CM-1216: Bump cert-manager operand to v1.18.6, bundle to v1.18.2 - #472
CM-1216: Bump cert-manager operand to v1.18.6, bundle to v1.18.2#472sujkini wants to merge 2 commits into
Conversation
|
@sujkini: This pull request references CM-1216 which is a valid jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
Skipping CI for Draft Pull Request. |
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Repository: openshift/coderabbit/.coderabbit.yaml Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: sujkini The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Adds replace directive for golang.org/x/net to fix reachable CVE-2026-39821 (Critical, CVSS 9.6) in the HTTP/2 transport layer used for Kubernetes API communication. The openshift-sustaining/net fork backports the fix to the Go 1.24 dependency tree without requiring a full module upgrade. - CVE-2026-39821: golang.org/x/net/idna Punycode bypass (reachable) - CVE-2026-25681: golang.org/x/net/html parsing bypass (same module, not reachable) - CVE-2026-27136: golang.org/x/net/html parsing bypass (same module, not reachable) replace golang.org/x/net => openshift-sustaining/net@v0.50.0-sec.2 Jira: CM-1216 Signed-off-by: Sujnyan Kini <skini@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>
Updates operator and operand versions for cert-manager-operator v1.18.2 z-stream release. Bumps cert-manager operand from 1.18.4 to 1.18.6 and operator bundle from 1.18.1 to 1.18.2. - Updates Makefile: CERT_MANAGER_VERSION, BUNDLE_VERSION - Updates cert-manager operand manifests with v1.18.6 chart content - Updates OLM bundle manifests (CSV name, version, replaces, skipRange) - Bumps cert-manager package dependency and dependents Jira: CM-1216 Signed-off-by: Sujnyan Kini <skini@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>
0a2be97 to
a4e1861
Compare
|
@sujkini: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Dependencies
Verification
go build ./...✅operator-sdk bundle validate✅Jira: CM-1216
Signed-off-by: Sujnyan Kini skini@redhat.com
Co-authored-by: Cursor cursoragent@cursor.com