ops/homelab
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Activity

chore(deps): update helm release external-secrets to v2.13.0 #140

Open
renovate-bot wants to merge 1 commit from renovate/external-secrets-2.x into main
pull from: renovate/external-secrets-2.x
merge into: ops:main
Conversation 2 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-09-21 23:10:41 +00:00
Member
Copy link

This PR contains the following updates:

Package Update Change
external-secrets minor 2.8.0 → 2.13.0

Release Notes

external-secrets/external-secrets (external-secrets)

v2.13.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.13.0
Image: ghcr.io/external-secrets/external-secrets:v2.13.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.13.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.12.0...v2.13.0

v2.12.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.12.0
Image: ghcr.io/external-secrets/external-secrets:v2.12.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.12.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.11.0...v2.12.0

v2.11.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.11.0
Image: ghcr.io/external-secrets/external-secrets:v2.11.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.11.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.10.0...v2.11.0

v2.10.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.10.0
Image: ghcr.io/external-secrets/external-secrets:v2.10.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.10.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.9.0...v2.10.0

v2.9.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.9.0
Image: ghcr.io/external-secrets/external-secrets:v2.9.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.9.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.8.0` → `2.13.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.13.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.13.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.12.0...v2.13.0) Image: `ghcr.io/external-secrets/external-secrets:v2.13.0` Image: `ghcr.io/external-secrets/external-secrets:v2.13.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.13.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart for version 2.12.0 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7088](https://github.com/external-secrets/external-secrets/pull/7088) - fix: validate manifest Secret candidates by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7066](https://github.com/external-secrets/external-secrets/pull/7066) - chore: update go to 1.26.9 and golang.org/x/net to v0.61.0 by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;7116](https://github.com/external-secrets/external-secrets/pull/7116) - docs: fix duplicated word in the datafrom rewrite guide by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6977](https://github.com/external-secrets/external-secrets/pull/6977) - docs: anchor namespace regex examples by [@&#8203;Only-Abhiram](https://github.com/Only-Abhiram) in [#&#8203;7121](https://github.com/external-secrets/external-secrets/pull/7121) - fix(dvls): bump go-dvls to v0.21.1 by [@&#8203;dion-gionet](https://github.com/dion-gionet) in [#&#8203;7058](https://github.com/external-secrets/external-secrets/pull/7058) - fix(beyondtrustworkloadcredentials): Address the API at `/site/{siteID}/wlc` by [@&#8203;mdreyer-bt](https://github.com/mdreyer-bt) in [#&#8203;7034](https://github.com/external-secrets/external-secrets/pull/7034) - chore: bump Go 1.27 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7122](https://github.com/external-secrets/external-secrets/pull/7122) - fix: Restrict v1beta1 Secret template targets by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7067](https://github.com/external-secrets/external-secrets/pull/7067) - test: reconcile validates secret candidate by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7068](https://github.com/external-secrets/external-secrets/pull/7068) - docs: clarify guide by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7104](https://github.com/external-secrets/external-secrets/pull/7104) - chore: update docs for next release by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7128](https://github.com/external-secrets/external-secrets/pull/7128) ##### Dependencies - chore(deps): bump golang from 1.27.1-bookworm to 1.27.2-bookworm in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7109](https://github.com/external-secrets/external-secrets/pull/7109) - chore(deps): bump codelytv/pr-size-labeler from 1.10.4 to 1.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7081](https://github.com/external-secrets/external-secrets/pull/7081) - chore(deps): bump helm/kind-action from 1.15.0 to 1.15.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7114](https://github.com/external-secrets/external-secrets/pull/7114) - chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7111](https://github.com/external-secrets/external-secrets/pull/7111) - chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7115](https://github.com/external-secrets/external-secrets/pull/7115) - chore(deps): bump the codeql group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7110](https://github.com/external-secrets/external-secrets/pull/7110) #### New Contributors - [@&#8203;Only-Abhiram](https://github.com/Only-Abhiram) made their first contribution in [#&#8203;7121](https://github.com/external-secrets/external-secrets/pull/7121) - [@&#8203;dion-gionet](https://github.com/dion-gionet) made their first contribution in [#&#8203;7058](https://github.com/external-secrets/external-secrets/pull/7058) - [@&#8203;mdreyer-bt](https://github.com/mdreyer-bt) made their first contribution in [#&#8203;7034](https://github.com/external-secrets/external-secrets/pull/7034) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.12.0...v2.13.0> ### [`v2.12.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.12.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.11.0...v2.12.0) Image: `ghcr.io/external-secrets/external-secrets:v2.12.0` Image: `ghcr.io/external-secrets/external-secrets:v2.12.