chore(deps): update dependency rabbitmq/messaging-topology-operator to v1.20.2

[renovate]

This PR contains the following updates:

Package	Update	Change
rabbitmq/messaging-topology-operator	minor	1.17.4 → 1.20.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

rabbitmq/messaging-topology-operator (rabbitmq/messaging-topology-operator)

v1.20.2

Compare Source

What's Changed

• Exclude metrics-cert mount from OLM bundle deployment spec by @​Zerpet in #​1240
• Bump go to 1.26.6. by @​MirahImage in #​1245
• Use NS in connection secret if present by @​Zerpet in #​1246
• Run OLM tests on PR by @​Zerpet in #​1247
• Bump golang. by @​MirahImage in #​1252

Full Changelog: rabbitmq/messaging-topology-operator@v1.20.1...v1.20.2

v1.20.1

Compare Source

What's Changed

• Remove CRD ref doc generation by @​Zerpet in #​1218
• test: add a case for missing secret in User tests by @​Zerpet in #​1217
• Remove CRD reference doc generation by @​Zerpet in #​1219
• Ensure user is deleted during test cleanup to fix flake. by @​MirahImage in #​1223
• Update golang dependencies. by @​MirahImage in #​1225
• Remove CRD ref docs by @​Zerpet in #​1227
• Bypass cache for Service reads to avoid unbounded cluster-wide informer by @​Zerpet in #​1226
• Add warning if vault TLS disabled. by @​MirahImage in #​1231
• Redact log secrets by @​MirahImage in #​1230
• Bump go dependencies. by @​MirahImage in #​1233

Full Changelog: rabbitmq/messaging-topology-operator@v1.20.0...v1.20.1

v1.20.0

Compare Source

⚠️⚠️⚠️ IMPORTANT NOTICE ⚠️⚠️⚠️

Starting from this version and onwards, all user-provided secrets (importCredentialsSecret, connectionSecret, uriSecret, upstreamSecret) must carry label rabbitmq.com/topology-operator: "true" before or immediately after upgrading. Webhooks enforce this for new/updated resources; the operator-generated <user>-user-credentials secret is auto-labeled on the next reconcile.

More details in this doc section: https://www.rabbitmq.com/kubernetes/operator/using-topology-operator#secret-label-requirement

What's Changed

• Bump openshift versions. by @​MirahImage in #​1189
• Mount cert-manager cert for serving metrics. by @​MirahImage in #​1208
• feat: label-gated Secret cache for User password rotation (RMQ-2838) by @​Zerpet in #​1205
• fix: support clusters scaled to zero by @​Zerpet in #​1212
• Add defaulting webhook to ensure default values. by @​MirahImage in #​1213
• Bump go version and dependencies. by @​MirahImage in #​1216
• RMQ-2841: Emit password sync event and condition for User by @​Zerpet in #​1210

Full Changelog: rabbitmq/messaging-topology-operator@v1.19.3...v1.20.0

v1.19.3

Compare Source

What's Changed

• Fix User deletion logic by @​Zerpet in #​1176
• Bump k8s versions in Actions by @​Zerpet in #​1177
• Fix OLM package generation by @​Zerpet in #​1175
• fix: installation kustomize to refer new ghcr image by @​yungbender in #​1179
• Handle permission deletion while cluster deletion in progress. by @​MirahImage in #​1184
• Bump golang version and dependencies. by @​MirahImage in #​1187

New Contributors

• @​yungbender made their first contribution in #​1179

Full Changelog: rabbitmq/messaging-topology-operator@v1.19.2...v1.19.3

v1.19.2

Compare Source

What's Changed

• Fix queue properties for queues used in system tests. by @​MirahImage in #​1170
• Bump golang version. by @​MirahImage in #​1164
• Bump go - v1.26.3 by @​PujaVad in #​1173

Full Changelog: rabbitmq/messaging-topology-operator@v1.19.1...v1.19.2

v1.19.1

Compare Source

⚠️⚠️⚠️ IMPORTANT ⚠️⚠️⚠️

Make sure you read the release notes of of v1.19.0 before upgrading from v1.18.x or earlier. You need to perform additional steps to upgrade from v1.18.x or earlier versions.

