chore(deps): bump sigs.k8s.io/kustomize/api from 0.21.1 to 0.21.2

[dependabot]

Bumps sigs.k8s.io/kustomize/api from 0.21.1 to 0.21.2.

Release notes

Sourced from sigs.k8s.io/kustomize/api's releases.

api/v0.21.2

#5831: Add labels to volumeClaimTemplates in StatefulSets if includeVolumeClaimTemplates is true #6029: Account for delimiters in structured data replacements #6056: kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped #6075: update go 1.25.7 #6078: bump go-git and x/crypt #6085: update otel lib to v1.40.0 #6087: Reject ambiguous resource paths with inner ".." to prevent silent misresolution #6134: drop 'go-spew' dependencies and update dependencies #6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson #6167: fix: match image digests with any algorithm, not only sha256 #6184: fix: do not panic on an invalid image name regexp #6186: bump/go v1.26.5 #6187: update vuln dependencies at 2026/07 #6236: chore: bump stretch/testify pkg to remove old yaml dependencies #6237: fix: preserve Secret stringData during generator merge #6239: fix: add CronJob Image Volume support to images transformer #6242: fix: reject flag-like helmCharts releaseName and name values #6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4 #6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 #6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 #6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0 #6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 #6273: bump go-git, kin-openapi and k8s.io #6274: build: use the golangci-lint v2 with release binary #6296: build: run Go tools with go tool #6305: Update kyaml to v0.21.2

cmd/config/v0.21.2

#6075: update go 1.25.7 #6078: bump go-git and x/crypt #6085: update otel lib to v1.40.0 #6134: drop 'go-spew' dependencies and update dependencies #6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson #6186: bump/go v1.26.5 #6187: update vuln dependencies at 2026/07 #6236: chore: bump stretch/testify pkg to remove old yaml dependencies #6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4 #6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1 #6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 #6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 #6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0 #6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 #6273: bump go-git, kin-openapi and k8s.io #6274: build: use the golangci-lint v2 with release binary #6296: build: run Go tools with go tool #6305: Update kyaml to v0.21.2

kyaml/v0.21.2

... (truncated)

Commits

• 81a12fc Merge pull request #6306 from koba1t/pinToCmdConfig
• 2b5cd8a Update cmd/config to v0.21.2
• 8c2642d Merge pull request #6305 from koba1t/pinToKyaml
• 8143902 Update kyaml to v0.21.2
• 0ab6ccc Merge pull request #6296 from koba1t/chore/use-go-tool
• 984f0ba build: run Go tools with go tool
• f9d65e8 Merge pull request #6295 from koba1t/fix/lint-workspace-checksums
• fef11ce build: keep workspace checksums complete
• 8105231 build: fix staticcheck exclusion
• 078ab6c Merge pull request #6264 from PragalvaXFREZ/fix-inpututil-wrap-error-with-file
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)