Update dependency external-secrets/external-secrets to v0.19.2 (main) (!332) · Merge requests · Sylva-projects / sylva-elements / workload-cluster-operator

This MR contains the following updates:

Package	Type	Update	Change
external-secrets/external-secrets	Kustomization	minor	`v0.18.1` -> `v0.19.2`

Release Notes

external-secrets/external-secrets (external-secrets/external-secrets)

`v0.19.2`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.19.2 Image: ghcr.io/external-secrets/external-secrets:v0.19.2-ubi Image: ghcr.io/external-secrets/external-secrets:v0.19.2-ubi-boringssl

Image: ghcr.io/external-secrets/external-secrets:v0.19.1 Image: ghcr.io/external-secrets/external-secrets:v0.19.1-ubi Image: ghcr.io/external-secrets/external-secrets:v0.19.1-ubi-boringssl

What's Changed

chore: release helm chart for v0.19.0 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5093
chore: remove ubi note by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5094
chore(deps): bump pymdown-extensions from 10.16 to 10.16.1 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5100
chore(deps): bump ubi8/ubi from a910ffa to a463a8e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5099
chore(deps): bump certifi from 2025.7.14 to 2025.8.3 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5097
chore(deps): bump regex from 2024.11.6 to 2025.7.34 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5096
Fail helm install if ClusterPushSecrets processing is enabled but PushSecrets processing is disabled. by @tspearconquest in https://github.com/external-secrets/external-secrets/pull/4896
fix: use server-side apply for CRD installation in Makefile by @alekc in https://github.com/external-secrets/external-secrets/pull/5103
deployment strategy support by @jjacobs-poa in https://github.com/external-secrets/external-secrets/pull/5091
feat: migration from endpoint to endpointslice by @xvirgov in https://github.com/external-secrets/external-secrets/pull/5008
feat(helm) Just use named port for webhook by @jcpunk in https://github.com/external-secrets/external-secrets/pull/5108
add support for overriding name of PDB by @megashby in https://github.com/external-secrets/external-secrets/pull/5090
fix: do not run ApplyTemplate for immutable secrets in mutationFunc by @jakobmoellerdev in https://github.com/external-secrets/external-secrets/pull/5110

New Contributors

@tspearconquest made their first contribution in https://github.com/external-secrets/external-secrets/pull/4896
@jjacobs-poa made their first contribution in https://github.com/external-secrets/external-secrets/pull/5091
@xvirgov made their first contribution in https://github.com/external-secrets/external-secrets/pull/5008
@jcpunk made their first contribution in https://github.com/external-secrets/external-secrets/pull/5108
@megashby made their first contribution in https://github.com/external-secrets/external-secrets/pull/5090
@jakobmoellerdev made their first contribution in https://github.com/external-secrets/external-secrets/pull/5110

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.19.0...v0.19.1

Please note that this a breaking change because our CRDs are now too big. Meaning a simple kubectl apply or Argo's default client side apply WILL NOT WORK! You have to add --server-side to kubectl apply and in argo add:

spec:
  project: default
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
    - CreateNamespace=true
    - ServerSideApply=true

How to do it in kubectl:

kubectl apply --server-side ...

for it to correctly install the CRDs. Thank you.

Image: ghcr.io/external-secrets/external-secrets:v0.19.0 Image: ghcr.io/external-secrets/external-secrets:v0.19.0-ubi Image: ghcr.io/external-secrets/external-secrets:v0.19.0-ubi-boringssl

What's Changed

chore: release helm chart for v0.18.2 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4985
chore(deps): bump golang from ee7ff13 to 10f549d in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/4997
chore(deps): bump golang from 68932fa to 68932fa by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5000
chore(deps): bump mkdocs-material from 9.6.14 to 9.6.15 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/4998
chore(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5001
chore(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5003
chore(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5002
fix: do not turn original value into string on value scope by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5011
fix: add uuid in edit and view clusterroles by @sylvainOL in https://github.com/external-secrets/external-secrets/pull/5017
chore: update dependencies by @eso-service-account-app[bot] in https://github.com/external-secrets/external-secrets/pull/4999
fix: template data should not be the secret Data itself by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5023
Fix: Return appropriate error in ValidateStore by @prakash-218 in https://github.com/external-secrets/external-secrets/pull/5019
feat(helm): allow to set init containers by @rclsilver in https://github.com/external-secrets/external-secrets/pull/4745
chore(deps): bump certifi from 2025.6.15 to 2025.7.14 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5032
Fix: Remove root/buildinfo from ubi build files by @bainsy88 in https://github.com/external-secrets/external-secrets/pull/5037
chore(deps): bump ubi8/ubi from 19eae3d to c0b0729 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5033
chore(deps): bump golang from 1.24.4-bookworm to 1.24.5-bookworm in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5029
chore(deps): bump golang from 1.24.4 to 1.24.5 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5034
chore: update dependencies by @eso-service-account-app[bot] in https://github.com/external-secrets/external-secrets/pull/5031
Add Red Hat OpenShift in Adopters by @KeenonLee in https://github.com/external-secrets/external-secrets/pull/5039
fix: remove authentication option with JWT token from STSSessionToken generator by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5026
fix: add validation constraints to ExternalSecretRewrite by @Aakkash-Suresh in https://github.com/external-secrets/external-secrets/pull/5006
fix: stability support matrix by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5043
docs(decoding-strategy): clarify base64 auto-detection limitations by @orymate in https://github.com/external-secrets/external-secrets/pull/5004
feat(infisical): auth methods by @DanielHougaard in https://github.com/external-secrets/external-secrets/pull/5040
chore(deps): bump alpine from 3.22.0 to 3.22.1 in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5046
chore(aws): parameterstore unit tests improvement by @ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4986
fix(helm): grafana dashboard: fix heatmaps to actually be heatmaps, not time series by @desaintmartin in https://github.com/external-secrets/external-secrets/pull/5069
chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5047
chore(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5048
chore(deps): bump golang from ddf5200 to daae04e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5049
chore(deps): bump alpine from 8a1f59f to 4bcff63 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5051
chore(deps): bump alpine from 8a1f59f to 4bcff63 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5052
chore(deps): bump mkdocs-material from 9.6.15 to 9.6.16 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5077
Add SelfSubjectAccessReview as a fallback for failing SelfSubjectRulesReview by @alvin-rw in https://github.com/external-secrets/external-secrets/pull/5025
chore(deps): bump golang from 69adc37 to ef8c5c7 in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5076
chore(deps): bump ubi8/ubi from c0b0729 to 785d38c by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5075
chore(deps): bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5072
chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5073
SSHKey generator by @dex4er in https://github.com/external-secrets/external-secrets/pull/5083
fix: restore AWS credential chain resolution for ECRAuthorizationToken generator by @aditmeno in https://github.com/external-secrets/external-secrets/pull/5082
fix(helm): grafana dashboard: add widget for sum of not ready secrets by @desaintmartin in https://github.com/external-secrets/external-secrets/pull/5086
feat(aws): secretsmanager to update/patch/delete tags by @ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4984
fix: update the e2e test with the new store status value by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5089
fix: correct usage of if in dlc and update for server side apply by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5092

