build(go): Bump the go-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #265 · borchero/switchboard

dependabot · 2026-09-09T21:41:05Z

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/cert-manager/cert-manager	`1.21.0`	`1.21.1`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
k8s.io/apimachinery	`0.36.3`	`0.37.0`
k8s.io/client-go	`0.36.3`	`0.37.0`
sigs.k8s.io/external-dns	`0.21.0`	`0.22.0`

Updates github.com/cert-manager/cert-manager from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.21.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.1 fixes a controller panic for Certificates with spec.renewal.policy: Disabled, a regression in 1.21.0 which caused log spam and dropped Secret informer events, Issuers and ClusterIssuers getting stuck at Ready=False (InvalidSolver) when a referenced ACME DNS-01 solver Secret is created after the Issuer, and the commented Gateway API example in the Helm chart values. It also updates several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

Avoid controller panic if a Certificate sets spec.renewal.policy=Disabled (#9038, @sklirg)

Fix Issuer/ClusterIssuer stuck at Ready=False/InvalidSolver after a missing ACME DNS-01 solver Secret is created (#9083, @SebTardif)

Fix log spam and dropped Secret informer events for non-cert-manager Secrets, caused by a generics regression introduced in 1.21.0. (#9037, @wallrj-cyberark)

Fixed the commented Gateway API config example in the Helm chart values to use gatewayAPI.enabled instead of the invalid gatewayAPI.enable. (#9012, @mateenali66)

Other (Cleanup or Flake)

Bump golang.org/x/text to v0.40.0 to fix a reported security vulnerability (#9039, @wallrj-cyberark)

Bump google.golang.org/grpc to v1.82.1 to fix a reported security vulnerability (#9063)

Bump github.com/google/cel-go to v0.29.0 to fix a reported security vulnerability (#9072)

Bump go.opentelemetry.io/otel to v1.44.0 to fix a reported security vulnerability (#9073)

Update distroless base images (#9000, #9025)

Commits

24e3319 Merge pull request #9083 from cert-manager-bot/cherry-pick-9042-to-release-1.21
4de10f8 docs: TODO to index issuers by Secret for Secret-event scaling
f7a2c7f Say ClusterIssuer, not issuer, in clusterissuers error message
947571d Return the external SecretKeySelector type from RequiredDNS01SolverSecrets
536dcc3 Remove untestable expectErr field from RequiredDNS01SolverSecrets tests
61b071f Cover the remaining DNS-01 providers in RequiredDNS01SolverSecrets tests
7c31735 Extract shared ACME DNS-01 solver secret helper
616ed4c Re-queue Issuer/ClusterIssuer on ACME DNS-01 solver Secret events
f1a152a Merge pull request #9073 from cert-manager/renovate/release-1.21-go-go.opente...
0e50d3a Merge pull request #9072 from cert-manager/renovate/release-1.21-go-github.co...
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.36.3 to 0.37.0

Commits

7164e39 Update dependencies to v0.37.0 tag
e55f9ba feat(api): Update node restriction admission to use new API
cb0680d Merge pull request #129125 from pohly/log-client-go-tools-apis
97b2132 Merge pull request #140194 from gnufied/implement-volume-health-api
f21afab Add validation for camelcase in reason field
d7ad413 Merge pull request #140782 from dims/update-kube-openapi
e15ad7c Merge pull request #138808 from chenk008/cbor-streaminglist
464b5d1 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
0de14ec Merge pull request #140732 from thockin/dv-add-prefixed-label-key
95258eb Merge pull request #134037 from ibihim/ibihim/2025-09-09_unsafe-delete-of-cor...
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.36.3 to 0.37.0

Commits

2807644 Update dependencies to v0.37.0 tag
50c6f9b metrics: Register: Fix incorrect assignment
49f0a7b Merge pull request #140931 from pohly/client-go-changelog-adding-apigroups
74d4b1e Merge pull request #140966 from alancaldelas/client-go-fakecustomstore-store
2bf14f2 Merge pull request #140990 from xigang/revert-140448
7b892fe Revert "Merge pull request #140448 from xigang/event_broadcaster_goroutine_leak"
df92378 Merge pull request #140334 from nojnhuh/dra-workloadresourceclaims-beta
45a0ff1 client-go: restore FakeCustomStore conformance to cache.Store
9d3b531 Merge pull request #139795 from omeryahud/worktree-kep-5963-device-compat-groups
694f4eb apidiff: ignore adding entirely new API groups
Additional commits viewable in compare view

