v0.22.0

approver-policy provides a policy engine for certificates issued by cert-manager!

⚠️ Known issue ⚠️

Golang 1.25.2 has a backwards incompatible change (see golang/go#75828 (comment)). This will for example result in certificates with a DNS SAN ending in a dot failing approval.

---

This release primarily contains dependency updates, but also includes a major change to the custom metrics provided by approver-policy.

⚠️ Deprecation notice: The following custom approver-policy metrics are now deprecated:

• approverpolicy_certificaterequest_approved_count
• approverpolicy_certificaterequest_denied_count
• approverpolicy_certificaterequest_unmatched_count

Any use of these metrics should be replaced with the new composite certmanager_approverpolicy_certificaterequests_approval metrics. The deprecated metrics will be removed after a couple of releases. See #712 for background and details.

What's Changed

Miscellaneous

• Add new certificaterequests_approval metric by @erikgb in #712
• Bootstrap shared Renovate preset by @erikgb in #714

Updates by Dependabot/Renovate

• build(deps): bump github.com/cert-manager/cert-manager from 1.18.1 to 1.18.2 in the all group by @dependabot[bot] in #649
• build(deps): bump the all group with 7 updates by @dependabot[bot] in #653
• build(deps): bump the all group across 1 directory with 2 updates by @dependabot[bot] in #657
• build(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 in the all group by @dependabot[bot] in #658
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 in the all group by @dependabot[bot] in #662
• build(deps): bump actions/checkout from 4 to 5 in the all group by @dependabot[bot] in #664
• build(deps): bump the all group with 7 updates by @dependabot[bot] in #668
• build(deps): bump the all-go-deps group across 1 directory with 3 updates by @dependabot[bot] in #674
• fix(deps): update misc go deps by @github-actions[bot] in #677
• fix(deps): update misc go deps by @github-actions[bot] in #681
• fix(deps): update kubernetes go deps by @github-actions[bot] in #682
• fix(deps): update misc go deps by @github-actions[bot] in #687
• chore(deps): update actions/setup-go action to v6 by @octo-sts[bot] in #699
• chore(deps): pin docker/login-action action to 184bdaa by @octo-sts[bot] in #697
• fix(deps): update misc go deps by @octo-sts[bot] in #701
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.25.3 by @octo-sts[bot] in #698
• fix(deps): update module github.com/prometheus/client_golang to v1.23.2 by @octo-sts[bot] in #703
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.22.1 by @octo-sts[bot] in #706
• fix(deps): update kubernetes go patches to v0.34.1 by @octo-sts[bot] in #709
• fix(deps): update module google.golang.org/protobuf to v1.36.9 by @octo-sts[bot] in #708
• fix(deps): update misc go deps by @octo-sts[bot] in #719
• chore(deps): update docker/login-action digest to 5e57cd1 by @octo-sts[bot] in #718
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.22.2 by @octo-sts[bot] in #722
• fix(deps): update module github.com/cert-manager/cert-manager to v1.19.0 by @octo-sts[bot] in #723
• fix(deps): update k8s.io/utils digest to bc988d5 by @octo-sts[bot] in #726

Updates by makefile-modules

• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #648
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #650
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #651
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #652
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #655
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #656
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #659
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #660
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #661
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #663
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #665
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #666
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #670
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #672
• [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #673
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #675
• Manual self upgrade by @erikgb in #676
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #679
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #680
• Manual self-upgrade by @erikgb in #683
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #684
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #685
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #686
• [CI] Self-upgrade merging self-upgrade-main into main by @erikgb in #688
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #689
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #690
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #691
• [CI] Merge self-upgrade-main into main by @github-actions[bot] in #693
• [CI] Self-upgrade merging self-upgrade-main into main by @erikgb in #695
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #696
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #702
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #704
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #705
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #707
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #710
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #711
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #715
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #716
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #717
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #720
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #721
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #724
• [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #725

New Contributors

• @octo-sts[bot] made their first contribution in #696

Full Changelog: v0.21.0...v0.22.0