v1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate parentRef bug when both issuer config and annotations are present (Gateway API).
Bug or Regression
Fixed duplicate parentRef bug when both issuer config and annotations are present. (#8658, @hjoshi123)
Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. (#8655, @erikgb)
Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. (#8657, @erikgb)
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [argo-cd](https://github.com/argoproj/argo-helm) | patch | `9.4.16` -> `9.4.17` |
| [cert-manager](https://cert-manager.io) ([source](https://github.com/cert-manager/cert-manager)) | patch | `v1.20.0` -> `v1.20.1` |
| [ghcr.io/siderolabs/discovery-service](https://github.com/siderolabs/discovery-service) | patch | `v1.0.16` -> `v1.0.17` |
| [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | patch | `82.15.0` -> `82.15.1` |
---
### Release Notes
<details>
<summary>argoproj/argo-helm (argo-cd)</summary>
### [`v9.4.17`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.4.17)
[Compare Source](https://github.com/argoproj/argo-helm/compare/argo-cd-9.4.16...argo-cd-9.4.17)
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
#### What's Changed
- chore(argo-cd): Update dependency argoproj/argo-cd to v3.3.6 by [@​argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in https://github.com/argoproj/argo-helm/pull/3808
**Full Changelog**: https://github.com/argoproj/argo-helm/compare/argo-rollouts-2.40.9...argo-cd-9.4.17
</details>
<details>
<summary>cert-manager/cert-manager (cert-manager)</summary>
### [`v1.20.1`](https://github.com/cert-manager/cert-manager/releases/tag/v1.20.1)
[Compare Source](https://github.com/cert-manager/cert-manager/compare/v1.20.0...v1.20.1)
v1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate `parentRef` bug when both issuer config and annotations are present (Gateway API).
##### Bug or Regression
- Fixed duplicate `parentRef` bug when both issuer config and annotations are present. ([#​8658](https://github.com/cert-manager/cert-manager/issues/8658), [@​hjoshi123](https://github.com/hjoshi123))
- Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. ([#​8655](https://github.com/cert-manager/cert-manager/issues/8655), [@​erikgb](https://github.com/erikgb))
- Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. ([#​8657](https://github.com/cert-manager/cert-manager/issues/8657), [@​erikgb](https://github.com/erikgb))
</details>
<details>
<summary>siderolabs/discovery-service (ghcr.io/siderolabs/discovery-service)</summary>
### [`v1.0.17`](https://github.com/siderolabs/discovery-service/releases/tag/v1.0.17)
[Compare Source](https://github.com/siderolabs/discovery-service/compare/v1.0.16...v1.0.17)
#### [discovery-service 1.0.17](https://github.com/siderolabs/discovery-service/releases/tag/v1.0.17) (2026-03-27)
Welcome to the v1.0.17 release of discovery-service!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/discovery-service/issues.
##### Contributors
- Andrey Smirnov
##### Changes
<details><summary>2 commits</summary>
<p>
- [`f1fdd95`](https://github.com/siderolabs/discovery-service/commit/f1fdd952e796301a4cebe0c2dea349519b625714) release(v1.0.17): prepare release
- [`2267f4c`](https://github.com/siderolabs/discovery-service/commit/2267f4c5a3c7b5ef1b3c1fbe6faaa2e669aad4ab) feat: store relative expiration (TTL) instead of absolute
</p>
</details>
##### Dependency Changes
This release has no dependency changes
Previous release can be found at [v1.0.16](https://github.com/siderolabs/discovery-service/releases/tag/v1.0.16)
</details>
<details>
<summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary>
### [`v82.15.1`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-82.15.1)
[Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-82.15.0...kube-prometheus-stack-82.15.1)
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
#### What's Changed
- \[kube-prometheus-stack] Update Helm release grafana to v11.3.6 by [@​renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/6791
**Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-82.15.0...kube-prometheus-stack-82.15.1
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot
changed title from chore(deps): update helm release argo-cd to v9.4.17 to chore(deps): update all-minor-patch-updates2026-03-27 18:00:56 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
9.4.16->9.4.17v1.20.0->v1.20.1v1.0.16->v1.0.1782.15.0->82.15.1Release Notes
argoproj/argo-helm (argo-cd)
v9.4.17Compare Source
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
What's Changed
Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-rollouts-2.40.9...argo-cd-9.4.17
cert-manager/cert-manager (cert-manager)
v1.20.1Compare Source
v1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate
parentRefbug when both issuer config and annotations are present (Gateway API).Bug or Regression
parentRefbug when both issuer config and annotations are present. (#8658, @hjoshi123)siderolabs/discovery-service (ghcr.io/siderolabs/discovery-service)
v1.0.17Compare Source
discovery-service 1.0.17 (2026-03-27)
Welcome to the v1.0.17 release of discovery-service!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/discovery-service/issues.
Contributors
Changes
2 commits
f1fdd95release(v1.0.17): prepare release2267f4cfeat: store relative expiration (TTL) instead of absoluteDependency Changes
This release has no dependency changes
Previous release can be found at v1.0.16
prometheus-community/helm-charts (kube-prometheus-stack)
v82.15.1Compare Source
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
What's Changed
Full Changelog: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-82.15.0...kube-prometheus-stack-82.15.1
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
chore(deps): update helm release argo-cd to v9.4.17to chore(deps): update all-minor-patch-updates6fa72287dato127fdd54cf