Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 17, 2025

This PR contains the following updates:

Package Update Change
cert-manager (source) patch v1.19.0 -> v1.19.1

Release Notes

cert-manager/cert-manager (cert-manager)

v1.19.1

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We reverted the CRD-based API defaults for Certificate.Spec.IssuerRef and CertificateRequest.Spec.IssuerRef after they were found to cause unexpected certificate renewals after upgrading to 1.19.0. We will try re-introducing these API defaults in cert-manager 1.20.
We fixed a bug that caused certificates to be re-issued unexpectedly if the issuerRef kind or group was changed to one of the "runtime" default values.
We upgraded Go to 1.25.3 to address the following security vulnerabilities: CVE-2025-61724, CVE-2025-58187, CVE-2025-47912, CVE-2025-58183, CVE-2025-61723, CVE-2025-58186, CVE-2025-58185, CVE-2025-58188, and CVE-2025-61725.

📖 Read the full 1.19 release notes on the cert-manager.io website before upgrading.

Changes since v1.19.0:

Bug or Regression
  • BUGFIX: in case kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed (#​8175, @​cert-manager-bot)
  • Bump Go to 1.25.3 to fix a backwards incompatible change to the validation of DNS names in X.509 SAN fields which prevented the use of DNS names with a trailing dot (#​8177, @​wallrj-cyberark)
  • Revert API defaults for issuer reference kind and group introduced in 0.19.0 (#​8178, @​cert-manager-bot)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch from 33be841 to 472a39e Compare October 17, 2025 05:33
@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch 4 times, most recently from 4cdc856 to d352f96 Compare October 30, 2025 03:38
@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch 2 times, most recently from 08cf063 to 964daa9 Compare October 30, 2025 22:34
@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch from 964daa9 to a5e93f3 Compare October 30, 2025 22:47
@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch from a5e93f3 to 160b526 Compare October 30, 2025 23:10
@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch 2 times, most recently from c83c7fb to 3712e61 Compare November 7, 2025 01:52
@renovate renovate bot force-pushed the renovate/cert-manager-1.x branch from 3712e61 to dfa2f84 Compare November 7, 2025 07:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant