cert-manager

Update Helm release cert-manager to v1.21.1

No problems deploying cert-manager to Proxmox VE K3s Kubernetes cluster via Helm Chart and Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package	Update	Change
cert-manager (source)	patch	`v1.21.0` → `v1.21.1`

Release Notes

cert-manager/cert-manager (cert-manager)

`v1.21.1`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.1 fixes a controller panic for Certificates with spec.renewal.policy: Disabled, a regression in 1.21.0 which caused log spam and dropped Secret informer events, Issuers and ClusterIssuers getting stuck at Ready=False (InvalidSolver) when a referenced ACME DNS-01 solver Secret is created after the Issuer, and the commented Gateway API example in the Helm chart values. It also updates several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

Avoid controller panic if a Certificate sets spec.renewal.policy=Disabled (#9038, @sklirg)
Fix Issuer/ClusterIssuer stuck at Ready=False/InvalidSolver after a missing ACME DNS-01 solver Secret is created (#9083, @SebTardif)
Fix log spam and dropped Secret informer events for non-cert-manager Secrets, caused by a generics regression introduced in 1.21.0. (#9037, @wallrj-cyberark)
Fixed the commented Gateway API config example in the Helm chart values to use gatewayAPI.enabled instead of the invalid gatewayAPI.enable. (#9012, @mateenali66)

Other (Cleanup or Flake)

Bump golang.org/x/text to v0.40.0 to fix a reported security vulnerability (#9039, @wallrj-cyberark)
Bump google.golang.org/grpc to v1.82.1 to fix a reported security vulnerability (#9063)
Bump github.com/google/cel-go to v0.29.0 to fix a reported security vulnerability (#9072)
Bump go.opentelemetry.io/otel to v1.44.0 to fix a reported security vulnerability (#9073)
Update distroless base images (#9000, #9025)

Update codeberg.org/forgejo/forgejo Docker tag to v16.0.3

No problems automatically updating Docker container on premisis and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot. Also the container in the Oracle cloud infrastructure spun up with Docker Compose was updated by Watchtower with dependency update facilitated by Mend's Renovate

Update docker.io/gitlab/gitlab-ce Docker tag to v19.2.4

No problems automatically updating the monolithic Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot. GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11 This MR contains the following updates: Package Update Change docker.

Update docker.io/nextcloud Docker tag to v34.0.3

Fully automated major upgrade by means of Watchtower Docker container management with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/nextcloud (source) patch 34.0.2-apache → 34.0.3-apache Release Notes nextcloud/server (docker.io/nextcloud)

Update docker.io/moonrailgun/tianji Docker tag to v1.32.24

No problems upgrading the Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/moonrailgun/tianji patch 1.32.22 → 1.