This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | minor | `2.5.0` → `2.6.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.6.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.6.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.5.0...v2.6.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.6.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.6.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.6.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release helm chart 2.5.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6352](https://github.com/external-secrets/external-secrets/pull/6352)
- feat(keeper): implement provider\_api\_calls\_count metric by [@​m-k8s](https://github.com/m-k8s) in [#​6345](https://github.com/external-secrets/external-secrets/pull/6345)
- docs(gcpsm): updates Google Secret Manager authentication guide with WIF usage by [@​bharath-b-rh](https://github.com/bharath-b-rh) in [#​6356](https://github.com/external-secrets/external-secrets/pull/6356)
- feat(release): PB-51302 - External secret should support v5-custom-fields resource type by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​6377](https://github.com/external-secrets/external-secrets/pull/6377)
- feat(testing): OpenBao e2e test by [@​phil9909](https://github.com/phil9909) in [#​6396](https://github.com/external-secrets/external-secrets/pull/6396)
- docs: Explanation of our labels by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6306](https://github.com/external-secrets/external-secrets/pull/6306)
- docs: add AGENTS.md and AI setup guide for ESO by [@​rowanruseler](https://github.com/rowanruseler) in [#​6141](https://github.com/external-secrets/external-secrets/pull/6141)
- fix(makefile): clean up cross-submodule go.mod churn after make test by [@​alekc](https://github.com/alekc) in [#​6378](https://github.com/external-secrets/external-secrets/pull/6378)
- fix(provider): align TokenRequest body namespace with URL namespace by [@​alekc](https://github.com/alekc) in [#​6420](https://github.com/external-secrets/external-secrets/pull/6420)
- fix(build): use buildx --load and non-registry image tag by [@​alekc](https://github.com/alekc) in [#​6419](https://github.com/external-secrets/external-secrets/pull/6419)
- fix(charts): render PDB spec when minAvailable or maxUnavailable is zero by [@​blindrood](https://github.com/blindrood) in [#​6360](https://github.com/external-secrets/external-secrets/pull/6360)
- chore: update go version 1.26.4 by [@​Skarlso](https://github.com/Skarlso) in [#​6426](https://github.com/external-secrets/external-secrets/pull/6426)
##### Dependencies
- chore(deps): bump golang from `91eda97` to `91eda97` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6363](https://github.com/external-secrets/external-secrets/pull/6363)
- chore(deps): bump pymdown-extensions from 10.21.2 to 10.21.3 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6370](https://github.com/external-secrets/external-secrets/pull/6370)
- chore(deps): bump hashicorp/setup-terraform from 4.0.0 to 4.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6364](https://github.com/external-secrets/external-secrets/pull/6364)
- chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6365](https://github.com/external-secrets/external-secrets/pull/6365)
- chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6366](https://github.com/external-secrets/external-secrets/pull/6366)
- chore(deps): bump github/codeql-action from 4.35.4 to 4.36.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6368](https://github.com/external-secrets/external-secrets/pull/6368)
- chore(deps): bump distroless/static from `47b2d72` to `3592aa8` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6362](https://github.com/external-secrets/external-secrets/pull/6362)
- chore(deps): bump ubi9/ubi from `2323fcf` to `151fc1b` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6361](https://github.com/external-secrets/external-secrets/pull/6361)
- chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6367](https://github.com/external-secrets/external-secrets/pull/6367)
- chore(deps): bump idna from 3.14 to 3.16 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6369](https://github.com/external-secrets/external-secrets/pull/6369)
- chore(deps): bump golang from `91eda97` to `91eda97` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6383](https://github.com/external-secrets/external-secrets/pull/6383)
- chore(deps): bump golang from `252599a` to `386d475` in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6389](https://github.com/external-secrets/external-secrets/pull/6389)
- chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6384](https://github.com/external-secrets/external-secrets/pull/6384)
- chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6387](https://github.com/external-secrets/external-secrets/pull/6387)
- chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6386](https://github.com/external-secrets/external-secrets/pull/6386)
- chore(deps): bump actions/stale from 10.2.0 to 10.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6388](https://github.com/external-secrets/external-secrets/pull/6388)
- chore(deps): bump zipp from 3.23.1 to 4.1.0 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6390](https://github.com/external-secrets/external-secrets/pull/6390)
- chore(deps): bump click from 8.3.3 to 8.4.1 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6391](https://github.com/external-secrets/external-secrets/pull/6391)
- chore(deps): bump certifi from 2026.4.22 to 2026.5.20 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6392](https://github.com/external-secrets/external-secrets/pull/6392)
- chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6385](https://github.com/external-secrets/external-secrets/pull/6385)
- chore(deps): bump requests from 2.33.1 to 2.34.2 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6372](https://github.com/external-secrets/external-secrets/pull/6372)
- chore(deps): bump tornado from 6.5.5 to 6.5.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6412](https://github.com/external-secrets/external-secrets/pull/6412)
- chore(deps): bump ubi9/ubi from `151fc1b` to `8942b73` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6407](https://github.com/external-secrets/external-secrets/pull/6407)
- chore(deps): bump aws-actions/configure-aws-credentials from 6.1.1 to 6.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6408](https://github.com/external-secrets/external-secrets/pull/6408)
- chore(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6409](https://github.com/external-secrets/external-secrets/pull/6409)
- chore(deps): bump idna from 3.16 to 3.17 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6411](https://github.com/external-secrets/external-secrets/pull/6411)
#### New Contributors
- [@​m-k8s](https://github.com/m-k8s) made their first contribution in [#​6345](https://github.com/external-secrets/external-secrets/pull/6345)
- [@​phil9909](https://github.com/phil9909) made their first contribution in [#​6396](https://github.com/external-secrets/external-secrets/pull/6396)
- [@​blindrood](https://github.com/blindrood) made their first contribution in [#​6360](https://github.com/external-secrets/external-secrets/pull/6360)
**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.5.0...v2.6.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTIuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxMi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.5.0→2.6.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.6.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.6.0Image:
ghcr.io/external-secrets/external-secrets:v2.6.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.6.0-ubi-boringsslWhat's Changed
General
Dependencies
91eda97to91eda97by @dependabot[bot] in #636347b2d72to3592aa8by @dependabot[bot] in #63622323fcfto151fc1bby @dependabot[bot] in #636191eda97to91eda97by @dependabot[bot] in #6383252599ato386d475in /e2e by @dependabot[bot] in #6389151fc1bto8942b73by @dependabot[bot] in #6407New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.5.0...v2.6.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.