From f08bf18d4df12acc608e12b5d894d51990897cca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?L=C3=A1szl=C3=B3=20Csupity?= Date: Sun, 2 Nov 2025 01:38:37 +0100 Subject: [PATCH 01/70] Update NetworkPolicy guidelines to reflect the correct namespace MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: László Csupity --- content/docs/installation/best-practice.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/content/docs/installation/best-practice.md b/content/docs/installation/best-practice.md index 8f728152ede..dabf94dca54 100644 --- a/content/docs/installation/best-practice.md +++ b/content/docs/installation/best-practice.md @@ -104,8 +104,7 @@ Here is an overview of the network requirements: 1. **TCP: ACME (Let's Encrypt) -> cert-manager (acmesolver)**: If you use an ACME Issuer configured for HTTP01, cert-manager will deploy an `acmesolver` Pod, a Service and an Ingress (or Gateway API) resource - in the namespace of the Issuer - or in the cert-manager namespace if it is a ClusterIssuer. + in the namespace of the Challenge resource. The ACME implementation will establish an HTTP connection to this Pod via your chosen ingress load balancer, so your network policy must allow this. From f34c670400561652d380a839d173793e1c8756ca Mon Sep 17 00:00:00 2001 From: Doug Goldstein Date: Mon, 12 Jan 2026 12:13:51 -0600 Subject: [PATCH 02/70] docs: add Rackspace supported webhook Rackspace Cloud DNS is supported with cert-manager with the cert-manager-webhook-rackspace webhook. [1]: https://docs.rackspace.com/docs/cloud-dns [2]: https://github.com/rackerlabs/cert-manager-webhook-rackspace Signed-off-by: Doug Goldstein --- content/docs/configuration/acme/dns01/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/content/docs/configuration/acme/dns01/README.md b/content/docs/configuration/acme/dns01/README.md index 4feaad1173a..226c38e1e39 100644 --- a/content/docs/configuration/acme/dns01/README.md +++ b/content/docs/configuration/acme/dns01/README.md @@ -182,6 +182,7 @@ Links to these supported providers along with their documentation are below: - [`cert-manager-webhook-ovh`](https://github.com/aureq/cert-manager-webhook-ovh) - [`cert-manager-webhook-opentelekomcloud`](https://github.com/akyriako/cert-manager-webhook-opentelekomcloud) - [`cert-manager-webhook-pdns`](https://github.com/zachomedia/cert-manager-webhook-pdns) +- [`cert-manager-webhook-rackspace`](https://github.com/rackerlabs/cert-manager-webhook-rackspace) - [`cert-manager-webhook-regery`](https://github.com/darioackermann/cert-manager-webhook-regery) - [`cert-manager-webhook-scaleway`](https://github.com/scaleway/cert-manager-webhook-scaleway) - [`cert-manager-webhook-selectel`](https://github.com/selectel/cert-manager-webhook-selectel) From af6df60c2e2ea2bce97128006d89a8d43d0976fa Mon Sep 17 00:00:00 2001 From: Jesper Noordsij <45041769+jnoordsij@users.noreply.github.com> Date: Wed, 14 Jan 2026 14:51:42 +0100 Subject: [PATCH 03/70] Remove outdated information regarding Let's Encrypt ACME client behavior Signed-off-by: Jesper Noordsij <45041769+jnoordsij@users.noreply.github.com> --- content/docs/configuration/acme/README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/content/docs/configuration/acme/README.md b/content/docs/configuration/acme/README.md index bd53235e7ca..118cf5aed2d 100644 --- a/content/docs/configuration/acme/README.md +++ b/content/docs/configuration/acme/README.md @@ -54,8 +54,6 @@ metadata: spec: acme: # You must replace this email address with your own. - # Let's Encrypt will use this to contact you about expiring - # certificates, and issues related to your account. email: user@example.com # If the ACME server supports profiles, you can specify the profile name here. # See #acme-certificate-profiles below. From 9c4e19ef3e891a6b10b9c9203d8ef3b3f1bac37f Mon Sep 17 00:00:00 2001 From: Jesper Noordsij <45041769+jnoordsij@users.noreply.github.com> Date: Wed, 14 Jan 2026 14:58:46 +0100 Subject: [PATCH 04/70] Reword description for ACMEIssuer email field Signed-off-by: Jesper Noordsij <45041769+jnoordsij@users.noreply.github.com> --- content/docs/reference/api-docs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/docs/reference/api-docs.md b/content/docs/reference/api-docs.md index 20f243f430e..d934d5e4c3f 100644 --- a/content/docs/reference/api-docs.md +++ b/content/docs/reference/api-docs.md @@ -1485,7 +1485,7 @@ description: >- (Optional) -

Email is the email address to be associated with the ACME account. This field is optional, but it is strongly recommended to be set. It will be used to contact you in case of issues with your account or certificates, including expiry notification emails. This field may be updated after the account is initially registered.

