This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | minor | `2.1.0` → `2.2.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.2.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release charts v2.1.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6030](https://github.com/external-secrets/external-secrets/pull/6030)
- chore: fix the stability doc by [@​Skarlso](https://github.com/Skarlso) in [#​6035](https://github.com/external-secrets/external-secrets/pull/6035)
- fix(security): Fix vulnerabilities by [@​othomann](https://github.com/othomann) in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052)
- fix(aws): sync tags and resource policy even when secret value unchanged by [@​evs-secops](https://github.com/evs-secops) in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025)
- fix: publish now uses docker build v4 which required some changes by [@​Skarlso](https://github.com/Skarlso) in [#​6062](https://github.com/external-secrets/external-secrets/pull/6062)
- feat(gcpsm): auto-detect projectID from GCP metadata server by [@​patjlm](https://github.com/patjlm) in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922)
- chore(templating): Remove years in license and their checks by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5955](https://github.com/external-secrets/external-secrets/pull/5955)
- docs: Add Roche to official ADOPTERS by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6076](https://github.com/external-secrets/external-secrets/pull/6076)
- feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068)
- fix(onepassword): support native item IDs by [@​chadxz](https://github.com/chadxz) in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073)
- feat: extract LGTM processor to external JS file with tests by [@​mateenali66](https://github.com/mateenali66) in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074)
- feat: fail fast if LGTM label does not exist in repository by [@​mateenali66](https://github.com/mateenali66) in [#​6078](https://github.com/external-secrets/external-secrets/pull/6078)
- feat(passbolt): add support for Passbolt V5 API by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919)
- fix(infisical): dataFrom.find.path should filter by secret path not name by [@​johnvox](https://github.com/johnvox) in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086)
- fix: disable the priority queue which misbehaves at scale by [@​Skarlso](https://github.com/Skarlso) in [#​6083](https://github.com/external-secrets/external-secrets/pull/6083)
- chore: update go version to 1.26.1 by [@​Skarlso](https://github.com/Skarlso) in [#​6072](https://github.com/external-secrets/external-secrets/pull/6072)
- docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@​Br1an67](https://github.com/Br1an67) in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056)
- fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@​Br1an67](https://github.com/Br1an67) in [#​6036](https://github.com/external-secrets/external-secrets/pull/6036)
- feat(templating): Add certSANs function to extract SANs from certificates by [@​mzdeb](https://github.com/mzdeb) in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058)
- docs: document template.metadata labels/annotations behavior by [@​lucpas](https://github.com/lucpas) in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102)
- fix: CODEOWNERS are seriously out of date by [@​Skarlso](https://github.com/Skarlso) in [#​6106](https://github.com/external-secrets/external-secrets/pull/6106)
- feat(helm): add readinessProbe support for external-secrets deployment by [@​AlexOQ](https://github.com/AlexOQ) in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831)
- fix: update grpc for CVE-2026-33186 by [@​Skarlso](https://github.com/Skarlso) in [#​6108](https://github.com/external-secrets/external-secrets/pull/6108)
- feat(azurekv): add expiration time to azure kv secret by [@​muraliavarma](https://github.com/muraliavarma) in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935)
- feat: add path to cloud.ru provider by [@​heavyandrew](https://github.com/heavyandrew) in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952)
- fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@​riccardomc](https://github.com/riccardomc) in [#​6113](https://github.com/external-secrets/external-secrets/pull/6113)
##### Dependencies
- chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6038](https://github.com/external-secrets/external-secrets/pull/6038)
- chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6047](https://github.com/external-secrets/external-secrets/pull/6047)
- chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6050](https://github.com/external-secrets/external-secrets/pull/6050)
- chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6049](https://github.com/external-secrets/external-secrets/pull/6049)
- chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6039](https://github.com/external-secrets/external-secrets/pull/6039)
- chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6043](https://github.com/external-secrets/external-secrets/pull/6043)
- chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6040](https://github.com/external-secrets/external-secrets/pull/6040)
- chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6044](https://github.com/external-secrets/external-secrets/pull/6044)
- chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6042](https://github.com/external-secrets/external-secrets/pull/6042)
- chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6041](https://github.com/external-secrets/external-secrets/pull/6041)
- chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6046](https://github.com/external-secrets/external-secrets/pull/6046)
- chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6048](https://github.com/external-secrets/external-secrets/pull/6048)
- chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6093](https://github.com/external-secrets/external-secrets/pull/6093)
- chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6088](https://github.com/external-secrets/external-secrets/pull/6088)
- chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6087](https://github.com/external-secrets/external-secrets/pull/6087)
- chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6096](https://github.com/external-secrets/external-secrets/pull/6096)
- chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6094](https://github.com/external-secrets/external-secrets/pull/6094)
- chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6095](https://github.com/external-secrets/external-secrets/pull/6095)
- chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6089](https://github.com/external-secrets/external-secrets/pull/6089)
- chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6092](https://github.com/external-secrets/external-secrets/pull/6092)
- chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6090](https://github.com/external-secrets/external-secrets/pull/6090)
- chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6091](https://github.com/external-secrets/external-secrets/pull/6091)
#### New Contributors
- [@​othomann](https://github.com/othomann) made their first contribution in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052)
- [@​evs-secops](https://github.com/evs-secops) made their first contribution in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025)
- [@​patjlm](https://github.com/patjlm) made their first contribution in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922)
- [@​jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068)
- [@​chadxz](https://github.com/chadxz) made their first contribution in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073)
- [@​mateenali66](https://github.com/mateenali66) made their first contribution in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074)
- [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919)
- [@​johnvox](https://github.com/johnvox) made their first contribution in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086)
- [@​Br1an67](https://github.com/Br1an67) made their first contribution in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056)
- [@​mzdeb](https://github.com/mzdeb) made their first contribution in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058)
- [@​lucpas](https://github.com/lucpas) made their first contribution in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102)
- [@​AlexOQ](https://github.com/AlexOQ) made their first contribution in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831)
- [@​muraliavarma](https://github.com/muraliavarma) made their first contribution in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935)
- [@​heavyandrew](https://github.com/heavyandrew) made their first contribution in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952)
**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.1.0→2.2.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.2.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.2.0Image:
ghcr.io/external-secrets/external-secrets:v2.2.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringsslWhat's Changed
General
Dependencies
28efbe9to47b2d72by @dependabot[bot] in #6088cecb1cdto6ed9f6fby @dependabot[bot] in #6087New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.