fix(deps): update misc go deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
github.com/cert-manager/cert-manager	v1.19.2 → v1.19.4					require	patch
go (source)	1.25.5 → 1.26.0					toolchain	minor
modernc.org/sqlite	v1.40.1 → v1.46.1					require	minor

---

Release Notes

cert-manager/cert-manager (github.com/cert-manager/cert-manager)

v1.19.4

Compare Source

v1.19.3

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This release contains three bug fixes, including a fix for the MODERATE severity DoS issue in GHSA-gx3x-vq4p-mhhv. All users should upgrade to the latest release.

Changes by Kind

Bug or Regression

• Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. (#​8415, @​cert-manager-bot)
• Fixed an issue where HTTP-01 challenges failed when the Host header contained an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. (#​8436, @​cert-manager-bot)
• Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. (#​8468, @​SgtCoDFish)

Other (Cleanup or Flake)

• Bump go to 1.25.6 (#​8459, @​SgtCoDFish)

golang/go (go)

v1.26.0

v1.25.7

v1.25.6

cznic/sqlite (modernc.org/sqlite)

v1.46.1

Compare Source

v1.46.0

Compare Source

v1.45.0

Compare Source

v1.44.3

Compare Source

v1.44.2

Compare Source

v1.44.1

Compare Source

v1.44.0

Compare Source

v1.43.0

Compare Source

v1.42.2

Compare Source

v1.42.1

Compare Source

v1.42.0

Compare Source

v1.41.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cert-manager-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign inteon for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
go.opentelemetry.io/otel	v1.37.0 -> v1.40.0
go.opentelemetry.io/otel/trace	v1.37.0 -> v1.40.0
golang.org/x/sys	v0.38.0 -> v0.40.0

File name: guestbook/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/exp	v0.0.0-20250620022241-b7579e27df2b -> v0.0.0-20251023183803-a4bb9ffd2546
github.com/ncruces/go-strftime	v0.1.9 -> v1.0.0
golang.org/x/sys	v0.36.0 -> v0.37.0
modernc.org/libc	v1.66.10 -> v1.67.6