+

Email is the email address to be associated with the ACME account. This field is optional, but it is strongly recommended to be set. Depending on the ACME server, it may be used to contact you in case of issues with your account or certificates, including expiry notification emails. This field may be updated after the account is initially registered.

From 3bc0c77c3a51860668cc0113635e32c5f84a04a3 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 16 Jan 2026 00:21:30 +0000 Subject: [PATCH 05/70] chore(deps): update actions/setup-node digest to 6044e13 Signed-off-by: Renovate Bot --- .github/workflows/check.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml index ec1215fd017..6875d6721a2 100644 --- a/.github/workflows/check.yaml +++ b/.github/workflows/check.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-24.04 steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6 + - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6 with: node-version: 24 cache: npm From 577c7af67c1656870fd6dddd0e75ef7a512604f8 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 19 Jan 2026 17:39:17 +0000 Subject: [PATCH 06/70] chore(deps): update dependency globals to v17 Signed-off-by: Renovate Bot --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index c6d6f92d2f1..59e5883d87e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -46,7 +46,7 @@ "eslint-plugin-mdx": "3.6.2", "eslint-plugin-react": "7.37.5", "format-api-docs": "file:scripts/gendocs/postprocess", - "globals": "16.5.0", + "globals": "17.0.0", "markdown-link-check": "3.14.2", "markdown-spellcheck": "1.3.1", "next-sitemap": "4.2.3", @@ -6766,9 +6766,9 @@ } }, "node_modules/globals": { - "version": "16.5.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-16.5.0.tgz", - "integrity": "sha512-c/c15i26VrJ4IRt5Z89DnIzCGDn9EcebibhAOjw5ibqEHsE1wLUgkPn9RDmNcUKyU87GeaL633nyJ+pplFR2ZQ==", + "version": "17.0.0", + "resolved": "https://registry.npmjs.org/globals/-/globals-17.0.0.tgz", + "integrity": "sha512-gv5BeD2EssA793rlFWVPMMCqefTlpusw6/2TbAVMy0FzcG8wKJn4O+NqJ4+XWmmwrayJgw5TzrmWjFgmz1XPqw==", "dev": true, "license": "MIT", "engines": { diff --git a/package.json b/package.json index b168d568ad1..f7ba6f0e024 100644 --- a/package.json +++ b/package.json @@ -93,7 +93,7 @@ "eslint-plugin-mdx": "3.6.2", "eslint-plugin-react": "7.37.5", "format-api-docs": "file:scripts/gendocs/postprocess", - "globals": "16.5.0", + "globals": "17.0.0", "markdown-link-check": "3.14.2", "markdown-spellcheck": "1.3.1", "next-sitemap": "4.2.3", From f06c5c0a3419bb9c38c8566a9bdac79f2973c5fc Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 19 Jan 2026 20:35:37 +0000 Subject: [PATCH 07/70] fix(deps): update misc npm packages Signed-off-by: Renovate Bot --- package-lock.json | 60 +++++++++---------- package.json | 10 ++-- scripts/gendocs/postprocess/package-lock.json | 12 ++-- 3 files changed, 41 insertions(+), 41 deletions(-) diff --git a/package-lock.json b/package-lock.json index c6d6f92d2f1..2e09ae21143 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,9 +9,9 @@ "version": "2.0.0", "license": "Apache-2.0", "dependencies": { - "@docsearch/react": "4.3.2", + "@docsearch/react": "4.4.0", "@headlessui/react": "2.2.9", - "@next/mdx": "16.1.0", + "@next/mdx": "16.1.3", "classnames": "2.5.1", "compare-versions": "6.1.1", "copy-to-clipboard": "^3.3.3", @@ -34,14 +34,14 @@ }, "devDependencies": { "@eslint/js": "9.39.2", - "@next/eslint-plugin-next": "16.1.0", + "@next/eslint-plugin-next": "16.1.3", "@tailwindcss/aspect-ratio": "0.4.2", "@tailwindcss/forms": "0.5.11", "@tailwindcss/postcss": "4.1.18", "@tailwindcss/typography": "0.5.19", "concurrently": "9.2.1", "eslint": "9.39.2", - "eslint-config-next": "16.1.0", + "eslint-config-next": "16.1.3", "eslint-config-prettier": "10.1.8", "eslint-plugin-mdx": "3.6.2", "eslint-plugin-react": "7.37.5", @@ -51,7 +51,7 @@ "markdown-spellcheck": "1.3.1", "next-sitemap": "4.2.3", "postcss": "8.5.6", - "prettier": "3.7.4", + "prettier": "3.8.0", "remark-cli": "12.0.1", "remark-code-import": "1.2.0", "remark-lint": "10.0.1", @@ -847,9 +847,9 @@ } }, "node_modules/@docsearch/core": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/@docsearch/core/-/core-4.3.1.tgz", - "integrity": "sha512-ktVbkePE+2h9RwqCUMbWXOoebFyDOxHqImAqfs+lC8yOU+XwEW4jgvHGJK079deTeHtdhUNj0PXHSnhJINvHzQ==", + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/@docsearch/core/-/core-4.4.0.tgz", + "integrity": "sha512-kiwNo5KEndOnrf5Kq/e5+D9NBMCFgNsDoRpKQJ9o/xnSlheh6b8AXppMuuUVVdAUIhIfQFk/07VLjjk/fYyKmw==", "license": "MIT", "peerDependencies": { "@types/react": ">= 16.8.0 < 20.0.0", @@ -869,21 +869,21 @@ } }, "node_modules/@docsearch/css": { - "version": "4.3.2", - "resolved": "https://registry.npmjs.org/@docsearch/css/-/css-4.3.2.tgz", - "integrity": "sha512-K3Yhay9MgkBjJJ0WEL5MxnACModX9xuNt3UlQQkDEDZJZ0+aeWKtOkxHNndMRkMBnHdYvQjxkm6mdlneOtU1IQ==", + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/@docsearch/css/-/css-4.4.0.tgz", + "integrity": "sha512-e9vPgtih6fkawakmYo0Y6V4BKBmDV7Ykudn7ADWXUs5b6pmtBRwDbpSG/WiaUG63G28OkJDEnsMvgIAnZgGwYw==", "license": "MIT" }, "node_modules/@docsearch/react": { - "version": "4.3.2", - "resolved": "https://registry.npmjs.org/@docsearch/react/-/react-4.3.2.tgz", - "integrity": "sha512-74SFD6WluwvgsOPqifYOviEEVwDxslxfhakTlra+JviaNcs7KK/rjsPj89kVEoQc9FUxRkAofaJnHIR7pb4TSQ==", + "version": "4.4.0", + "resolved": "https://registry.npmjs.org/@docsearch/react/-/react-4.4.0.tgz", + "integrity": "sha512-z12zeg1mV7WD4Ag4pKSuGukETJLaucVFwszDXL/qLaEgRqxEaVacO9SR1qqnCXvZztlvz2rt7cMqryi/7sKfjA==", "license": "MIT", "dependencies": { "@ai-sdk/react": "^2.0.30", "@algolia/autocomplete-core": "1.19.2", - "@docsearch/core": "4.3.1", - "@docsearch/css": "4.3.2", + "@docsearch/core": "4.4.0", + "@docsearch/css": "4.4.0", "ai": "^5.0.30", "algoliasearch": "^5.28.0", "marked": "^16.3.0", @@ -1906,9 +1906,9 @@ "license": "MIT" }, "node_modules/@next/eslint-plugin-next": { - "version": "16.1.0", - "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-16.1.0.tgz", - "integrity": "sha512-sooC/k0LCF4/jLXYHpgfzJot04lZQqsttn8XJpTguP8N3GhqXN3wSkh68no2OcZzS/qeGwKDFTqhZ8WofdXmmQ==", + "version": "16.1.3", + "resolved": "https://registry.npmjs.org/@next/eslint-plugin-next/-/eslint-plugin-next-16.1.3.tgz", + "integrity": "sha512-MqBh3ltFAy0AZCRFVdjVjjeV7nEszJDaVIpDAnkQcn8U9ib6OEwkSnuK6xdYxMGPhV/Y4IlY6RbDipPOpLfBqQ==", "dev": true, "license": "MIT", "dependencies": { @@ -1916,9 +1916,9 @@ } }, "node_modules/@next/mdx": { - "version": "16.1.0", - "resolved": "https://registry.npmjs.org/@next/mdx/-/mdx-16.1.0.tgz", - "integrity": "sha512-fnnMzMGIxub01YwZWccdYw/TZmwVf+4g5HZiM8iJvjz4GLNeYc73BPwI5qikPT3aP6xc1s0K5dYBtRojvrAtng==", + "version": "16.1.3", + "resolved": "https://registry.npmjs.org/@next/mdx/-/mdx-16.1.3.tgz", + "integrity": "sha512-idbNOfd0KKsyhTzA95QCNRJmKadZ6wZK4pU9zq1VspRC0cqkTcrhNE9CFMc7kusLdwd1cCgPTNOdfOIOBt9hMg==", "license": "MIT", "dependencies": { "source-map": "^0.7.0" @@ -5561,13 +5561,13 @@ } }, "node_modules/eslint-config-next": { - "version": "16.1.0", - "resolved": "https://registry.npmjs.org/eslint-config-next/-/eslint-config-next-16.1.0.tgz", - "integrity": "sha512-RlPb8E2uO/Ix/w3kizxz6+6ogw99WqtNzTG0ArRZ5NEkIYcsfRb8U0j7aTG7NjRvcrsak5QtUSuxGNN2UcA58g==", + "version": "16.1.3", + "resolved": "https://registry.npmjs.org/eslint-config-next/-/eslint-config-next-16.1.3.tgz", + "integrity": "sha512-q2Z87VSsoJcv+vgR+Dm8NPRf+rErXcRktuBR5y3umo/j5zLjIWH7rqBCh3X804gUGKbOrqbgsLUkqDE35C93Gw==", "dev": true, "license": "MIT", "dependencies": { - "@next/eslint-plugin-next": "16.1.0", + "@next/eslint-plugin-next": "16.1.3", "eslint-import-resolver-node": "^0.3.6", "eslint-import-resolver-typescript": "^3.5.2", "eslint-plugin-import": "^2.32.0", @@ -11904,9 +11904,9 @@ } }, "node_modules/prettier": { - "version": "3.7.4", - "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.7.4.tgz", - "integrity": "sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==", + "version": "3.8.0", + "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.8.0.tgz", + "integrity": "sha512-yEPsovQfpxYfgWNhCfECjG5AQaO+K3dp6XERmOepyPDVqcJm+bjyCVO3pmU+nAPe0N5dDvekfGezt/EIiRe1TA==", "dev": true, "license": "MIT", "bin": { @@ -16571,7 +16571,7 @@ "license": "ISC", "dependencies": { "gray-matter": "^4.0.3", - "prettier": "^3.0.0" + "prettier": "^3.8.0" } } } diff --git a/package.json b/package.json index b168d568ad1..f42cb9c1e61 100644 --- a/package.json +++ b/package.json @@ -56,9 +56,9 @@ "child_process": false }, "dependencies": { - "@docsearch/react": "4.3.2", + "@docsearch/react": "4.4.0", "@headlessui/react": "2.2.9", - "@next/mdx": "16.1.0", + "@next/mdx": "16.1.3", "classnames": "2.5.1", "compare-versions": "6.1.1", "copy-to-clipboard": "^3.3.3", @@ -81,14 +81,14 @@ }, "devDependencies": { "@eslint/js": "9.39.2", - "@next/eslint-plugin-next": "16.1.0", + "@next/eslint-plugin-next": "16.1.3", "@tailwindcss/aspect-ratio": "0.4.2", "@tailwindcss/forms": "0.5.11", "@tailwindcss/postcss": "4.1.18", "@tailwindcss/typography": "0.5.19", "concurrently": "9.2.1", "eslint": "9.39.2", - "eslint-config-next": "16.1.0", + "eslint-config-next": "16.1.3", "eslint-config-prettier": "10.1.8", "eslint-plugin-mdx": "3.6.2", "eslint-plugin-react": "7.37.5", @@ -98,7 +98,7 @@ "markdown-spellcheck": "1.3.1", "next-sitemap": "4.2.3", "postcss": "8.5.6", - "prettier": "3.7.4", + "prettier": "3.8.0", "remark-cli": "12.0.1", "remark-code-import": "1.2.0", "remark-lint": "10.0.1", diff --git a/scripts/gendocs/postprocess/package-lock.json b/scripts/gendocs/postprocess/package-lock.json index 5dd69bbff56..067f40ebaf0 100644 --- a/scripts/gendocs/postprocess/package-lock.json +++ b/scripts/gendocs/postprocess/package-lock.json @@ -87,9 +87,9 @@ } }, "node_modules/prettier": { - "version": "3.7.4", - "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.7.4.tgz", - "integrity": "sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==", + "version": "3.8.0", + "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.8.0.tgz", + "integrity": "sha512-yEPsovQfpxYfgWNhCfECjG5AQaO+K3dp6XERmOepyPDVqcJm+bjyCVO3pmU+nAPe0N5dDvekfGezt/EIiRe1TA==", "bin": { "prettier": "bin/prettier.cjs" }, @@ -179,9 +179,9 @@ "integrity": "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==" }, "prettier": { - "version": "3.7.4", - "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.7.4.tgz", - "integrity": "sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==" + "version": "3.8.0", + "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.8.0.tgz", + "integrity": "sha512-yEPsovQfpxYfgWNhCfECjG5AQaO+K3dp6XERmOepyPDVqcJm+bjyCVO3pmU+nAPe0N5dDvekfGezt/EIiRe1TA==" }, "section-matter": { "version": "1.0.0", From 577e30837a4b54bfbe979c67e82c55cc2056602b Mon Sep 17 00:00:00 2001 From: cert-manager-bot Date: Tue, 20 Jan 2026 00:17:36 +0000 Subject: [PATCH 08/70] BOT: run 'make upgrade-klone' and 'make generate' Signed-off-by: cert-manager-bot --- klone.yaml | 12 ++++++------ make/_shared/tools/00_mod.mk | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/klone.yaml b/klone.yaml index 46b5bfe0cd4..c88a4b8a6ef 100644 --- a/klone.yaml +++ b/klone.yaml @@ -10,30 +10,30 @@ targets: - folder_name: boilerplate repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 172770e538335a25b03ac29aa572660535bd8ad3 + repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d repo_path: modules/boilerplate - folder_name: generate-verify repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 172770e538335a25b03ac29aa572660535bd8ad3 + repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d repo_path: modules/generate-verify - folder_name: help repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 172770e538335a25b03ac29aa572660535bd8ad3 + repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d repo_path: modules/help - folder_name: klone repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 172770e538335a25b03ac29aa572660535bd8ad3 + repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d repo_path: modules/klone - folder_name: repository-base repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 172770e538335a25b03ac29aa572660535bd8ad3 + repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d repo_path: modules/repository-base - folder_name: tools repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 172770e538335a25b03ac29aa572660535bd8ad3 + repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d repo_path: modules/tools diff --git a/make/_shared/tools/00_mod.mk b/make/_shared/tools/00_mod.mk index 0ae61d12d7c..d95f81d7b41 100644 --- a/make/_shared/tools/00_mod.mk +++ b/make/_shared/tools/00_mod.mk @@ -156,7 +156,7 @@ tools += klone=v0.2.0 tools += goreleaser=v2.13.3 # https://pkg.go.dev/github.com/anchore/syft/cmd/syft?tab=versions # renovate: datasource=go packageName=github.com/anchore/syft -tools += syft=v1.40.0 +tools += syft=v1.40.1 # https://github.com/cert-manager/helm-tool/releases # renovate: datasource=github-releases packageName=cert-manager/helm-tool tools += helm-tool=v0.5.3 From d6b4a8f3e89a76085ceb0147555594e43161968f Mon Sep 17 00:00:00 2001 From: Ashley Davis Date: Tue, 20 Jan 2026 17:18:22 +0000 Subject: [PATCH 09/70] update supported releases to reflect changes for c-m 1.19 https://github.com/cert-manager/testing/pull/1138 adds testing for k8s 1.35 with cert-manager 1.19 Signed-off-by: Ashley Davis --- content/docs/releases/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/docs/releases/README.md b/content/docs/releases/README.md index e46f5bb2c38..5ebb96febed 100644 --- a/content/docs/releases/README.md +++ b/content/docs/releases/README.md @@ -21,7 +21,7 @@ should be stable enough to run. | Release | Release Date | End of Life | [Supported Kubernetes / OpenShift Versions][s] | [Tested Kubernetes Versions][test] | |:--------:|:------------:|:---------------:|:----------------------------------------------:|:----------------------------------:| -| [1.19][] | Oct 07, 2025 | Release of 1.21 | 1.31 → 1.34 / 4.18 → 4.20 | 1.31 → 1.34 | +| [1.19][] | Oct 07, 2025 | Release of 1.21 | 1.31 → 1.35 / 4.18 → 4.20 | 1.31 → 1.35 | | [1.18][] | Jun 10, 2025 | Release of 1.20 | 1.29 → 1.33 / 4.16 → 4.20 | 1.29 → 1.33 | ## Upcoming releases From 9d4a62804c9a8db88469e966a93e8318eadbfdf2 Mon Sep 17 00:00:00 2001 From: cert-manager-bot Date: Wed, 21 Jan 2026 00:18:36 +0000 Subject: [PATCH 10/70] BOT: run 'make upgrade-klone' and 'make generate' Signed-off-by: cert-manager-bot --- klone.yaml | 12 ++++++------ make/_shared/tools/00_mod.mk | 10 +++++----- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/klone.yaml b/klone.yaml index c88a4b8a6ef..eeba4bc2419 100644 --- a/klone.yaml +++ b/klone.yaml @@ -10,30 +10,30 @@ targets: - folder_name: boilerplate repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d + repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 repo_path: modules/boilerplate - folder_name: generate-verify repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d + repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 repo_path: modules/generate-verify - folder_name: help repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d + repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 repo_path: modules/help - folder_name: klone repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d + repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 repo_path: modules/klone - folder_name: repository-base repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d + repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 repo_path: modules/repository-base - folder_name: tools repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 1d5f0d579ee172135880a8e9dc7792cad0aaec4d + repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 repo_path: modules/tools diff --git a/make/_shared/tools/00_mod.mk b/make/_shared/tools/00_mod.mk index d95f81d7b41..84f62ac820f 100644 --- a/make/_shared/tools/00_mod.mk +++ b/make/_shared/tools/00_mod.mk @@ -102,7 +102,7 @@ tools += ytt=v0.52.2 tools += rclone=v1.72.1 # https://github.com/istio/istio/releases # renovate: datasource=github-releases packageName=istio/istio -tools += istioctl=1.28.2 +tools += istioctl=1.28.3 ### go packages # https://pkg.go.dev/sigs.k8s.io/controller-tools/cmd/controller-gen?tab=versions @@ -677,10 +677,10 @@ $(DOWNLOAD_DIR)/tools/rclone@$(RCLONE_VERSION)_$(HOST_OS)_$(HOST_ARCH): | $(DOWN chmod +x $(outfile); \ rm -f $(outfile).zip -istioctl_linux_amd64_SHA256SUM=c3dce641b92213c0de4dedcc43c760ab94b9f74fe23e6c3c0ae562e5fffba222 -istioctl_linux_arm64_SHA256SUM=9d0ab31f704df118d8de0984dcea1fd8a763b1f4513ad6da3ab0984ee99b8e1a -istioctl_darwin_amd64_SHA256SUM=1224be67ff7c38967f4e02b999b09f5c13d15b667a7f98b8882192e6991c8991 -istioctl_darwin_arm64_SHA256SUM=69bf3008b1dc534ac5a9af90479a27276af71146a0a0cc383031a10f8fd6c6bf +istioctl_linux_amd64_SHA256SUM=48d8bbe5879b121d47a553d5fbe55c19d53cfaecaa0634c86366da72ced38ac2 +istioctl_linux_arm64_SHA256SUM=6e364e372d99886631e6f841c314d13abd549a7c5be1f89417c13f0dd6fbc4a1 +istioctl_darwin_amd64_SHA256SUM=028a6d8d0c054c87ceefc47e8269a71136f26e9221339e471b73da5dde1d6929 +istioctl_darwin_arm64_SHA256SUM=748da8498069348065611a7b38132e3f43cd4851b8b8f35c59531f38de944410 .PRECIOUS: $(DOWNLOAD_DIR)/tools/istioctl@$(ISTIOCTL_VERSION)_$(HOST_OS)_$(HOST_ARCH) $(DOWNLOAD_DIR)/tools/istioctl@$(ISTIOCTL_VERSION)_$(HOST_OS)_$(HOST_ARCH): | $(DOWNLOAD_DIR)/tools From 9259eeb70ddae7700f80c18839fba0b5b515727d Mon Sep 17 00:00:00 2001 From: cert-manager-bot Date: Fri, 23 Jan 2026 00:18:29 +0000 Subject: [PATCH 11/70] BOT: run 'make upgrade-klone' and 'make generate' Signed-off-by: cert-manager-bot --- klone.yaml | 12 ++++++------ make/_shared/tools/00_mod.mk | 12 ++++++------ 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/klone.yaml b/klone.yaml index eeba4bc2419..1de5f0d10ee 100644 --- a/klone.yaml +++ b/klone.yaml @@ -10,30 +10,30 @@ targets: - folder_name: boilerplate repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 + repo_hash: bd2949284f981d81a09080d29aff219bf4077dac repo_path: modules/boilerplate - folder_name: generate-verify repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 + repo_hash: bd2949284f981d81a09080d29aff219bf4077dac