[PR #138] [CLOSED] chore(cert-manager): renovate review for PR #131 — v1.19.3 → v1.20.2 #241

New issue

Closed

opened 2026-06-08 08:30:52 +00:00 by ryangr0 · 0 comments

ryangr0 commented

2026-06-08 08:30:52 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/webgrip/homelab-cluster/pull/138
Author: @Copilot
Created: 5/23/2026
Status: ❌ Closed

Base: main ← Head: copilot/review-dependency-update-131

📝 Commits (1)

07c9993 Initial plan

📄 Description

Automated Renovate dependency review for cert-manager minor update (v1.19.3 → v1.20.2), covering three intermediate releases with a MODERATE security fix and a notable Prometheus metrics label behavior change.

Key findings

Security: v1.20.0 fixes a MODERATE DoS (panic on unexpected DNS response ordering, #8469) and CVE-2025-61727/61729 via Go 1.25.5; v1.20.2 bumps Go to 1.26.2
Behavior change: Prometheus metrics app label is now hardcoded to cert-manager instead of being derived from Helm release name/namespace — existing Grafana dashboard should be verified
Version skew: This PR only updates bootstrap/helmfile.d/01-apps.yaml (bootstrap path); kubernetes/apps/cert-manager/cert-manager/app/ocirepository.yaml remains pinned to v1.19.5 — Flux will reconcile back to v1.19.5 post-bootstrap unless that file is also updated

Pre-merge checks

Update ocirepository.yaml to v1.20.2 with refreshed digest to close the bootstrap/Flux version skew
Verify cert-manager-certificates Grafana dashboard still renders (metrics label change in v1.20.0)
Confirm ClusterIssuer and at least one Certificate remain Ready post-upgrade

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/webgrip/homelab-cluster/pull/138 **Author:** [@Copilot](https://github.com/apps/copilot-swe-agent) **Created:** 5/23/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `copilot/review-dependency-update-131` --- ### 📝 Commits (1) - [`07c9993`](https://github.com/webgrip/homelab-cluster/commit/07c99938057c4c42643dc07c39d86378a49caf8c) Initial plan ### 📄 Description Automated Renovate dependency review for cert-manager minor update (`v1.19.3 → v1.20.2`), covering three intermediate releases with a MODERATE security fix and a notable Prometheus metrics label behavior change. ## Key findings - **Security**: v1.20.0 fixes a MODERATE DoS (panic on unexpected DNS response ordering, [#8469](https://github.com/cert-manager/cert-manager/issues/8469)) and CVE-2025-61727/61729 via Go 1.25.5; v1.20.2 bumps Go to 1.26.2 - **Behavior change**: Prometheus metrics app label is now hardcoded to `cert-manager` instead of being derived from Helm release name/namespace — existing Grafana dashboard should be verified - **Version skew**: This PR only updates `bootstrap/helmfile.d/01-apps.yaml` (bootstrap path); `kubernetes/apps/cert-manager/cert-manager/app/ocirepository.yaml` remains pinned to `v1.19.5` — Flux will reconcile back to `v1.19.5` post-bootstrap unless that file is also updated ## Pre-merge checks - [ ] Update `ocirepository.yaml` to `v1.20.2` with refreshed digest to close the bootstrap/Flux version skew - [ ] Verify `cert-manager-certificates` Grafana dashboard still renders (metrics label change in v1.20.0) - [ ] Confirm ClusterIssuer and at least one Certificate remain `Ready` post-upgrade --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

ryangr0

2026-06-08 08:30:52 +00:00

closed this issue
added the
pull-request
label

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

webgrip/homelab-cluster#241

No description provided.

Rows
Columns