Updates sigs.k8s.io/external-dns from 0.21.0 to 0.22.0

Release notes

Sourced from sigs.k8s.io/external-dns's releases.

v0.22.0

General information

Action required before upgrade

⚠️ The default annotation prefix is now external-dns.kubernetes.io/ with no fallback (#6424)

🚨 This change can delete all your DNS records.

ℹ️ You can either migrate your annotations or set --annotation-prefix=external-dns.alpha.kubernetes.io/.

➡️ It's recommended to try this version with --dry-run=true, see recommended upgrade instructions.

⚠️ --dry-run is not preventing changes to happen with ns1, hetzner & alibaba cloud providers

⚠️ To avoid any unwanted DNS records deletion from the annotation prefix change, --policy is now required with no default (#6508).

Important

⚠️ CRD/API upgrades: Gateway API TLSRoute now uses v1, standard channel since Gateway API v1.5.0 (#6367). Ambassador Host now uses getambassador.io/v3alpha1 (#6482). Pi-hole v5 API is removed, v6+ only (#6406).

ℹ️ On AWS, ownership TXT records for A ALIAS now use the a- prefix (#6523). Migration is automatic and ownership is preserved

Leftover cname- records can be cleaned with scripts/aws-cleanup-legacy-txt-records.py --alias-cname-cleanup.

ℹ️ This release removes in-tree support for Akamai, Plural & Transip (#6485).

Users needing those providers can use a previous version of ExternalDNS or a webhook-based provider. Gandi is marked for removal (#6634).

ℹ️ New: crd registry as an alternative to TXT (#5372)

ℹ️ DNAME record support (#6553), and --rfc2136-axfr replacing the deprecated --rfc2136-tsig-axfr (#6598).

ℹ️ Guide on how to safely upgrade External-DNS

⚠️ Breaking Changes

[annotations] switch default annotations prefix to GA by @mloiseleur in #6424

[config] require explicit --policy flag by @mloiseleur in #6508

[provider/pihole] drop Pi-hole v5 API support by @ivankatliarchuk in #6406

[registry/txt] use a- prefix for AWS A ALIAS ownership TXT records by @mloiseleur in #6523

remove unmaintained providers (akamai, plural, transip) by @mloiseleur in #6485

[source/gateway-api] migrate TLSRoute to v1 by @ecray in #6367

🚀 Features

add DNAME record type support by @clwluvw in #6553

add isSource template function to scope --fqdn-template by source by @ivankatliarchuk in #6625

[aws] add aws-hosted-zone-id annotation to pin records to a specific zone by @namnt2307 in #6559

[aws] support alias=A and alias=AAAA to create single record type by @u-kai in #5997

[endpoint] support multiple RefObjects per endpoint and per event by @ivankatliarchuk in #6495

[registry] new CRD option by @mloiseleur in #5372

[rfc2136] add --rfc2136-axfr, deprecate --rfc2136-tsig-axfr by @mloiseleur in #6598

[source] add --fqdn-* flag support to f5-virtualserver and f5-transportserver sources by @ivankatliarchuk in #6470

[source] add --fqdn-* flag support to gloo-proxy source by @ivankatliarchuk in #6475

[source] add --fqdn-* flag support to traefik-proxy source by @ivankatliarchuk in #6468

[source] add label filter support to contour, f5, kong, skipper, traefik sources by @ivankatliarchuk in #6538

[source/ambassador] migrate Host CRD to emissary-ingress v3alpha1 by @mloiseleur in #6482

[source] apply controller annotation filter at indexer level by @ivankatliarchuk in #6426

[source] attach RefObject to all remaining sources by @mloiseleur in #6492

[source/fake] extend fake source to emit all supported record types by @ivankatliarchuk in #6308

... (truncated)

Changelog

Sourced from sigs.k8s.io/external-dns's changelog.

