This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | minor | `2.6.0` → `2.7.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.7.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.7.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.7.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.7.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release helm charts 2.6.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6427](https://github.com/external-secrets/external-secrets/pull/6427)
- test: add Infisical provider e2e suite by [@​alekc](https://github.com/alekc) in [#​6415](https://github.com/external-secrets/external-secrets/pull/6415)
- docs: fix discrepancies and add missing documentation for GitLab provider by [@​alekc](https://github.com/alekc) in [#​6430](https://github.com/external-secrets/external-secrets/pull/6430)
- docs: fix discrepancies and add missing documentation for Infisical provider by [@​alekc](https://github.com/alekc) in [#​6431](https://github.com/external-secrets/external-secrets/pull/6431)
- feat(templating): add hexdec function by [@​tstenner](https://github.com/tstenner) in [#​6422](https://github.com/external-secrets/external-secrets/pull/6422)
- fix(volcengine): honor secretRef.namespace for ClusterSecretStore by [@​ruslan-rm](https://github.com/ruslan-rm) in [#​6423](https://github.com/external-secrets/external-secrets/pull/6423)
- docs(core): correct CRD examples and document missing fields by [@​alekc](https://github.com/alekc) in [#​6441](https://github.com/external-secrets/external-secrets/pull/6441)
- feat(provider): initial dedicated OpenBao provider by [@​phil9909](https://github.com/phil9909) in [#​6405](https://github.com/external-secrets/external-secrets/pull/6405)
- feat(onepasswordsdk): implement GetAllSecrets by [@​calebmckay](https://github.com/calebmckay) in [#​6445](https://github.com/external-secrets/external-secrets/pull/6445)
- feat(controller): log secret deletions and data-key changes by [@​alekc](https://github.com/alekc) in [#​6443](https://github.com/external-secrets/external-secrets/pull/6443)
- feat: Add BeyondTrust WorkloadCredentials provider by [@​sdahal-bt](https://github.com/sdahal-bt) in [#​5999](https://github.com/external-secrets/external-secrets/pull/5999)
- fix(charts): truncate component names to stay within 63-char DNS limit by [@​alekc](https://github.com/alekc) in [#​6428](https://github.com/external-secrets/external-secrets/pull/6428)
- docs(gitops-fluxcd): fix webhook race condition in Flux deployment guide by [@​alekc](https://github.com/alekc) in [#​6455](https://github.com/external-secrets/external-secrets/pull/6455)
- fix: no need for the field to have a default if it can be omitted by [@​knelasevero](https://github.com/knelasevero) in [#​6453](https://github.com/external-secrets/external-secrets/pull/6453)
- fix(templating): preserve mixed-case in generic target paths by [@​alekc](https://github.com/alekc) in [#​6459](https://github.com/external-secrets/external-secrets/pull/6459)
- docs(generator): document Password secretKeys for multiple keys by [@​alekc](https://github.com/alekc) in [#​6440](https://github.com/external-secrets/external-secrets/pull/6440)
- docs: Update deprecated field in docs by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6456](https://github.com/external-secrets/external-secrets/pull/6456)
- chore(deps): Bump passbolt SDK to v0.8.0 by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​6447](https://github.com/external-secrets/external-secrets/pull/6447)
- chore(charts): Expose storeRequeueInterval in helm charts by [@​jfhcagip](https://github.com/jfhcagip) in [#​6140](https://github.com/external-secrets/external-secrets/pull/6140)
- feat(openbao): support custom CAs via `caBundle` and `caProvider` by [@​phil9909](https://github.com/phil9909) in [#​6461](https://github.com/external-secrets/external-secrets/pull/6461)
- feat(ngrok): use API filtering for vault and secret lookups by [@​jonstacks](https://github.com/jonstacks) in [#​6376](https://github.com/external-secrets/external-secrets/pull/6376)
- fix: remove broken link from blog section by [@​riccardomc](https://github.com/riccardomc) in [#​6465](https://github.com/external-secrets/external-secrets/pull/6465)
- chore: fix the template parser for resolving slice notations by [@​Skarlso](https://github.com/Skarlso) in [#​6449](https://github.com/external-secrets/external-secrets/pull/6449)
- fix: bump docs deps for python3.13 by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6475](https://github.com/external-secrets/external-secrets/pull/6475)
- fix(kubernetes): replace entire remote secret when pushing rather than merging by [@​riccardomc](https://github.com/riccardomc) in [#​6485](https://github.com/external-secrets/external-secrets/pull/6485)
- feat(infisical): return NoSecretErr on 404 and add PushSecret support by [@​alekc](https://github.com/alekc) in [#​6434](https://github.com/external-secrets/external-secrets/pull/6434)
- feat(AWS): add `replicationLocations` to AWS SecretsManager provider by [@​cmoscofian](https://github.com/cmoscofian) in [#​6451](https://github.com/external-secrets/external-secrets/pull/6451)
- feat(openbao): add `auth.userPass` auth method by [@​phil9909](https://github.com/phil9909) in [#​6492](https://github.com/external-secrets/external-secrets/pull/6492)
- chore(deps): Bump `github.com/pulumi/esc-sdk/sdk` to v0.14.0 by [@​phil9909](https://github.com/phil9909) in [#​6495](https://github.com/external-secrets/external-secrets/pull/6495)
- chore(onepasswordsdk): fix the caching logic and cleanup the code a bit by [@​Skarlso](https://github.com/Skarlso) in [#​6466](https://github.com/external-secrets/external-secrets/pull/6466)
- feat(charts): scope cert-controller RBAC to managed CRDs and webhook secret by [@​somaz94](https://github.com/somaz94) in [#​6481](https://github.com/external-secrets/external-secrets/pull/6481)
- test(ngrok): Remove over complicated mocks by [@​jonstacks](https://github.com/jonstacks) in [#​6483](https://github.com/external-secrets/external-secrets/pull/6483)
- chore: Unpin mike by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6477](https://github.com/external-secrets/external-secrets/pull/6477)
- docs(akeyless): fix errors and expand provider documentation by [@​alekc](https://github.com/alekc) in [#​6506](https://github.com/external-secrets/external-secrets/pull/6506)
- chore: update go sys net and crypto libs by [@​Skarlso](https://github.com/Skarlso) in [#​6511](https://github.com/external-secrets/external-secrets/pull/6511)
- chore(onepasswordsdk): enable the GetAllSecrets and GetSecret unit test and fix it by [@​Skarlso](https://github.com/Skarlso) in [#​6513](https://github.com/external-secrets/external-secrets/pull/6513)
- feat(infisical): allow organization slug to be set in secret scope by [@​mathnogueira](https://github.com/mathnogueira) in [#​6508](https://github.com/external-secrets/external-secrets/pull/6508)
- feat(templating): decode templateFrom values by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6482](https://github.com/external-secrets/external-secrets/pull/6482)
- chore(bug): fix missing lgtm runner script from the workflow by [@​Skarlso](https://github.com/Skarlso) in [#​6512](https://github.com/external-secrets/external-secrets/pull/6512)
- fix(akeyless): return ReadWrite so PushSecret is routed by [@​alekc](https://github.com/alekc) in [#​6515](https://github.com/external-secrets/external-secrets/pull/6515)
- feat(openbao): add `auth.appRole` auth method by [@​phil9909](https://github.com/phil9909) in [#​6497](https://github.com/external-secrets/external-secrets/pull/6497)
- feat(externalsecret): add SyncWindows to gate periodic refresh by [@​alekc](https://github.com/alekc) in [#​6452](https://github.com/external-secrets/external-secrets/pull/6452)
- docs(azure): correct Azure Stack example version and note expiry limit by [@​alekc](https://github.com/alekc) in [#​6522](https://github.com/external-secrets/external-secrets/pull/6522)
- feat(openbao): add support for OpenBao Namespaces by [@​phil9909](https://github.com/phil9909) in [#​6527](https://github.com/external-secrets/external-secrets/pull/6527)
- fix(github): preserve selected repositories on org secret update by [@​alekc](https://github.com/alekc) in [#​6519](https://github.com/external-secrets/external-secrets/pull/6519)
- docs(azure): list WorkloadIdentity in authType field description by [@​alekc](https://github.com/alekc) in [#​6523](https://github.com/external-secrets/external-secrets/pull/6523)
- feat(doppler): include HTTP status in API errors by [@​alekc](https://github.com/alekc) in [#​6489](https://github.com/external-secrets/external-secrets/pull/6489)
##### Dependencies
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6437](https://github.com/external-secrets/external-secrets/pull/6437)
- chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6438](https://github.com/external-secrets/external-secrets/pull/6438)
- chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6435](https://github.com/external-secrets/external-secrets/pull/6435)
- chore(deps): bump idna from 3.17 to 3.18 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6439](https://github.com/external-secrets/external-secrets/pull/6439)
- chore(deps): bump ubi9/ubi from `8942b73` to `46d19c1` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6436](https://github.com/external-secrets/external-secrets/pull/6436)
- chore(deps): bump platformdirs from 4.9.6 to 4.10.0 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6410](https://github.com/external-secrets/external-secrets/pull/6410)
- chore(deps): bump golang from `f23e8b2` to `7a3e500` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6468](https://github.com/external-secrets/external-secrets/pull/6468)
- chore(deps): bump golang from `5d2b868` to `5f68ec6` in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6471](https://github.com/external-secrets/external-secrets/pull/6471)
- chore(deps): bump tornado from 6.5.6 to 6.5.7 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6473](https://github.com/external-secrets/external-secrets/pull/6473)
- chore(deps): bump alpine from 3.23.4 to 3.24.0 in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6470](https://github.com/external-secrets/external-secrets/pull/6470)
- chore(deps): bump alpine from `5b10f43` to `a2d49ea` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6469](https://github.com/external-secrets/external-secrets/pull/6469)
- chore(deps): bump ubi9/ubi from `46d19c1` to `1b99266` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6467](https://github.com/external-secrets/external-secrets/pull/6467)
- chore(deps): bump alpine from `a2d49ea` to `28bd5fe` in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6472](https://github.com/external-secrets/external-secrets/pull/6472)
- chore(deps): bump alpine from 3.24.0 to 3.24.1 in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6498](https://github.com/external-secrets/external-secrets/pull/6498)
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6500](https://github.com/external-secrets/external-secrets/pull/6500)
- chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6502](https://github.com/external-secrets/external-secrets/pull/6502)
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6503](https://github.com/external-secrets/external-secrets/pull/6503)
- chore(deps): bump alpine from `a2d49ea` to `28bd5fe` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6499](https://github.com/external-secrets/external-secrets/pull/6499)
- chore(deps): bump golang from `7a3e500` to `3ad5730` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6501](https://github.com/external-secrets/external-secrets/pull/6501)
#### New Contributors
- [@​tstenner](https://github.com/tstenner) made their first contribution in [#​6422](https://github.com/external-secrets/external-secrets/pull/6422)
- [@​ruslan-rm](https://github.com/ruslan-rm) made their first contribution in [#​6423](https://github.com/external-secrets/external-secrets/pull/6423)
- [@​calebmckay](https://github.com/calebmckay) made their first contribution in [#​6445](https://github.com/external-secrets/external-secrets/pull/6445)
- [@​sdahal-bt](https://github.com/sdahal-bt) made their first contribution in [#​5999](https://github.com/external-secrets/external-secrets/pull/5999)
- [@​jfhcagip](https://github.com/jfhcagip) made their first contribution in [#​6140](https://github.com/external-secrets/external-secrets/pull/6140)
- [@​somaz94](https://github.com/somaz94) made their first contribution in [#​6481](https://github.com/external-secrets/external-secrets/pull/6481)
- [@​mathnogueira](https://github.com/mathnogueira) made their first contribution in [#​6508](https://github.com/external-secrets/external-secrets/pull/6508)
**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzIuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIzMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.6.0→2.7.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.7.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.7.0Image:
ghcr.io/external-secrets/external-secrets:v2.7.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringsslWhat's Changed
General
caBundleandcaProviderby @phil9909 in #6461replicationLocationsto AWS SecretsManager provider by @cmoscofian in #6451auth.userPassauth method by @phil9909 in #6492github.com/pulumi/esc-sdk/sdkto v0.14.0 by @phil9909 in #6495auth.appRoleauth method by @phil9909 in #6497Dependencies
8942b73to46d19c1by @dependabot[bot] in #6436f23e8b2to7a3e500by @dependabot[bot] in #64685d2b868to5f68ec6in /e2e by @dependabot[bot] in #64715b10f43toa2d49eaby @dependabot[bot] in #646946d19c1to1b99266by @dependabot[bot] in #6467a2d49eato28bd5fein /hack/api-docs by @dependabot[bot] in #6472a2d49eato28bd5feby @dependabot[bot] in #64997a3e500to3ad5730by @dependabot[bot] in #6501New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.