chore(deps): update helm release external-secrets to v2.9.0 #367

Merged
williamp merged 1 commits from renovate/all-minor-patch-updates into main 2026-08-08 15:32:31 +00:00
Member

This PR contains the following updates:

Package Update Change
external-secrets minor 2.8.0 -> 2.9.0

Release Notes

external-secrets/external-secrets (external-secrets)

v2.9.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.9.0
Image: ghcr.io/external-secrets/external-secrets:v2.9.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.9.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.8.0` -> `2.9.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.9.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.9.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0) Image: `ghcr.io/external-secrets/external-secrets:v2.9.0` Image: `ghcr.io/external-secrets/external-secrets:v2.9.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.9.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart 2.8.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6656 - fix(conjur): add InstallTimeout to helm chart installation and pin server image version by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6658 - fix(deps): bump grpc-go for GHSA-hrxh-6v49-42gf by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6695 - feat(charts): add opt-in schedulerName and runtimeClassName to the pods by [@&#8203;somaz94](https://github.com/somaz94) in https://github.com/external-secrets/external-secrets/pull/6675 - fix(webhookconfig): use a constant Eventf format by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6699 - fix: bump codeqls together by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6707 - fix(security): install crane in a reliable way and fix code scanning issue by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6712 - chore: Fix cve-2026-56852 by bump golang.org/x/[email protected] by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6734 - chore(fix): template abuse for secret values by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6730 - chore: Bump controller runtime by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6703 - chore(fix): moved the validation further up the chain by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6735 - fix: pin all dependencies by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6727 - feat(e2e): implement fan-out matrix validation and credential scoping by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6660 - fix(akeyless): use local errors.As target to avoid data race by [@&#8203;HYPERVAPOR](https://github.com/HYPERVAPOR) in https://github.com/external-secrets/external-secrets/pull/6749 - test(crd): add e2e suite and CI leg for the CRD provider by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6742 - docs(webhook): add debugging guide and fix stale secret-label claim by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6746 - test(e2e): skip the global addon uninstall on disposable clusters by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6780 - feat: add environments support to 1Password SDK by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6318 - fix(akeyless): stop reporting API failures as a missing item by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6753 - fix(makefile): harden clean worktree check by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6702 - fix: support docs builds from worktrees by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6741 - feat(cache): add atomic ContainsOrAdd by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6706 - fix: omit empty AWS secret replica regions by [@&#8203;goutamadwant](https://github.com/goutamadwant) in https://github.com/external-secrets/external-secrets/pull/6596 - fix: Follow up PR6318 by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6782 - feat: Show sponsoring of Roche by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6790 - fix(e2e): make the oracle suite runnable by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6770 - chore: temporarily allow GHSA-gcjh-h69q-9w9g by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6795 - fix(api): stop defaulting optional ExternalSecret strategy fields by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6798 - chore: remove/cleanup remaining tools from tools.go. by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6786 - chore: Cleanup sponsors dead links by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6791 - fix(aws): detach replicated regions before deleting AWS SecretsManager secret by [@&#8203;cmoscofian](https://github.com/cmoscofian) in https://github.com/external-secrets/external-secrets/pull/6687 - chore: fix enable cache being removed on installCRD=false by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6799 ##### Dependencies - chore(deps): bump golang from `0178a64` to `0178a64` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6663 - chore(deps): bump mkdocs-material from 9.7.6 to 9.7.7 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6669 - chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6674 - chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6667 - chore(deps): bump fkirc/skip-duplicate-actions from 5.3.1 to 5.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6671 - chore(deps): bump actions/stale from 10.3.0 to 10.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6673 - chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6672 - chore(deps): bump aws-actions/configure-aws-credentials from 4.0.2 to 6.2.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6670 - chore(deps): bump distroless/static from `d5f030c` to `9197324` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6662 - chore(deps): bump ubi9/ubi from `8bf0e8f` to `2a6bd69` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6661 - chore(deps): bump actions/setup-go from 6.0.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6664 - chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6665 - chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6666 - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6715 - chore(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6717 - chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6722 - chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.3 in the codeql group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6713 - chore(deps): bump google-github-actions/auth from [`fc21748`](https://github.com/external-secrets/external-secrets/commit/fc2174804b84f912b1f6d334e9463f484f1c552d) to [`cd3439a`](https://github.com/external-secrets/external-secrets/commit/cd3439a4d2c29fd597fb063e209ee2c2d6128dcd) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6714 - chore(deps): bump actions/cache from 4.2.4 to 6.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6716 - chore(deps): bump actions/labeler from 6.1.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6718 - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6719 - chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6720 - chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6723 - chore(deps): bump docker/login-action from 4.4.0 to 4.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6736 - chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6738 - chore(deps): bump the codeql group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6751 - chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6752 - chore(deps): bump the codeql group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6801 - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6802 - chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6805 - chore(deps): bump azure/login from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6804 - chore(deps): bump google-github-actions/auth from [`cd3439a`](https://github.com/external-secrets/external-secrets/commit/cd3439a4d2c29fd597fb063e209ee2c2d6128dcd) to [`1206044`](https://github.com/external-secrets/external-secrets/commit/12060449e87204eca501a11f2f7f1483024afff0) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6737 - chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6803 #### New Contributors - [@&#8203;HYPERVAPOR](https://github.com/HYPERVAPOR) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6749 - [@&#8203;goutamadwant](https://github.com/goutamadwant) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6596 **Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot added 1 commit 2026-08-08 13:00:32 +00:00
williamp merged commit 59103c4e85 into main 2026-08-08 15:32:31 +00:00
williamp deleted branch renovate/all-minor-patch-updates 2026-08-08 15:32:31 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: infrastructure/weyma-talos#367