[CANCELLED] [release-next] Merge master into release-next

[maelvls]

As part of https://cert-manager.io/docs/contributing/release-process/. I need release-next to match master before I can proceed with #1998.

CANCELLED: I had mistakenly merged release-next into master in #1996, and this PR wasn't doing much as it is just merging master back into release-next. I've decided to force-push to undo these changes as things were getting out of hand. You won't see this commit in the release-next branch anymore. Here is the series of PRs that got aborted:

• [CANCELLED][release-next] Merge master into release-next #1996
• [CANCELLED][master] Revert "[release-next] Merge master into release-next" #1999
• [CANCELLED] [release-next] Merge master into release-next #2000

[cert-manager-prow]

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.

📝 Please follow instructions in the contributing guide to update your commits with the DCO

Full details of the Developer Certificate of Origin can be found at developercertificate.org.

The list of commits missing DCO signoff:

• 8da7875 Initial plan
• 5b357b8 Fix: move blockJS: false to top-level serialize options in next-mdx-remote v6

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[netlify]

✅ Deploy Preview for cert-manager ready!

Built without sensitive environment variables

Name	Link
🔨 Latest commit	aeda4be
🔍 Latest deploy log	https://app.netlify.com/projects/cert-manager/deploys/69b078e7f4263900081415ba
😎 Deploy Preview	https://deploy-preview-2000--cert-manager.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[cert-manager-prow]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[netlify]

✅ Deploy Preview for cert-manager ready!

Built without sensitive environment variables

Name	Link
🔨 Latest commit	a824d17
🔍 Latest deploy log	https://app.netlify.com/projects/cert-manager/deploys/69b0794e2e9df5000818ff3c
😎 Deploy Preview	https://deploy-preview-2000--cert-manager.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[maelvls]

/override dco

[cert-manager-prow]

@maelvls: Overrode contexts on behalf of maelvls: dco

Details

In response to this:

/override dco

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[Copilot]

Pull request overview

This PR syncs release-next with master as part of the cert-manager website release process, bringing in updated tooling/dependencies and aligning documentation and release metadata with the latest release state.

Changes:

• Bumps website build/runtime/tooling dependencies (Next/React ecosystem, prettier/stylelint, and makefile tool versions).
• Updates documentation across current and versioned docs (Gateway/Ingress guidance, Azure workload identity instructions, approver-policy docs, and provider links).
• Adjusts release-related website content (latest version variable, release notes entries, manifest/redirects, and release-process documentation).

Reviewed changes

Copilot reviewed 55 out of 57 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
scripts/gendocs/postprocess/package-lock.json	Updates lockfile integrity fields and prettier version for docs postprocessing tool.
public/docs/tutorials/getting-started-aks-letsencrypt/values.yaml	Removes ServiceAccount label example, leaving pod label only.
public/docs/installation/best-practice/values.best-practice.yaml	Removes networkPolicy example blocks from best-practice values.
public/_redirects	Removes several shortlink redirects for annotations and ACME/Gateway-related anchors.
package.json	Updates engine constraints, build command, and bumps multiple dependencies/devDependencies.
make/_shared/tools/00_mod.mk	Bumps pinned tool versions (helm/kubectl/kyverno/etc) and vendored Go version + checksums.
make/_shared/repository-base/base/.github/workflows/make-self-upgrade.yaml	Updates pinned actions/checkout and actions/setup-go SHAs.
lib/serialize.js	Adds blockJS: false to MDX serialization options (next-mdx-remote v6).
lib/announcements.js	Adds blockJS: false to MDX serialization options for announcements.
klone.yaml	Updates makefile-modules repo hash used by klone targets.
content/v1.9-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.8-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.7-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.6-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.18-docs/policy/approval/approver-policy/README.md	Fixes typo contraints → constraints.
content/v1.18-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.17-docs/policy/approval/approver-policy/README.md	Fixes typo contraints → constraints.
content/v1.17-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.16-docs/policy/approval/approver-policy/README.md	Fixes typo contraints → constraints.
content/v1.16-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.15-docs/policy/approval/approver-policy/README.md	Fixes typo contraints → constraints.
content/v1.15-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.14-docs/policy/approval/approver-policy/README.md	Fixes typo contraints → constraints.
content/v1.14-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.13-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.12-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.11-docs/projects/approver-policy.md	Fixes typo contraints → constraints.
content/v1.11-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/v1.10-docs/configuration/acme/dns01/README.md	Updates Linode webhook link.
content/docs/variables.json	Sets cert_manager_latest_version to v1.19.4.
content/docs/usage/ingress.md	Simplifies HTTP-01 ingress-class annotation documentation.
content/docs/usage/gateway.md	Updates ingress link, revises Gateway API guidance, and removes ListenerSet section.
content/docs/tutorials/getting-started-aks-letsencrypt/README.md	Updates AKS tutorial verification date and workload identity instructions.
content/docs/releases/upgrading/upgrading-1.19-1.20.md	Removes placeholder upgrading doc.
content/docs/releases/release-notes/release-notes-1.20.md	Removes placeholder 1.20 release notes page.
content/docs/releases/release-notes/release-notes-1.19.md	Adds release notes for v1.19.4 and v1.19.3.
content/docs/releases/release-notes/release-notes-1.18.md	Adds v1.18.6 and v1.18.5 notes and trims trailing spaces.
content/docs/releases/README.md	Updates release table dates/versions and changes 1.20 link target.
content/docs/reference/api-docs.md	Updates “generated with … commit” footer hash.
content/docs/reference/annotations.md	Removes several annotation sections and rewrites http01-ingress-class text.
content/docs/policy/approval/approver-policy/api-reference.md	Updates cr map field docs to include username/groups.
content/docs/policy/approval/approver-policy/README.md	Fixes typo and updates cr variable field description.
content/docs/manifest.json	Removes 1.20 pages from Release Notes routes.
content/docs/installation/best-practice.md	Removes NetworkPolicy Helm chart explanation and refines Challenge namespace wording.
content/docs/contributing/release-process.md	Refactors release process instructions and adds website release-notes generation steps.
content/docs/configuration/venafi.md	Removes “Issuer Custom Fields” section for v1.20+.
content/docs/configuration/acme/http01/README.md	Removes notes about per-Ingress class override annotations; updates Gateway API install instructions.
content/docs/configuration/acme/dns01/azuredns.md	Updates Azure workload identity setup instructions and examples.
content/docs/configuration/acme/dns01/README.md	Updates Linode link and adds Rackspace webhook link.
content/docs/configuration/acme/README.md	Removes explanatory comment lines from ACME email example.
content/announcements/2025-11-26-ingress-nginx-eol-and-gateway-api.md	Updates target date for XListenerSet support in 1.20.
components/Footer.jsx	Replaces hard-coded copyright year with new Date().getFullYear().
.spelling	Updates custom dictionary entries (adds names; removes some version/annotation tokens).
.github/workflows/make-self-upgrade.yaml	Updates pinned actions/checkout and actions/setup-go SHAs.
.github/workflows/check.yaml	Updates pinned actions/checkout and actions/setup-node SHAs.
.github/renovate.json5	Changes Renovate preset source to cert-manager/makefile-modules.

