Update Helm release external-secrets to v0.19.1 (main)
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| external-secrets | minor |
0.18.2 -> 0.19.1
|
⚠️ WarningSome dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
external-secrets/external-secrets (external-secrets)
v0.19.1
Image: ghcr.io/external-secrets/external-secrets:v0.19.1
Image: ghcr.io/external-secrets/external-secrets:v0.19.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.19.1-ubi-boringssl
What's Changed
- chore: release helm chart for v0.19.0 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5093
- chore: remove ubi note by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5094
- chore(deps): bump pymdown-extensions from 10.16 to 10.16.1 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5100
- chore(deps): bump ubi8/ubi from
a910ffatoa463a8eby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5099 - chore(deps): bump certifi from 2025.7.14 to 2025.8.3 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5097
- chore(deps): bump regex from 2024.11.6 to 2025.7.34 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5096
- Fail helm install if ClusterPushSecrets processing is enabled but PushSecrets processing is disabled. by @tspearconquest in https://github.com/external-secrets/external-secrets/pull/4896
- fix: use server-side apply for CRD installation in Makefile by @alekc in https://github.com/external-secrets/external-secrets/pull/5103
- deployment strategy support by @jjacobs-poa in https://github.com/external-secrets/external-secrets/pull/5091
- feat: migration from endpoint to endpointslice by @xvirgov in https://github.com/external-secrets/external-secrets/pull/5008
- feat(helm) Just use named port for webhook by @jcpunk in https://github.com/external-secrets/external-secrets/pull/5108
- add support for overriding name of PDB by @megashby in https://github.com/external-secrets/external-secrets/pull/5090
- fix: do not run ApplyTemplate for immutable secrets in
mutationFuncby @jakobmoellerdev in https://github.com/external-secrets/external-secrets/pull/5110
New Contributors
- @tspearconquest made their first contribution in https://github.com/external-secrets/external-secrets/pull/4896
- @jjacobs-poa made their first contribution in https://github.com/external-secrets/external-secrets/pull/5091
- @xvirgov made their first contribution in https://github.com/external-secrets/external-secrets/pull/5008
- @jcpunk made their first contribution in https://github.com/external-secrets/external-secrets/pull/5108
- @megashby made their first contribution in https://github.com/external-secrets/external-secrets/pull/5090
- @jakobmoellerdev made their first contribution in https://github.com/external-secrets/external-secrets/pull/5110
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.19.0...v0.19.1
v0.19.0
BREAKING CHANGE
Please note that this a breaking change because our CRDs are now too big. Meaning a simple kubectl apply or Argo's default client side apply WILL NOT WORK! You have to add --server-side to kubectl apply and in argo add:
spec:
project: default
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
- ServerSideApply=true
How to do it in kubectl:
kubectl apply --server-side ...
for it to correctly install the CRDs. Thank you.
Image: ghcr.io/external-secrets/external-secrets:v0.19.0
Image: ghcr.io/external-secrets/external-secrets:v0.19.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.19.0-ubi-boringssl
What's Changed
- chore: release helm chart for v0.18.2 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4985
- chore(deps): bump golang from
ee7ff13to10f549din /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/4997 - chore(deps): bump golang from
68932fato68932faby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5000 - chore(deps): bump mkdocs-material from 9.6.14 to 9.6.15 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/4998
- chore(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5001
- chore(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5003
- chore(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5002
- fix: do not turn original value into string on value scope by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5011
- fix: add uuid in edit and view clusterroles by @sylvainOL in https://github.com/external-secrets/external-secrets/pull/5017
- chore: update dependencies by @eso-service-account-app[bot] in https://github.com/external-secrets/external-secrets/pull/4999
- fix: template data should not be the secret Data itself by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5023
- Fix: Return appropriate error in ValidateStore by @prakash-218 in https://github.com/external-secrets/external-secrets/pull/5019
- feat(helm): allow to set init containers by @rclsilver in https://github.com/external-secrets/external-secrets/pull/4745
- chore(deps): bump certifi from 2025.6.15 to 2025.7.14 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5032
- Fix: Remove root/buildinfo from ubi build files by @bainsy88 in https://github.com/external-secrets/external-secrets/pull/5037
- chore(deps): bump ubi8/ubi from
19eae3dtoc0b0729by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5033 - chore(deps): bump golang from 1.24.4-bookworm to 1.24.5-bookworm in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5029
- chore(deps): bump golang from 1.24.4 to 1.24.5 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5034
- chore: update dependencies by @eso-service-account-app[bot] in https://github.com/external-secrets/external-secrets/pull/5031
- Add Red Hat OpenShift in Adopters by @KeenonLee in https://github.com/external-secrets/external-secrets/pull/5039
- fix: remove authentication option with JWT token from STSSessionToken generator by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5026
- fix: add validation constraints to ExternalSecretRewrite by @Aakkash-Suresh in https://github.com/external-secrets/external-secrets/pull/5006
- fix: stability support matrix by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5043
- docs(decoding-strategy): clarify base64 auto-detection limitations by @orymate in https://github.com/external-secrets/external-secrets/pull/5004
- feat(infisical): auth methods by @DanielHougaard in https://github.com/external-secrets/external-secrets/pull/5040
- chore(deps): bump alpine from 3.22.0 to 3.22.1 in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5046
- chore(aws): parameterstore unit tests improvement by @ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4986
- fix(helm): grafana dashboard: fix heatmaps to actually be heatmaps, not time series by @desaintmartin in https://github.com/external-secrets/external-secrets/pull/5069
- chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5047
- chore(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5048
- chore(deps): bump golang from
ddf5200todaae04eby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5049 - chore(deps): bump alpine from
8a1f59fto4bcff63by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5051 - chore(deps): bump alpine from
8a1f59fto4bcff63in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5052 - chore(deps): bump mkdocs-material from 9.6.15 to 9.6.16 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5077
- Add SelfSubjectAccessReview as a fallback for failing SelfSubjectRulesReview by @alvin-rw in https://github.com/external-secrets/external-secrets/pull/5025
- chore(deps): bump golang from
69adc37toef8c5c7in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5076 - chore(deps): bump ubi8/ubi from
c0b0729to785d38cby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5075 - chore(deps): bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5072
- chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5073
- SSHKey generator by @dex4er in https://github.com/external-secrets/external-secrets/pull/5083
- fix: restore AWS credential chain resolution for ECRAuthorizationToken generator by @aditmeno in https://github.com/external-secrets/external-secrets/pull/5082
- fix(helm): grafana dashboard: add widget for sum of not ready secrets by @desaintmartin in https://github.com/external-secrets/external-secrets/pull/5086
- feat(aws): secretsmanager to update/patch/delete tags by @ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4984
- fix: update the e2e test with the new store status value by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5089
- fix: correct usage of if in dlc and update for server side apply by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5092
New Contributors
- @sylvainOL made their first contribution in https://github.com/external-secrets/external-secrets/pull/5017
- @prakash-218 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5019
- @rclsilver made their first contribution in https://github.com/external-secrets/external-secrets/pull/4745
- @bainsy88 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5037
- @KeenonLee made their first contribution in https://github.com/external-secrets/external-secrets/pull/5039
- @orymate made their first contribution in https://github.com/external-secrets/external-secrets/pull/5004
- @desaintmartin made their first contribution in https://github.com/external-secrets/external-secrets/pull/5069
- @alvin-rw made their first contribution in https://github.com/external-secrets/external-secrets/pull/5025
- @dex4er made their first contribution in https://github.com/external-secrets/external-secrets/pull/5083
- @aditmeno made their first contribution in https://github.com/external-secrets/external-secrets/pull/5082
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.18.2...v0.19.0
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot Sylva instance.
CI configuration couldn't be handle by MR description. A dedicated comment has been posted to control it.
If no checkbox is checked, a default pipeline will be enabled (capm3, or capo if capo label is set)