Skip to content

Bump the all group with 3 updates #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 15, 2025
Merged

Bump the all group with 3 updates #13

merged 1 commit into from
Oct 15, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025 •
edited
Loading

Bumps the all group with 3 updates: github.com/cert-manager/approver-policy, github.com/cert-manager/cert-manager and sigs.k8s.io/controller-runtime.

Updates github.com/cert-manager/approver-policy from 0.21.0 to 0.22.1

Release notes

Sourced from github.com/cert-manager/approver-policy's releases.

v0.22.1

approver-policy provides a policy engine for certificates issued by cert-manager!

This release is a patch release, downgrading Go from 1.25.2 to 1.25.1, to avoid the X.509 issues introduced by trying to fix a CVE. See golang/go#75828 for additional details.

What's Changed

Full Changelog: cert-manager/approver-policy@v0.22.0...v0.22.1

v0.22.0

approver-policy provides a policy engine for certificates issued by cert-manager!

⚠️ Known issue ⚠️

Golang 1.25.2 has a backwards incompatible change (see golang/go#75828). This will for example result in certificates with a DNS SAN ending in a dot failing approval.

This release primarily contains dependency updates, but also includes a major change to the custom metrics provided by approver-policy.

⚠️ Deprecation notice: The following custom approver-policy metrics are now deprecated:

  • approverpolicy_certificaterequest_approved_count
  • approverpolicy_certificaterequest_denied_count
  • approverpolicy_certificaterequest_unmatched_count

Any use of these metrics should be replaced with the new composite certmanager_approverpolicy_certificaterequests_approval metrics. The deprecated metrics will be removed after a couple of releases. See cert-manager/approver-policy#712 for background and details.

What's Changed

Miscellaneous

Updates by Dependabot/Renovate

... (truncated)

Commits
  • 48aa8d2 Merge pull request #727 from cert-manager/self-upgrade-main
  • 85e216d BOT: run 'make upgrade-klone' and 'make generate'
  • fdedc75 Merge pull request #726 from cert-manager/renovate/k8s.io-utils-digest
  • a04edc6 fix(deps): update k8s.io/utils digest to bc988d5
  • b8e21e2 Merge pull request #725 from cert-manager/self-upgrade-main
  • ad456c8 BOT: run 'make upgrade-klone' and 'make generate'
  • 48290bd Merge pull request #724 from cert-manager/self-upgrade-main
  • 196509d BOT: run 'make upgrade-klone' and 'make generate'
  • 6c1a338 Merge pull request #723 from cert-manager/renovate/misc-go-deps
  • 8dcc8b4 Fix compiler error after c-m 1.9 upgrade
  • Additional commits viewable in compare view

Updates github.com/cert-manager/cert-manager from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.19.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

⚠️ Known issues: We are working on a patch to fix the following issues:

This release focuses on expanding platform compatibility, improving deployment flexibility, enhancing observability, and addressing key reliability issues.

📖 Read the full release notes at cert-manager.io: https://cert-manager.io/docs/releases/release-notes/release-notes-1.19

Changes since v1.18.0:

Feature

  • Add IPv6 rules to the default network policy (#7726, @​jcpunk)
  • Add global.nodeSelector to helm chart to allow for a single nodeSelector to be set across all services. (#7818, @​StingRayZA)
  • Add a feature gate to default to Ingress pathType Exact in ACME HTTP01 Ingress challenge solvers. (#7795, @​sspreitzer)
  • Add generated applyconfigurations allowing clients to make type-safe server-side apply requests for cert-manager resources. (#7866, @​erikgb)
  • Added API defaults to issuer references group (cert-manager.io) and kind (Issuer). (#7414, @​erikgb)
  • Added certmanager_certificate_challenge_status Prometheus metric. (#7736, @​hjoshi123)
  • Added protocol field for rfc2136 DNS01 provider (#7881, @​hjoshi123)
  • Added experimental field hostUsers flag to all pods. Not set by default. (#7973, @​hjoshi123)
  • Support configurable resource requests and limits for ACME HTTP01 solver pods through ClusterIssuer and Issuer specifications, allowing granular resource management that overrides global --acme-http01-solver-resource-* settings. (#7972, @​lunarwhite)
  • The CAInjectorMerging feature has been promoted to BETA and is now enabled by default (#8017, @​ThatsMrTalbot)
  • The controller, webhook and ca-injector now log their version and git commit on startup for easier debugging and support. (#8072, @​prasad89)
  • Updated certificate metrics to the collector approach. (#7856, @​hjoshi123)

Bug or Regression

  • ACME: Increased challenge authorization timeout to 2 minutes to fix error waiting for authorization (#7796, @​hjoshi123)
  • BUGFIX: permitted URI domains were incorrectly used to set the excluded URI domains in the CSR's name constraints (#7816, @​kinolaev)
  • Enforced ACME HTTP-01 solver validation to properly reject configurations when multiple ingress options (class, ingressClassName, name) are specified simultaneously (#8021, @​lunarwhite)
  • Increase maximum sizes of PEM certificates and chains which can be parsed in cert-manager, to handle leaf certificates with large numbers of DNS names or other identities (#7961, @​SgtCoDFish)
  • Reverted adding the global.rbac.disableHTTPChallengesRole Helm option. (#7836, @​inteon)
  • This change removes the path label of core ACME client metrics and will require users to update their monitoring dashboards and alerting rules if using those metrics. (#8109, @​mladen-rusev-cyberark)
  • Use the latest version of ingress-nginx in E2E tests to ensure compatibility (#7792, @​wallrj)

Other (Cleanup or Flake)

  • Helm: Fix naming template of tokenrequest RoleBinding resource to improve consistency (#7761, @​lunarwhite)
  • Improve error messages when certificates, CRLs or private keys fail admission due to malformed or missing PEM data (#7928, @​SgtCoDFish)
  • Major upgrade of Akamai SDK. NOTE: The new version has not been fully tested end-to-end due to the lack of cloud infrastructure. (#8003, @​hjoshi123)
  • Update kind images to include the Kubernetes 1.33 node image (#7786, @​wallrj)
  • Use maps.Copy for cleaner map handling (#8092, @​quantpoet)
  • Vault: Migrate Vault E2E add-on tests from deprecated vault-client-go to the new vault/api client. (#8059, @​armagankaratosun)

v1.19.0-alpha.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

⚠️ This is a pre-release. For testing only!

... (truncated)

Commits
  • 12a3ef9 Merge pull request #8142 from cert-manager/renovate/kubernetes-go-deps
  • 50f4142 fix(deps): update module sigs.k8s.io/controller-runtime to v0.22.2
  • 55c8b13 Merge pull request #8140 from cert-manager/renovate/kubernetes-go-deps
  • b532b0d fix(deps): update module sigs.k8s.io/gateway-api to v1.4.0
  • 2b1e348 Merge pull request #8138 from cert-manager/self-upgrade-master
  • 24e1c7a BOT: run 'make upgrade-klone' and 'make generate'
  • 290d577 Merge pull request #8137 from cert-manager/renovate/misc-go-deps
  • 8b1650c fix(deps): update misc go deps
  • 0343fae Merge pull request #8136 from cert-manager/self-upgrade-master
  • dbb59b7 BOT: run 'make upgrade-klone' and 'make generate'
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2

Commits
  • 7fb34b5 [release-0.22] 🐛 Fix a bug where the priorityqueue would sometimes not return...
  • 27d4b5e Merge pull request #3338 from k8s-infra-cherrypick-robot/cherry-pick-3337-to-...
  • 6d368ce Rebase priorityqueue shutdown fix for release-0.22
  • d04f428 Don't block on Get when queue is shutdown (2nd try)
  • 7f146f7 Merge pull request #3317 from k8s-infra-cherrypick-robot/cherry-pick-3316-to-...
  • f3b9e4f Bump to k8s.io/* v0.34.1
  • 04c6a08 [release-0.22] 🐛Panic when trying to build more than one instance of fake.Cli...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group with 3 updates
9ebb98f 
Bumps the all group with 3 updates: [github.com/cert-manager/approver-policy](https://github.com/cert-manager/approver-policy), [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime).


Updates `github.com/cert-manager/approver-policy` from 0.21.0 to 0.22.1
- [Release notes](https://github.com/cert-manager/approver-policy/releases)
- [Changelog](https://github.com/cert-manager/approver-policy/blob/main/RELEASE.md)
- [Commits](cert-manager/approver-policy@v0.21.0...v0.22.1)

Updates `github.com/cert-manager/cert-manager` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.18.2...v1.19.0)

Updates `sigs.k8s.io/controller-runtime` from 0.22.1 to 0.22.2
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/approver-policy
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 13, 2025
erikgb
erikgb reviewed Oct 15, 2025
View reviewed changes
Copy link
Member

@erikgb erikgb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@cert-manager-prow
Copy link
Contributor

cert-manager-prow bot commented Oct 15, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@cert-manager-prow cert-manager-prow bot merged commit 8a45261 into main Oct 15, 2025
4 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/all-b714511e15 branch October 15, 2025 18:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@erikgb erikgb erikgb left review comments

Assignees

No one assigned

Labels

approved dco-signoff: yes dependencies Pull requests that update a dependency file go Pull requests that update go code lgtm size/L

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@erikgb