Release

Release cycle

Currently we don't release regularly. Whenever we think it makes sense to release a new version we do it. You might want to ask in our Slack channel external-dns when the next release will come out.

Staging Release cycle

A new staging image is released weekly and can be found on the official staging registry.

There is a time lag between merging changes into the master branch and the subsequent creation of the staging image.

Example command to fetch 10 most recent staging images:
export EXT_DNS_VERSION="v0.22.0"
curl -sLk https://gcr.io/v2/k8s-staging-external-dns/external-dns/tags/list | jq | grep "$EXT_DNS_VERSION" | tail -n 10
Versioning convention

These are the conventions that we will be using for releases following 0.7.6:

Patch version should be updated if we need to merge bugfixes, e.g. provider a does need a fix in order make updates working again. I would see updating or improving documentation here.

Minor version should be updated if new features are implemented in existing providers or new provider get introduced.

Major version should be upgraded if we introduce breaking changes.

Semantic Versioning Discipline

External-DNS follows semantic versioning principles:

0.x → pre-stable, APIs subject to change.

1.x → not yet considered.

Versioning & Releases External-DNS opts to stay within 0.x versioning scheme. We strive for stability, but reserve the right to introduce breaking changes in minor version bumps when necessary.

How to release a new image

Prerequisite

We use https://github.com/cli/cli to automate the release process. Please install it according to the official documentation.

You must be an official maintainer of the project to be able to do a release.

Steps

... (truncated)

Commits

994f908 bump dependencies for release (#6643)
a6ead7c docs(aws): correct hosted zone annotation prefix (#6569)
679a4ce fix(source): parse gloo-proxy aggregateListener virtual hosts (#6628)
aa8c1e2 fix(aws): unescape wildcard alias target on read (#6471)
746563e feat: add isSource template function to scope --fqdn-template by source (#6625)
4b9875b fix: pin smartystreets/assertions to resolve go mod tidy failure (#6634)
e495d28 bump to go version 1.26.6 (#6635)
6017e85 docs: clarify release tag vs kustomize manifest lag (#6626)
6376edb test(crd): assert the generated CRDs are installable (#6619)
eca6bf7 feat: add DNAME record type support (#6553)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the go-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.21.0` | `1.21.1` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.3` | `0.37.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.3` | `0.37.0` | | [sigs.k8s.io/external-dns](https://github.com/kubernetes-sigs/external-dns) | `0.21.0` | `0.22.0` | Updates `github.com/cert-manager/cert-manager` from 1.21.0 to 1.21.1 - [Release notes](https://github.com/cert-manager/cert-manager/releases) - [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md) - [Commits](cert-manager/cert-manager@v1.21.0...v1.21.1) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `k8s.io/apimachinery` from 0.36.3 to 0.37.0 - [Commits](kubernetes/apimachinery@v0.36.3...v0.37.0) Updates `k8s.io/client-go` from 0.36.3 to 0.37.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.3...v0.37.0) Updates `sigs.k8s.io/external-dns` from 0.21.0 to 0.22.0 - [Release notes](https://github.com/kubernetes-sigs/external-dns/releases) - [Changelog](https://github.com/kubernetes-sigs/external-dns/blob/master/docs/release.md) - [Commits](kubernetes-sigs/external-dns@v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: github.com/cert-manager/cert-manager dependency-version: 1.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: sigs.k8s.io/external-dns dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-17T22:41:09Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026

dependabot Bot requested a review from borchero as a code owner September 9, 2026 21:41

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026

github-actions Bot added the build label Sep 9, 2026

dependabot Bot closed this Sep 17, 2026

dependabot Bot deleted the dependabot/go_modules/go-dependencies-75aab388fc branch September 17, 2026 22:41

Navigation Menu

Uh oh!

build(go): Bump the go-dependencies group across 1 directory with 5 updates - #265

build(go): Bump the go-dependencies group across 1 directory with 5 updates#265
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-75aab388fc

dependabot Bot commented on behalf of github Sep 9, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.21.1

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

v0.22.0

General information

⚠️ Breaking Changes

🚀 Features

Release

Release cycle

Staging Release cycle

Versioning convention

Semantic Versioning Discipline

How to release a new image

Prerequisite

Steps

Uh oh!

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 9, 2026 •

edited

Loading