Skip to content

build(go): bump the go-dependencies group across 1 directory with 10 updates #207

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(go): bump the go-dependencies group across 1 directory with 10 updates #207

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025 •
edited
Loading

Bumps the go-dependencies group with 4 updates in the / directory: github.com/cert-manager/cert-manager, github.com/traefik/traefik/v3, go.uber.org/zap and sigs.k8s.io/external-dns.

Updates github.com/cert-manager/cert-manager from 1.18.1 to 1.19.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.19.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We reverted the CRD-based API defaults for Certificate.Spec.IssuerRef and CertificateRequest.Spec.IssuerRef after they were found to cause unexpected certificate renewals after upgrading to 1.19.0. We will try re-introducing these API defaults in cert-manager 1.20. We fixed a bug that caused certificates to be re-issued unexpectedly if the issuerRef kind or group was changed to one of the "runtime" default values. We upgraded Go to 1.25.3 to address the following security vulnerabilities: CVE-2025-61724, CVE-2025-58187, CVE-2025-47912, CVE-2025-58183, CVE-2025-61723, CVE-2025-58186, CVE-2025-58185, CVE-2025-58188, and CVE-2025-61725.

📖 Read the full 1.19 release notes on the cert-manager.io website before upgrading.

Changes since v1.19.0:

Bug or Regression

  • BUGFIX: in case kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed (#8175, @​cert-manager-bot)
  • Bump Go to 1.25.3 to fix a backwards incompatible change to the validation of DNS names in X.509 SAN fields which prevented the use of DNS names with a trailing dot (#8177, @​wallrj-cyberark)
  • Revert API defaults for issuer reference kind and group introduced in 0.19.0 (#8178, @​cert-manager-bot)

v1.19.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

⚠️ Known issues: The following known issues are fixed in v1.19.1:

This release focuses on expanding platform compatibility, improving deployment flexibility, enhancing observability, and addressing key reliability issues.

📖 Read the full release notes at cert-manager.io: https://cert-manager.io/docs/releases/release-notes/release-notes-1.19

Changes since v1.18.0:

Feature

  • Add IPv6 rules to the default network policy (#7726, @​jcpunk)
  • Add global.nodeSelector to helm chart to allow for a single nodeSelector to be set across all services. (#7818, @​StingRayZA)
  • Add a feature gate to default to Ingress pathType Exact in ACME HTTP01 Ingress challenge solvers. (#7795, @​sspreitzer)
  • Add generated applyconfigurations allowing clients to make type-safe server-side apply requests for cert-manager resources. (#7866, @​erikgb)
  • Added API defaults to issuer references group (cert-manager.io) and kind (Issuer). (#7414, @​erikgb)
  • Added certmanager_certificate_challenge_status Prometheus metric. (#7736, @​hjoshi123)
  • Added protocol field for rfc2136 DNS01 provider (#7881, @​hjoshi123)
  • Added experimental field hostUsers flag to all pods. Not set by default. (#7973, @​hjoshi123)
  • Support configurable resource requests and limits for ACME HTTP01 solver pods through ClusterIssuer and Issuer specifications, allowing granular resource management that overrides global --acme-http01-solver-resource-* settings. (#7972, @​lunarwhite)
  • The CAInjectorMerging feature has been promoted to BETA and is now enabled by default (#8017, @​ThatsMrTalbot)
  • The controller, webhook and ca-injector now log their version and git commit on startup for easier debugging and support. (#8072, @​prasad89)
  • Updated certificate metrics to the collector approach. (#7856, @​hjoshi123)

Bug or Regression

  • ACME: Increased challenge authorization timeout to 2 minutes to fix error waiting for authorization (#7796, @​hjoshi123)
  • BUGFIX: permitted URI domains were incorrectly used to set the excluded URI domains in the CSR's name constraints (#7816, @​kinolaev)
  • Enforced ACME HTTP-01 solver validation to properly reject configurations when multiple ingress options (class, ingressClassName, name) are specified simultaneously (#8021, @​lunarwhite)
  • Increase maximum sizes of PEM certificates and chains which can be parsed in cert-manager, to handle leaf certificates with large numbers of DNS names or other identities (#7961, @​SgtCoDFish)

... (truncated)

