feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.5.0 ) by phoebe-bot[bot] · Pull Request #598 · hbjydev/phoebe

phoebe-bot · 2026-03-20T17:15:27Z

This PR contains the following updates:

Package	Update	Change
ghcr.io/external-secrets/charts/external-secrets	minor	`2.1.0` → `2.5.0`

Release Notes

external-secrets/external-secrets (ghcr.io/external-secrets/charts/external-secrets)

`v2.5.0`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.5.0
Image: ghcr.io/external-secrets/external-secrets:v2.5.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.5.0-ubi-boringssl

What's Changed

General

chore: release chart for v2.4.1 by @Skarlso in #6293
fix(doc): Adds missing doc reference for VaultDynamicSecret example using GET by @bharath-b-rh in #6296
feat(charts): make serviceaccounts/token create RBAC rule conditional by @kriszkern in #6295
ref: delete duplication of applyOwnership logic by @jaruwat-panturat in #6301
feat: add Pulumi OIDC-based authentication by @johnstonmatt in #5893
fix: datarace in fake runtime test and push secret test by @Skarlso in #6300
docs(release): Update docs to build for arm for bitwarden-cli by @Senk02 in #6312
feat: add healthz check for liveness probe to cert and webhook by @Skarlso in #6319
chore: bump go version 1.26.3 by @Skarlso in #6339
fix(charts): gate externalsecrets write RBAC on processClusterExternalSecret by @kriszkern in #6332
feat(gcp): issue-5790: optional GCP service account email for WIF impersonation by @bharath-b-rh in #6273
ref(beyondtrust): BIPS-32651 add API v3.2 support for create Secrets by @btfhernandez in #6309
fix(onepassword): return fresh provider instance from NewClient to avoid wrong-vault race by @duizabojul in #6334
docs: add Rootline to ADOPTERS.md by @daanschipper in #6342
feat(charts): default scopedNamespace to .Release.Namespace when scopedRBAC is true by @kriszkern in #6343
docs: add blank lines before lists by @chlab in #6336
chore(doc): fix Azure role name typo by @hobti01 in #6335
feat(security): Enable Authentication and Authorization for Metrics Endpoint using FilterProvider by @Zacky3181V in #5574
feat: inject kube context as STS session tags by @robertchildresscfa in #6311
fix(charts): remove stale args guard in controller deployment by @kriszkern in #6347
fix: provider/infisical provider sub-folder references in remoteRef.key by @varonix0 in #6338

Dependencies

chore(deps): bump golang from 4f4ab2c to 47ce563 in /e2e by @dependabot[bot] in #6286
chore(deps): bump click from 8.3.2 to 8.3.3 in /hack/api-docs by @dependabot[bot] in #6287
chore(deps): bump certifi from 2026.2.25 to 2026.4.22 in /hack/api-docs by @dependabot[bot] in #6288
chore(deps): bump pathspec from 1.0.4 to 1.1.1 in /hack/api-docs by @dependabot[bot] in #6291
chore(deps): bump idna from 3.11 to 3.13 in /hack/api-docs by @dependabot[bot] in #6290
chore(deps): bump packaging from 26.1 to 26.2 in /hack/api-docs by @dependabot[bot] in #6289
chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #6304
chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #6305
chore(deps): bump golang from 1.26.2 to 1.26.3 by @dependabot[bot] in #6320
chore(deps): bump golang from 1.26.2-bookworm to 1.26.3-bookworm in /e2e by @dependabot[bot] in #6327
chore(deps): bump ubi9/ubi from fd3612e to 2323fcf by @dependabot[bot] in #6321
chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in #6322
chore(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 by @dependabot[bot] in #6323
chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #6325
chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in #6324
chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 by @dependabot[bot] in #6326
chore(deps): bump idna from 3.13 to 3.14 in /hack/api-docs by @dependabot[bot] in #6328
chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /hack/api-docs by @dependabot[bot] in #6329
chore(deps): bump regex from 2026.4.4 to 2026.5.9 in /hack/api-docs by @dependabot[bot] in #6330

New Contributors

@kriszkern made their first contribution in #6295
@johnstonmatt made their first contribution in #5893
@Senk02 made their first contribution in #6312
@duizabojul made their first contribution in #6334
@daanschipper made their first contribution in #6342
@chlab made their first contribution in #6336
@hobti01 made their first contribution in #6335
@Zacky3181V made their first contribution in #5574
@robertchildresscfa made their first contribution in #6311

Full Changelog: external-secrets/external-secrets@v2.4.1...v2.5.0

`v2.4.1`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.4.1
Image: ghcr.io/external-secrets/external-secrets:v2.4.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.4.1-ubi-boringssl

What's Changed

General

chore: release chart for v2.4.0 by @Skarlso in #6277
feat(gcp): support multiple replicationLocations on PushSecret by @alliasgher in #6225
feat(passbolt): add custom CA bundle / CA provider support by @alliasgher in #6224
feat(azure): add contentType support for PushSecret by @ppatel1604 in #6249
feat(charts): add liveness probes to cert-controller and webhook by @mattcarp12 in #6147
fix: prevent creation of specific type of secrets by @Skarlso in #6280

Dependencies

chore(deps): bump golang from f853308 to f853308 by @dependabot[bot] in #6282
chore(deps): bump alpine from 2510918 to 5b10f43 in /hack/api-docs by @dependabot[bot] in #6285
chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #6283
chore(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @dependabot[bot] in #6284
chore(deps): bump ubi9/ubi from cf13fe2 to fd3612e by @dependabot[bot] in #6281

Full Changelog: external-secrets/external-secrets@v2.4.0...v2.4.1

`v2.4.0`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.4.0
Image: ghcr.io/external-secrets/external-secrets:v2.4.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.4.0-ubi-boringssl

What's Changed

General

chore: release helm chart for v2.3.0 by @Skarlso in #6204
fix(docs): hide Scarf tracking pixel to remove page whitespace by @ppatel1604 in #6209
docs: Add Grafana generator documentation by @jaruwat-panturat in #6227
docs: add TLS certificate authentication example for Vault provider by @alliasgher in #6212
docs(cloudsmith): Improve cloudsmith generator documentation by @cloudsmith-iduffy in #6232
docs: add missing specs to GeneratorSpec example by @jaruwat-panturat in #6236
feat(keeper): implement get secret by id or name by @tiberiuv in #6163
chore(secretserver): update dependencies to accept new DelineaXPM/tss-sdk-go by @DelineaSahilWankhede in #6240
docs(release): update documentation links from /main to /latest by @cinpol in #6210
fix: CAProvider cm access by @moolen in #6246
fix(chart): add failurePolicy to ClusterSecretStore webhook by @ryanjwong in #6247
feat(dvls): add name support for entries by @rbstp in #6099
fix(akeyless): upgrade akeyless-go-cloud-id to v0.3.7 by @alikdolg in #6248
chore(deps): bump azure/setup-helm from 3.5 to 5 by @dependabot[bot] in #6258
fix: do not set tags if undefined by @Skarlso in #6103
fix(conjur): return error for unimplemented PushSecret and DeleteSecret by @antonio-mazzini in #6266
docs: Enhance ClusterExternalSecret documentation with "fan-out" approach by @jaruwat-panturat in #6241
feat: add --leader-election-id flag to support HA deployments by @mattcarp12 in #6148
feat(bug): Fix CVE-2026-34165, CVE-2026-33762 and GHSA-3xc5-wrhm-f963 by @othomann in #6271
feat: enhance VaultDynamicSecret GET method to support parameters from the spec by @samm-git in #6267
fix: use a separate parameter for GET calls in VaultDynamicSecrets by @Skarlso in #6275

Dependencies

chore(deps): bump golang from c2a1f7b to c2a1f7b by @dependabot[bot] in #6214
chore(deps): bump platformdirs from 4.9.4 to 4.9.6 in /hack/api-docs by @dependabot[bot] in #6219
chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @dependabot[bot] in #6216
chore(deps): bump codelytv/pr-size-labeler from 1.10.3 to 1.10.4 by @dependabot[bot] in #6221
chore(deps): bump ubi9/ubi from 9e6e193 to 039095f by @dependabot[bot] in #6213
chore(deps): bump importlib-resources from 6.5.2 to 7.1.0 in /hack/api-docs by @dependabot[bot] in #6220
chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in #6215
chore(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 by @dependabot[bot] in #6217
chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @dependabot[bot] in #6218
chore(deps): bump azure/setup-helm from 3.4 to 3.5 by @dependabot[bot] in #6222
chore(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in #6223
chore(deps): bump golang from c2a1f7b to f853308 by @dependabot[bot] in #6252
chore(deps): bump alpine from 3.23.3 to 3.23.4 in /e2e by @dependabot[bot] in #6261
chore(deps): bump step-security/harden-runner from 2.17.0 to 2.19.0 by @dependabot[bot] in #6254
chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #6257
chore(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #6259
chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #6255
chore(deps): bump packaging from 26.0 to 26.1 in /hack/api-docs by @dependabot[bot] in #6263
chore(deps): bump zipp from 3.23.0 to 3.23.1 in /hack/api-docs by @dependabot[bot] in #6262
chore(deps): bump alpine from 2510918 to 5b10f43 by @dependabot[bot] in #6251
chore(deps): bump ubi9/ubi from 039095f to cf13fe2 by @dependabot[bot] in #6253
chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in #6260
chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #6256

New Contributors

@alliasgher made their first contribution in #6212
@tiberiuv made their first contribution in #6163
@cinpol made their first contribution in #6210
@ryanjwong made their first contribution in #6247
@alikdolg made their first contribution in #6248
@antonio-mazzini made their first contribution in #6266
@mattcarp12 made their first contribution in #6148

Full Changelog: external-secrets/external-secrets@v2.3.0...v2.4.0

`v2.3.0`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.3.0
Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi-boringssl

What's Changed

General

chore: release charts v2.2.0 by @riccardomc in #6115
ref(modernize): modernize go code by @ivankatliarchuk in #6114
chore: bump bitwarden helm chart version to v0.6.0 by @Skarlso in #6118
chore: fix EoL in compatiblity table for version 2.2 by @riccardomc in #6128
docs: add missing jinja2 tags by @MindTooth in #6136
fix: cached uid after deleting a store by @Skarlso in #6138
feat(doppler): add ETag-based caching by @mikesellitto in #5997
fix(docs): fix metadata structure in Google Secrets Manager docs by @mruoss in #6139
feat: ovh provider implementation by @ldesauw in #6101
feat(providers): Implement PushSecret for Delinea Secret Server by @pr0ton11 in #6031
fix: propagate objectMeta and ownerReferences to target resources by @jaruwat-panturat in #6132
fix(release): remove docs.check and all relative calls by @jaruwat-panturat in #6146
feat: support service account impersonation when using Workload Identity Federation with a k8s service account by @zoomoid in #5707
fix: remove getHostByName from template funcs by @moolen in #6164
ref(kubernetes): move auth package from kubernetes to esutils by @alekc in #6149
docs: fix templating.md by @dangbert in #6168
fix(onepasswordsdk): support native 1Password item IDs in findItem by @LeahArmstrong in #6167
docs(ovhcloud): fix heterogeneous configuration documentation by @ldesauw in #6169
docs: add OVHcloud in ADOPTERS by @scraly in #6172
fix(docs): resolve macro syntax error in templating guide by @ManvithaP-hub in #6171
chore: rip out sprig dependency by @Skarlso in #6170
chore: fix jose cve by @Skarlso in #6178
docs: document correct htpasswd function usage by @Atomsoldat in #6177
feat(pushsecret): add dataTo support for bulk secret pushing by @mohamed-rekiba in #5850
docs: add existing blog post: ESO integration with ovhcloud secret manager with vault provider by @scraly in #6190
feat: move experimental-enable-vault-token-cache out of experimental and add expiry to validation by @sfotony in #5397
fix: prevent feedback loop by @moolen in #6021
fix: code scanning issues by @Skarlso in #6063
feat: add source null byte policy by @knelasevero in #6194
fix(test): fix broken test from automerge rebase by @knelasevero in #6199
fix(aws): handle empty resource policy in PushSecret for SecretsManager by @maks3201 in #6145
feat(github): add orgSecretVisibility field to GithubProvider by @iamnoah in #6202
feat(onepasswordSDK): multi-field and complete PushSecret by @Dariusch in #6187
feat(vault): add VaultRole attribute for TLS auth by @RicoGunawan12 in #6160
chore: bump go version to 1.26.2 by @Skarlso in #6203

Dependencies

chore(deps): bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #6121
chore(deps): bump mkdocs-material from 9.7.5 to 9.7.6 in /hack/api-docs by @dependabot[bot] in #6125
chore(deps): bump ubi9/ubi from 6ed9f6f to 1fc04e8 by @dependabot[bot] in #6119
chore(deps): bump azure/login from 2.3.0 to 3.0.0 by @dependabot[bot] in #6120
chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #6124
chore(deps): bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot[bot] in #6122
chore(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @dependabot[bot] in #6123
chore(deps): bump importlib-metadata from 8.7.1 to 9.0.0 in /hack/api-docs by @dependabot[bot] in #6126
chore(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #6154
chore(deps): bump pymdown-extensions from 10.21 to 10.21.2 in /hack/api-docs by @dependabot[bot] in #6157
chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #6151
chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #6152
chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @dependabot[bot] in #6153
chore(deps): bump pygments from 2.19.2 to 2.20.0 in /hack/api-docs by @dependabot[bot] in #6155
chore(deps): bump regex from 2026.2.28 to 2026.3.32 in /hack/api-docs by @dependabot[bot] in #6156
chore(deps): bump requests from 2.32.5 to 2.33.0 in /hack/api-docs by @dependabot[bot] in #6158
chore(deps): bump ubi9/ubi from 1fc04e8 to 9e6e193 by @dependabot[bot] in #6150
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 by @dependabot[bot] in #6180
chore(deps): bump charset-normalizer from 3.4.6 to 3.4.7 in /hack/api-docs by @dependabot[bot] in #6183
chore(deps): bump click from 8.3.1 to 8.3.2 in /hack/api-docs by @dependabot[bot] in #6185
chore(deps): bump fossas/fossa-action from 1.8.0 to 1.9.0 by @dependabot[bot] in #6181
chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6182
chore(deps): bump regex from 2026.3.32 to 2026.4.4 in /hack/api-docs by @dependabot[bot] in #6184

New Contributors

@MindTooth made their first contribution in #6136
@ldesauw made their first contribution in #6101
@pr0ton11 made their first contribution in #6031
@zoomoid made their first contribution in #5707
@dangbert made their first contribution in #6168
@LeahArmstrong made their first contribution in #6167
@scraly made their first contribution in #6172
@ManvithaP-hub made their first contribution in #6171
@Atomsoldat made their first contribution in #6177
@mohamed-rekiba made their first contribution in #5850
@sfotony made their first contribution in #5397
@maks3201 made their first contribution in #6145
@iamnoah made their first contribution in #6202
@RicoGunawan12 made their first contribution in #6160

Full Changelog: external-secrets/external-secrets@v2.2.0...v2.3.0

`v2.2.0`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.2.0
Image: ghcr.io/external-secrets/external-secrets:v2.2.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl

Breaking change

If you are using Flux + OCIRepository to fetch External Secrets Operator charts, please update your object to use a Layer selector:

  apiVersion: source.toolkit.fluxcd.io/v1
  kind: OCIRepository
  metadata:
    name: eso-oci
  spec:
    interval: 1m0s
    provider: generic
    ref:
      tag: 2.2.0
    url: oci://ghcr.io/external-secrets/charts/external-secrets
    layerSelector:
      mediaType: "application/vnd.cncf.helm.chart.content.v1.tar+gzip"
      operation: extract

What's Changed

General

chore: release charts v2.1.0 by @Skarlso in #6030
chore: fix the stability doc by @Skarlso in #6035
fix(security): Fix vulnerabilities by @othomann in #6052
fix(aws): sync tags and resource policy even when secret value unchanged by @evs-secops in #6025
fix: publish now uses docker build v4 which required some changes by @Skarlso in #6062
feat(gcpsm): auto-detect projectID from GCP metadata server by @patjlm in #5922
chore(templating): Remove years in license and their checks by @evrardj-roche in #5955
docs: Add Roche to official ADOPTERS by @evrardj-roche in #6076
feat: Add Last Sync column to ExternalSecret and PushSecret printers by @jaruwat-panturat in #6068
fix(onepassword): support native item IDs by @chadxz in #6073
feat: extract LGTM processor to external JS file with tests by @mateenali66 in #6074
feat: fail fast if LGTM label does not exist in repository by @mateenali66 in #6078
feat(passbolt): add support for Passbolt V5 API by @cedricherzog-passbolt in #5919
fix(infisical): dataFrom.find.path should filter by secret path not name by @johnvox in #6086
fix: disable the priority queue which misbehaves at scale by @Skarlso in #6083
chore: update go version to 1.26.1 by @Skarlso in #6072
docs(aws): fix PushSecret metadata indentation in resource policy exa... by @Br1an67 in #6056
fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by @Br1an67 in #6036
feat(templating): Add certSANs function to extract SANs from certificates by @mzdeb in #6058
docs: document template.metadata labels/annotations behavior by @lucpas in #6102
fix: CODEOWNERS are seriously out of date by @Skarlso in #6106
feat(helm): add readinessProbe support for external-secrets deployment by @AlexOQ in #5831
fix: update grpc for CVE-2026-33186 by @Skarlso in #6108
feat(azurekv): add expiration time to azure kv secret by @muraliavarma in #5935
feat: add path to cloud.ru provider by @heavyandrew in #5952
fix(add-eso-version): fix separator line pattern in add_eso_version.sh script by @riccardomc in #6113

Dependencies

chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in #6038
chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by @dependabot[bot] in #6047
chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by @dependabot[bot] in #6050
chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by @dependabot[bot] in #6049
chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #6039
chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by @dependabot[bot] in #6043
chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #6040
chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by @dependabot[bot] in #6044
chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6042
chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #6041
chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6046
chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by @dependabot[bot] in #6048
chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by @dependabot[bot] in #6093
chore(deps): bump distroless/static from 28efbe9 to 47b2d72 by @dependabot[bot] in #6088
chore(deps): bump ubi9/ubi from cecb1cd to 6ed9f6f by @dependabot[bot] in #6087
chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by @dependabot[bot] in #6096
chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by @dependabot[bot] in #6094
chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by @dependabot[bot] in #6095
chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by @dependabot[bot] in #6089
chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @dependabot[bot] in #6092
chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in #6090
chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by @dependabot[bot] in #6091

New Contributors

@othomann made their first contribution in #6052
@evs-secops made their first contribution in #6025
@patjlm made their first contribution in #5922
@jaruwat-panturat made their first contribution in #6068
@chadxz made their first contribution in #6073
@mateenali66 made their first contribution in #6074
@cedricherzog-passbolt made their first contribution in #5919
@johnvox made their first contribution in #6086
@Br1an67 made their first contribution in #6056
@mzdeb made their first contribution in #6058
@lucpas made their first contribution in #6102
@AlexOQ made their first contribution in #5831
@muraliavarma made their first contribution in #5935
@heavyandrew made their first contribution in #5952

Full Changelog: external-secrets/external-secrets@v2.1.0...v2.2.0

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

phoebe-bot · 2026-03-20T17:16:05Z

--- kubernetes/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets OCIRepository: external-secrets/external-secrets

+++ kubernetes/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets OCIRepository: external-secrets/external-secrets

