api-extension/custom-resources.md ↗ kubernetes/website
[9] Add contributor guide for Configuration API reference generation ↗ kubernetes/website

Quick answers

What shipped in Kubernetes on July 20, 2026?: Dynamic Resource Allocation now handles fractional resource requests, while vSphere cloud provider rips out cryptographically weak MD5 hashing and patches critical CVEs. In total, 22 commits and 17 pull requests landed.
Who contributed to Kubernetes on July 20, 2026?: 11 developers shipped this update, including sunya-ch, neolit123, alaypatel07, romanbaron, kubernetes-prow[bot], 12345lcr, zhanggbj, and dependabot, and 3 more.
What were the notable Kubernetes updates?: Fix DRA CapacityRequestPolicyRange not support fractional quantities, kubeadm: add MergeMethod to ExtraArgs in v1, and kep-5304: add roundtripping test for metadata API.

AZURE KOPS TESTS FINALLY STABLE, STATEFULSET RECREATION LANDS

Three weeks of Azure e2e failures are fixed: kindnet pods can now reach the kube-apiserver, and StatefulSets get their long-awaited recreate update strategy.

go 51 shipped 2-min read

@kubernetes 3 days ago

CLUSTER TRUST BUNDLES GO GA, SCHEDULER GETS SMARTER ON PREEMPTION

Kubernetes ships ClusterTrustBundles to stable while the scheduler learns to bind before it breaks things.

go 94 shipped 1-min read

@kubernetes 4 days ago

KUBERNETES TIGHTENS DRA NUMA SUPPORT AND WINDOWS TEST COVERAGE

Kubernetes shipped NUMA device attributes for DRA workload placement [ref:17] while simultaneously hardening Windows node test infrastructure [ref:9] and cleaning up scheduler integration tests [ref:16].

go 64 shipped 1-min read

@kubernetes 5 days ago

KOPS 1.36 SHIPS WITH KUBERNETES 1.36 SUPPORT AND REWORKED ADDON MANAGEMENT

kOps 1.36.0 landed overnight with full Kubernetes 1.36 support, a fundamental overhaul of addon management, and the final chapter of the in-tree cloud provider deprecation.

go 100 shipped 1-min read

Elsewhere on the wire

@cachyos about 18 hours ago

LINUX 7.2-RC4 LANDS WITH GAMING SCHEDULER, ANANICY OVERHAULS PROCESS TUNING

CachyOS shipped kernel 7.2-rc4 with a new gaming-optimized scheduler branch and AMD display fixes, while ananicy-rules yanked normal scheduling from most process types in a major behavioral shift.

infra 56 shipped 1-min read

Elixir & Phoenix about 18 hours ago

ELIXIR COMPILER GETS 20% FASTER TYPE CHECKING

Multi-clause function analysis now runs significantly faster after the core team eliminated unnecessary list allocations in disjoint argument checking.

elixir 6 shipped 1-min read

@dotnet about 18 hours ago

MACIOS FIXES SYMBOL UPLOAD GAP, MSBUILD PULLS ARCADE UPDATES

Apple's App Store Connect will finally see proper crash symbolication for .NET iOS apps after macios shipped a fix that embeds symbol files directly in the .ipa.