Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 24, 2025

Bumps the gomodupdates group with 4 updates in the / directory: github.com/cert-manager/cert-manager, github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring, go.mondoo.com/cnquery/v12 and go.mondoo.com/cnspec/v12.

Updates github.com/cert-manager/cert-manager from 1.18.4 to 1.19.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.19.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We updated Go to fix some vulnerabilities in the standard library.

📖 Read the full 1.19 release notes on the cert-manager.io website before upgrading.

Changes since v1.19.1

Bug or Regression

  • Address false positive vulnerabilities CVE-2025-47914 and CVE-2025-58181 which were reported by Trivy. (#8283, @​SgtCoDFish)
  • Update Go to v1.25.5 to fix CVE-2025-61727 and CVE-2025-61729 (#8294, @​wallrj-cyberark)
  • Update global.nodeSelector to helm chart to perform a merge and allow for a single nodeSelector to be set across all services. (#8233, @​cert-manager-bot)

Other (Cleanup or Flake)

v1.19.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We reverted the CRD-based API defaults for Certificate.Spec.IssuerRef and CertificateRequest.Spec.IssuerRef after they were found to cause unexpected certificate renewals after upgrading to 1.19.0. We will try re-introducing these API defaults in cert-manager 1.20. We fixed a bug that caused certificates to be re-issued unexpectedly if the issuerRef kind or group was changed to one of the "runtime" default values. We upgraded Go to 1.25.3 to address the following security vulnerabilities: CVE-2025-61724, CVE-2025-58187, CVE-2025-47912, CVE-2025-58183, CVE-2025-61723, CVE-2025-58186, CVE-2025-58185, CVE-2025-58188, and CVE-2025-61725.

📖 Read the full 1.19 release notes on the cert-manager.io website before upgrading.

Changes since v1.19.0:

Bug or Regression

  • BUGFIX: in case kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed (#8175, @​cert-manager-bot)
  • Bump Go to 1.25.3 to fix a backwards incompatible change to the validation of DNS names in X.509 SAN fields which prevented the use of DNS names with a trailing dot (#8177, @​wallrj-cyberark)
  • Revert API defaults for issuer reference kind and group introduced in 0.19.0 (#8178, @​cert-manager-bot)

v1.19.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

⚠️ Known issues: The following known issues are fixed in v1.19.1:

This release focuses on expanding platform compatibility, improving deployment flexibility, enhancing observability, and addressing key reliability issues.

📖 Read the full release notes at cert-manager.io: https://cert-manager.io/docs/releases/release-notes/release-notes-1.19

Changes since v1.18.0:

... (truncated)

Commits

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.85.0 to 0.87.1

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.87.1 / 2025-12-10

  • [BUGFIX] Fix the generated Alertmanager configuration for html and monospace fields of pushoverConfig receiver in AlertmanagerConfig CRD. #8153

0.87.0 / 2025-11-20

  • [FEATURE] Add status subresource for PrometheusRule custom resources (requires the StatusForConfigurationResources feature gate). #8069 #8086 #8024 #8005
  • [ENHANCEMENT] Avoid statefulset's rollout due to changes in the number of rule configmaps for Prometheus and ThanosRuler. #8010
  • [ENHANCEMENT] Support Azure system-assigned managed identities for remote-write configuration. #7815
  • [ENHANCEMENT] Add monospace field to to pushoverConfig receiver in AlertmanagerConfig CRD. #8018
  • [BUGFIX] Propagate Certificate Authority updates for HTTP configuration in Alertmanager's global configuration. #8089

0.86.2 / 2025-11-07

  • [CHANGE/BUGFIX] Fix operator's permissions to emit Kubernetes events. #8077

0.86.1 / 2025-10-13

  • [BUGFIX] Fix formatting of Kubernetes events. #8015

0.86.0 / 2025-10-07

[!NOTE] This release introduces the status subresource (behind the StatusForConfigurationResources feature gate) for ServiceMonitor, PodMonitor, Probe and Scrapeconfig custom resources. It is only supported for Prometheus resources.

[!IMPORTANT] This release enables automatic UTF-8 character support in label names, metric names and PrometheusRule expressions for Prometheus/PrometheusAgent resources running with version >= 3.0.0.

