This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | minor | `2.0.1` → `2.1.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.1.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.1.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.0.1...v2.1.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.1.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.1.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.1.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore(release): Update helm chart by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5981](https://github.com/external-secrets/external-secrets/pull/5981)
- fix: cosign verify does not use signing config by [@​gusfcarvalho](https://github.com/gusfcarvalho) in [#​5982](https://github.com/external-secrets/external-secrets/pull/5982)
- docs: Update release process by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5980](https://github.com/external-secrets/external-secrets/pull/5980)
- fix: allow cross-namespace push with ClusterSecretStore objects by [@​Skarlso](https://github.com/Skarlso) in [#​5998](https://github.com/external-secrets/external-secrets/pull/5998)
- feat(charts): add new flag enable leader for cert-manager by [@​nutmos](https://github.com/nutmos) in [#​5863](https://github.com/external-secrets/external-secrets/pull/5863)
- feat(kubernetes): fall back to system CA roots when no CA is configured by [@​rajsinghtech](https://github.com/rajsinghtech) in [#​5961](https://github.com/external-secrets/external-secrets/pull/5961)
- feat: dedup sbom but keep it monolithic by [@​moolen](https://github.com/moolen) in [#​6004](https://github.com/external-secrets/external-secrets/pull/6004)
- fix: add missing metrics and fundamentally fix the caching logic by [@​Skarlso](https://github.com/Skarlso) in [#​5894](https://github.com/external-secrets/external-secrets/pull/5894)
- docs: designate Oracle Vault provider as 'stable' by [@​anders-swanson](https://github.com/anders-swanson) in [#​6020](https://github.com/external-secrets/external-secrets/pull/6020)
- docs: Oracle Vault provider capabilities by [@​anders-swanson](https://github.com/anders-swanson) in [#​6023](https://github.com/external-secrets/external-secrets/pull/6023)
- docs(azurekv): cert-manager pushsecret example and cleanups by [@​illrill](https://github.com/illrill) in [#​5972](https://github.com/external-secrets/external-secrets/pull/5972)
- feat(kubernetes): implement SecretExists by [@​Saku2](https://github.com/Saku2) in [#​5973](https://github.com/external-secrets/external-secrets/pull/5973)
- fix(charts): Fix wrongly set annotations for cert-controller metrics service by [@​josemaia](https://github.com/josemaia) in [#​6029](https://github.com/external-secrets/external-secrets/pull/6029)
- feat(providers): Nebius MysteryBox integration by [@​greenmapc](https://github.com/greenmapc) in [#​5868](https://github.com/external-secrets/external-secrets/pull/5868)
##### Dependencies
- chore(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5986](https://github.com/external-secrets/external-secrets/pull/5986)
- chore(deps): bump mkdocs-material from 9.7.1 to 9.7.2 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5992](https://github.com/external-secrets/external-secrets/pull/5992)
- chore(deps): bump ubi9/ubi from `b8923f5` to `cecb1cd` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5984](https://github.com/external-secrets/external-secrets/pull/5984)
- chore(deps): bump helm/kind-action from 1.13.0 to 1.14.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5985](https://github.com/external-secrets/external-secrets/pull/5985)
- chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5990](https://github.com/external-secrets/external-secrets/pull/5990)
- chore(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5989](https://github.com/external-secrets/external-secrets/pull/5989)
- chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5987](https://github.com/external-secrets/external-secrets/pull/5987)
- chore(deps): bump regex from 2026.1.15 to 2026.2.19 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5991](https://github.com/external-secrets/external-secrets/pull/5991)
- chore(deps): bump actions/stale from 10.1.1 to 10.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​5988](https://github.com/external-secrets/external-secrets/pull/5988)
- chore(deps): bump regex from 2026.2.19 to 2026.2.28 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6012](https://github.com/external-secrets/external-secrets/pull/6012)
- chore(deps): bump mkdocs-material from 9.7.2 to 9.7.3 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6014](https://github.com/external-secrets/external-secrets/pull/6014)
- chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6015](https://github.com/external-secrets/external-secrets/pull/6015)
- chore(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6016](https://github.com/external-secrets/external-secrets/pull/6016)
- chore(deps): bump certifi from 2026.1.4 to 2026.2.25 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6013](https://github.com/external-secrets/external-secrets/pull/6013)
- chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6010](https://github.com/external-secrets/external-secrets/pull/6010)
- chore(deps): bump hashicorp/setup-terraform from [`ce70bcf`](https://github.com/external-secrets/external-secrets/commit/ce70bcf31a3711a1efd50b61e7216b0196b6f4f1) to [`5e8dbf3`](https://github.com/external-secrets/external-secrets/commit/5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85) by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6011](https://github.com/external-secrets/external-secrets/pull/6011)
- chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6009](https://github.com/external-secrets/external-secrets/pull/6009)
- chore(deps): bump distroless/static from `972618c` to `28efbe9` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6008](https://github.com/external-secrets/external-secrets/pull/6008)
#### New Contributors
- [@​nutmos](https://github.com/nutmos) made their first contribution in [#​5863](https://github.com/external-secrets/external-secrets/pull/5863)
- [@​rajsinghtech](https://github.com/rajsinghtech) made their first contribution in [#​5961](https://github.com/external-secrets/external-secrets/pull/5961)
- [@​illrill](https://github.com/illrill) made their first contribution in [#​5972](https://github.com/external-secrets/external-secrets/pull/5972)
- [@​Saku2](https://github.com/Saku2) made their first contribution in [#​5973](https://github.com/external-secrets/external-secrets/pull/5973)
- [@​greenmapc](https://github.com/greenmapc) made their first contribution in [#​5868](https://github.com/external-secrets/external-secrets/pull/5868)
**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.0.1...v2.1.0>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40Ni42IiwidXBkYXRlZEluVmVyIjoiNDMuNDYuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.0.1→2.1.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.1.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.1.0Image:
ghcr.io/external-secrets/external-secrets:v2.1.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.1.0-ubi-boringsslWhat's Changed
General
Dependencies
b8923f5tocecb1cdby @dependabot[bot] in #5984ce70bcfto5e8dbf3by @dependabot[bot] in #6011972618cto28efbe9by @dependabot[bot] in #6008New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.0.1...v2.1.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.