Files not reviewed (1)

• scripts/gendocs/postprocess/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The redirect for https://cert-manager.io/renew-before-percentage was removed, but cert-manager.io/renew-before-percentage is still documented in content/docs/reference/annotations.md. Removing this redirect will cause older links to 404; please add the redirect back (or redirect it to the updated canonical location/anchor).

[Copilot]

.spelling removed entries like v1.20.0 and beta.0, but these strings still appear in checked markdown (e.g. content/docs/contributing/release-process.md contains Releasing v1.20.0`` and multiple -beta.0 examples). This will likely reintroduce CI spellcheck failures; please re-add the removed tokens (or adjust the spellcheck configuration to ignore them).

[Copilot]

This bash snippet uses angle brackets in the placeholder (export IDENTITY_RESOURCE_GROUP=<your-resource-group>). If a reader copy/pastes it without editing, <...> will be treated by the shell as redirection and will fail in a non-obvious way. Consider using a safe placeholder (e.g. YOUR_RESOURCE_GROUP), quoting the placeholder, or moving the placeholder into a comment instead.

Suggested change

	export IDENTITY_RESOURCE_GROUP=<your-resource-group> # ❗ Replace with your Azure resource group
	export IDENTITY_RESOURCE_GROUP=YOUR_RESOURCE_GROUP # ❗ Replace with your Azure resource group

[Copilot]

There appears to be a typo in the YAML comments: # # optional: tenant ID .... This should likely be a single # comment marker to avoid confusing readers.

Suggested change

	# # optional: tenant ID of the managed identity; overrides AZURE_TENANT_ID from the environment.
	# optional: tenant ID of the managed identity; overrides AZURE_TENANT_ID from the environment.

[Copilot]

This site is configured for static export (output: 'export' in next.config.js). Using new Date().getFullYear() directly in the render output can cause hydration mismatches if the exported HTML was built in a different year than when a user visits (or if the build output is cached across New Year). Prefer injecting a build-time constant (e.g. via a prop or environment variable baked into the export) or keep the year static to avoid runtime divergence.

[Copilot]

The file path in this step looks incorrect for this repository: release notes live under content/docs/releases/release-notes/ (e.g. content/docs/releases/release-notes/release-notes-1.19.md), not content/docs/release-notes/. The example manifest path shown a few lines below (/docs/release-notes/...) also seems to be missing the /releases/ segment. Please update the paths in these instructions to match the actual website repo structure so the release process doc remains copy/paste accurate.

[Copilot]

Two annotation shortlink redirects were removed here, but the corresponding sections still exist in content/docs/reference/annotations.md (e.g. ## cert-manager.io/issuer-name). Dropping the redirect will break existing inbound links to https://cert-manager.io/issuer-name; please restore the redirect entry (or provide an alternative redirect that preserves this short URL).