chore(deps): update all-minor-patch-updates #341

2026-06-24T22:00:53Z

renovate-bot commented

2026-06-24 22:00:53 +00:00

This PR contains the following updates:

Package	Update	Change
argo-cd	patch	`9.7.0` -> `9.7.1`
cert-manager (source)	patch	`v1.20.2` -> `v1.20.3`
external-secrets	minor	`2.6.0` -> `2.7.0`
kube-prometheus-stack (source)	patch	`87.2.0` -> `87.2.1`
velero (source)	minor	`12.0.3` -> `12.1.0`
velero/velero-plugin-for-aws	patch	`v1.14.1` -> `v1.14.2`

Release Notes

argoproj/argo-helm (argo-cd)

`v9.7.1`

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

fix(argo-cd): gate redis metrics NetworkPolicy rule behind exporter.enabled by @yugstar in https://github.com/argoproj/argo-helm/pull/3930

New Contributors

@yugstar made their first contribution in https://github.com/argoproj/argo-helm/pull/3930

Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-workflows-1.0.18...argo-cd-9.7.1

cert-manager/cert-manager (cert-manager)

`v1.20.3`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release fixes a security issue (GHSA-8rvj-mm4h-c258, HIGH) where the default cert-manager-edit aggregate ClusterRole granted namespace users permission to create ACME Challenge and Order resources directly. A user who could create a Challenge referencing a ClusterIssuer could supply attacker-controlled solver configuration while cert-manager loaded credentials from the ClusterIssuer's namespace, bypassing Issuer solver selectors (dnsZones, dnsNames, matchLabels). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.

This release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs.

All users should upgrade.

[!WARNING]
Potentially breaking change: The cert-manager-edit aggregate ClusterRole no longer grants create for challenges.acme.cert-manager.io or create, patch, update for orders.acme.cert-manager.io. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate → CertificateRequest → Order → Challenge flow), you will need to grant those permissions explicitly.

Changes by Kind

Bug or Regression

Security (HIGH): Remove Challenge create and Order create, patch, update verbs from the cert-manager-edit aggregate ClusterRole (GHSA-8rvj-mm4h-c258). (#8940, @wallrj-cyberark)
Remove issuer owner reference from challenges blocking challenge garbage collection (#8759, @cert-manager-bot)

Other (Cleanup or Flake)

Bump go to 1.26.3, other deps to fix several govulncheck issues (#8789, @SgtCoDFish)
Update Go to v1.26.4 to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 (#8926, @wallrj-cyberark)

external-secrets/external-secrets (external-secrets)

`v2.7.0`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.7.0
Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl

What's Changed

prometheus-community/helm-charts (kube-prometheus-stack)

`v87.2.1`

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by @renovate[bot] in https://github.com/prometheus-community/helm-charts/pull/7035

Full Changelog: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1

vmware-tanzu/helm-charts (velero)

`v12.1.0`

Compare Source

A Helm chart for velero

What's Changed

[velero] Add optional PodDisruptionBudget by @somaz94 in https://github.com/vmware-tanzu/helm-charts/pull/740

New Contributors

@somaz94 made their first contribution in https://github.com/vmware-tanzu/helm-charts/pull/740

Full Changelog: https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0

vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)

