This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.10.0` -> `2.11.0` |
| [ghcr.io/siderolabs/discovery-service](https://github.com/siderolabs/discovery-service) | patch | `v1.1.1` -> `v1.1.2` |
| [velero/velero-plugin-for-aws](https://github.com/vmware-tanzu/velero-plugin-for-aws) | patch | `v1.14.2` -> `v1.14.3` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.11.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.11.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.10.0...v2.11.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.11.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.11.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.11.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release helm chart for 2.10.0 by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6882
- docs: use --hostname all in the Bitwarden webhook example by [@​ggiesen](https://github.com/ggiesen) in https://github.com/external-secrets/external-secrets/pull/6850
- fix(ci): zizmor no-op blocks gates by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6889
- feat(barbican): Support OpenStack Barbican authentication via Application Credentials by [@​JaviMore](https://github.com/JaviMore) in https://github.com/external-secrets/external-secrets/pull/6082
- clean: replace k8s.io/utils pointer helpers with the new builtin by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6902
- feat(webhook): return not supported error for GetAllSecrets by [@​Abderraoufzekkour](https://github.com/Abderraoufzekkour) in https://github.com/external-secrets/external-secrets/pull/6817
- fix(keepersecurity): return NoSecretErr for missing records by [@​alliasgher](https://github.com/alliasgher) in https://github.com/external-secrets/external-secrets/pull/6816
- fix: doc builds may set different user/group ownership on git repo objects by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6901
- fix: Use local GCP import for Vault modules by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6904
- fix: guarantee replaces by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6905
- chore: bump grpc by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6909
- fix: bump Makefile license-eye image to 0.9.0 by [@​dronenb](https://github.com/dronenb) in https://github.com/external-secrets/external-secrets/pull/6855
- feat(infisical): add option to keep duplicate secret keys by [@​mathnogueira](https://github.com/mathnogueira) in https://github.com/external-secrets/external-secrets/pull/6908
- ref: move provider constants by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6883
- feat: allow specifying namespace for grafana dashboard ConfigMap by [@​okwilkins](https://github.com/okwilkins) in https://github.com/external-secrets/external-secrets/pull/6920
- fix(keepersecurity): make folderID optional except when creating new records via push by [@​LGKentang](https://github.com/LGKentang) in https://github.com/external-secrets/external-secrets/pull/6921
- docs(templating): remove duplicate a in TemplateFrom Literal note by [@​mrchatam](https://github.com/mrchatam) in https://github.com/external-secrets/external-secrets/pull/6953
- feat(ci): close pull requests that drop a template section by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6881
- feat(charts): add global.imageRegistry to the external-secrets chart by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6983
- chore: update skywalking-eyes by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6970
- ref: fix Sonarqube linting alerts by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6974
- chore: Revert [#​6908](https://github.com/external-secrets/external-secrets/issues/6908) by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6991
- chore: prepare release support matrix by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6993
##### Dependencies
- chore(deps): bump golang from `484ef60` to `ded31c6` in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6892
- chore(deps): bump ubi9/ubi from `5426a8f` to `25a147d` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6890
- chore(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6895
- chore(deps): bump the codeql group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6893
- chore(deps): bump azure/login from 3.0.1 to 3.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6896
- chore(deps): bump golang from 1.27.0-bookworm to 1.27.1-bookworm in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6923
- chore(deps): bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6925
- chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6927
- chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6924
- chore(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6926
- chore(deps): bump helm/kind-action from 1.14.0 to 1.15.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6928
- chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6929
- chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6960
- chore(deps): bump ubi9/ubi from `25a147d` to `c5cc9c2` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6956
#### New Contributors
- [@​ggiesen](https://github.com/ggiesen) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6850
- [@​JaviMore](https://github.com/JaviMore) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6082
- [@​Abderraoufzekkour](https://github.com/Abderraoufzekkour) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6817
- [@​okwilkins](https://github.com/okwilkins) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6920
- [@​LGKentang](https://github.com/LGKentang) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6921
- [@​mrchatam](https://github.com/mrchatam) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6953
**Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.10.0...v2.11.0
</details>
<details>
<summary>siderolabs/discovery-service (ghcr.io/siderolabs/discovery-service)</summary>
### [`v1.1.2`](https://github.com/siderolabs/discovery-service/releases/tag/v1.1.2)
[Compare Source](https://github.com/siderolabs/discovery-service/compare/v1.1.1...v1.1.2)
#### [discovery-service 1.1.2](https://github.com/siderolabs/discovery-service/releases/tag/v1.1.2) (2026-09-21)
Welcome to the v1.1.2 release of discovery-service!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/discovery-service/issues.
##### Contributors
- Andrey Smirnov
- Maja Bojarska
- Steve Wills
##### Changes
<details><summary>5 commits</summary>
<p>
- [`90d0dca`](https://github.com/siderolabs/discovery-service/commit/90d0dca7c0d8bbbe3951071be63fd08df2dc46c5) release(v1.1.2): prepare release
- [`293c000`](https://github.com/siderolabs/discovery-service/commit/293c000f0c36dee2dbf3233a642354085e8ad599) feat: optimize memory usage of Discovery Service
- [`dedbdb1`](https://github.com/siderolabs/discovery-service/commit/dedbdb1ef89d96be89e2e732a92ca4e4ec5f8d8e) chore: update golang, direct deps, generate
- [`3f6e594`](https://github.com/siderolabs/discovery-service/commit/3f6e59476dd1687f5b250dece2bd3f613a3f5812) chore: rekres
- [`14ae016`](https://github.com/siderolabs/discovery-service/commit/14ae0162569fe54c8349504e2bb3e501f469e279) feat: add flag to configure log level
</p>
</details>
##### Dependency Changes
- **golang.org/x/net** v0.58.0 -> v0.59.0
- **golang.org/x/sync** v0.22.0 -> v0.23.0
- **golang.org/x/time** v0.15.0 -> v0.16.0
Previous release can be found at [v1.1.1](https://github.com/siderolabs/discovery-service/releases/tag/v1.1.1)
</details>
<details>
<summary>vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)</summary>
### [`v1.14.3`](https://github.com/velero-io/velero-plugin-for-aws/releases/tag/v1.14.3)
[Compare Source](https://github.com/vmware-tanzu/velero-plugin-for-aws/compare/v1.14.2...v1.14.3)
#### All changes
- Bump golang version and google.golang.org/grpc version. ([#​333](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/333), [@​blackpiglet](https://github.com/blackpiglet))
- Bump dependencies and Go version to fix CVEs ([#​329](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/329), [@​blackpiglet](https://github.com/blackpiglet))
- Fix prevent amz-checksum encapsulation when checksumAlgorithm="" ([#​313](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/313), [@​kaovilai](https://github.com/kaovilai))
- Fix SSE-C signed URLs ([#​310](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/310), [@​Minding000](https://github.com/Minding000))
- Only set PutObject Tagging when tags are configured ([#​309](https://github.com/vmware-tanzu/velero-plugin-for-aws/issues/309), [@​cleverer](https://github.com/cleverer))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot
changed title from chore(deps): update ghcr.io/siderolabs/discovery-service docker tag to v1.1.2 to chore(deps): update all-minor-patch-updates2026-09-21 13:03:28 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.10.0->2.11.0v1.1.1->v1.1.2v1.14.2->v1.14.3Release Notes
external-secrets/external-secrets (external-secrets)
v2.11.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.11.0Image:
ghcr.io/external-secrets/external-secrets:v2.11.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.11.0-ubi-boringsslWhat's Changed
General
Dependencies
484ef60toded31c6in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/68925426a8fto25a147dby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/689025a147dtoc5cc9c2by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6956New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.10.0...v2.11.0
siderolabs/discovery-service (ghcr.io/siderolabs/discovery-service)
v1.1.2Compare Source
discovery-service 1.1.2 (2026-09-21)
Welcome to the v1.1.2 release of discovery-service!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/discovery-service/issues.
Contributors
Changes
5 commits
90d0dcarelease(v1.1.2): prepare release293c000feat: optimize memory usage of Discovery Servicededbdb1chore: update golang, direct deps, generate3f6e594chore: rekres14ae016feat: add flag to configure log levelDependency Changes
Previous release can be found at v1.1.1
vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)
v1.14.3Compare Source
All changes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
f75401f73ctocf84f15bd8chore(deps): update ghcr.io/siderolabs/discovery-service docker tag to v1.1.2to chore(deps): update all-minor-patch-updatescf84f15bd8to8b5c0dbb0f