[ANNOUNCE] metrics-server v0.9.0 is released

[Damien Grisonnet]

Changes since v0.8.0

Improvements

• Bump Kubernetes dependencies to v1.36.2. (@slashpai, @dgrisonnet, PR #1687, #1712, #1758, #1803)
• Honor stderrthreshold when logtostderr is enabled. (@pierluigilenoci, PR #1782)
• Downgrade log level for scrape failures of not ready nodes. (@bhope, PR #1783)
• Add a diagram showing how metrics-server handles kubectl top pod requests. (@CatherineF-dev, PR #1654)

Bug fixes

• Require both node and pod metrics for storage readiness. (@slashpai, PR #1818)

Security

• Bump Go version to v1.26.4, addressing CVE-2025-47907 and CVE-2025-47906. (@dependabot, @RainbowMango, @dgrisonnet, @yangjunmyfm192085, PR #1681, #1738, #1758, #1784, #1803, #1830)
• Bump golang.org/x/crypto from 0.39.0 to 0.45.0. (@dependabot, PR #1737)

Others

• Bump golangci-lint to v2.11.4. (@slashpai, @dongjiang1989, @yangjunmyfm192085, PR #1686, #1713, #1740, #1784)
• Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.32.0. (@dependabot, PR #1804, #1820, #1835)
• Bump github.com/onsi/gomega from 1.37.0 to 1.42.1. (@dependabot, PR #1693, #1820, #1835)
• Bump github.com/prometheus/prometheus from 0.304.2 to 0.313.0. (@dependabot, PR #1828, #1833)
• Bump github.com/prometheus/common from 0.65.0 to 0.69.0. (@dependabot, PR #1828, #1833)
• Bump github.com/spf13/pflag from 1.0.6 to 1.0.10. (@dependabot, PR #1690, #1820)
• Bump github.com/moby/spdystream from 0.5.0 to 0.5.1. (@dependabot, PR #1792)
• Bump google.golang.org/grpc from 1.72.0 to 1.81.1. (@dependabot, PR #1777, #1820)
• Bump mikefarah/yq from 4.45.4 to 4.47.1. (@dependabot, PR #1682, #1694)
• Bump actions/checkout from 4.2.2 to 7.0.0. (@dependabot, PR #1698, #1749, #1808, #1827)
• Bump actions/github-script from 7.0.1 to 9.0.0. (@dependabot, PR #1718, #1812)
• Bump actions/setup-python from 5.6.0 to 6.3.0. (@dependabot, PR #1728, #1742, #1832)
• Bump softprops/action-gh-release from 2.3.2 to 3.0.1. (@dependabot, PR #1731, #1746, #1819, #1826)
• Bump action-stars/install-tool-from-github-release. (@dependabot, PR #1743)
• Update versions in README and kustomization.yaml for v0.9.0. (@slashpai, PR #1822)
• Add slashpai and RainbowMango as reviewers. (@dgrisonnet, PR #1679)
• Use go tools. (@mrueg, PR #1648)