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.12.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - fix: Revert breaking change to change imageRegistry by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6996](https://github.com/external-secrets/external-secrets/pull/6996) - fix: e2e test should not override default vars by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6995](https://github.com/external-secrets/external-secrets/pull/6995) - chore: release helm chart for 2.11.0 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6997](https://github.com/external-secrets/external-secrets/pull/6997) - fix: Remove fail from templates by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7019](https://github.com/external-secrets/external-secrets/pull/7019) - docs(generators): describe UUID output as lowercase version 4 by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;7027](https://github.com/external-secrets/external-secrets/pull/7027) - fix(akeyless): return esv1.NoSecretErr when a secret does not exist in GetSecret by [@&#8203;wankhede04](https://github.com/wankhede04) in [#&#8203;7013](https://github.com/external-secrets/external-secrets/pull/7013) - feat(generators): add prefix and suffix to the Password generator by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;7028](https://github.com/external-secrets/external-secrets/pull/7028) - fix(aws): return esv1.NoSecretErr when a certificate does not exist in Certificate Manager GetSecret by [@&#8203;wankhede04](https://github.com/wankhede04) in [#&#8203;7015](https://github.com/external-secrets/external-secrets/pull/7015) - fix: use preinstalled-runtimes to match v2 bump by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7031](https://github.com/external-secrets/external-secrets/pull/7031) - chore: update dependencies by [@&#8203;eso-service-account-app](https://github.com/eso-service-account-app)\[bot] in [#&#8203;7047](https://github.com/external-secrets/external-secrets/pull/7047) - fix(pulumi): preserve environment definition on PushSecret by [@&#8203;KR-Ravindra](https://github.com/KR-Ravindra) in [#&#8203;6933](https://github.com/external-secrets/external-secrets/pull/6933) - docs: set Orphan on ClusterExternalSecret fan-out example by [@&#8203;guanchzhou](https://github.com/guanchzhou) in [#&#8203;6885](https://github.com/external-secrets/external-secrets/pull/6885) - feat(conjur): Cloud Authenticators support by [@&#8203;hdabrowski](https://github.com/hdabrowski) in [#&#8203;6729](https://github.com/external-secrets/external-secrets/pull/6729) - docs: add Vault custom metadata example by [@&#8203;PCDattt](https://github.com/PCDattt) in [#&#8203;6982](https://github.com/external-secrets/external-secrets/pull/6982) - feat(charts): add rbac.leaderElection.create toggle by [@&#8203;kriszkern](https://github.com/kriszkern) in [#&#8203;6950](https://github.com/external-secrets/external-secrets/pull/6950) - feat(charts): warn when replicas > 1 without leader election by [@&#8203;anikievev](https://github.com/anikievev) in [#&#8203;7036](https://github.com/external-secrets/external-secrets/pull/7036) - fix: Never template strings in errors by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7021](https://github.com/external-secrets/external-secrets/pull/7021) - fix: Validate Secret before writing by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7065](https://github.com/external-secrets/external-secrets/pull/7065) - chore: Update docs for new release by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;7085](https://github.com/external-secrets/external-secrets/pull/7085) ##### Dependencies - chore(deps): bump ubi9/ubi from `c5cc9c2` to `a4b9ec0` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7001](https://github.com/external-secrets/external-secrets/pull/7001) - chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7006](https://github.com/external-secrets/external-secrets/pull/7006) - chore(deps): bump jlumbroso/free-disk-space from 1.3.1 to 2.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7005](https://github.com/external-secrets/external-secrets/pull/7005) - chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7004](https://github.com/external-secrets/external-secrets/pull/7004) - chore(deps): bump golang from `648f440` to `69a7b97` in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7044](https://github.com/external-secrets/external-secrets/pull/7044) - chore(deps): bump alpine from 3.24.1 to 3.24.2 in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7043](https://github.com/external-secrets/external-secrets/pull/7043) - chore(deps): bump alpine from `28bd5fe` to `294b683` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7042](https://github.com/external-secrets/external-secrets/pull/7042) - chore(deps): bump alpine from `28bd5fe` to `294b683` in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7045](https://github.com/external-secrets/external-secrets/pull/7045) - chore(deps): bump ubi9/ubi from `a4b9ec0` to `7a38d75` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7041](https://github.com/external-secrets/external-secrets/pull/7041) - chore(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7003](https://github.com/external-secrets/external-secrets/pull/7003) - chore(deps): bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7002](https://github.com/external-secrets/external-secrets/pull/7002) - chore(deps): bump azure/login from 3.0.2 to 3.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6959](https://github.com/external-secrets/external-secrets/pull/6959) - chore(deps): bump the codeql group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6958](https://github.com/external-secrets/external-secrets/pull/6958) - chore(deps): bump distroless/static from `f2ea270` to `5813399` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6957](https://github.com/external-secrets/external-secrets/pull/6957) - chore(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7080](https://github.com/external-secrets/external-secrets/pull/7080) - chore(deps): bump ubi9/ubi from `7a38d75` to `803a35a` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7079](https://github.com/external-secrets/external-secrets/pull/7079) #### New Contributors - [@&#8203;wankhede04](https://github.com/wankhede04) made their first contribution in [#&#8203;7013](https://github.com/external-secrets/external-secrets/pull/7013) - [@&#8203;KR-Ravindra](https://github.com/KR-Ravindra) made their first contribution in [#&#8203;6933](https://github.com/external-secrets/external-secrets/pull/6933) - [@&#8203;guanchzhou](https://github.com/guanchzhou) made their first contribution in [#&#8203;6885](https://github.com/external-secrets/external-secrets/pull/6885) - [@&#8203;PCDattt](https://github.com/PCDattt) made their first contribution in [#&#8203;6982](https://github.com/external-secrets/external-secrets/pull/6982) - [@&#8203;anikievev](https://github.com/anikievev) made their first contribution in [#&#8203;7036](https://github.com/external-secrets/external-secrets/pull/7036) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.11.0...v2.12.0> ### [`v2.11.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.11.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.10.0...v2.11.0) Image: `ghcr.io/external-secrets/external-secrets:v2.11.0` Image: `ghcr.io/external-secrets/external-secrets:v2.11.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.11.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart for 2.10.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6882](https://github.com/external-secrets/external-secrets/pull/6882) - docs: use --hostname all in the Bitwarden webhook example by [@&#8203;ggiesen](https://github.com/ggiesen) in [#&#8203;6850](https://github.com/external-secrets/external-secrets/pull/6850) - fix(ci): zizmor no-op blocks gates by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6889](https://github.com/external-secrets/external-secrets/pull/6889) - feat(barbican): Support OpenStack Barbican authentication via Application Credentials by [@&#8203;JaviMore](https://github.com/JaviMore) in [#&#8203;6082](https://github.com/external-secrets/external-secrets/pull/6082) - clean: replace k8s.io/utils pointer helpers with the new builtin by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6902](https://github.com/external-secrets/external-secrets/pull/6902) - feat(webhook): return not supported error for GetAllSecrets by [@&#8203;Abderraoufzekkour](https://github.com/Abderraoufzekkour) in [#&#8203;6817](https://github.com/external-secrets/external-secrets/pull/6817) - fix(keepersecurity): return NoSecretErr for missing records by [@&#8203;alliasgher](https://github.com/alliasgher) in [#&#8203;6816](https://github.com/external-secrets/external-secrets/pull/6816) - fix: doc builds may set different user/group ownership on git repo objects by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6901](https://github.com/external-secrets/external-secrets/pull/6901) - fix: Use local GCP import for Vault modules by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6904](https://github.com/external-secrets/external-secrets/pull/6904) - fix: guarantee replaces by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6905](https://github.com/external-secrets/external-secrets/pull/6905) - chore: bump grpc by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6909](https://github.com/external-secrets/external-secrets/pull/6909) - fix: bump Makefile license-eye image to 0.9.0 by [@&#8203;dronenb](https://github.com/dronenb) in [#&#8203;6855](https://github.com/external-secrets/external-secrets/pull/6855) - feat(infisical): add option to keep duplicate secret keys by [@&#8203;mathnogueira](https://github.com/mathnogueira) in [#&#8203;6908](https://github.com/external-secrets/external-secrets/pull/6908) - ref: move provider constants by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6883](https://github.com/external-secrets/external-secrets/pull/6883) - feat: allow specifying namespace for grafana dashboard ConfigMap by [@&#8203;okwilkins](https://github.com/okwilkins) in [#&#8203;6920](https://github.com/external-secrets/external-secrets/pull/6920) - fix(keepersecurity): make folderID optional except when creating new records via push by [@&#8203;LGKentang](https://github.com/LGKentang) in [#&#8203;6921](https://github.com/external-secrets/external-secrets/pull/6921) - docs(templating): remove duplicate a in TemplateFrom Literal note by [@&#8203;mrchatam](https://github.com/mrchatam) in [#&#8203;6953](https://github.com/external-secrets/external-secrets/pull/6953) - feat(ci): close pull requests that drop a template section by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6881](https://github.com/external-secrets/external-secrets/pull/6881) - feat(charts): add global.imageRegistry to the external-secrets chart by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6983](https://github.com/external-secrets/external-secrets/pull/6983) - chore: update skywalking-eyes by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6970](https://github.com/external-secrets/external-secrets/pull/6970) - ref: fix Sonarqube linting alerts by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6974](https://github.com/external-secrets/external-secrets/pull/6974) - chore: Revert [#&#8203;6908](https://github.com/external-secrets/external-secrets/issues/6908) by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6991](https://github.com/external-secrets/external-secrets/pull/6991) - chore: prepare release support matrix by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6993](https://github.com/external-secrets/external-secrets/pull/6993) ##### Dependencies - chore(deps): bump golang from `484ef60` to `ded31c6` in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6892](https://github.com/external-secrets/external-secrets/pull/6892) - chore(deps): bump ubi9/ubi from `5426a8f` to `25a147d` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6890](https://github.com/external-secrets/external-secrets/pull/6890) - chore(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6895](https://github.com/external-secrets/external-secrets/pull/6895) - chore(deps): bump the codeql group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6893](https://github.com/external-secrets/external-secrets/pull/6893) - chore(deps): bump azure/login from 3.0.1 to 3.