This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.1.0` -> `2.2.0` |
---
### Release Notes
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.2.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release charts v2.1.0 by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6030
- chore: fix the stability doc by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6035
- fix(security): Fix vulnerabilities by [@​othomann](https://github.com/othomann) in https://github.com/external-secrets/external-secrets/pull/6052
- fix(aws): sync tags and resource policy even when secret value unchanged by [@​evs-secops](https://github.com/evs-secops) in https://github.com/external-secrets/external-secrets/pull/6025
- fix: publish now uses docker build v4 which required some changes by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6062
- feat(gcpsm): auto-detect projectID from GCP metadata server by [@​patjlm](https://github.com/patjlm) in https://github.com/external-secrets/external-secrets/pull/5922
- chore(templating): Remove years in license and their checks by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/5955
- docs: Add Roche to official ADOPTERS by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6076
- feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in https://github.com/external-secrets/external-secrets/pull/6068
- fix(onepassword): support native item IDs by [@​chadxz](https://github.com/chadxz) in https://github.com/external-secrets/external-secrets/pull/6073
- feat: extract LGTM processor to external JS file with tests by [@​mateenali66](https://github.com/mateenali66) in https://github.com/external-secrets/external-secrets/pull/6074
- feat: fail fast if LGTM label does not exist in repository by [@​mateenali66](https://github.com/mateenali66) in https://github.com/external-secrets/external-secrets/pull/6078
- feat(passbolt): add support for Passbolt V5 API by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in https://github.com/external-secrets/external-secrets/pull/5919
- fix(infisical): dataFrom.find.path should filter by secret path not name by [@​johnvox](https://github.com/johnvox) in https://github.com/external-secrets/external-secrets/pull/6086
- fix: disable the priority queue which misbehaves at scale by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6083
- chore: update go version to 1.26.1 by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6072
- docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@​Br1an67](https://github.com/Br1an67) in https://github.com/external-secrets/external-secrets/pull/6056
- fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@​Br1an67](https://github.com/Br1an67) in https://github.com/external-secrets/external-secrets/pull/6036
- feat(templating): Add certSANs function to extract SANs from certificates by [@​mzdeb](https://github.com/mzdeb) in https://github.com/external-secrets/external-secrets/pull/6058
- docs: document template.metadata labels/annotations behavior by [@​lucpas](https://github.com/lucpas) in https://github.com/external-secrets/external-secrets/pull/6102
- fix: CODEOWNERS are seriously out of date by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6106
- feat(helm): add readinessProbe support for external-secrets deployment by [@​AlexOQ](https://github.com/AlexOQ) in https://github.com/external-secrets/external-secrets/pull/5831
- fix: update grpc for CVE-2026-33186 by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6108
- feat(azurekv): add expiration time to azure kv secret by [@​muraliavarma](https://github.com/muraliavarma) in https://github.com/external-secrets/external-secrets/pull/5935
- feat: add path to cloud.ru provider by [@​heavyandrew](https://github.com/heavyandrew) in https://github.com/external-secrets/external-secrets/pull/5952
- fix(add-eso-version): fix separator line pattern in add_eso_version.sh script by [@​riccardomc](https://github.com/riccardomc) in https://github.com/external-secrets/external-secrets/pull/6113
##### Dependencies
- chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6038
- chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6047
- chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6050
- chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6049
- chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6039
- chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6043
- chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6040
- chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6044
- chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6042
- chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6041
- chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6046
- chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6048
- chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6093
- chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6088
- chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6087
- chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6096
- chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6094
- chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6095
- chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6089
- chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6092
- chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6090
- chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6091
#### New Contributors
- [@​othomann](https://github.com/othomann) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6052
- [@​evs-secops](https://github.com/evs-secops) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6025
- [@​patjlm](https://github.com/patjlm) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5922
- [@​jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6068
- [@​chadxz](https://github.com/chadxz) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6073
- [@​mateenali66](https://github.com/mateenali66) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6074
- [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5919
- [@​johnvox](https://github.com/johnvox) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6086
- [@​Br1an67](https://github.com/Br1an67) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6056
- [@​mzdeb](https://github.com/mzdeb) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6058
- [@​lucpas](https://github.com/lucpas) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6102
- [@​AlexOQ](https://github.com/AlexOQ) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5831
- [@​muraliavarma](https://github.com/muraliavarma) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5935
- [@​heavyandrew](https://github.com/heavyandrew) made their first contribution in https://github.com/external-secrets/external-secrets/pull/5952
**Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.1.0->2.2.0Release Notes
external-secrets/external-secrets (external-secrets)
v2.2.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.2.0Image:
ghcr.io/external-secrets/external-secrets:v2.2.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringsslWhat's Changed
General
Dependencies
28efbe9to47b2d72by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6088cecb1cdto6ed9f6fby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6087New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.