This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | minor | `2.2.0` → `2.3.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.3.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.3.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.2.0...v2.3.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.3.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.3.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.3.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release charts v2.2.0 by [@​riccardomc](https://github.com/riccardomc) in [#​6115](https://github.com/external-secrets/external-secrets/pull/6115)
- ref(modernize): modernize go code by [@​ivankatliarchuk](https://github.com/ivankatliarchuk) in [#​6114](https://github.com/external-secrets/external-secrets/pull/6114)
- chore: bump bitwarden helm chart version to v0.6.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6118](https://github.com/external-secrets/external-secrets/pull/6118)
- chore: fix EoL in compatiblity table for version 2.2 by [@​riccardomc](https://github.com/riccardomc) in [#​6128](https://github.com/external-secrets/external-secrets/pull/6128)
- docs: add missing jinja2 tags by [@​MindTooth](https://github.com/MindTooth) in [#​6136](https://github.com/external-secrets/external-secrets/pull/6136)
- fix: cached uid after deleting a store by [@​Skarlso](https://github.com/Skarlso) in [#​6138](https://github.com/external-secrets/external-secrets/pull/6138)
- feat(doppler): add ETag-based caching by [@​mikesellitto](https://github.com/mikesellitto) in [#​5997](https://github.com/external-secrets/external-secrets/pull/5997)
- fix(docs): fix metadata structure in Google Secrets Manager docs by [@​mruoss](https://github.com/mruoss) in [#​6139](https://github.com/external-secrets/external-secrets/pull/6139)
- feat: ovh provider implementation by [@​ldesauw](https://github.com/ldesauw) in [#​6101](https://github.com/external-secrets/external-secrets/pull/6101)
- feat(providers): Implement PushSecret for Delinea Secret Server by [@​pr0ton11](https://github.com/pr0ton11) in [#​6031](https://github.com/external-secrets/external-secrets/pull/6031)
- fix: propagate objectMeta and ownerReferences to target resources by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6132](https://github.com/external-secrets/external-secrets/pull/6132)
- fix(release): remove docs.check and all relative calls by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6146](https://github.com/external-secrets/external-secrets/pull/6146)
- feat: support service account impersonation when using Workload Identity Federation with a k8s service account by [@​zoomoid](https://github.com/zoomoid) in [#​5707](https://github.com/external-secrets/external-secrets/pull/5707)
- fix: remove getHostByName from template funcs by [@​moolen](https://github.com/moolen) in [#​6164](https://github.com/external-secrets/external-secrets/pull/6164)
- ref(kubernetes): move auth package from kubernetes to esutils by [@​alekc](https://github.com/alekc) in [#​6149](https://github.com/external-secrets/external-secrets/pull/6149)
- docs: fix templating.md by [@​dangbert](https://github.com/dangbert) in [#​6168](https://github.com/external-secrets/external-secrets/pull/6168)
- fix(onepasswordsdk): support native 1Password item IDs in findItem by [@​LeahArmstrong](https://github.com/LeahArmstrong) in [#​6167](https://github.com/external-secrets/external-secrets/pull/6167)
- docs(ovhcloud): fix heterogeneous configuration documentation by [@​ldesauw](https://github.com/ldesauw) in [#​6169](https://github.com/external-secrets/external-secrets/pull/6169)
- docs: add OVHcloud in ADOPTERS by [@​scraly](https://github.com/scraly) in [#​6172](https://github.com/external-secrets/external-secrets/pull/6172)
- fix(docs): resolve macro syntax error in templating guide by [@​ManvithaP-hub](https://github.com/ManvithaP-hub) in [#​6171](https://github.com/external-secrets/external-secrets/pull/6171)
- chore: rip out sprig dependency by [@​Skarlso](https://github.com/Skarlso) in [#​6170](https://github.com/external-secrets/external-secrets/pull/6170)
- chore: fix jose cve by [@​Skarlso](https://github.com/Skarlso) in [#​6178](https://github.com/external-secrets/external-secrets/pull/6178)
- docs: document correct htpasswd function usage by [@​Atomsoldat](https://github.com/Atomsoldat) in [#​6177](https://github.com/external-secrets/external-secrets/pull/6177)
