chore(deps): update all-minor-patch-updates #341

Merged
williamp merged 1 commits from renovate/all-minor-patch-updates into main 2026-06-26 23:05:39 +00:00
Member

This PR contains the following updates:

Package Update Change
argo-cd patch 9.7.0 -> 9.7.1
cert-manager (source) patch v1.20.2 -> v1.20.3
external-secrets minor 2.6.0 -> 2.7.0
kube-prometheus-stack (source) patch 87.2.0 -> 87.2.1
velero (source) minor 12.0.3 -> 12.1.0
velero/velero-plugin-for-aws patch v1.14.1 -> v1.14.2

Release Notes

argoproj/argo-helm (argo-cd)

v9.7.1

Compare Source

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

What's Changed

New Contributors

Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-workflows-1.0.18...argo-cd-9.7.1

cert-manager/cert-manager (cert-manager)

v1.20.3

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release fixes a security issue (GHSA-8rvj-mm4h-c258, HIGH) where the default cert-manager-edit aggregate ClusterRole granted namespace users permission to create ACME Challenge and Order resources directly. A user who could create a Challenge referencing a ClusterIssuer could supply attacker-controlled solver configuration while cert-manager loaded credentials from the ClusterIssuer's namespace, bypassing Issuer solver selectors (dnsZones, dnsNames, matchLabels). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.

This release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs.

All users should upgrade.

[!WARNING]
Potentially breaking change: The cert-manager-edit aggregate ClusterRole no longer grants create for challenges.acme.cert-manager.io or create, patch, update for orders.acme.cert-manager.io. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate → CertificateRequest → Order → Challenge flow), you will need to grant those permissions explicitly.

Changes by Kind

Bug or Regression
Other (Cleanup or Flake)
external-secrets/external-secrets (external-secrets)

v2.7.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.7.0
Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0

prometheus-community/helm-charts (kube-prometheus-stack)

v87.2.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

Full Changelog: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1

vmware-tanzu/helm-charts (velero)

v12.1.0

Compare Source

A Helm chart for velero

What's Changed

New Contributors

Full Changelog: https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0

vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)