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6896](https://github.com/external-secrets/external-secrets/pull/6896) - chore(deps): bump golang from 1.27.0-bookworm to 1.27.1-bookworm in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6923](https://github.com/external-secrets/external-secrets/pull/6923) - chore(deps): bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6925](https://github.com/external-secrets/external-secrets/pull/6925) - chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6927](https://github.com/external-secrets/external-secrets/pull/6927) - chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6924](https://github.com/external-secrets/external-secrets/pull/6924) - chore(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6926](https://github.com/external-secrets/external-secrets/pull/6926) - chore(deps): bump helm/kind-action from 1.14.0 to 1.15.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6928](https://github.com/external-secrets/external-secrets/pull/6928) - chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6929](https://github.com/external-secrets/external-secrets/pull/6929) - chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6960](https://github.com/external-secrets/external-secrets/pull/6960) - chore(deps): bump ubi9/ubi from `25a147d` to `c5cc9c2` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6956](https://github.com/external-secrets/external-secrets/pull/6956) #### New Contributors - [@&#8203;ggiesen](https://github.com/ggiesen) made their first contribution in [#&#8203;6850](https://github.com/external-secrets/external-secrets/pull/6850) - [@&#8203;JaviMore](https://github.com/JaviMore) made their first contribution in [#&#8203;6082](https://github.com/external-secrets/external-secrets/pull/6082) - [@&#8203;Abderraoufzekkour](https://github.com/Abderraoufzekkour) made their first contribution in [#&#8203;6817](https://github.com/external-secrets/external-secrets/pull/6817) - [@&#8203;okwilkins](https://github.com/okwilkins) made their first contribution in [#&#8203;6920](https://github.com/external-secrets/external-secrets/pull/6920) - [@&#8203;LGKentang](https://github.com/LGKentang) made their first contribution in [#&#8203;6921](https://github.com/external-secrets/external-secrets/pull/6921) - [@&#8203;mrchatam](https://github.com/mrchatam) made their first contribution in [#&#8203;6953](https://github.com/external-secrets/external-secrets/pull/6953) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.10.0...v2.11.0> ### [`v2.10.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.10.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.9.0...v2.10.0) Image: `ghcr.io/external-secrets/external-secrets:v2.10.0` Image: `ghcr.io/external-secrets/external-secrets:v2.10.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.10.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart for 2.9.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6808](https://github.com/external-secrets/external-secrets/pull/6808) - docs: correct the design type in the PR template by [@&#8203;sanchpet](https://github.com/sanchpet) in [#&#8203;6813](https://github.com/external-secrets/external-secrets/pull/6813) - fix(aws): redact credentials in aws auth config logs by [@&#8203;hixichen](https://github.com/hixichen) in [#&#8203;6683](https://github.com/external-secrets/external-secrets/pull/6683) - fix(gcp): preserve workload identity token expiry by [@&#8203;jakobtfr](https://github.com/jakobtfr) in [#&#8203;6772](https://github.com/external-secrets/external-secrets/pull/6772) - feat(conjur): Conjur PushSecret by [@&#8203;aidy](https://github.com/aidy) in [#&#8203;6272](https://github.com/external-secrets/external-secrets/pull/6272) - fix(infisical): scope dataFrom.find.path in list requests by [@&#8203;thc1006](https://github.com/thc1006) in [#&#8203;6821](https://github.com/external-secrets/external-secrets/pull/6821) - chore: bump golangci-lint and fix new linting issues by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6740](https://github.com/external-secrets/external-secrets/pull/6740) - feat(openbao): add `auth.kubernetes` auth method by [@&#8203;Nerkho](https://github.com/Nerkho) in [#&#8203;6591](https://github.com/external-secrets/external-secrets/pull/6591) - docs: add OpenChoreo to the adopters list by [@&#8203;kavishkafernando](https://github.com/kavishkafernando) in [#&#8203;6820](https://github.com/external-secrets/external-secrets/pull/6820) - feat(passbolt): add support for custom fields by [@&#8203;saknopper](https://github.com/saknopper) in [#&#8203;6696](https://github.com/external-secrets/external-secrets/pull/6696) - chore: update go version to 1.26.6 by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6835](https://github.com/external-secrets/external-secrets/pull/6835) - feat(core): report safe reconcile errors in status conditions by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6834](https://github.com/external-secrets/external-secrets/pull/6834) - fix(secretserver): missing field siteId in secret creation by [@&#8203;pr0ton11](https://github.com/pr0ton11) in [#&#8203;6649](https://github.com/external-secrets/external-secrets/pull/6649) - fix: Reconcile sha and version by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6843](https://github.com/external-secrets/external-secrets/pull/6843) - chore(deps): bump aws acm by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6705](https://github.com/external-secrets/external-secrets/pull/6705) - chore(deps): update go-ntlmssp to v0.1.1 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6701](https://github.com/external-secrets/external-secrets/pull/6701) - clean: Get rid of tests importing provider deps by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6846](https://github.com/external-secrets/external-secrets/pull/6846) - chore(deps): bump GitLab API client to v1.46.0 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6700](https://github.com/external-secrets/external-secrets/pull/6700) - docs(webhook): escape Go template examples with {% raw %} by [@&#8203;atobaum](https://github.com/atobaum) in [#&#8203;6852](https://github.com/external-secrets/external-secrets/pull/6852) - fix(ci): put CODEOWNERS at a path GitHub actually reads by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6853](https://github.com/external-secrets/external-secrets/pull/6853) - feat(passbolt): PB-53915 - Surface custom field functions in SDK by [@&#8203;cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#&#8203;6848](https://github.com/external-secrets/external-secrets/pull/6848) - design: Guarantee module import boundaries by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6851](https://github.com/external-secrets/external-secrets/pull/6851) - feat(providers): Nebius MysteryBox SA token federation auth option added by [@&#8203;greenmapc](https://github.com/greenmapc) in [#&#8203;6784](https://github.com/external-secrets/external-secrets/pull/6784) - fix: Unblock CI by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6874](https://github.com/external-secrets/external-secrets/pull/6874) - fix(vault): only apply deprecated token-cache flags when explicitly set by [@&#8203;markof88](https://github.com/markof88) in [#&#8203;6827](https://github.com/external-secrets/external-secrets/pull/6827) - feat: apply TLS security profile to the external-secrets deployment by [@&#8203;siddhibhor-56](https://github.com/siddhibhor-56) in [#&#8203;6617](https://github.com/external-secrets/external-secrets/pull/6617) - feat(github): support Dependabot secrets by [@&#8203;SanderKnape](https://github.com/SanderKnape) in [#&#8203;6878](https://github.com/external-secrets/external-secrets/pull/6878) ##### Dependencies - chore(deps): bump golang from `0178a64` to `0178a64` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6818](https://github.com/external-secrets/external-secrets/pull/6818) - chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6819](https://github.com/external-secrets/external-secrets/pull/6819) - chore(deps): bump setuptools from 83.0.0 to 84.0.0 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6826](https://github.com/external-secrets/external-secrets/pull/6826) - chore(deps): bump golang from `af8d674` to `3889b42` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6838](https://github.com/external-secrets/external-secrets/pull/6838) - chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6840](https://github.com/external-secrets/external-secrets/pull/6840) - chore(deps): bump the codeql group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6839](https://github.com/external-secrets/external-secrets/pull/6839) - chore(deps): bump the codeql group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6867](https://github.com/external-secrets/external-secrets/pull/6867) - chore(deps): bump ubi9/ubi from `2a6bd69` to `5426a8f` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6865](https://github.com/external-secrets/external-secrets/pull/6865) - chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6868](https://github.com/external-secrets/external-secrets/pull/6868) - chore(deps): bump golang from 1.26.6-bookworm to 1.27.0-bookworm in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6866](https://github.com/external-secrets/external-secrets/pull/6866) - chore(deps): bump golang from `3889b42` to `4c9fe60` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6864](https://github.com/external-secrets/external-secrets/pull/6864) - chore(deps): bump distroless/static from `9197324` to `f2ea270` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6863](https://github.com/external-secrets/external-secrets/pull/6863) #### New Contributors - [@&#8203;sanchpet](https://github.com/sanchpet) made their first contribution in [#&#8203;6813](https://github.com/external-secrets/external-secrets/pull/6813) - [@&#8203;hixichen](https://github.com/hixichen) made their first contribution in [#&#8203;6683](https://github.com/external-secrets/external-secrets/pull/6683) - [@&#8203;jakobtfr](https://github.com/jakobtfr) made their first contribution in [#&#8203;6772](https://github.com/external-secrets/external-secrets/pull/6772) - [@&#8203;aidy](https://github.com/aidy) made their first contribution in [#&#8203;6272](https://github.com/external-secrets/external-secrets/pull/6272) - [@&#8203;thc1006](https://github.com/thc1006) made their first contribution in [#&#8203;6821](https://github.com/external-secrets/external-secrets/pull/6821) - [@&#8203;Nerkho](https://github.com/Nerkho) made their first contribution in [#&#8203;6591](https://github.com/external-secrets/external-secrets/pull/6591) - [@&#8203;kavishkafernando](https://github.com/kavishkafernando) made their first contribution in [#&#8203;6820](https://github.com/external-secrets/external-secrets/pull/6820) - [@&#8203;saknopper](https://github.com/saknopper) made their first contribution in [#&#8203;6696](https://github.com/external-secrets/external-secrets/pull/6696) - [@&#8203;atobaum](https://github.com/atobaum) made their first contribution in [#&#8203;6852](https://github.com/external-secrets/external-secrets/pull/6852) - [@&#8203;markof88](https://github.com/markof88) made their first contribution in [#&#8203;6827](https://github.com/external-secrets/external-secrets/pull/6827) - [@&#8203;SanderKnape](https://github.com/SanderKnape) made their first contribution in [#&#8203;6878](https://github.com/external-secrets/external-secrets/pull/6878) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.9.0...v2.10.0> ### [`v2.9.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.9.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0) Image: `ghcr.io/external-secrets/external-secrets:v2.9.0` Image: `ghcr.io/external-secrets/external-secrets:v2.9.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.9.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart 2.8.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6656](https://github.com/external-secrets/external-secrets/pull/6656) - fix(conjur): add InstallTimeout to helm chart installation and pin server image version by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6658](https://github.com/external-secrets/external-secrets/pull/6658) - fix(deps): bump grpc-go for GHSA-hrxh-6v49-42gf by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6695](https://github.com/external-secrets/external-secrets/pull/6695) - feat(charts): add opt-in schedulerName and runtimeClassName to the pods by [@&#8203;somaz94](https://github.com/somaz94) in [#&#8203;6675](https://github.com/external-secrets/external-secrets/pull/6675) - fix(webhookconfig): use a constant Eventf format by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6699](https://github.com/external-secrets/external-secrets/pull/6699) - fix: bump codeqls together by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6707](https://github.com/external-secrets/external-secrets/pull/6707) - fix(security): install crane in a reliable way and fix code scanning issue by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6712](https://github.com/external-secrets/external-secrets/pull/6712) - chore: Fix cve-2026-56852 by bump golang.org/x/text\@&#8203;0.40 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6734](https://github.com/external-secrets/external-secrets/pull/6734) - chore(fix): template abuse for secret values by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6730](https://github.com/external-secrets/external-secrets/pull/6730) - chore: Bump controller runtime by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6703](https://github.com/external-secrets/external-secrets/pull/6703) - chore(fix): moved the validation further up the chain by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6735](https://github.com/external-secrets/external-secrets/pull/6735) - fix: pin all dependencies by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6727](https://github.com/external-secrets/external-secrets/pull/6727) - feat(e2e): implement fan-out matrix validation and credential scoping by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6660](https://github.com/external-secrets/external-secrets/pull/6660) - fix(akeyless): use local errors.As target to avoid data race by [@&#8203;HYPERVAPOR](https://github.com/HYPERVAPOR) in [#&#8203;6749](https://github.com/external-secrets/external-secrets/pull/6749) - test(crd): add e2e suite and CI leg for the CRD provider by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6742](https://github.com/external-secrets/external-secrets/pull/6742) - docs(webhook): add debugging guide and fix stale secret-label claim by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6746](https://github.com/external-secrets/external-secrets/pull/6746) - test(e2e): skip the global addon uninstall on disposable clusters by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6780](https://github.com/external-secrets/external-secrets/pull/6780) - feat: add environments support to 1Password SDK by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6318](https://github.com/external-secrets/external-secrets/pull/6318) - fix(akeyless): stop reporting API failures as a missing item by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6753](https://github.com/external-secrets/external-secrets/pull/6753) - fix(makefile): harden clean worktree check by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6702](https://github.com/external-secrets/external-secrets/pull/6702) - fix: support docs builds from worktrees by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6741](https://github.com/external-secrets/external-secrets/pull/6741) - feat(cache): add atomic ContainsOrAdd by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6706](https://github.com/external-secrets/external-secrets/pull/6706) - fix: omit empty AWS secret replica regions by [@&#8203;goutamadwant](https://github.com/goutamadwant) in [#&#8203;6596](https://github.com/external-secrets/external-secrets/pull/6596) - fix: Follow up PR6318 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6782](https://github.com/external-secrets/external-secrets/pull/6782) - feat: Show sponsoring of Roche by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6790](https://github.com/external-secrets/external-secrets/pull/6790) - fix(e2e): make the oracle suite runnable by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6770](https://github.com/external-secrets/external-secrets/pull/6770) - chore: temporarily allow GHSA-gcjh-h69q-9w9g by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6795](https://github.com/external-secrets/external-secrets/pull/6795) - fix(api): stop defaulting optional ExternalSecret strategy fields by [@&#8203;alekc](https://github.com/alekc) in [#&#8203;6798](https://github.com/external-secrets/external-secrets/pull/6798) - chore: remove/cleanup remaining tools from tools.go. by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6786](https://github.com/external-secrets/external-secrets/pull/6786) - chore: Cleanup sponsors dead links by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6791](https://github.com/external-secrets/external-secrets/pull/6791) - fix(aws): detach replicated regions before deleting AWS SecretsManager secret by [@&#8203;cmoscofian](https://github.com/cmoscofian) in [#&#8203;6687](https://github.com/external-secrets/external-secrets/pull/6687) - chore: fix enable cache being removed on installCRD=false by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6799](https://github.com/external-secrets/external-secrets/pull/6799) ##### Dependencies - chore(deps): bump golang from `0178a64` to `0178a64` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6663](https://github.com/external-secrets/external-secrets/pull/6663) - chore(deps): bump mkdocs-material from 9.7.6 to 9.7.7 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6669](https://github.com/external-secrets/external-secrets/pull/6669) - chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6674](https://github.com/external-secrets/external-secrets/pull/6674) - chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6667](https://github.com/external-secrets/external-secrets/pull/6667) - chore(deps): bump fkirc/skip-duplicate-actions from 5.3.1 to 5.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6671](https://github.com/external-secrets/external-secrets/pull/6671) - chore(deps): bump actions/stale from 10.3.0 to 10.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6673](https://github.com/external-secrets/external-secrets/pull/6673) - chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6672](https://github.com/external-secrets/external-secrets/pull/6672) - chore(deps): bump aws-actions/configure-aws-credentials from 4.0.2 to 6.2.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6670](https://github.com/external-secrets/external-secrets/pull/6670) - chore(deps): bump distroless/static from `d5f030c` to `9197324` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6662](https://github.com/external-secrets/external-secrets/pull/6662) - chore(deps): bump ubi9/ubi from `8bf0e8f` to `2a6bd69` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6661](https://github.com/external-secrets/external-secrets/pull/6661) - chore(deps): bump actions/setup-go from 6.0.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6664](https://github.com/external-secrets/external-secrets/pull/6664) - chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6665](https://github.com/external-secrets/external-secrets/pull/6665) - chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6666](https://github.com/external-secrets/external-secrets/pull/6666) - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6715](https://github.com/external-secrets/external-secrets/pull/6715) - chore(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6717](https://github.com/external-secrets/external-secrets/pull/6717) - chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6722](https://github.com/external-secrets/external-secrets/pull/6722) - chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.3 in the codeql group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6713](https://github.com/external-secrets/external-secrets/pull/6713) - chore(deps): bump google-github-actions/auth from [`fc21748`](https://github.com/external-secrets/external-secrets/commit/fc2174804b84f912b1f6d334e9463f484f1c552d) to [`cd3439a`](https://github.com/external-secrets/external-secrets/commit/cd3439a4d2c29fd597fb063e209ee2c2d6128dcd) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6714](https://github.com/external-secrets/external-secrets/pull/6714) - chore(deps): bump actions/cache from 4.2.4 to 6.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6716](https://github.com/external-secrets/external-secrets/pull/6716) - chore(deps): bump actions/labeler from 6.1.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6718](https://github.com/external-secrets/external-secrets/pull/6718) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6719](https://github.com/external-secrets/external-secrets/pull/6719) - chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6720](https://github.com/external-secrets/external-secrets/pull/6720) - chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6723](https://github.com/external-secrets/external-secrets/pull/6723) - chore(deps): bump docker/login-action from 4.4.0 to 4.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6736](https://github.com/external-secrets/external-secrets/pull/6736) - chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6738](https://github.com/external-secrets/external-secrets/pull/6738) - chore(deps): bump the codeql group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6751](https://github.com/external-secrets/external-secrets/pull/6751) - chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6752](https://github.com/external-secrets/external-secrets/pull/6752) - chore(deps): bump the codeql group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6801](https://github.com/external-secrets/external-secrets/pull/6801) - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6802](https://github.com/external-secrets/external-secrets/pull/6802) - chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6805](https://github.com/external-secrets/external-secrets/pull/6805) - chore(deps): bump azure/login from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6804](https://github.com/external-secrets/external-secrets/pull/6804) - chore(deps): bump google-github-actions/auth from [`cd3439a`](https://github.com/external-secrets/external-secrets/commit/cd3439a4d2c29fd597fb063e209ee2c2d6128dcd) to [`1206044`](https://github.com/external-secrets/external-secrets/commit/12060449e87204eca501a11f2f7f1483024afff0) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6737](https://github.com/external-secrets/external-secrets/pull/6737) - chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6803](https://github.com/external-secrets/external-secrets/pull/6803) #### New Contributors - [@&#8203;HYPERVAPOR](https://github.com/HYPERVAPOR) made their first contribution in [#&#8203;6749](https://github.com/external-secrets/external-secrets/pull/6749) - [@&#8203;goutamadwant](https://github.com/goutamadwant) made their first contribution in [#&#8203;6596](https://github.com/external-secrets/external-secrets/pull/6596) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot force-pushed renovate/external-secrets-2.x from 76e2b64c5e to 28ec7282df
All checks were successful
ci/crow/push/tanka-test Pipeline was successful
Details
ci/crow/pr/tanka-test Pipeline was successful
Details
ci/crow/push/dns-test Pipeline was successful
Details
ci/crow/pr/dns-test Pipeline was successful
Details
ci/crow/pr/tanka-diff Pipeline was successful
Details
2026-10-06 12:09:27 +00:00 Compare
renovate-bot changed title from chore(deps): update helm release external-secrets to v2.11.0 to chore(deps): update helm release external-secrets to v2.12.0 2026-10-06 12:09:30 +00:00
ci-bot commented 2026-10-06 12:12:21 +00:00
Member
Copy link

flate diff

No differences detected.

Pipeline

## flate diff No differences detected. [Pipeline](https://ci.aether.earth/repos/4/pipeline/479)
renovate-bot force-pushed renovate/external-secrets-2.x from 28ec7282df
All checks were successful
ci/crow/push/tanka-test Pipeline was successful
Details
ci/crow/pr/tanka-test Pipeline was successful
Details
ci/crow/push/dns-test Pipeline was successful
Details
ci/crow/pr/dns-test Pipeline was successful
Details
ci/crow/pr/tanka-diff Pipeline was successful
Details
to dcca7ccc90
All checks were successful
ci/crow/push/tanka-test Pipeline was successful
Details
ci/crow/pr/tanka-test Pipeline was successful
Details
ci/crow/pr/dns-test Pipeline was successful
Details
ci/crow/push/dns-test Pipeline was successful
Details
ci/crow/pr/tanka-diff Pipeline was successful
Details
2026-10-16 11:09:49 +00:00 Compare
renovate-bot changed title from chore(deps): update helm release external-secrets to v2.12.0 to chore(deps): update helm release external-secrets to v2.13.0 2026-10-16 11:09:52 +00:00
ci-bot commented 2026-10-16 11:12:32 +00:00
Member
Copy link

flate diff

No differences detected.

Pipeline

## flate diff No differences detected. [Pipeline](https://ci.aether.earth/repos/4/pipeline/608)
All checks were successful
ci/crow/push/tanka-test Pipeline was successful
Details
ci/crow/pr/tanka-test Pipeline was successful
Details
ci/crow/pr/dns-test Pipeline was successful
Details
ci/crow/push/dns-test Pipeline was successful
Details
ci/crow/pr/tanka-diff Pipeline was successful
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/external-secrets-2.x:renovate/external-secrets-2.x
git switch renovate/external-secrets-2.x

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff renovate/external-secrets-2.x
git switch renovate/external-secrets-2.x
git rebase main
git switch main
git merge --ff-only renovate/external-secrets-2.x
git switch renovate/external-secrets-2.x
git rebase main
git switch main
git merge --no-ff renovate/external-secrets-2.x
git switch main
git merge --squash renovate/external-secrets-2.x
git switch main
git merge --ff-only renovate/external-secrets-2.x
git switch main
git merge renovate/external-secrets-2.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ops/homelab!140
No description provided.