What's Changed

• Fix events permission by @​Zerpet in #​1145
• Bump go - 1.25.9 by @​PujaVad in #​1155

Full Changelog: rabbitmq/messaging-topology-operator@v1.19.0...v1.19.1

v1.19.0

Compare Source

⚠️⚠️⚠️ BREAKING CHANGE ⚠️⚠️⚠️

We have stopped publishing the operator image to DockerHub. The manifest messaging-topology-operator.yaml and messaging-topology-operator-with-certmanager.yaml now points to GHCR (GitHub registry).

We do not expect most users to be affected, since GHCR allows to pull without authentication from public repos.

You may be affected if your infrastructure uses a proxy, or a mirror, to pull the operator image from DockerHub.

Upgrade

In this version, some resources changed their names, to make them more specific. The resources that changed name are:

• Service named webhook-service
• ValidatingWebhookConfiguration named topology.rabbitmq.com
• (Cert Manager) Certificate named serving-cert
• (Cert Manager) Issuer named selfsigned-issuer

When you upgrade to v1.19.0, kubectl will create those resources with different names, and old ones will be left behind. You can either manually delete the old resources, or use the script cleanup-old-resources.sh available in this release.

What's Changed

• Fix OLM release values by @​Zerpet in #​1109
• Migrate to Kubebuilder v4 by @​Zerpet in #​1105
• chore: switch check-github-tool-versions.sh to use gh CLI by @​Copilot in #​1116
• chore: add automated tool version update workflow by @​Zerpet in #​1115
• Fix make target command in CI by @​Zerpet in #​1119
• Remove vscode config from repo. by @​MirahImage in #​1117
• Fix lint errors by @​Zerpet in #​1120
• Explicitly add Makefile in update-tools by @​Zerpet in #​1126
• Bump golang to resolve CVEs. by @​MirahImage in #​1137
• CI : Fix artifact name for upload in release workflow by @​PujaVad in #​1138

Full Changelog: rabbitmq/messaging-topology-operator@v1.18.3...v1.19.0

v1.18.3

Compare Source

What's Changed

• Update webhooks by @​MirahImage in #​1096
• Update OLM workflow to support File-Based Catalog by @​Zerpet in #​1098
• Bump go to 1.25.7 by @​PujaVad in #​1103

Full Changelog: rabbitmq/messaging-topology-operator@v1.18.2...v1.18.3

v1.18.2

Compare Source

What's Changed

• Remove golang-ci-lint. No longer needed with modern go. by @​MirahImage in #​1077
• Fix security context: take 2 🎬 by @​Zerpet in #​1076
• Bump kind to latest image version. by @​MirahImage in #​1080
• Bump golang and deps by @​PujaVad in #​1081

Full Changelog: rabbitmq/messaging-topology-operator@v1.18.1...v1.18.2

v1.18.1

Compare Source

What's Changed

• Use GHCR to publish container image by @​Zerpet in #​1064
• Update drop capabilities to ALL by @​Zerpet in #​1067
• Update CLA link. by @​MirahImage in #​1069

Full Changelog: rabbitmq/messaging-topology-operator@v1.18.0...v1.18.1

v1.18.0

Compare Source

What's Changed

• Update ClusterRole permissions of messaging topology operator to update secrets by @​barosch47 in #​1033
• Create tool group for dependabot tool updates. by @​MirahImage in #​1039
• Add security context for controllers. by @​MirahImage in #​1048

New Contributors

• @​barosch47 made their first contribution in #​1033

Full Changelog: rabbitmq/messaging-topology-operator@v1.17.4...v1.18.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.