RENOVATE_TOKEN opened merge request !574: fix(deps): update helm release external-secrets to v2.3.0 at Orange-OpenSource / Kubernetes GitOps Tooling Zone / ...

RENOVATE_TOKEN
2026-04-11T16:56:08Z

This MR contains the following updates:

Package | Update | Change
external-secrets | minor | 2.2.0 → 2.3.0

Release Notes

external-secrets/external-secrets (external-secrets)

v2.3.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.3.0 Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi-boringssl

What's Changed

General

chore: release charts v2.2.0 by @​riccardomc in #​6115

ref(modernize): modernize go code by @​ivankatliarchuk in #​6114

chore: bump bitwarden helm chart version to v0.6.0 by @​Skarlso in #​6118

chore: fix EoL in compatiblity table for version 2.2 by @​riccardomc in #​6128

docs: add missing jinja2 tags by @​MindTooth in #​6136

fix: cached uid after deleting a store by @​Skarlso in #​6138

feat(doppler): add ETag-based caching by @​mikesellitto in #​5997

fix(docs): fix metadata structure in Google Secrets Manager docs by @​mruoss in #​6139

feat: ovh provider implementation by @​ldesauw in #​6101

feat(providers): Implement PushSecret for Delinea Secret Server by @​pr0ton11 in #​6031

fix: propagate objectMeta and ownerReferences to target resources by @​jaruwat-panturat in #​6132

fix(release): remove docs.check and all relative calls by @​jaruwat-panturat in #​6146

feat: support service account impersonation when using Workload Identity Federation with a k8s service account by @​zoomoid in #​5707

fix: remove getHostByName from template funcs by @​moolen in #​6164

ref(kubernetes): move auth package from kubernetes to esutils by @​alekc in #​6149

docs: fix templating.md by @​dangbert in #​6168

fix(onepasswordsdk): support native 1Password item IDs in findItem by @​LeahArmstrong in #​6167

docs(ovhcloud): fix heterogeneous configuration documentation by @​ldesauw in #​6169

docs: add OVHcloud in ADOPTERS by @​scraly in #​6172

fix(docs): resolve macro syntax error in templating guide by @​ManvithaP-hub in #​6171

chore: rip out sprig dependency by @​Skarlso in #​6170

chore: fix jose cve by @​Skarlso in #​6178

docs: document correct htpasswd function usage by @​Atomsoldat in #​6177

feat(pushsecret): add dataTo support for bulk secret pushing by @​mohamed-rekiba in #​5850

docs: add existing blog post: ESO integration with ovhcloud secret manager with vault provider by @​scraly in #​6190

feat: move experimental-enable-vault-token-cache out of experimental and add expiry to validation by @​sfotony in #​5397

fix: prevent feedback loop by @​moolen in #​6021

fix: code scanning issues by @​Skarlso in #​6063

feat: add source null byte policy by @​knelasevero in #​6194

fix(test): fix broken test from automerge rebase by @​knelasevero in #​6199

fix(aws): handle empty resource policy in PushSecret for SecretsManager by @​maks3201 in #​6145

feat(github): add orgSecretVisibility field to GithubProvider by @​iamnoah in #​6202

feat(onepasswordSDK): multi-field and complete PushSecret by @​Dariusch in #​6187

feat(vault): add VaultRole attribute for TLS auth by @​RicoGunawan12 in #​6160

chore: bump go version to 1.26.2 by @​Skarlso in #​6203

Dependencies

chore(deps): bump actions/cache from 5.0.3 to 5.0.4 by @​dependabot[bot] in #​6121

chore(deps): bump mkdocs-material from 9.7.5 to 9.7.6 in /hack/api-docs by @​dependabot[bot] in #​6125

chore(deps): bump ubi9/ubi from 6ed9f6f to 1fc04e8 by @​dependabot[bot] in #​6119

chore(deps): bump azure/login from 2.3.0 to 3.0.0 by @​dependabot[bot] in #​6120

chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 by @​dependabot[bot] in #​6124

chore(deps): bump github/codeql-action from 4.32.6 to 4.34.1 by @​dependabot[bot] in #​6122

chore(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @​dependabot[bot] in #​6123

chore(deps): bump importlib-metadata from 8.7.1 to 9.0.0 in /hack/api-docs by @​dependabot[bot] in #​6126

chore(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​6154

chore(deps): bump pymdown-extensions from 10.21 to 10.21.2 in /hack/api-docs by @​dependabot[bot] in #​6157

chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​6151

chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @​dependabot[bot] in #​6152

chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @​dependabot[bot] in #​6153

chore(deps): bump pygments from 2.19.2 to 2.20.0 in /hack/api-docs by @​dependabot[bot] in #​6155

chore(deps): bump regex from 2026.2.28 to 2026.3.32 in /hack/api-docs by @​dependabot[bot] in #​6156

chore(deps): bump requests from 2.32.5 to 2.33.0 in /hack/api-docs by @​dependabot[bot] in #​6158

chore(deps): bump ubi9/ubi from 1fc04e8 to 9e6e193 by @​dependabot[bot] in #​6150

chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 by @​dependabot[bot] in #​6180

chore(deps): bump charset-normalizer from 3.4.6 to 3.4.7 in /hack/api-docs by @​dependabot[bot] in #​6183

chore(deps): bump click from 8.3.1 to 8.3.2 in /hack/api-docs by @​dependabot[bot] in #​6185

chore(deps): bump fossas/fossa-action from 1.8.0 to 1.9.0 by @​dependabot[bot] in #​6181

chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​6182

chore(deps): bump regex from 2026.3.32 to 2026.4.4 in /hack/api-docs by @​dependabot[bot] in #​6184

New Contributors

@​MindTooth made their first contribution in #​6136

@​ldesauw made their first contribution in #​6101

@​pr0ton11 made their first contribution in #​6031

@​zoomoid made their first contribution in #​5707

@​dangbert made their first contribution in #​6168

@​LeahArmstrong made their first contribution in #​6167

@​scraly made their first contribution in #​6172

@​ManvithaP-hub made their first contribution in #​6171

@​Atomsoldat made their first contribution in #​6177

@​mohamed-rekiba made their first contribution in #​5850

@​sfotony made their first contribution in #​5397

@​maks3201 made their first contribution in #​6145

@​iamnoah made their first contribution in #​6202

@​RicoGunawan12 made their first contribution in #​6160

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.2.0...v2.3.0

Configuration

📅 Schedule: (UTC)

Branch creation

At any time (no schedule defined)

Automerge

At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.