New Contributors

@sylvainOL made their first contribution in https://github.com/external-secrets/external-secrets/pull/5017
@prakash-218 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5019
@rclsilver made their first contribution in https://github.com/external-secrets/external-secrets/pull/4745
@bainsy88 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5037
@KeenonLee made their first contribution in https://github.com/external-secrets/external-secrets/pull/5039
@orymate made their first contribution in https://github.com/external-secrets/external-secrets/pull/5004
@desaintmartin made their first contribution in https://github.com/external-secrets/external-secrets/pull/5069
@alvin-rw made their first contribution in https://github.com/external-secrets/external-secrets/pull/5025
@dex4er made their first contribution in https://github.com/external-secrets/external-secrets/pull/5083
@aditmeno made their first contribution in https://github.com/external-secrets/external-secrets/pull/5082

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.18.2...v0.19.0

`v0.18.2`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.18.2 NOTE - the following UBI images are not currently working (broken build process). Image: ghcr.io/external-secrets/external-secrets:v0.18.2-ubi Image: ghcr.io/external-secrets/external-secrets:v0.18.2-ubi-boringssl

What's Changed

chore: release helm chart for v0.18.1 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4958
chore: update dependencies by @eso-service-account-app in https://github.com/external-secrets/external-secrets/pull/4950
fix: merge docs by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/4960
feat(provider/gitlab): Add support for custom CAs by @girishsr25 in https://github.com/external-secrets/external-secrets/pull/4941
chore(deps): bump urllib3 from 2.4.0 to 2.5.0 in /hack/api-docs by @dependabot in https://github.com/external-secrets/external-secrets/pull/4948
feat(provider/infisical): azure auth and refactor to go sdk by @DanielHougaard in https://github.com/external-secrets/external-secrets/pull/4854
chore(deps): bump github/codeql-action from 3.29.0 to 3.29.1 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4968
chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 by @dependabot in https://github.com/external-secrets/external-secrets/pull/4971
chore: update dependencies by @eso-service-account-app in https://github.com/external-secrets/external-secrets/pull/4970
fix: do not validate auth if auth is not defined by @Skarlso in https://github.com/external-secrets/external-secrets/pull/4962
fix(gitlab): restore group variable fallback to wildcard environment_scope and correct precedence by @Aakkash-Suresh in https://github.com/external-secrets/external-secrets/pull/4965
feat(aws): parametersstore support for aws tags by @ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4967
Update full-cluster-secret-store example to reference secret namespaces by @ericvolp12 in https://github.com/external-secrets/external-secrets/pull/4964
feat: allow setting namespace on bitwarden-sdk-server subchart by @mrtntome in https://github.com/external-secrets/external-secrets/pull/4982

New Contributors

@girishsr25 made their first contribution in https://github.com/external-secrets/external-secrets/pull/4941
@DanielHougaard made their first contribution in https://github.com/external-secrets/external-secrets/pull/4854
@Aakkash-Suresh made their first contribution in https://github.com/external-secrets/external-secrets/pull/4965
@ericvolp12 made their first contribution in https://github.com/external-secrets/external-secrets/pull/4964
@mrtntome made their first contribution in https://github.com/external-secrets/external-secrets/pull/4982

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v0.18.1...v0.18.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Aug 13, 2025 by Sylva Renovate bot

Update dependency external-secrets/external-secrets to v0.19.2 (main)

Release Notes

`v0.19.2`

What's Changed

New Contributors

`v0.19.1`

What's Changed

New Contributors

`v0.19.0`

BREAKING CHANGE

What's Changed

New Contributors

`v0.18.2`

What's Changed

New Contributors

Configuration

Update dependency external-secrets/external-secrets to v0.19.2 (main)

Release Notes

v0.19.2

What's Changed

New Contributors

v0.19.1

What's Changed

New Contributors

v0.19.0

BREAKING CHANGE

What's Changed

New Contributors

v0.18.2

What's Changed

New Contributors

Configuration

Merge request reports

`v0.19.2`

`v0.19.1`

`v0.19.0`

`v0.18.2`