To preserve backward compatibility, the admission webhook service validates PrometheusRule resources against the legacy Prometheus scheme by default (but it can be changed with the --name-validation-scheme flag).

  • [CHANGE] Remove automatic addition of the metadata-wal-records feature flag for Prometheus versions >= 3.4. #7893
  • [CHANGE] Add miscellaneous validations to the ScrapeConfig CRD. #7856 #7823 #7835 #7838 #7838 ##7966
  • [CHANGE/FEATURE] Add support for UTF-8 characters to label names and metric names in PrometheusRule resources and relabel configurations. #7637 #7985
  • [FEATURE] Add the flag --name-validation-scheme to admission webhook to select between utf8 and legacy validations. #7985
  • [FEATURE] Add status subresource for ServiceMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7767 #7836 #7827 #7795
  • [FEATURE] Add status subresource for PodMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7929 #7914 #7936
  • [FEATURE] Add status subresource for ScrapeConfig custom resources (requires the StatusForConfigurationResources feature gate). #7958 #7964 #7969
  • [FEATURE] Add status subresource for Probe custom resources (requires the StatusForConfigurationResources feature gate). #7933 #7934 #7980
  • [FEATURE] Add serviceDiscoveryRole field to ServiceMonitor. #7982
  • [FEATURE] Add useFIPSSTSEndpoint field to Sigv4 config. #7987
  • [FEATURE] Add UnderscoreEscapingWithoutSuffixes to the translationStrategy field for the Prometheus and PrometheusAgent CRDs. #7947
  • [FEATURE] Add promoteScopeMetadata field to the Prometheus and PrometheusAgent CRDs. #7803
  • [FEATURE] Add enableHttp2 field to Alertmanager and AlertmanagerConfig CRDs. #7963
  • [ENHANCEMENT] Add the related object to the events emitted by the operator. #7867 #7953
  • [ENHANCEMENT] Add webhook validation for the MSTeams V2 receiver of AlertmanagerConfig CRD. #7906
  • [ENHANCEMENT] Add app.kubernetes.io/managed-by: prometheus-operator label to all managed resources. #7939
  • [BUGFIX] Prevent duplicate authentication settings in PodMonitor. #7975
  • [BUGFIX] Use distinct port name for the config-reloader init container to avoid duplicate port name warnings. #7904
  • [BUGFIX] Validate the PagerDuty URL in the Alertmanager's global configuration. #7945
Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.87.1 / 2025-12-10

  • [BUGFIX] Fix the generated Alertmanager configuration for html and monospace fields of pushoverConfig receiver in AlertmanagerConfig CRD. #8153

0.87.0 / 2025-11-20

  • [FEATURE] Add status subresource for PrometheusRule custom resources (requires the StatusForConfigurationResources feature gate). #8069 #8086 #8024 #8005
  • [ENHANCEMENT] Avoid statefulset's rollout due to changes in the number of rule configmaps for Prometheus and ThanosRuler. #8010
  • [ENHANCEMENT] Support Azure system-assigned managed identities for remote-write configuration. #7815
  • [ENHANCEMENT] Add monospace field to to pushoverConfig receiver in AlertmanagerConfig CRD. #8018
  • [BUGFIX] Propagate Certificate Authority updates for HTTP configuration in Alertmanager's global configuration. #8089

0.86.2 / 2025-11-07

  • [CHANGE/BUGFIX] Fix operator's permissions to emit Kubernetes events. #8077

0.86.1 / 2025-10-13

  • [BUGFIX] Fix formatting of Kubernetes events. #8015

0.86.0 / 2025-10-07

[!NOTE] This release introduces the status subresource (behind the StatusForConfigurationResources feature gate) for ServiceMonitor, PodMonitor, Probe and Scrapeconfig custom resources. It is only supported for Prometheus resources.

[!IMPORTANT] This release enables automatic UTF-8 character support in label names, metric names and PrometheusRule expressions for Prometheus/PrometheusAgent resources running with version >= 3.0.0.

To preserve backward compatibility, the admission webhook service validates PrometheusRule resources against the legacy Prometheus scheme by default (but it can be changed with the --name-validation-scheme flag).