Commits
  • a22e21e Merge pull request #8180 from cert-manager-bot/cherry-pick-8168-to-release-1.19
  • e1390a4 fix(deps): update module github.com/venafi/vcert/v5 to v5.12.2
  • 36e4265 Merge pull request #8179 from cert-manager-bot/cherry-pick-8164-to-release-1.19
  • 3416dd0 fix(deps): update module sigs.k8s.io/controller-runtime to v0.22.3
  • 4a63715 Merge pull request #8178 from cert-manager-bot/cherry-pick-8173-to-release-1.19
  • a48b6fc REVERT: API defaults for issuer reference kind and group
  • 4706a48 Merge pull request #8177 from wallrj-cyberark/release-1.19-upgrade-go
  • bdfb708 [release-1.19] Disable generate-klone so we can manually update Go versions
  • 43825b6 [release-1.19] bump Go to 1.25.3
  • de44c90 Merge pull request #8175 from cert-manager-bot/cherry-pick-8160-to-release-1.19
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates github.com/traefik/traefik/v3 from 3.4.5 to 3.6.2

Release notes

Sourced from github.com/traefik/traefik/v3's releases.

v3.6.2

Important: Please read the migration guide.

Bug fixes:

  • [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#12286 by rtribotte)

v3.6.1

Important: Please read the migration guide.

Bug fixes:

Documentation:

  • [k8s] Fix Nginx provider documentation (#12266 by nmengin)
  • [k8s] Fix Gateway API version and the list of features supported (#12254 by nmengin)

v3.6.0

Important: Please read the migration guide.

Enhancements:

Bug fixes:

  • [server] Make the aggregator compute provider namespace for router&#39;s parentRefs (#12235 by rtribotte)

Documentation:

... (truncated)

Changelog

Sourced from github.com/traefik/traefik/v3's changelog.

v3.6.2 (2025-11-18)

All Commits

Bug fixes:

  • [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#12286 by rtribotte)

v3.6.1 (2025-11-13)

All Commits

Bug fixes:

Documentation:

  • [k8s] Fix Nginx provider documentation (#12266 by nmengin)
  • [k8s] Fix Gateway API version and the list of features supported (#12254 by nmengin)

v2.11.31 (2025-11-13)

All Commits

Bug fixes:

v3.6.0 (2025-11-07)

All Commits

Enhancements:

... (truncated)

Commits
  • f6ea1f4 Prepare release v3.6.2
  • e0d9b06 Deprecate Kubernetes Ingress NGINX provider experimental flag
  • ade2306 Prepare release v3.6.1
  • 67fef27 Merge branch v2.11 into v3.6
  • 79bb320 Prepare release v2.11.31
  • 9722e2b Revert "Avoid allocations in readLoop by using sync.Pool"
  • dd67dac Fix NGinx provider dcoumentation
  • baba5da Auto-negotiate Docker API Version
  • 058b194 Auto-negotiate Docker API version
  • d271750 Fix multi-layer routing with models
  • Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.0 to 1.27.1

Release notes

Sourced from go.uber.org/zap's releases.

v1.27.1

Enhancements:

  • #1501[]: prevent Object from panicking on nils
  • #1511[]: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Changelog

Sourced from go.uber.org/zap's changelog.

1.27.1 (19 Nov 2025)

Enhancements:

  • #1501[]: prevent Object from panicking on nils
  • #1511[]: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

#1501: uber-go/zap#1501 #1511: uber-go/zap#1511

Commits

Updates k8s.io/api from 0.33.2 to 0.34.1

Commits
  • 77c9e29 Update dependencies to v0.34.1 tag
  • 133a39c Merge remote-tracking branch 'origin/master' into release-1.34
  • fd087be clarify that staging repos are automatically published
  • ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • 5ec86fc link to what a staging repository is
  • 08c5dee docs: clarify that this is a staging repository and not for direct contributions
  • ba64d0b Update prerelease lifecycle to v1.34
  • 25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
  • baa1eb1 KEP-5075: generated codes from make update
  • 740b2c9 KEP-5075: API updates
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.33.2 to 0.34.1

Commits
  • b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
  • cd8b91c clarify that staging repos are automatically published
  • 8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • ec3cea5 link to what a staging repository is
  • e4db694 docs: clarify that this is a staging repository and not for direct contributions
  • 04507a3 Merge pull request #132942 from thockin/kyaml
  • 50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
  • 7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
  • 58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
  • 38a24e6 chore: residual boolptr and intptr removal
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.33.2 to 0.34.1

Commits
  • d033c49 Update dependencies to v0.34.1 tag
  • 97396af Merge remote-tracking branch 'origin/master' into release-1.34
  • 5f737f3 clarify that staging repos are automatically published
  • 0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • c00384c link to what a staging repository is
  • b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
  • 42e6182 KEP-5075: generated codes from make update
  • da11948 Merge pull request #130653 from yliaog/master
  • 3b7d818 extended resource backed by DRA: codegen
  • bb11581 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.21.0 to 0.22.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.3

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3

v0.22.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.1...v0.22.2

v0.22.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1

v0.22.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

... (truncated)

Commits
  • 3e8b259 [release-0.22] 🐛 Allow SSA after normal resource creation (#3348)
  • 7fb34b5 [release-0.22] 🐛 Fix a bug where the priorityqueue would sometimes not return...
  • 27d4b5e Merge pull request #3338 from k8s-infra-cherrypick-robot/cherry-pick-3337-to-...
  • 6d368ce Rebase priorityqueue shutdown fix for release-0.22
  • d04f428 Don't block on Get when queue is shutdown (2nd try)
  • 7f146f7 Merge pull request #3317 from k8s-infra-cherrypick-robot/cherry-pick-3316-to-...
  • f3b9e4f Bump to k8s.io/* v0.34.1
  • 04c6a08 [release-0.22] 🐛Panic when trying to build more than one instance of fake.Cli...
  • 6422ed0 Merge pull request #3308 from k8s-infra-cherrypick-robot/cherry-pick-3307-to-...
  • 09a2e89 Revert deprecation of client.Apply
  • Additional commits viewable in compare view

Updates sigs.k8s.io/external-dns from 0.17.0 to 0.20.0

Release notes

Sourced from sigs.k8s.io/external-dns's releases.

v0.20.0

🚀 Features

🐛 Bug fixes

  • fix(cloudflare): infinite reconciliation loop with cloudflare-record-comment flag by @​vflaux in #5828
  • fix: cloudflare softError failedZones by @​nissessenap in #5899
  • fix(controller): panic in OCI provider build by @​vflaux in #5877
  • fix(coredns):...

    Description has been truncated

@dependabot
build(go): bump the go-dependencies group across 1 directory with 10 …
7c9cc53 
…updates

Bumps the go-dependencies group with 4 updates in the / directory: [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager), [github.com/traefik/traefik/v3](https://github.com/traefik/traefik), [go.uber.org/zap](https://github.com/uber-go/zap) and [sigs.k8s.io/external-dns](https://github.com/kubernetes-sigs/external-dns).


Updates `github.com/cert-manager/cert-manager` from 1.18.1 to 1.19.1
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.18.1...v1.19.1)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `github.com/traefik/traefik/v3` from 3.4.5 to 3.6.2
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/v3.6.2/CHANGELOG.md)
- [Commits](traefik/traefik@v3.4.5...v3.6.2)

Updates `go.uber.org/zap` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.0...v1.27.1)

Updates `k8s.io/api` from 0.33.2 to 0.34.1
- [Commits](kubernetes/api@v0.33.2...v0.34.1)

Updates `k8s.io/apimachinery` from 0.33.2 to 0.34.1
- [Commits](kubernetes/apimachinery@v0.33.2...v0.34.1)

Updates `k8s.io/client-go` from 0.33.2 to 0.34.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.2...v0.34.1)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.21.0...v0.22.3)

Updates `sigs.k8s.io/external-dns` from 0.17.0 to 0.20.0
- [Release notes](https://github.com/kubernetes-sigs/external-dns/releases)
- [Changelog](https://github.com/kubernetes-sigs/external-dns/blob/master/docs/release.md)
- [Commits](kubernetes-sigs/external-dns@v0.17.0...v0.20.0)

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/traefik/traefik/v3
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/external-dns
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 1, 2025
@dependabot dependabot bot requested a review from borchero as a code owner December 1, 2025 06:42
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 1, 2025
@github-actions github-actions bot added the build label Dec 1, 2025
@github-actions
Copy link

github-actions bot commented Dec 1, 2025 •
edited
Loading

Thank you for opening this pull request! 👋🏼

This repository requires pull request titles to follow the Conventional Commits specification and it looks like your proposed title needs to be adjusted.

Details 
The subject "bump the go-dependencies group across 1 directory with 10 updates" found in pull request title "build(go): bump the go-dependencies group across 1 directory with 10 updates" doesn't match the configured pattern "^[A-Z].+[^. ]$".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@borchero borchero Awaiting requested review from borchero borchero is a code owner

Assignees

No one assigned

Labels

build dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant