This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | minor | `2.7.0` → `2.8.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.8.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.8.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.7.0...v2.8.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.8.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.8.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.8.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release helm chart 2.7.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6529](https://github.com/external-secrets/external-secrets/pull/6529)
- docs(barbican): correct find semantics and document property/extract by [@​alekc](https://github.com/alekc) in [#​6531](https://github.com/external-secrets/external-secrets/pull/6531)
- docs(gcp): use external-secrets.io/v1 in SecretStore examples by [@​alekc](https://github.com/alekc) in [#​6563](https://github.com/external-secrets/external-secrets/pull/6563)
- feat(generators): add GitLab deploy token generator by [@​alekc](https://github.com/alekc) in [#​6493](https://github.com/external-secrets/external-secrets/pull/6493)
- fix(barbican): validate store config and fix SecretExists error message by [@​alekc](https://github.com/alekc) in [#​6534](https://github.com/external-secrets/external-secrets/pull/6534)
- docs(beyondtrust): fix capability matrix and document decrypt/separator by [@​alekc](https://github.com/alekc) in [#​6535](https://github.com/external-secrets/external-secrets/pull/6535)
- feat: Make SecondsToLive optional for Grafana generator by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6479](https://github.com/external-secrets/external-secrets/pull/6479)
- docs: add missing generators to ClusterGenerator spec snippet by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6590](https://github.com/external-secrets/external-secrets/pull/6590)
- docs(doppler): fix download format list and heading levels by [@​alekc](https://github.com/alekc) in [#​6559](https://github.com/external-secrets/external-secrets/pull/6559)
- docs(fortanix): add to support matrix and tidy provider page by [@​alekc](https://github.com/alekc) in [#​6562](https://github.com/external-secrets/external-secrets/pull/6562)
- docs(yandex): fix Lockbox referent cell and add Certificate Manager rows by [@​alekc](https://github.com/alekc) in [#​6585](https://github.com/external-secrets/external-secrets/pull/6585)
- docs(volcengine): mark referent authentication as supported by [@​alekc](https://github.com/alekc) in [#​6584](https://github.com/external-secrets/external-secrets/pull/6584)
- docs(senhasegura): mark deletion + referent in matrix and fix title by [@​alekc](https://github.com/alekc) in [#​6583](https://github.com/external-secrets/external-secrets/pull/6583)
- docs(scaleway): mark referent auth in matrix and fix headings by [@​alekc](https://github.com/alekc) in [#​6581](https://github.com/external-secrets/external-secrets/pull/6581)
- docs(pulumi): correct find/referent matrix cells and fix headings by [@​alekc](https://github.com/alekc) in [#​6578](https://github.com/external-secrets/external-secrets/pull/6578)
- docs(previder): correct find/referent matrix cells and fix headings by [@​alekc](https://github.com/alekc) in [#​6577](https://github.com/external-secrets/external-secrets/pull/6577)
- docs(1password): mark SDK find support in matrix and promote titles by [@​alekc](https://github.com/alekc) in [#​6568](https://github.com/external-secrets/external-secrets/pull/6568)
- feat(charts): Add aggregateToAdmin toggle by [@​illrill](https://github.com/illrill) in [#​6586](https://github.com/external-secrets/external-secrets/pull/6586)
- docs(providers): consolidate 11 conflicting provider-doc PRs by [@​alekc](https://github.com/alekc) in [#​6592](https://github.com/external-secrets/external-secrets/pull/6592)
- feat(charts): add startupProbe support to webhook deployment by [@​alpcanaydin](https://github.com/alpcanaydin) in [#​6612](https://github.com/external-secrets/external-secrets/pull/6612)
- feat(akeyless): support azure\_ad Workload Identity via serviceAccountRef by [@​baraka-akeyless](https://github.com/baraka-akeyless) in [#​6530](https://github.com/external-secrets/external-secrets/pull/6530)
- docs(kubernetes): fix invalid tab indentation and heading levels by [@​alekc](https://github.com/alekc) in [#​6565](https://github.com/external-secrets/external-secrets/pull/6565)
- docs(dvls): mark DeletionPolicy supported and fix page title by [@​alekc](https://github.com/alekc) in [#​6557](https://github.com/external-secrets/external-secrets/pull/6557)
- docs(bitwarden): fix find behaviour, find-by-name rules, and admonitions by [@​alekc](https://github.com/alekc) in [#​6551](https://github.com/external-secrets/external-secrets/pull/6551)
- docs(github): add to support matrix, fix auth field, tidy page by [@​alekc](https://github.com/alekc) in [#​6564](https://github.com/external-secrets/external-secrets/pull/6564)
- docs: Improve explanations of pem\_chain by [@​evrardjp](https://github.com/evrardjp) in [#​6623](https://github.com/external-secrets/external-secrets/pull/6623)
- feat: Make our stance regarding AI usage more explicit. by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6621](https://github.com/external-secrets/external-secrets/pull/6621)
- fix(barbican): treat find.name.regexp as a regexp, not an exact match by [@​arpitjain099](https://github.com/arpitjain099) in [#​6614](https://github.com/external-secrets/external-secrets/pull/6614)
- chore: update go version 1.26.5 - Fix CVE-2026-39822 by [@​alekc](https://github.com/alekc) in [#​6631](https://github.com/external-secrets/external-secrets/pull/6631)
- ref(testing): change the e2e workflow to separate building stage from e2e stage (and free up resources) by [@​alekc](https://github.com/alekc) in [#​6634](https://github.com/external-secrets/external-secrets/pull/6634)
- chore: updating ok-to-test to allow interim maintainers by [@​gusfcarvalho](https://github.com/gusfcarvalho) in [#​6638](https://github.com/external-secrets/external-secrets/pull/6638)
- fix(onepassword): support PushSecret IfNotExists by [@​civilizedBaboon](https://github.com/civilizedBaboon) in [#​6646](https://github.com/external-secrets/external-secrets/pull/6646)
- fix(testing): check out PR head in fork e2e instead of main by [@​alekc](https://github.com/alekc) in [#​6647](https://github.com/external-secrets/external-secrets/pull/6647)
- fix(secretserver): validate store and map fields correctly by [@​dbinger](https://github.com/dbinger) in [#​6616](https://github.com/external-secrets/external-secrets/pull/6616)
- feat(charts): Add optional networkPolicy by [@​jcpunk](https://github.com/jcpunk) in [#​5779](https://github.com/external-secrets/external-secrets/pull/5779)
- feat(akeyless): add SecretStore ignoreCache to bypass Gateway cache by [@​baraka-akeyless](https://github.com/baraka-akeyless) in [#​6507](https://github.com/external-secrets/external-secrets/pull/6507)
- feat(provider): implement AWS Certificate Manager provider by [@​dsp0x4](https://github.com/dsp0x4) in [#​6117](https://github.com/external-secrets/external-secrets/pull/6117)
- feat: expose more values for custom metadata for vault v2 by [@​Skarlso](https://github.com/Skarlso) in [#​6652](https://github.com/external-secrets/external-secrets/pull/6652)
- clean: Remove duplicate code by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6629](https://github.com/external-secrets/external-secrets/pull/6629)
- feat: configurable leader election lease timings by [@​izz-linux](https://github.com/izz-linux) in [#​6644](https://github.com/external-secrets/external-secrets/pull/6644)
- fix(akeyless): support dataFrom.extract.property for nested JSON by [@​baraka-akeyless](https://github.com/baraka-akeyless) in [#​6633](https://github.com/external-secrets/external-secrets/pull/6633)
- feat(conjur): Certificate Auth support by [@​hdabrowski](https://github.com/hdabrowski) in [#​6393](https://github.com/external-secrets/external-secrets/pull/6393)
- docs(aws): restore dropped access section and document missing fields by [@​alekc](https://github.com/alekc) in [#​6517](https://github.com/external-secrets/external-secrets/pull/6517)
- feat(secretserver): support authentication via access token by [@​sumanpal97](https://github.com/sumanpal97) in [#​6597](https://github.com/external-secrets/external-secrets/pull/6597)
- docs(secretserver): document authentication, key formats, property behavior, and limitations by [@​dbinger](https://github.com/dbinger) in [#​6619](https://github.com/external-secrets/external-secrets/pull/6619)
- feat(release): Support reading values from kubernetes CRD by [@​alekc](https://github.com/alekc) in [#​6211](https://github.com/external-secrets/external-secrets/pull/6211)
- clean: Standardize and friendly name for validations policies by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6630](https://github.com/external-secrets/external-secrets/pull/6630)
- feat: add CreateOrMerge creation policy for ExternalSecrets by [@​alekc](https://github.com/alekc) in [#​6641](https://github.com/external-secrets/external-secrets/pull/6641)
- feat(core): accept duration string for SecretStore refreshInterval by [@​alekc](https://github.com/alekc) in [#​6594](https://github.com/external-secrets/external-secrets/pull/6594)
- fix(beyondtrust): validate store without panicking on API key auth by [@​emmayusufu](https://github.com/emmayusufu) in [#​6553](https://github.com/external-secrets/external-secrets/pull/6553)
- fix(oracle): cache default WorkloadIdentity provider to prevent tcp port exhaustion by [@​Ashutosh-3601](https://github.com/Ashutosh-3601) in [#​6421](https://github.com/external-secrets/external-secrets/pull/6421)
##### Dependencies
- chore(deps): bump golang from `3ad5730` to `3ad5730` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6538](https://github.com/external-secrets/external-secrets/pull/6538)
- chore(deps): bump ubi9/ubi from `1b99266` to `37a1589` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6537](https://github.com/external-secrets/external-secrets/pull/6537)
- chore(deps): bump golang from `5f68ec6` to `b305420` in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6539](https://github.com/external-secrets/external-secrets/pull/6539)
- chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6540](https://github.com/external-secrets/external-secrets/pull/6540)
- chore(deps): bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6542](https://github.com/external-secrets/external-secrets/pull/6542)
- chore(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6543](https://github.com/external-secrets/external-secrets/pull/6543)
- chore(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6544](https://github.com/external-secrets/external-secrets/pull/6544)
- chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6541](https://github.com/external-secrets/external-secrets/pull/6541)
- chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6545](https://github.com/external-secrets/external-secrets/pull/6545)
- chore(deps): bump golang from `3ad5730` to `3ad5730` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6600](https://github.com/external-secrets/external-secrets/pull/6600)
- chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6606](https://github.com/external-secrets/external-secrets/pull/6606)
- chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6603](https://github.com/external-secrets/external-secrets/pull/6603)
- chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6607](https://github.com/external-secrets/external-secrets/pull/6607)
- chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6604](https://github.com/external-secrets/external-secrets/pull/6604)
- chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6608](https://github.com/external-secrets/external-secrets/pull/6608)
- chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6605](https://github.com/external-secrets/external-secrets/pull/6605)
- chore(deps): bump docker/login-action from 4.2.0 to 4.4.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6602](https://github.com/external-secrets/external-secrets/pull/6602)
- chore(deps): bump fossas/fossa-action from 1.9.0 to 2.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6601](https://github.com/external-secrets/external-secrets/pull/6601)
- chore(deps): bump ubi9/ubi from `37a1589` to `8bf0e8f` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6599](https://github.com/external-secrets/external-secrets/pull/6599)
- chore(deps): bump golang from 1.26.4 to 1.26.5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6636](https://github.com/external-secrets/external-secrets/pull/6636)
- chore(deps): bump distroless/static from `3592aa8` to `d5f030c` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6635](https://github.com/external-secrets/external-secrets/pull/6635)
#### New Contributors
- [@​alpcanaydin](https://github.com/alpcanaydin) made their first contribution in [#​6612](https://github.com/external-secrets/external-secrets/pull/6612)
- [@​baraka-akeyless](https://github.com/baraka-akeyless) made their first contribution in [#​6530](https://github.com/external-secrets/external-secrets/pull/6530)
- [@​arpitjain099](https://github.com/arpitjain099) made their first contribution in [#​6614](https://github.com/external-secrets/external-secrets/pull/6614)
- [@​civilizedBaboon](https://github.com/civilizedBaboon) made their first contribution in [#​6646](https://github.com/external-secrets/external-secrets/pull/6646)
- [@​dbinger](https://github.com/dbinger) made their first contribution in [#​6616](https://github.com/external-secrets/external-secrets/pull/6616)
- [@​dsp0x4](https://github.com/dsp0x4) made their first contribution in [#​6117](https://github.com/external-secrets/external-secrets/pull/6117)
- [@​izz-linux](https://github.com/izz-linux) made their first contribution in [#​6644](https://github.com/external-secrets/external-secrets/pull/6644)
- [@​hdabrowski](https://github.com/hdabrowski) made their first contribution in [#​6393](https://github.com/external-secrets/external-secrets/pull/6393)
- [@​sumanpal97](https://github.com/sumanpal97) made their first contribution in [#​6597](https://github.com/external-secrets/external-secrets/pull/6597)
- [@​emmayusufu](https://github.com/emmayusufu) made their first contribution in [#​6553](https://github.com/external-secrets/external-secrets/pull/6553)
- [@​Ashutosh-3601](https://github.com/Ashutosh-3601) made their first contribution in [#​6421](https://github.com/external-secrets/external-secrets/pull/6421)
**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.7.0...v2.8.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTcuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ny4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.7.0→2.8.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.8.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.8.0Image:
ghcr.io/external-secrets/external-secrets:v2.8.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.8.0-ubi-boringsslWhat's Changed
General
Dependencies
3ad5730to3ad5730by @dependabot[bot] in #65381b99266to37a1589by @dependabot[bot] in #65375f68ec6tob305420in /e2e by @dependabot[bot] in #65393ad5730to3ad5730by @dependabot[bot] in #660037a1589to8bf0e8fby @dependabot[bot] in #65993592aa8tod5f030cby @dependabot[bot] in #6635New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.7.0...v2.8.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.