  • [CHANGE] Remove automatic addition of the metadata-wal-records feature flag for Prometheus versions >= 3.4. #7893
  • [CHANGE] Add miscellaneous validations to the ScrapeConfig CRD. #7856 #7823 #7835 #7838 #7838 #7966
  • [CHANGE/FEATURE] Add support for UTF-8 characters to label names and metric names in PrometheusRule resources and relabel configurations. #7637 #7985
  • [FEATURE] Add the flag --name-validation-scheme to admission webhook to select between utf8 and legacy validations. #7985
  • [FEATURE] Add status subresource for ServiceMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7767 #7836 #7827 #7795
  • [FEATURE] Add status subresource for PodMonitor custom resources (requires the StatusForConfigurationResources feature gate). #7929 #7914 #7936
  • [FEATURE] Add status subresource for ScrapeConfig custom resources (requires the StatusForConfigurationResources feature gate). #7958 #7964 #7969
  • [FEATURE] Add status subresource for Probe custom resources (requires the StatusForConfigurationResources feature gate). #7933 #7934 #7980
  • [FEATURE] Add serviceDiscoveryRole field to ServiceMonitor. #7982
  • [FEATURE] Add useFIPSSTSEndpoint field to Sigv4 config. #7987
  • [FEATURE] Add UnderscoreEscapingWithoutSuffixes to the translationStrategy field for the Prometheus and PrometheusAgent CRDs. #7947
  • [FEATURE] Add promoteScopeMetadata field to the Prometheus and PrometheusAgent CRDs. #7803
  • [FEATURE] Add enableHttp2 field to Alertmanager and AlertmanagerConfig CRDs. #7963
  • [ENHANCEMENT] Add the related object to the events emitted by the operator. #7867 #7953
  • [ENHANCEMENT] Add webhook validation for the MSTeams V2 receiver of AlertmanagerConfig CRD. #7906
  • [ENHANCEMENT] Add app.kubernetes.io/managed-by: prometheus-operator label to all managed resources. #7939
  • [BUGFIX] Prevent duplicate authentication settings in PodMonitor. #7975
  • [BUGFIX] Use distinct port name for the config-reloader init container to avoid duplicate port name warnings. #7904
  • [BUGFIX] Validate the PagerDuty URL in the Alertmanager's global configuration. #7945
Commits
  • a50aee4 Merge pull request #8154 from simonpasquier/cut-0.87.1
  • 650bf3c chore: cut v0.87.1
  • 145fae9 chore: bump golangci-lint version
  • ec5caa0 Merge pull request #8153 from simonpasquier/fix-8152
  • 5747944 fix: fix Pushover HTML in Alertmanager configuration
  • 0ff52b3 Cut 0.87.0 (#8109)
  • ddbbdf4 chore: cut v0.87.0
  • d4e674c Skip medium.com links in mdox configuration
  • d1ff82e feat: add support for monospace in pushoverConfig (#8018)
  • df692bf Feat: set Azure Manage Identity Client ID default to empty value (#7815)
  • Additional commits viewable in compare view

Updates go.mondoo.com/cnquery/v12 from 12.13.0 to 12.15.0

Release notes

Sourced from go.mondoo.com/cnquery/v12's releases.

v12.15.0

What's Changed

Full Changelog: mondoohq/cnquery@v12.14.2...v12.15.0

v12.14.2

What's Changed

Full Changelog: mondoohq/cnquery@v12.14.1...v12.14.2

v12.14.1

What's Changed

Full Changelog: mondoohq/cnquery@v12.14.0...v12.14.1

v12.14.0

What's Changed

... (truncated)

Commits
  • 345d79e Fix the CPU data query to return a string (#6335)
  • 4e45d97 Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 (#6328)
  • 280f657 ✨ Add cooldown to Dependabot updates (#6332)
  • af93da8 ✨ Add pagination to describe repositories and describe images calls. (#6331)
  • ec86d41 🧹 Reuse ec2TagsToMap and vpcFilter functions. (#6329)
  • 0735ab7 Fix CPU type discovery on aarch processors (#6325)
  • 7fd94a3 🧹 Update deps for cnquery and providers 20251222 (#6327)
  • bcd5bea 🧹 Update deps for cnquery and providers 20251215 (#6301)
  • efa0755 Bump actions/cache from 4.3.0 to 5.0.1 (#6302)
  • c7f0a2f ✨ Use apk database path as evidence instead of files contained in the apk (#6...
  • Additional commits viewable in compare view