repo_path: modules/generate-verify - folder_name: help repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 + repo_hash: bd2949284f981d81a09080d29aff219bf4077dac repo_path: modules/help - folder_name: klone repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 + repo_hash: bd2949284f981d81a09080d29aff219bf4077dac repo_path: modules/klone - folder_name: repository-base repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 + repo_hash: bd2949284f981d81a09080d29aff219bf4077dac repo_path: modules/repository-base - folder_name: tools repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: 97598fb723db4c44aabd18529b7256d6babe1ea7 + repo_hash: bd2949284f981d81a09080d29aff219bf4077dac repo_path: modules/tools diff --git a/make/_shared/tools/00_mod.mk b/make/_shared/tools/00_mod.mk index 84f62ac820f..171b330f220 100644 --- a/make/_shared/tools/00_mod.mk +++ b/make/_shared/tools/00_mod.mk @@ -66,7 +66,7 @@ NEEDS_CTR = __require-ctr tools := # https://github.com/helm/helm/releases # renovate: datasource=github-releases packageName=helm/helm -tools += helm=v4.0.5 +tools += helm=v4.1.0 # https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl # renovate: datasource=github-releases packageName=kubernetes/kubernetes tools += kubectl=v1.35.0 @@ -180,7 +180,7 @@ tools += govulncheck=v1.1.4 tools += operator-sdk=v1.42.0 # https://pkg.go.dev/github.com/cli/cli/v2?tab=versions # renovate: datasource=go packageName=github.com/cli/cli/v2 -tools += gh=v2.85.0 +tools += gh=v2.86.0 # https://github.com/redhat-openshift-ecosystem/openshift-preflight/releases # renovate: datasource=github-releases packageName=redhat-openshift-ecosystem/openshift-preflight tools += preflight=1.16.0 @@ -479,10 +479,10 @@ $(DOWNLOAD_DIR)/tools/go@$(VENDORED_GO_VERSION)_$(HOST_OS)_$(HOST_ARCH).tar.gz: $(CURL) https://go.dev/dl/go$(VENDORED_GO_VERSION).$(HOST_OS)-$(HOST_ARCH).tar.gz -o $(outfile); \ $(checkhash_script) $(outfile) $(go_$(HOST_OS)_$(HOST_ARCH)_SHA256SUM) -helm_linux_amd64_SHA256SUM=730e4e9fbff94168249ddd0b9b1b8c357b7f64815462dd88c6b39f09bf18b814 -helm_linux_arm64_SHA256SUM=206a7747702d13994a93629eaed4259bd9d0aec6e23ca52d640f47f7edfdc863 -helm_darwin_amd64_SHA256SUM=270d906140eadbe95584d2cebae1fa0e46950027d82de0c4db937dc936b564a6 -helm_darwin_arm64_SHA256SUM=b4d04ccf68004604e13878fce4a893711490914512f8759879f848136a9f5fca +helm_linux_amd64_SHA256SUM=8e7ae5cb890c56f53713bffec38e41cd8e7e4619ebe56f8b31cd383bfb3dbb83 +helm_linux_arm64_SHA256SUM=81315e404b6d09b65bee577a679ab269d6d44652ef2e1f66a8f922b51ca93f6b +helm_darwin_amd64_SHA256SUM=a326073ae392bed8b73c415d1d9d6880b0f5accb18aa9456975562b44a87c650 +helm_darwin_arm64_SHA256SUM=f12e2723c5e8eaff3e4b3670536867289fb6ab7f797fa2efedd1c53cfaca62fb .PRECIOUS: $(DOWNLOAD_DIR)/tools/helm@$(HELM_VERSION)_$(HOST_OS)_$(HOST_ARCH) $(DOWNLOAD_DIR)/tools/helm@$(HELM_VERSION)_$(HOST_OS)_$(HOST_ARCH): | $(DOWNLOAD_DIR)/tools From e91668b8716b9ed6dc38c0561b7546fa4adadb42 Mon Sep 17 00:00:00 2001 From: cert-manager-bot Date: Sat, 24 Jan 2026 00:17:17 +0000 Subject: [PATCH 12/70] BOT: run 'make upgrade-klone' and 'make generate' Signed-off-by: cert-manager-bot --- .github/workflows/make-self-upgrade.yaml | 2 +- klone.yaml | 12 ++++++------ .../base/.github/workflows/make-self-upgrade.yaml | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/make-self-upgrade.yaml b/.github/workflows/make-self-upgrade.yaml index fe7d9856ded..b680a01829f 100644 --- a/.github/workflows/make-self-upgrade.yaml +++ b/.github/workflows/make-self-upgrade.yaml @@ -38,7 +38,7 @@ jobs: scope: 'cert-manager/website' identity: make-self-upgrade - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Adding `fetch-depth: 0` makes sure tags are also fetched. We need # the tags so `git describe` returns a valid version. # see https://github.com/actions/checkout/issues/701 for extra info about this option diff --git a/klone.yaml b/klone.yaml index 1de5f0d10ee..430013ef2f4 100644 --- a/klone.yaml +++ b/klone.yaml @@ -10,30 +10,30 @@ targets: - folder_name: boilerplate repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: bd2949284f981d81a09080d29aff219bf4077dac + repo_hash: d3a6cd8952237d779adaff9748991e57cf09af41 repo_path: modules/boilerplate - folder_name: generate-verify repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: bd2949284f981d81a09080d29aff219bf4077dac + repo_hash: d3a6cd8952237d779adaff9748991e57cf09af41 repo_path: modules/generate-verify - folder_name: help repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: bd2949284f981d81a09080d29aff219bf4077dac + repo_hash: d3a6cd8952237d779adaff9748991e57cf09af41 repo_path: modules/help - folder_name: klone repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: bd2949284f981d81a09080d29aff219bf4077dac + repo_hash: d3a6cd8952237d779adaff9748991e57cf09af41 repo_path: modules/klone - folder_name: repository-base repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: bd2949284f981d81a09080d29aff219bf4077dac + repo_hash: d3a6cd8952237d779adaff9748991e57cf09af41 repo_path: modules/repository-base - folder_name: tools repo_url: https://github.com/cert-manager/makefile-modules.git repo_ref: main - repo_hash: bd2949284f981d81a09080d29aff219bf4077dac + repo_hash: d3a6cd8952237d779adaff9748991e57cf09af41 repo_path: modules/tools diff --git a/make/_shared/repository-base/base/.github/workflows/make-self-upgrade.yaml b/make/_shared/repository-base/base/.github/workflows/make-self-upgrade.yaml index 4a4df3fe733..b78da6e50f2 100644 --- a/make/_shared/repository-base/base/.github/workflows/make-self-upgrade.yaml +++ b/make/_shared/repository-base/base/.github/workflows/make-self-upgrade.yaml @@ -38,7 +38,7 @@ jobs: scope: '{{REPLACE:GH-REPOSITORY}}' identity: make-self-upgrade - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Adding `fetch-depth: 0` makes sure tags are also fetched. We need # the tags so `git describe` returns a valid version. # see https://github.com/actions/checkout/issues/701 for extra info about this option From fd00b6c9868831176b946084e00af42e02744752 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 24 Jan 2026 00:20:57 +0000 Subject: [PATCH 13/70] chore(deps): update actions/checkout action to v6.0.2 Signed-off-by: Renovate Bot --- .github/workflows/check.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml index 6875d6721a2..b8734ff3f28 100644 --- a/.github/workflows/check.yaml +++ b/.github/workflows/check.yaml @@ -8,7 +8,7 @@ jobs: pull-cert-manager-website-verify: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6 with: node-version: 24 From 0fcf99548818764eb46eddd639b53f4748b4200d Mon Sep 17 00:00:00 2001 From: Rohit Chaudhari <100275369+rohitkbc@users.noreply.github.com> Date: Sat, 24 Jan 2026 16:55:10 +0530 Subject: [PATCH 14/70] Update copyright year in Footer component Signed-off-by: Rohit Chaudhari <100275369+rohitkbc@users.noreply.github.com> --- components/Footer.jsx | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/components/Footer.jsx b/components/Footer.jsx index f5cf0b4cd55..a99df2d82d5 100644 --- a/components/Footer.jsx +++ b/components/Footer.jsx @@ -2,6 +2,7 @@ import Link from 'next/link' import FooterSepartor from './snippets/FooterSeparator' export default function Footer() { + const currentYear = new Date().getFullYear() return (