v1.14.2

Compare Source

All changes


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [argo-cd](https://github.com/argoproj/argo-helm) | patch | `9.7.0` -> `9.7.1` | | [cert-manager](https://cert-manager.io) ([source](https://github.com/cert-manager/cert-manager)) | patch | `v1.20.2` -> `v1.20.3` | | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.6.0` -> `2.7.0` | | [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | patch | `87.2.0` -> `87.2.1` | | [velero](https://github.com/vmware-tanzu/velero) ([source](https://github.com/vmware-tanzu/helm-charts)) | minor | `12.0.3` -> `12.1.0` | | [velero/velero-plugin-for-aws](https://github.com/vmware-tanzu/velero-plugin-for-aws) | patch | `v1.14.1` -> `v1.14.2` | --- ### Release Notes <details> <summary>argoproj/argo-helm (argo-cd)</summary> ### [`v9.7.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.7.1) [Compare Source](https://github.com/argoproj/argo-helm/compare/argo-cd-9.7.0...argo-cd-9.7.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): gate redis metrics NetworkPolicy rule behind exporter.enabled by [@&#8203;yugstar](https://github.com/yugstar) in https://github.com/argoproj/argo-helm/pull/3930 #### New Contributors - [@&#8203;yugstar](https://github.com/yugstar) made their first contribution in https://github.com/argoproj/argo-helm/pull/3930 **Full Changelog**: https://github.com/argoproj/argo-helm/compare/argo-workflows-1.0.18...argo-cd-9.7.1 </details> <details> <summary>cert-manager/cert-manager (cert-manager)</summary> ### [`v1.20.3`](https://github.com/cert-manager/cert-manager/releases/tag/v1.20.3) [Compare Source](https://github.com/cert-manager/cert-manager/compare/v1.20.2...v1.20.3) cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters. This patch release fixes a security issue ([`GHSA-8rvj-mm4h-c258`](https://github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258), HIGH) where the default `cert-manager-edit` aggregate ClusterRole granted namespace users permission to create ACME `Challenge` and `Order` resources directly. A user who could create a `Challenge` referencing a `ClusterIssuer` could supply attacker-controlled solver configuration while cert-manager loaded credentials from the `ClusterIssuer`'s namespace, bypassing Issuer solver selectors (`dnsZones`, `dnsNames`, `matchLabels`). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint. This release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs. All users should upgrade. > \[!WARNING] > **Potentially breaking change:** The `cert-manager-edit` aggregate ClusterRole no longer grants `create` for `challenges.acme.cert-manager.io` or `create`, `patch`, `update` for `orders.acme.cert-manager.io`. These resources are internal to cert-manager's ACME workflow and are not intended to be created or modified directly by users. If you have tooling or workflows that create Challenge or Order resources directly (outside of the normal Certificate → CertificateRequest → Order → Challenge flow), you will need to grant those permissions explicitly. #### Changes by Kind ##### Bug or Regression - Security (HIGH): Remove Challenge `create` and Order `create`, `patch`, `update` verbs from the `cert-manager-edit` aggregate ClusterRole ([`GHSA-8rvj-mm4h-c258`](https://github.com/cert-manager/cert-manager/security/advisories/GHSA-8rvj-mm4h-c258)). ([#&#8203;8940](https://github.com/cert-manager/cert-manager/issues/8940), [@&#8203;wallrj-cyberark](https://github.com/wallrj-cyberark)) - Remove issuer owner reference from challenges blocking challenge garbage collection ([#&#8203;8759](https://github.com/cert-manager/cert-manager/issues/8759), [@&#8203;cert-manager-bot](https://github.com/cert-manager-bot)) ##### Other (Cleanup or Flake) - Bump go to 1.26.3, other deps to fix several govulncheck issues ([#&#8203;8789](https://github.com/cert-manager/cert-manager/issues/8789), [@&#8203;SgtCoDFish](https://github.com/SgtCoDFish)) - Update Go to `v1.26.4` to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 ([#&#8203;8926](https://github.com/cert-manager/cert-manager/issues/8926), [@&#8203;wallrj-cyberark](https://github.com/wallrj-cyberark)) </details> <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.7.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.7.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0) Image: `ghcr.io/external-secrets/external-secrets:v2.7.0` Image: `ghcr.io/external-secrets/external-secrets:v2.7.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm charts 2.6.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6427 - test: add Infisical provider e2e suite by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6415 - docs: fix discrepancies and add missing documentation for GitLab provider by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6430 - docs: fix discrepancies and add missing documentation for Infisical provider by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6431 - feat(templating): add hexdec function by [@&#8203;tstenner](https://github.com/tstenner) in https://github.com/external-secrets/external-secrets/pull/6422 - fix(volcengine): honor secretRef.namespace for ClusterSecretStore by [@&#8203;ruslan-rm](https://github.com/ruslan-rm) in https://github.com/external-secrets/external-secrets/pull/6423 - docs(core): correct CRD examples and document missing fields by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6441 - feat(provider): initial dedicated OpenBao provider by [@&#8203;phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6405 - feat(onepasswordsdk): implement GetAllSecrets by [@&#8203;calebmckay](https://github.com/calebmckay) in https://github.com/external-secrets/external-secrets/pull/6445 - feat(controller): log secret deletions and data-key changes by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6443 - feat: Add BeyondTrust WorkloadCredentials provider by [@&#8203;sdahal-bt](https://github.com/sdahal-bt) in https://github.com/external-secrets/external-secrets/pull/5999 - fix(charts): truncate component names to stay within 63-char DNS limit by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6428 - docs(gitops-fluxcd): fix webhook race condition in Flux deployment guide by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6455 - fix: no need for the field to have a default if it can be omitted by [@&#8203;knelasevero](https://github.com/knelasevero) in https://github.com/external-secrets/external-secrets/pull/6453 - fix(templating): preserve mixed-case in generic target paths by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6459 - docs(generator): document Password secretKeys for multiple keys by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6440 - docs: Update deprecated field in docs by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6456 - chore(deps): Bump passbolt SDK to v0.8.0 by [@&#8203;cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in https://github.com/external-secrets/external-secrets/pull/6447 - chore(charts): Expose storeRequeueInterval in helm charts by [@&#8203;jfhcagip](https://github.com/jfhcagip) in https://github.com/external-secrets/external-secrets/pull/6140 - feat(openbao): support custom CAs via `caBundle` and `caProvider` by [@&#8203;phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6461 - feat(ngrok): use API filtering for vault and secret lookups by [@&#8203;jonstacks](https://github.com/jonstacks) in https://github.com/external-secrets/external-secrets/pull/6376 - fix: remove broken link from blog section by [@&#8203;riccardomc](https://github.com/riccardomc) in https://github.com/external-secrets/external-secrets/pull/6465 - chore: fix the template parser for resolving slice notations by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6449 - fix: bump docs deps for python3.13 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6475 - fix(kubernetes): replace entire remote secret when pushing rather than merging by [@&#8203;riccardomc](https://github.com/riccardomc) in https://github.com/external-secrets/external-secrets/pull/6485 - feat(infisical): return NoSecretErr on 404 and add PushSecret support by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6434 - feat(AWS): add `replicationLocations` to AWS SecretsManager provider by [@&#8203;cmoscofian](https://github.com/cmoscofian) in https://github.com/external-secrets/external-secrets/pull/6451 - feat(openbao): add `auth.userPass` auth method by [@&#8203;phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6492 - chore(deps): Bump `github.com/pulumi/esc-sdk/sdk` to v0.14.0 by [@&#8203;phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6495 - chore(onepasswordsdk): fix the caching logic and cleanup the code a bit by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6466 - feat(charts): scope cert-controller RBAC to managed CRDs and webhook secret by [@&#8203;somaz94](https://github.com/somaz94) in https://github.com/external-secrets/external-secrets/pull/6481 - test(ngrok): Remove over complicated mocks by [@&#8203;jonstacks](https://github.com/jonstacks) in https://github.com/external-secrets/external-secrets/pull/6483 - chore: Unpin mike by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6477 - docs(akeyless): fix errors and expand provider documentation by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6506 - chore: update go sys net and crypto libs by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6511 - chore(onepasswordsdk): enable the GetAllSecrets and GetSecret unit test and fix it by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6513 - feat(infisical): allow organization slug to be set in secret scope by [@&#8203;mathnogueira](https://github.com/mathnogueira) in https://github.com/external-secrets/external-secrets/pull/6508 - feat(templating): decode templateFrom values by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6482 - chore(bug): fix missing lgtm runner script from the workflow by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6512 - fix(akeyless): return ReadWrite so PushSecret is routed by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6515 - feat(openbao): add `auth.appRole` auth method by [@&#8203;phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6497 - feat(externalsecret): add SyncWindows to gate periodic refresh by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6452 - docs(azure): correct Azure Stack example version and note expiry limit by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6522 - feat(openbao): add support for OpenBao Namespaces by [@&#8203;phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6527 - fix(github): preserve selected repositories on org secret update by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6519 - docs(azure): list WorkloadIdentity in authType field description by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6523 - feat(doppler): include HTTP status in API errors by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6489 ##### Dependencies - chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6437 - chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6438 - chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6435 - chore(deps): bump idna from 3.17 to 3.18 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6439 - chore(deps): bump ubi9/ubi from `8942b73` to `46d19c1` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6436 - chore(deps): bump platformdirs from 4.9.6 to 4.10.0 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6410 - chore(deps): bump golang from `f23e8b2` to `7a3e500` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6468 - chore(deps): bump golang from `5d2b868` to `5f68ec6` in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6471 - chore(deps): bump tornado from 6.5.6 to 6.5.7 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6473 - chore(deps): bump alpine from 3.23.4 to 3.24.0 in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6470 - chore(deps): bump alpine from `5b10f43` to `a2d49ea` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6469 - chore(deps): bump ubi9/ubi from `46d19c1` to `1b99266` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6467 - chore(deps): bump alpine from `a2d49ea` to `28bd5fe` in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6472 - chore(deps): bump alpine from 3.24.0 to 3.24.1 in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6498 - chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6500 - chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6502 - chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6503 - chore(deps): bump alpine from `a2d49ea` to `28bd5fe` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6499 - chore(deps): bump golang from `7a3e500` to `3ad5730` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6501 #### New Contributors - [@&#8203;tstenner](https://github.com/tstenner) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6422 - [@&#8203;ruslan-rm](https://github.com/ruslan-rm) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6423 - [@&#8203;calebmckay](https://github.com/calebmckay) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6445 - [@&#8203;sdahal-bt](https://github.com/sdahal-bt) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5999 - [@&#8203;jfhcagip](https://github.com/jfhcagip) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6140 - [@&#8203;somaz94](https://github.com/somaz94) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6481 - [@&#8203;mathnogueira](https://github.com/mathnogueira) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6508 **Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0 </details> <details> <summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary> ### [`v87.2.1`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-87.2.1) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1) kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. #### What's Changed - \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/7035 **Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1 </details> <details> <summary>vmware-tanzu/helm-charts (velero)</summary> ### [`v12.1.0`](https://github.com/vmware-tanzu/helm-charts/releases/tag/velero-12.1.0) [Compare Source](https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0) A Helm chart for velero #### What's Changed - \[velero] Add optional PodDisruptionBudget by [@&#8203;somaz94](https://github.com/somaz94) in https://github.com/vmware-tanzu/helm-charts/pull/740 #### New Contributors - [@&#8203;somaz94](https://github.com/somaz94) made their first contribution in https://github.com/vmware-tanzu/helm-charts/pull/740 **Full Changelog**: https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0 </details> <details> <summary>vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)</summary> ### [`v1.14.2`](https://github.com/velero-io/velero-plugin-for-aws/releases/tag/v1.14.2) [Compare Source](https://github.com/vmware-tanzu/velero-plugin-for-aws/compare/v1.14.1...v1.14.2) #### All changes - Backport PR [#&#8203;276](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/276) support for specifying KMS key for EBS volume restoration ([#&#8203;306](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/306), [@&#8203;TheKingMarco](https://github.com/TheKingMarco)) - Bump dependencies to fix CVEs for v1.14.2 ([#&#8203;305](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/305), [@&#8203;blackpiglet](https://github.com/blackpiglet)) - \[1.14] Bump dependancies version ([#&#8203;302](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/302), [@&#8203;blackpiglet](https://github.com/blackpiglet)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot force-pushed renovate/all-minor-patch-updates from 7e4e3955dc to 4f76a208cd 2026-06-25 11:00:29 +00:00 Compare
renovate-bot changed title from chore(deps): update helm release kube-prometheus-stack to v87.2.1 to chore(deps): update all-minor-patch-updates 2026-06-25 11:00:59 +00:00
renovate-bot force-pushed renovate/all-minor-patch-updates from 4f76a208cd to 88c78b37f9 2026-06-25 15:00:39 +00:00 Compare
renovate-bot force-pushed renovate/all-minor-patch-updates from 88c78b37f9 to 596a041799 2026-06-26 08:00:31 +00:00 Compare
renovate-bot added 1 commit 2026-06-26 14:00:27 +00:00
renovate-bot force-pushed renovate/all-minor-patch-updates from 596a041799 to 69a30fc946 2026-06-26 14:00:27 +00:00 Compare
williamp merged commit 970f65f0ba into main 2026-06-26 23:05:39 +00:00
williamp deleted branch renovate/all-minor-patch-updates 2026-06-26 23:05:40 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: infrastructure/weyma-talos#341