google-cas-issuer enables issuing X.509 certificates using Google CA Service
This release includes an excellent community contribution from @sshcherbakov which enables the ability to pull in root CA certificates from CAS Pool CAs. See #413 for details.
This release also includes fixes for several reported CVEs, notably including CVE-2025-68121.
📢 google-cas-issuer remains in maintenance mode; we won't make any major changes to it. If you're interested in getting involved with the project, please reach out to the cert-manager maintainer team on slack or in a meeting!
What's Changed
Notable PRs
- Add optional fetchCaBundle boolean flag to optionally return root CA certificates of all CAS CA Pool CAs by @sshcherbakov in #428
Automated PRs
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #384
- chore(deps): update actions/cache action to v5 by @renovate[bot] in #385
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #389
- chore(deps): update actions/cache digest to 9255dc7 by @renovate[bot] in #387
- chore(deps): update actions/upload-artifact action to v6 by @renovate[bot] in #388
- fix(deps): update module google.golang.org/protobuf to v1.36.11 by @renovate[bot] in #386
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #390
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #391
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #394
- fix(deps): update kubernetes go deps to v0.35.0 by @renovate[bot] in #392
- fix(deps): update module google.golang.org/api to v0.258.0 by @renovate[bot] in #393
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #395
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #396
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #398
- fix(deps): update github.com/onsi deps by @renovate[bot] in #399
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #400
- fix(deps): update module google.golang.org/api to v0.259.0 by @renovate[bot] in #397
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #401
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #402
- fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.5 by @renovate[bot] in #403
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #406
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #408
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #409
- chore(deps): update misc github actions by @renovate[bot] in #404
- fix(deps): update module google.golang.org/api to v0.260.0 by @renovate[bot] in #405
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #414
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #415
- chore(deps): update actions/checkout action to v6.0.2 by @renovate[bot] in #411
- fix(deps): update module google.golang.org/api to v0.262.0 by @renovate[bot] in #410
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.0 by @renovate[bot] in #407
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.1 by @renovate[bot] in #416
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #418
- fix(deps): update github.com/onsi deps by @renovate[bot] in #420
- fix(deps): update module github.com/onsi/ginkgo/v2 to v2.28.1 by @renovate[bot] in #421
- fix(deps): update module google.golang.org/api to v0.264.0 by @renovate[bot] in #417
- chore(deps): update misc github actions by @renovate[bot] in #419
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #422
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #425
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #427
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #429
- fix(deps): update module github.com/cert-manager/cert-manager to v1.19.3 by @renovate[bot] in #424
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #430
- Use correct Renovate preset config by @erikgb in #423
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #431
- fix(deps): update kubernetes go patches to v0.35.1 by @renovate[bot] in #432
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #433
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #434
- fix(deps): update module google.golang.org/api to v0.266.0 by @renovate[bot] in #426
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #435
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #436
- fix(deps): update module google.golang.org/api to v0.267.0 by @renovate[bot] in #437
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #438
Full Changelog: v0.10.2...v0.11.0