Updates go.mondoo.com/cnspec/v12 from 12.13.0 to 12.15.0

Release notes

Sourced from go.mondoo.com/cnspec/v12's releases.

v12.15.0

What's Changed

Full Changelog: mondoohq/cnspec@v12.14.2...v12.15.0

v12.14.2

What's Changed

Full Changelog: mondoohq/cnspec@v12.14.1...v12.14.2

v12.14.1

What's Changed

Full Changelog: mondoohq/cnspec@v12.14.0...v12.14.1

v12.14.0

What's Changed

... (truncated)

Commits
  • 2e2e5e3 🧹 Bump cnquery to v12.15.0 (#1996)
  • 4736bbe Fix modprobe check typo (#1995)
  • 1a52336 Workaround some limitations in arm with auditd configs (#1986)
  • 9bc94a3 Prevent errors checking for kernel modules (#1993)
  • ea0daa6 Add more common logs to the tempfiles.d setup (#1992)
  • ad0c47d Add new Linux Security policy checks for extra kernel modules (#1977)
  • 831f365 Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 (#1991)
  • 519dc98 ⭐️ add integration tests to cnspec (#874)
  • 1dd38c5 ⭐ Add testdata for gcp tf policy + GCP terraform improvements (#1942)
  • 0694a93 Fix the version check for SSH versions in Linux Security policy (#1990)
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20251220205832-9d40a56c1308

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 24, 2025
@github-actions
Copy link

github-actions bot commented Dec 24, 2025

Test Results

  9 files  ±0   56 suites  ±0   1h 36m 38s ⏱️ + 4m 17s
301 tests ±0  298 ✅ ±0  0 💤 ±0   3 ❌ ±0 
336 runs  ±0  312 ✅ ±0  0 💤 ±0  24 ❌ ±0 

For more details on these failures, see this check.

Results for commit 7192e6b. ± Comparison against base commit 560e138.

♻️ This comment has been updated with latest results.

@dependabot dependabot bot force-pushed the dependabot/go_modules/gomodupdates-4aff25c2f3 branch from 36e1bec to 31ff2f2 Compare December 31, 2025 08:06
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomodupdates-4aff25c2f3 branch from 31ff2f2 to b7fa982 Compare January 14, 2026 08:54
Bumps the gomodupdates group with 4 updates in the / directory: [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager), [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator), [go.mondoo.com/cnquery/v12](https://github.com/mondoohq/cnquery) and [go.mondoo.com/cnspec/v12](https://github.com/mondoohq/cnspec).


Updates `github.com/cert-manager/cert-manager` from 1.18.4 to 1.19.2
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.18.4...v1.19.2)

Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.85.0 to 0.87.1
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases)
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md)
- [Commits](prometheus-operator/prometheus-operator@v0.85.0...v0.87.1)

Updates `go.mondoo.com/cnquery/v12` from 12.13.0 to 12.15.0
- [Release notes](https://github.com/mondoohq/cnquery/releases)
- [Commits](mondoohq/cnquery@v12.13.0...v12.15.0)

Updates `go.mondoo.com/cnspec/v12` from 12.13.0 to 12.15.0
- [Release notes](https://github.com/mondoohq/cnspec/releases)
- [Commits](mondoohq/cnspec@v12.13.0...v12.15.0)

Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20251220205832-9d40a56c1308
- [Commits](https://github.com/kubernetes/utils/commits)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring
  dependency-version: 0.87.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: go.mondoo.com/cnquery/v12
  dependency-version: 12.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: go.mondoo.com/cnspec/v12
  dependency-version: 12.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20251220205832-9d40a56c1308
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomodupdates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomodupdates-4aff25c2f3 branch from b7fa982 to 1f47cea Compare January 20, 2026 08:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants