v1.16.3

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.16.3 is a patch release mainly focused around bumping dependencies to address reported CVEs: CVE-2024-45337 and CVE-2024-45338.

We don't believe that cert-manager is actually vulnerable; this release is instead intended to satisfy vulnerability scanners.

It also includes a bug fix to the new renewBeforePercentage field. If you were using renewBeforePercentage, see PR #7421 for more information.

Changes

Bug

• Bump golang.org/x/net and golang.org/x/crypto to address CVE-2024-45337 and CVE-2024-45338 (#7485, @erikgb)
• Fix the behaviour of renewBeforePercentage to comply with its spec (#7441, @cert-manager-bot)

Other

• Bump go to 1.23.4 (#7489, @erikgb)
• Bump base images to latest available (#7508, @SgtCoDFish)