fix(github/cert-manager-source): update v1.14.4 ➼ v1.14.7

[tinfoild]

This PR contains the following updates:

Package	Update	Change	OpenSSF
cert-manager-source	patch	v1.14.4 -> v1.14.7

---

Release Notes

cert-manager/cert-manager (cert-manager-source)

v1.14.7

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

📜 Changes since v1.14.6

Bugfixes

• BUGFIX: fix issue that caused Vault issuer to not retry signing when an error was encountered. (#​7113, @​cert-manager-bot)

Other (Cleanup or Flake)

• Update github.com/Azure/azure-sdk-for-go/sdk/azidentity to address CVE-2024-35255 (#​7093, @​ThatsMrTalbot)

v1.14.6

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

📜 Changes since v1.14.5

Other (Cleanup or Flake)

• Upgrade Go to 1.21.10, fixing GO-2024-2824 (GHSA-2jwv-jmq4-4j3r). (#​7008, @​inteon)
• Helm: the cainjector ConfigMap was not mounted in the cainjector deployment. (#​7053, @​cert-manager-bot)
• Updated Go to 1.21.11 bringing in security fixes for archive/zip and net/netip. (#​7076, @​ThatsMrTalbot)

v1.14.5

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.14.5 fixes a bug in the DigitalOcean DNS-01 provider which could cause incorrect DNS records to be deleted when using a domain with a CNAME. Special thanks to @​BobyMCbobs for reporting this issue and testing the fix!

It also patches CVE-2023-45288.

📜 Changes since v1.14.4

• ACME Issuer (Let's Encrypt): wrong certificate chain may be used if preferredChain is configured: see 1.14 release notes for more information.

Changes

Bug or Regression

• DigitalOcean: Ensure that only TXT records are considered for deletion when cleaning up after an ACME challenge (#​6893 , @​SgtCoDFish)
• Bump golang.org/x/net to address CVE-2023-45288 (#​6931 , @​SgtCoDFish)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	a146e6b
Status:	✅  Deploy successful!
Preview URL:	https://24278311.jjgadgets-biohazard.pages.dev
Branch Preview URL:	https://renovate-cert-manager-source.jjgadgets-biohazard.pages.dev

View logs

[tinfoild]

--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config GitRepository: flux-system/cert-manager-source

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config GitRepository: flux-system/cert-manager-source

@@ -15,9 +15,9 @@

     !/deploy/crds
     # exclude file extensions from crd dir
     /deploy/crds/*.md
     /deploy/crds/*.bazel
   interval: 12h
   ref:
-    tag: v1.14.4
+    tag: v1.14.7
   url: https://github.com/cert-manager/cert-manager.git