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 2.1.0
+    tag: 2.4.1
   url: oci://ghcr.io/external-secrets/charts/external-secrets

phoebe-bot · 2026-03-20T17:16:09Z

--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v2.1.0
+        image: ghcr.io/external-secrets/external-secrets:v2.4.1
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
@@ -62,7 +62,10 @@

         readinessProbe:
           httpGet:
             port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
+          timeoutSeconds: 5
+          failureThreshold: 3
+          successThreshold: 1
 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v2.1.0
+        image: ghcr.io/external-secrets/external-secrets:v2.4.1
         imagePullPolicy: IfNotPresent
         args:
         - --enable-leader-election=true
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v2.1.0
+        image: ghcr.io/external-secrets/external-secrets:v2.4.1
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs
@@ -62,12 +62,15 @@

         readinessProbe:
           httpGet:
             port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
+          timeoutSeconds: 5
+          failureThreshold: 3
+          successThreshold: 1
         volumeMounts:
         - name: certs
           mountPath: /tmp/certs
           readOnly: true
       volumes:
       - name: certs
--- HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/secretstore-validate

+++ HelmRelease: external-secrets/external-secrets ValidatingWebhookConfiguration: external-secrets/secretstore-validate

@@ -53,7 +53,8 @@

       path: /validate-external-secrets-io-v1-clustersecretstore
   admissionReviewVersions:
   - v1
   - v1beta1
   sideEffects: None
   timeoutSeconds: 5
+  failurePolicy: Fail

…l-secrets ( 2.1.0 → 2.5.0 )

phoebe-bot Bot requested a review from hbjydev as a code owner March 20, 2026 17:15

phoebe-bot Bot added renovate/container type/minor area/bootstrap area/kubernetes labels Mar 20, 2026

phoebe-bot Bot force-pushed the renovate/external-secrets-operator branch from 9997bc4 to 0aa7295 Compare April 10, 2026 15:18

phoebe-bot Bot changed the title ~~feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.2.0 )~~ feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.3.0 ) Apr 10, 2026

phoebe-bot Bot force-pushed the renovate/external-secrets-operator branch from 0aa7295 to ae7eec4 Compare April 24, 2026 19:19

phoebe-bot Bot changed the title ~~feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.3.0 )~~ feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.4.0 ) Apr 24, 2026

phoebe-bot Bot force-pushed the renovate/external-secrets-operator branch from ae7eec4 to 711857d Compare April 28, 2026 11:34

phoebe-bot Bot changed the title ~~feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.4.0 )~~ feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.4.1 ) Apr 28, 2026

feat(container): update image ghcr.io/external-secrets/charts/externa…

ad1b9ec

…l-secrets ( 2.1.0 → 2.5.0 )

phoebe-bot Bot force-pushed the renovate/external-secrets-operator branch from 711857d to ad1b9ec Compare May 16, 2026 00:56

phoebe-bot Bot changed the title ~~feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.4.1 )~~ feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.5.0 ) May 16, 2026

hbjydev closed this May 28, 2026

hbjydev deleted the renovate/external-secrets-operator branch May 28, 2026 20:19

Navigation Menu

Repository navigation

feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.5.0 ) - #598

feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.1.0 → 2.5.0 )#598
phoebe-bot[bot] wants to merge 1 commit into
mainfrom
renovate/external-secrets-operator

phoebe-bot Bot commented Mar 20, 2026 •

edited

Loading

Uh oh!

phoebe-bot Bot commented Mar 20, 2026 •

edited

Loading

Uh oh!

phoebe-bot Bot commented Mar 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

phoebe-bot Bot commented Mar 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.5.0

What's Changed

General

Dependencies

New Contributors

v2.4.1

What's Changed

General

Dependencies

v2.4.0

What's Changed

General

Dependencies

New Contributors

v2.3.0

What's Changed

General

Dependencies

New Contributors

v2.2.0

Breaking change

What's Changed

General

Dependencies

New Contributors

Configuration

Uh oh!

phoebe-bot Bot commented Mar 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

phoebe-bot Bot commented Mar 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

phoebe-bot Bot commented Mar 20, 2026 •

edited

Loading

`v2.5.0`

`v2.4.1`

`v2.4.0`

`v2.3.0`

`v2.2.0`

phoebe-bot Bot commented Mar 20, 2026 •

edited

Loading

phoebe-bot Bot commented Mar 20, 2026 •

edited

Loading