Merge pull request #1832 from cert-manager/master

Sync the release-next branch with master

Author: cert-manager-prow[bot]

.devcontainer/devcontainer.json

@@ -0,0 +1,18 @@
+{
+  "name": "cert-manager Website Dev",
+  "image": "mcr.microsoft.com/devcontainers/javascript-node:24",
+
+  "postCreateCommand": "npm ci && npm install -g netlify-cli",
+
+  "forwardPorts": [3000],
+
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "dbaeumer.vscode-eslint",
+        "esbenp.prettier-vscode",
+        "yzhang.markdown-all-in-one"
+      ]
+    }
+  }
+}

.github/workflows/check.yaml

@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       - run: npm ci
       - run: npm run check

.github/workflows/make-self-upgrade.yaml

@@ -32,7 +32,7 @@ jobs:
           exit 1
 
       - name: Octo STS Token Exchange
-        uses: octo-sts/action@e480437973a6f6ac2e9caa40ecabedc870d76395 # v1.0.1
+        uses: octo-sts/action@d6c70ad3b9ac85df6da6b9749014d7283987cfec # v1.0.3
         id: octo-sts
         with:
           scope: 'cert-manager/website'

.github/workflows/renovate.yaml

@@ -27,7 +27,7 @@ jobs:
           exit 1
 
       - name: Octo STS Token Exchange
-        uses: octo-sts/action@e480437973a6f6ac2e9caa40ecabedc870d76395 # v1.0.1
+        uses: octo-sts/action@d6c70ad3b9ac85df6da6b9749014d7283987cfec # v1.0.3
         id: octo-sts
         with:
           scope: 'cert-manager/website'
@@ -50,7 +50,7 @@ jobs:
           go-version: ${{ steps.go-version.outputs.result }}
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@f8af9272cd94a4637c29f60dea8731afd3134473 # v43.0.12
+        uses: renovatebot/github-action@a3c115cd6676c8a5bc72f9715f108759e570daf5 # v43.0.19
         with:
           configurationFile: .github/renovate.json5
           token: ${{ steps.octo-sts.outputs.token }}

.spelling

@@ -586,6 +586,7 @@ v1.18.0
 v1.18.0.
 v1.19
 v1.19.0
+v1.19.1
 alpha.0
 v1.5
 v1.5.0

README.md

@@ -141,6 +141,23 @@ npm ci
 
 This command is similar to `npm install` but it ensures that you will have a clean install of all the dependencies.
 
+### Devcontainer (optional)
+
+The repository includes a ready-to-use **devcontainer** for VS Code Dev Containers or GitHub Codespaces.
+This provides a fully configured development environment with all required tools and dependencies,
+so you can start working on the website without installing anything on your local machine.
+
+**Usage:**
+
+1. Open the repository in VS Code.
+2. When prompted, select **"Reopen in Container"** (or run **Dev Containers: Reopen in Container** from the command palette).
+3. Once the container is built, use the integrated terminal to run:
+
+```bash
+./scripts/server     # start the local development server
+./scripts/verify     # run lint, link-check, spell-check, etc.
+```
+
 ### Development Server
 
 The best development environment uses the Netlify CLI to serve the site locally. The Netlify CLI server

components/docs/VersionSelect.jsx

@@ -23,6 +23,7 @@ export default function VersionSelect({
       return compareVersions(labelFromVersion(first), labelFromVersion(second))
     })
     .reverse()
+    .slice(0, 2) // Only show the last two releases in the dropdown list
 
   return (
     <div className="bg-gray-1 rounded-md border-2 border-gray-2/50">

content/docs/configuration/acme/http01/README.md

@@ -125,9 +125,10 @@ By default, type `NodePort` will be used when you don't set HTTP01 or when you s
 You may wish to change or add to the labels and annotations of solver pods.
 These can be configured under the `metadata` field under `podTemplate`.
 
