[pull] master from cert-manager:master - #1066

Open

pull[bot] wants to merge 3982 commits into

next-stack:masterfrom

cert-manager:master

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 18, 2026

Merge pull request #8898 from cert-manager/renovate/master-major-misc-github-actions
cert-manager-prow[bot]
authored
1fe38ad
Disable makefile-modules upgrades on release branches
erikgb
committed
808670f
Make "Base Images" Renovate group consistent
erikgb
committed
c4508a8

Commits on Jun 19, 2026

Commits on Jun 20, 2026

Clarify gosec suppressions in ACME reachability test
erikgb
committed
422cce8

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 24, 2026

Merge pull request #8930 from wallrj-cyberark/vault-path-hardening
cert-manager-prow[bot]
authored
76a1e8d
adding e2e tests
hjoshi123
committed
378cab4

Commits on Jun 25, 2026

Commits on Jun 27, 2026

Commits on Jun 28, 2026

Commits on Jun 29, 2026

Commits on Jun 30, 2026

Commits on Jul 4, 2026

fix(deps): update cloud go deps
renovate[bot]
authored
eacb0a9

Commits on Jul 5, 2026

Commits on Jul 6, 2026

Merge pull request #8574 from hjoshi123/feat/ari-design-cm
cert-manager-prow[bot]
authored
378eaab

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Commits on Jul 9, 2026

Commits on Jul 10, 2026

Commits on Jul 11, 2026

Commits on Jul 12, 2026

Commits on Jul 13, 2026

fix(acme): bound ACME response body size to prevent unbounded-body DoS

Felix Phipps
and
claude
committed
572272d
chore(acme): forbid direct construction of the forked ACME client

Felix Phipps
and
claude
committed
467c62b

Commits on Jul 14, 2026

chore(deps): update makefile modules to b7c9d73
renovate[bot]
authored
5188977
Merge pull request #9022 from cert-manager/renovate/master-makefile-modules
cert-manager-prow[bot]
authored
d8a5e01
chore(deps): update base images
renovate[bot]
authored
c027fee
Merge pull request #9023 from cert-manager/renovate/master-base-images
cert-manager-prow[bot]
authored
cc250e5
chore(docs): Add newline at eof
jsoref
committed
e8ede79
chore(docs): Add links for cert-manager/website
jsoref
committed
7df119b
chore(docs): Remove stray period
jsoref
committed
6ec6821

Commits on Jul 16, 2026

chore(deps): update makefile modules to 703bbcc
renovate[bot]
authored
d3af774
Merge pull request #9033 from cert-manager/renovate/master-makefile-modules
cert-manager-prow[bot]
authored
fe14ff5
fix(vault): gate AWS IAM auth ambient credentials for namespaced Issuers
Felix Phipps
committed
36caf89
Merge pull request #8977 from FelixPhipps/AWS-gate-unreachable
cert-manager-prow[bot]
authored
b906bd2
refactor: dns resolution cache no longer uses global state

ThatsMrTalbot
and
claude
committed
9c2cd4d
fix(renew): Do not renew a certificate if its renewPolicy=Disabled
sklirg
committed
60662a1
fix(renew): Set failed=false
sklirg
committed
c06e0bd
Apply suggestion from @hjoshi123
hjoshi123
authored
9ad7e8f

Commits on Jul 17, 2026

Commits on Jul 19, 2026

Commits on Jul 20, 2026

refactor(acme): use http.MaxBytesReader to cap ACME response bodies

Felix Phipps
and
claude
committed
33aa598
Add support for configurable PEM Limits on the Admissions Webhook. (#8971)

yeonhwanp
and
Brian Park
authored
bbcb324

Commits on Jul 21, 2026

fix(e2e): randomise CommonName in otherName SAN conformance test
wallrj-cyberark
committed
65fc0e1
Merge pull request #8766 from ThatsMrTalbot/feat/per-solver-dns01-nameservers
cert-manager-prow[bot]
authored
70d4f2d
Merge pull request #9010 from FelixPhipps/unbounded-body-dos
cert-manager-prow[bot]
authored
70e1c91
fix(acme): don't reflect HTTP-01 self-check response body in Challenge status

Felix Phipps
and
claude
committed
e2591d9
test(acme): enforce and document HTTP-01 self-check sentinel length

Felix Phipps
and
claude
committed
b036f64
Merge pull request #9019 from FelixPhipps/forbidigo-acme-client
cert-manager-prow[bot]
authored
1dfe1dd

Commits on Jul 22, 2026

Commits on Jul 23, 2026

Commits on Jul 24, 2026

chore(deps): update module github.com/google/cel-go to v0.29.0 [security]
renovate[bot]
authored
c520074

Commits on Jul 27, 2026

Commits on Jul 28, 2026

Commits on Jul 29, 2026

Merge pull request #9042 from SebTardif/fix/issuer-solver-secret-rereconcile
cert-manager-prow[bot]
authored
49f887b

Commits on Jul 30, 2026

feat(release): sign staged metadata.json with cosign

Felix Phipps
and
claude
committed
a2c0847

Commits on Jul 31, 2026

Commits on Aug 3, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026

fix(deps): update cloud go deps
renovate[bot]
authored
7f76110
fix(release): fail fast when signing metadata without CMREL_KEY

Felix Phipps
and
claude
committed
e21fd92
adding per issuer ari
hjoshi123
committed
932a47a
Merge pull request #9098 from cert-manager/renovate/master-makefile-modules
cert-manager-prow[bot]
authored
d28aed6
Merge pull request #9087 from FelixPhipps/sign-metadata-cosign
cert-manager-prow[bot]
authored
90ca1b2
Merge pull request #9088 from cert-manager/renovate/master-cloud-go-deps
cert-manager-prow[bot]
authored
fb493d8

Commits on Aug 6, 2026

Merge pull request #9060 from hjoshi123/feat/per-issuer-ari
cert-manager-prow[bot]
authored
2762331

Commits on Aug 7, 2026

Commits on Aug 8, 2026

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Commits on Aug 11, 2026

Merge pull request #9122 from cert-manager/renovate/master-cloud-go-deps
cert-manager-prow[bot]
authored
613352e

Commits on Aug 12, 2026

fix(issuing): do not panic on a failed request with no Ready condition (#9118)
thc1006
authored
30e06c9

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Commits on Aug 15, 2026

Merge pull request #9142 from cert-manager/renovate/master-cloud-go-deps
cert-manager-prow[bot]
authored
4bed4fd

Commits on Aug 16, 2026

chore(deps): update github/codeql-action action to v4.37.7
renovate[bot]
authored
aa4e969

Commits on Aug 17, 2026