chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
anchore/sbom-action	action	minor	v0.18.0 -> v0.20.0
github.com/cert-manager/cert-manager	require	patch	v1.17.1 -> v1.17.2
github.com/stackitcloud/stackit-sdk-go/core	require	patch	v0.17.1 -> v0.17.2
github.com/stackitcloud/stackit-sdk-go/services/dns	require	minor	v0.13.1 -> v0.15.0
go.uber.org/mock	require	patch	v0.5.1 -> v0.5.2
k8s.io/api	require	minor	v0.32.4 -> v0.33.1
k8s.io/apiextensions-apiserver	require	minor	v0.32.4 -> v0.33.1
k8s.io/apimachinery	require	minor	v0.32.4 -> v0.33.1
k8s.io/client-go	require	minor	v0.32.4 -> v0.33.1

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.20.0

Compare Source

Changes in v0.20.0

• chore(deps): update Syft to v1.24.0 (#​522)

v0.19.0

Compare Source

Changes in v0.19.0

• chore(deps): update Syft to v1.23.0 (#​521)
• chore(deps): bump peter-evans/create-pull-request from 7.0.6 to 7.0.8 (#​519)
• chore(deps): bump cross-spawn (#​514)

cert-manager/cert-manager (github.com/cert-manager/cert-manager)

v1.17.2

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates.

📖 Read the full cert-manager 1.17 release notes, before installing or upgrading.

Changes since v1.17.1

Bug or Regression

• Bump Go to v1.23.8 to fix CVE-2025-22871 (#​7701, @wallrj)
• Bump go-jose dependency to address CVE-2025-27144 (#​7603, @SgtCoDFish)
• Bump golang.org/x/net to address CVE-2025-22870 reported by Trivy (#​7622, @SgtCoDFish)
• Bump golang.org/x/net to fix CVE-2025-22872 (#​7703, @wallrj)
• Bump golang.org/x/oauth2 to patch CVE-2025-22868 (#​7692, @lentzi90)
• Bump golang.org/x/crypto to patch GHSA-hcg3-q754-cr77 (#​7692, @lentzi90)
• Bump github.com/golang-jwt/jwt to patch GHSA-mh63-6h87-95cp (#​7692, @lentzi90)

uber/mock (go.uber.org/mock)

v0.5.2

Compare Source

0.5.2 (28 Apr 2025)

Fixed

• #​248: Fixed an issue with type aliases not being included in generated code correctly.

kubernetes/api (k8s.io/api)

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.5

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.5

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.5

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.5

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: module github.com/cert-manager/cert-manager@v1.17.2 requires go >= 1.23.8; switching to go1.23.9
go: downloading go1.23.9 (linux/amd64)
go: download go1.23.9: golang.org/toolchain@v0.0.1-go1.23.9.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off