- feat(pushsecret): add dataTo support for bulk secret pushing by [@​mohamed-rekiba](https://github.com/mohamed-rekiba) in [#​5850](https://github.com/external-secrets/external-secrets/pull/5850)
- docs: add existing blog post: ESO integration with ovhcloud secret manager with vault provider by [@​scraly](https://github.com/scraly) in [#​6190](https://github.com/external-secrets/external-secrets/pull/6190)
- feat: move experimental-enable-vault-token-cache out of experimental and add expiry to validation by [@​sfotony](https://github.com/sfotony) in [#​5397](https://github.com/external-secrets/external-secrets/pull/5397)
- fix: prevent feedback loop by [@​moolen](https://github.com/moolen) in [#​6021](https://github.com/external-secrets/external-secrets/pull/6021)
- fix: code scanning issues by [@​Skarlso](https://github.com/Skarlso) in [#​6063](https://github.com/external-secrets/external-secrets/pull/6063)
- feat: add source null byte policy by [@​knelasevero](https://github.com/knelasevero) in [#​6194](https://github.com/external-secrets/external-secrets/pull/6194)
- fix(test): fix broken test from automerge rebase by [@​knelasevero](https://github.com/knelasevero) in [#​6199](https://github.com/external-secrets/external-secrets/pull/6199)
- fix(aws): handle empty resource policy in PushSecret for SecretsManager by [@​maks3201](https://github.com/maks3201) in [#​6145](https://github.com/external-secrets/external-secrets/pull/6145)
- feat(github): add orgSecretVisibility field to GithubProvider by [@​iamnoah](https://github.com/iamnoah) in [#​6202](https://github.com/external-secrets/external-secrets/pull/6202)
- feat(onepasswordSDK): multi-field and complete PushSecret by [@​Dariusch](https://github.com/Dariusch) in [#​6187](https://github.com/external-secrets/external-secrets/pull/6187)
- feat(vault): add VaultRole attribute for TLS auth by [@​RicoGunawan12](https://github.com/RicoGunawan12) in [#​6160](https://github.com/external-secrets/external-secrets/pull/6160)
- chore: bump go version to 1.26.2 by [@​Skarlso](https://github.com/Skarlso) in [#​6203](https://github.com/external-secrets/external-secrets/pull/6203)
##### Dependencies
- chore(deps): bump actions/cache from 5.0.3 to 5.0.4 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6121](https://github.com/external-secrets/external-secrets/pull/6121)
- chore(deps): bump mkdocs-material from 9.7.5 to 9.7.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6125](https://github.com/external-secrets/external-secrets/pull/6125)
- chore(deps): bump ubi9/ubi from `6ed9f6f` to `1fc04e8` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6119](https://github.com/external-secrets/external-secrets/pull/6119)
- chore(deps): bump azure/login from 2.3.0 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6120](https://github.com/external-secrets/external-secrets/pull/6120)
- chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6124](https://github.com/external-secrets/external-secrets/pull/6124)
- chore(deps): bump github/codeql-action from 4.32.6 to 4.34.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6122](https://github.com/external-secrets/external-secrets/pull/6122)
- chore(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6123](https://github.com/external-secrets/external-secrets/pull/6123)
- chore(deps): bump importlib-metadata from 8.7.1 to 9.0.0 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6126](https://github.com/external-secrets/external-secrets/pull/6126)
- chore(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6154](https://github.com/external-secrets/external-secrets/pull/6154)
- chore(deps): bump pymdown-extensions from 10.21 to 10.21.2 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6157](https://github.com/external-secrets/external-secrets/pull/6157)
- chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6151](https://github.com/external-secrets/external-secrets/pull/6151)
- chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6152](https://github.com/external-secrets/external-secrets/pull/6152)
- chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6153](https://github.com/external-secrets/external-secrets/pull/6153)
- chore(deps): bump pygments from 2.19.2 to 2.20.0 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6155](https://github.com/external-secrets/external-secrets/pull/6155)