`v1.14.2`

Compare Source

All changes

Backport PR #276 support for specifying KMS key for EBS volume restoration (#306, @TheKingMarco)
Bump dependencies to fix CVEs for v1.14.2 (#305, @blackpiglet)
[1.14] Bump dependancies version (#302, @blackpiglet)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [argo-cd](https://github.com/argoproj/argo-helm) | patch | `9.7.0` -> `9.7.1` | | [cert-manager](https://cert-manager.io) ([source](https://github.com/cert-manager/cert-manager)) | patch | `v1.20.2` -> `v1.20.3` | | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.6.0` -> `2.7.0` | | [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | patch | `87.2.0` -> `87.2.1` | | [velero](https://github.com/vmware-tanzu/velero) ([source](https://github.com/vmware-tanzu/helm-charts)) | minor | `12.0.3` -> `12.1.0` | | [velero/velero-plugin-for-aws](https://github.com/vmware-tanzu/velero-plugin-for-aws) | patch | `v1.14.1` -> `v1.14.2` | --- ### Release Notes <details> <summary>argoproj/argo-helm (argo-cd)</summary> ### [`v9.7.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.7.1) [Compare Source](https://github.com/argoproj/argo-helm/compare/argo-cd-9.7.0...argo-cd-9.7.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): gate redis metrics NetworkPolicy rule behind exporter.enabled by [@yugstar](https://github.com/yugstar) in https://github.com/argoproj/argo-helm/pull/3930 #### New Contributors - [@yugstar](https://github.com/yugstar) made their first contribution in https://github.com/argoproj/argo-helm/pull/3930 **Full Changelog**: https://github.com/argoproj/argo-helm/compare/argo-workflows-1.0.18...argo-cd-9.7.1 </details> <details> <summary>cert-manager/cert-manager (cert-manager)</summary> ### [`v1.20.3`](https://github.com/cert-manager/cert-manager/releases/tag/v1.20.3) [Compare Source](https://github.com/cert-manager/cert-manager/compare/v1.20.2...v1.20.3) cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters. This patch release fixes a security issue ([`GHSA-8rvj-mm4h-c258`](https://github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258), HIGH) where the default `cert-manager-edit` aggregate ClusterRole granted namespace users permission to create ACME `Challenge` and `Order` resources directly. A user who could create a `Challenge` referencing a `ClusterIssuer` could supply attacker-controlled solver configuration while cert-manager loaded credentials from the `ClusterIssuer`'s namespace, bypassing Issuer solver selectors (`dnsZones`, `dnsNames`, `matchLabels`). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint. This release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs. All users should upgrade. > \[!WARNING] > **Potentially breaking change:** The `cert-manager-edit` aggregate ClusterRole no longer grants `create` for `challenges.acme.cert-manager.io` or `create`, `patch`, `update` for `orders.acme.cert-manager.io`. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate → CertificateRequest → Order → Challenge flow), you will need to grant those permissions explicitly. #### Changes by Kind ##### Bug or Regression - Security (HIGH): Remove Challenge `create` and Order `create`, `patch`, `update` verbs from the `cert-manager-edit` aggregate ClusterRole ([`GHSA-8rvj-mm4h-c258`](https://github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258)). ([#8940](https://github.com/cert-manager/cert-manager/issues/8940), [@wallrj-cyberark](https://github.com/wallrj-cyberark)) - Remove issuer owner reference from challenges blocking challenge garbage collection ([#8759](https://github.com/cert-manager/cert-manager/issues/8759), [@cert-manager-bot](https://github.com/cert-manager-bot)) ##### Other (Cleanup or Flake) - Bump go to 1.26.3, other deps to fix several govulncheck issues ([#8789](https://github.com/cert-manager/cert-manager/issues/8789), [@SgtCoDFish](https://github.com/SgtCoDFish)) - Update Go to `v1.26.4` to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 ([#8926](https://github.com/cert-manager/cert-manager/issues/8926), [@wallrj-cyberark](https://github.com/wallrj-cyberark)) </details> <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.7.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.7.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0) Image: `ghcr.io/external-secrets/external-secrets:v2.7.0` Image: `ghcr.io/external-secrets/external-secrets:v2.7.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl`  #### What's Changed ##### General - chore: release helm charts 2.6.0 by [@Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6427 - test: add Infisical provider e2e suite by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6415 - docs: fix discrepancies and add missing documentation for GitLab provider by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6430 - docs: fix discrepancies and add missing documentation for Infisical provider by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6431 - feat(templating): add hexdec function by [@tstenner](https://github.com/tstenner) in https://github.com/external-secrets/external-secrets/pull/6422 - fix(volcengine): honor secretRef.namespace for ClusterSecretStore by [@ruslan-rm](https://github.com/ruslan-rm) in https://github.com/external-secrets/external-secrets/pull/6423 - docs(core): correct CRD examples and document missing fields by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6441 - feat(provider): initial dedicated OpenBao provider by [@phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6405 - feat(onepasswordsdk): implement GetAllSecrets by [@calebmckay](https://github.com/calebmckay) in https://github.com/external-secrets/external-secrets/pull/6445 - feat(controller): log secret deletions and data-key changes by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6443 - feat: Add BeyondTrust WorkloadCredentials provider by [@sdahal-bt](https://github.com/sdahal-bt) in https://github.com/external-secrets/external-secrets/pull/5999 - fix(charts): truncate component names to stay within 63-char DNS limit by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6428 - docs(gitops-fluxcd): fix webhook race condition in Flux deployment guide by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6455 - fix: no need for the field to have a default if it can be omitted by [@knelasevero](https://github.com/knelasevero) in https://github.com/external-secrets/external-secrets/pull/6453 - fix(templating): preserve mixed-case in generic target paths by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6459 - docs(generator): document Password secretKeys for multiple keys by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6440 - docs: Update deprecated field in docs by [@evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6456 - chore(deps): Bump passbolt SDK to v0.8.0 by [@cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in https://github.com/external-secrets/external-secrets/pull/6447 - chore(charts): Expose storeRequeueInterval in helm charts by [@jfhcagip](https://github.com/jfhcagip) in https://github.com/external-secrets/external-secrets/pull/6140 - feat(openbao): support custom CAs via `caBundle` and `caProvider` by [@phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6461 - feat(ngrok): use API filtering for vault and secret lookups by [@jonstacks](https://github.com/jonstacks) in https://github.com/external-secrets/external-secrets/pull/6376 - fix: remove broken link from blog section by [@riccardomc](https://github.com/riccardomc) in https://github.com/external-secrets/external-secrets/pull/6465 - chore: fix the template parser for resolving slice notations by [@Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6449 - fix: bump docs deps for python3.13 by [@evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6475 - fix(kubernetes): replace entire remote secret when pushing rather than merging by [@riccardomc](https://github.com/riccardomc) in https://github.com/external-secrets/external-secrets/pull/6485 - feat(infisical): return NoSecretErr on 404 and add PushSecret support by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6434 - feat(AWS): add `replicationLocations` to AWS SecretsManager provider by [@cmoscofian](https://github.com/cmoscofian) in https://github.com/external-secrets/external-secrets/pull/6451 - feat(openbao): add `auth.userPass` auth method by [@phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6492 - chore(deps): Bump `github.com/pulumi/esc-sdk/sdk` to v0.14.0 by [@phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6495 - chore(onepasswordsdk): fix the caching logic and cleanup the code a bit by [@Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6466 - feat(charts): scope cert-controller RBAC to managed CRDs and webhook secret by [@somaz94](https://github.com/somaz94) in https://github.com/external-secrets/external-secrets/pull/6481 - test(ngrok): Remove over complicated mocks by [@jonstacks](https://github.com/jonstacks) in https://github.com/external-secrets/external-secrets/pull/6483 - chore: Unpin mike by [@evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6477 - docs(akeyless): fix errors and expand provider documentation by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6506 - chore: update go sys net and crypto libs by [@Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6511 - chore(onepasswordsdk): enable the GetAllSecrets and GetSecret unit test and fix it by [@Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6513 - feat(infisical): allow organization slug to be set in secret scope by [@mathnogueira](https://github.com/mathnogueira) in https://github.com/external-secrets/external-secrets/pull/6508 - feat(templating): decode templateFrom values by [@evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6482 - chore(bug): fix missing lgtm runner script from the workflow by [@Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6512 - fix(akeyless): return ReadWrite so PushSecret is routed by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6515 - feat(openbao): add `auth.appRole` auth method by [@phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6497 - feat(externalsecret): add SyncWindows to gate periodic refresh by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6452 - docs(azure): correct Azure Stack example version and note expiry limit by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6522 - feat(openbao): add support for OpenBao Namespaces by [@phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6527 - fix(github): preserve selected repositories on org secret update by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6519 - docs(azure): list WorkloadIdentity in authType field description by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6523 - feat(doppler): include HTTP status in API errors by [@alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6489 ##### Dependencies - chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6437 - chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6438 - chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6435 - chore(deps): bump idna from 3.17 to 3.18 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6439 - chore(deps): bump ubi9/ubi from `8942b73` to `46d19c1` by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6436 - chore(deps): bump platformdirs from 4.9.6 to 4.10.0 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6410 - chore(deps): bump golang from `f23e8b2` to `7a3e500` by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6468 - chore(deps): bump golang from `5d2b868` to `5f68ec6` in /e2e by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6471 - chore(deps): bump tornado from 6.5.6 to 6.5.7 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6473 - chore(deps): bump alpine from 3.23.4 to 3.24.0 in /e2e by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6470 - chore(deps): bump alpine from `5b10f43` to `a2d49ea` by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6469 - chore(deps): bump ubi9/ubi from `46d19c1` to `1b99266` by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6467 - chore(deps): bump alpine from `a2d49ea` to `28bd5fe` in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6472 - chore(deps): bump alpine from 3.24.0 to 3.24.1 in /e2e by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6498 - chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6500 - chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6502 - chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6503 - chore(deps): bump alpine from `a2d49ea` to `28bd5fe` by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6499 - chore(deps): bump golang from `7a3e500` to `3ad5730` by [@dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6501 #### New Contributors - [@tstenner](https://github.com/tstenner) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6422 - [@ruslan-rm](https://github.com/ruslan-rm) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6423 - [@calebmckay](https://github.com/calebmckay) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6445 - [@sdahal-bt](https://github.com/sdahal-bt) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5999 - [@jfhcagip](https://github.com/jfhcagip) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6140 - [@somaz94](https://github.com/somaz94) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6481 - [@mathnogueira](https://github.com/mathnogueira) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6508 **Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0 </details> <details> <summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary> ### [`v87.2.1`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-87.2.1) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1) kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. #### What's Changed - \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/7035 **Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1 </details> <details> <summary>vmware-tanzu/helm-charts (velero)</summary> ### [`v12.1.0`](https://github.com/vmware-tanzu/helm-charts/releases/tag/velero-12.1.0) [Compare Source](https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0) A Helm chart for velero #### What's Changed - \[velero] Add optional PodDisruptionBudget by [@somaz94](https://github.com/somaz94) in https://github.com/vmware-tanzu/helm-charts/pull/740 #### New Contributors - [@somaz94](https://github.com/somaz94) made their first contribution in https://github.com/vmware-tanzu/helm-charts/pull/740 **Full Changelog**: https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0 </details> <details> <summary>vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)</summary> ### [`v1.14.2`](https://github.com/velero-io/velero-plugin-for-aws/releases/tag/v1.14.2) [Compare Source](https://github.com/vmware-tanzu/velero-plugin-for-aws/compare/v1.14.1...v1.14.2) #### All changes - Backport PR [#276](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/276) support for specifying KMS key for EBS volume restoration ([#306](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/306), [@TheKingMarco](https://github.com/TheKingMarco)) - Bump dependencies to fix CVEs for v1.14.2 ([#305](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/305), [@blackpiglet](https://github.com/blackpiglet)) - \[1.14] Bump dependancies version ([#302](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/302), [@blackpiglet](https://github.com/blackpiglet)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot force-pushed renovate/all-minor-patch-updates from 7e4e3955dc to 4f76a208cd

2026-06-25 11:00:29 +00:00

Compare

renovate-bot changed title from ~~chore(deps): update helm release kube-prometheus-stack to v87.2.1~~ to chore(deps): update all-minor-patch-updates

2026-06-25 11:00:59 +00:00

renovate-bot force-pushed renovate/all-minor-patch-updates from 4f76a208cd to 88c78b37f9

2026-06-25 15:00:39 +00:00

Compare

renovate-bot force-pushed renovate/all-minor-patch-updates from 88c78b37f9 to 596a041799

2026-06-26 08:00:31 +00:00

Compare

renovate-bot added 1 commit 2026-06-26 14:00:27 +00:00

chore(deps): update all-minor-patch-updates 69a30fc946

renovate-bot force-pushed renovate/all-minor-patch-updates from 596a041799 to 69a30fc946

2026-06-26 14:00:27 +00:00

Compare

williamp merged commit 970f65f0ba into main

2026-06-26 23:05:39 +00:00

williamp deleted branch renovate/all-minor-patch-updates

2026-06-26 23:05:40 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: infrastructure/weyma-talos#341