Update Helm release cert-manager to v1.12.17

This MR contains the following updates:

Package	Update	Change
cert-manager (source)	patch	v1.12.16 -> v1.12.17

Notes for Reviewer

• For security reasons, our Renovate fork cannot trigger canonical chart pipelines
  • ⚠️ Reviewer needs to initiate new MR pipeline, subsequently triggering chart pipeline from it. ⚠️

---

Release Notes

cert-manager/cert-manager (cert-manager)

v1.12.17

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates.

📖 Read the full cert-manager 1.12 release notes, before installing or upgrading.

Changes since v1.12.16

Bug or Regression

• Bump Go to v1.23.8 to fix CVE-2025-22871 (#​7709, @wallrj)
• Bump golang.org/x/net to v0.38.0 to fix CVE-2025-22872 (#​7709, @wallrj)
• Bump github.com/golang-jwt/jwt/v4 to v4.5.2 to fix CVE-2025-30204 (#​7709, @wallrj)
• Bump go-jose to address CVE-2025-27144 (#​7597, @SgtCoDFish)
• Bump golang.org/x/net to address CVE-2025-22870 reported by Trivy (#​7624, @SgtCoDFish)
• Bump golang.org/x/net to address CVE-2025-22870 reported by Trivy (#​7623, @SgtCoDFish)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.