- chore(deps): bump regex from 2026.2.28 to 2026.3.32 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6156](https://github.com/external-secrets/external-secrets/pull/6156)
- chore(deps): bump requests from 2.32.5 to 2.33.0 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6158](https://github.com/external-secrets/external-secrets/pull/6158)
- chore(deps): bump ubi9/ubi from `1fc04e8` to `9e6e193` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6150](https://github.com/external-secrets/external-secrets/pull/6150)
- chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6180](https://github.com/external-secrets/external-secrets/pull/6180)
- chore(deps): bump charset-normalizer from 3.4.6 to 3.4.7 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6183](https://github.com/external-secrets/external-secrets/pull/6183)
- chore(deps): bump click from 8.3.1 to 8.3.2 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6185](https://github.com/external-secrets/external-secrets/pull/6185)
- chore(deps): bump fossas/fossa-action from 1.8.0 to 1.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6181](https://github.com/external-secrets/external-secrets/pull/6181)
- chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6182](https://github.com/external-secrets/external-secrets/pull/6182)
- chore(deps): bump regex from 2026.3.32 to 2026.4.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6184](https://github.com/external-secrets/external-secrets/pull/6184)
#### New Contributors
- [@​MindTooth](https://github.com/MindTooth) made their first contribution in [#​6136](https://github.com/external-secrets/external-secrets/pull/6136)
- [@​ldesauw](https://github.com/ldesauw) made their first contribution in [#​6101](https://github.com/external-secrets/external-secrets/pull/6101)
- [@​pr0ton11](https://github.com/pr0ton11) made their first contribution in [#​6031](https://github.com/external-secrets/external-secrets/pull/6031)
- [@​zoomoid](https://github.com/zoomoid) made their first contribution in [#​5707](https://github.com/external-secrets/external-secrets/pull/5707)
- [@​dangbert](https://github.com/dangbert) made their first contribution in [#​6168](https://github.com/external-secrets/external-secrets/pull/6168)
- [@​LeahArmstrong](https://github.com/LeahArmstrong) made their first contribution in [#​6167](https://github.com/external-secrets/external-secrets/pull/6167)
- [@​scraly](https://github.com/scraly) made their first contribution in [#​6172](https://github.com/external-secrets/external-secrets/pull/6172)
- [@​ManvithaP-hub](https://github.com/ManvithaP-hub) made their first contribution in [#​6171](https://github.com/external-secrets/external-secrets/pull/6171)
- [@​Atomsoldat](https://github.com/Atomsoldat) made their first contribution in [#​6177](https://github.com/external-secrets/external-secrets/pull/6177)
- [@​mohamed-rekiba](https://github.com/mohamed-rekiba) made their first contribution in [#​5850](https://github.com/external-secrets/external-secrets/pull/5850)
- [@​sfotony](https://github.com/sfotony) made their first contribution in [#​5397](https://github.com/external-secrets/external-secrets/pull/5397)
- [@​maks3201](https://github.com/maks3201) made their first contribution in [#​6145](https://github.com/external-secrets/external-secrets/pull/6145)
- [@​iamnoah](https://github.com/iamnoah) made their first contribution in [#​6202](https://github.com/external-secrets/external-secrets/pull/6202)
- [@​RicoGunawan12](https://github.com/RicoGunawan12) made their first contribution in [#​6160](https://github.com/external-secrets/external-secrets/pull/6160)
**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.2.0...v2.3.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDQuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.2.0→2.3.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.3.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.3.0Image:
ghcr.io/external-secrets/external-secrets:v2.3.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.3.0-ubi-boringsslWhat's Changed
General
Dependencies
6ed9f6fto1fc04e8by @dependabot[bot] in #61191fc04e8to9e6e193by @dependabot[bot] in #6150New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.2.0...v2.3.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.