-Similarly, you can set the `nodeSelector`, tolerations and affinity of solver
-pods by configuring under the `spec` field of the `podTemplate`. No other
-spec fields can be edited.
+Similarly, you can set the `nodeSelector`, `tolerations`, `affinity`,
+`priorityClassName`, `serviceAccountName`, `securityContext`, `imagePullSecrets`
+and `resources` of solver pods by configuring under the `spec` field of
+the `podTemplate`. No other spec fields can be edited.
 
 An example of how you could configure the template is as so:
 
@@ -152,12 +153,25 @@ spec:
             spec:
               nodeSelector:
                 bar: baz
+              resources:
+                requests:
+                  cpu: 20m
+                  memory: 32Mi
+                limits:
+                  cpu: 150m
+                  memory: 64Mi
 ```
 
 The added labels and annotations will merge on top of the cert-manager defaults,
 overriding entries with the same key.
 
-No other fields of the `podTemplate` exist.
+The resources configuration **overrides** the global defaults (configured via controller flags
+`--acme-http01-solver-resource-*`) for the specific Issuer, enabling granular resource management
+in multi-tenant or restricted policy scenarios.
+
+> Note that when only specifying resource limits, ensure they are greater than or equal to the
+> corresponding global resource requests configured via controller flags. Kubernetes will reject
+> pod creation if limits are lower than requests, causing challenge failures.
 
 ### `ingressTemplate`
 

content/docs/installation/helm.md

@@ -122,7 +122,7 @@ appVersion: "0.1.0"
 dependencies:
   - name: cert-manager
     version: [[VAR::cert_manager_latest_version]]
-    repository: https://charts.jetstack.io
+    repository: oci://quay.io/jetstack/charts
     alias: cert-manager
     condition: cert-manager.enabled
 ```

content/docs/manifest.json

@@ -36,26 +36,6 @@
               "title": "Upgrade 1.17 to 1.18",
               "path": "/docs/releases/upgrading/upgrading-1.17-1.18.md"
             },
-            {
-              "title": "1.17",
-              "path": "/docs/releases/release-notes/release-notes-1.17.md"
-            },
-            {
-              "title": "Upgrade 1.16 to 1.17",
-              "path": "/docs/releases/upgrading/upgrading-1.16-1.17.md"
-            },
-            {
-              "title": "1.16",
-              "path": "/docs/releases/release-notes/release-notes-1.16.md"
-            },
-            {
-              "title": "Upgrading from 1.12",
-              "path": "/docs/releases/upgrading/upgrading-1.12.md"
-            },
-            {
-              "title": "1.12",
-              "path": "/docs/releases/release-notes/release-notes-1.12.md"
-            },
             {
               "title": "Older releases",
               "routes": [
@@ -67,6 +47,18 @@
                   "title": "Migrating Deprecated API Resources",
                   "path": "/docs/releases/upgrading/remove-deprecated-apis.md"
                 },
+                {
+                  "title": "1.17",
+                  "path": "/docs/releases/release-notes/release-notes-1.17.md"
+                },
+                {
+                  "title": "Upgrade 1.16 to 1.17",
+                  "path": "/docs/releases/upgrading/upgrading-1.16-1.17.md"
+                },
+                {
+                  "title": "1.16",
+                  "path": "/docs/releases/release-notes/release-notes-1.16.md"
+                },
                 {
                   "title": "Upgrade 1.15 to 1.16",
                   "path": "/docs/releases/upgrading/upgrading-1.15-1.16.md"
@@ -91,6 +83,15 @@
                   "title": "1.13",
                   "path": "/docs/releases/release-notes/release-notes-1.13.md"
                 },
+                {
+                  "title": "Upgrading from 1.12",
+                  "path": "/docs/releases/upgrading/upgrading-1.12.md"
+                },
+                {
+                  "title": "1.12",
+                  "path": "/docs/releases/release-notes/release-notes-1.12.md"
+                },
+
                 {
                   "title": "Upgrade 1.11 to 1.12",
                   "path": "/docs/releases/upgrading/upgrading-1.11-1.12.md"