kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [argo-cd](https://github.com/argoproj/argo-helm) | patch | `9.5.19` -> `9.5.20` |
| [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.5.0` -> `2.6.0` |
| [kite](https://github.com/kite-org/kite) | patch | `0.12.2` -> `0.12.3` |
| [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | minor | `86.1.1` -> `86.2.0` |
---
### Release Notes
<details>
<summary>argoproj/argo-helm (argo-cd)</summary>
### [`v9.5.20`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.5.20)
[Compare Source](https://github.com/argoproj/argo-helm/compare/argo-cd-9.5.19...argo-cd-9.5.20)
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
#### What's Changed
- chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.86.0 by [@​argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in https://github.com/argoproj/argo-helm/pull/3916
**Full Changelog**: https://github.com/argoproj/argo-helm/compare/argo-rollouts-2.41.0...argo-cd-9.5.20
</details>
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.6.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.6.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.5.0...v2.6.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.6.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.6.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.6.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- chore: release helm chart 2.5.0 by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6352
- feat(keeper): implement provider_api_calls_count metric by [@​m-k8s](https://github.com/m-k8s) in https://github.com/external-secrets/external-secrets/pull/6345
- docs(gcpsm): updates Google Secret Manager authentication guide with WIF usage by [@​bharath-b-rh](https://github.com/bharath-b-rh) in https://github.com/external-secrets/external-secrets/pull/6356
- feat(release): PB-51302 - External secret should support v5-custom-fields resource type by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in https://github.com/external-secrets/external-secrets/pull/6377
- feat(testing): OpenBao e2e test by [@​phil9909](https://github.com/phil9909) in https://github.com/external-secrets/external-secrets/pull/6396
- docs: Explanation of our labels by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6306
- docs: add AGENTS.md and AI setup guide for ESO by [@​rowanruseler](https://github.com/rowanruseler) in https://github.com/external-secrets/external-secrets/pull/6141
- fix(makefile): clean up cross-submodule go.mod churn after make test by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6378
- fix(provider): align TokenRequest body namespace with URL namespace by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6420
- fix(build): use buildx --load and non-registry image tag by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6419
- fix(charts): render PDB spec when minAvailable or maxUnavailable is zero by [@​blindrood](https://github.com/blindrood) in https://github.com/external-secrets/external-secrets/pull/6360
- chore: update go version 1.26.4 by [@​Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6426
##### Dependencies
- chore(deps): bump golang from `91eda97` to `91eda97` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6363
- chore(deps): bump pymdown-extensions from 10.21.2 to 10.21.3 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6370
- chore(deps): bump hashicorp/setup-terraform from 4.0.0 to 4.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6364
- chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6365
- chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.4 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6366
- chore(deps): bump github/codeql-action from 4.35.4 to 4.36.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6368
- chore(deps): bump distroless/static from `47b2d72` to `3592aa8` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6362
- chore(deps): bump ubi9/ubi from `2323fcf` to `151fc1b` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6361
- chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6367
- chore(deps): bump idna from 3.14 to 3.16 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6369
- chore(deps): bump golang from `91eda97` to `91eda97` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6383
- chore(deps): bump golang from `252599a` to `386d475` in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6389
- chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6384
- chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6387
- chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6386
- chore(deps): bump actions/stale from 10.2.0 to 10.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6388
- chore(deps): bump zipp from 3.23.1 to 4.1.0 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6390
- chore(deps): bump click from 8.3.3 to 8.4.1 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6391
- chore(deps): bump certifi from 2026.4.22 to 2026.5.20 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6392
- chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6385
- chore(deps): bump requests from 2.33.1 to 2.34.2 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6372
- chore(deps): bump tornado from 6.5.5 to 6.5.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6412
- chore(deps): bump ubi9/ubi from `151fc1b` to `8942b73` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6407
- chore(deps): bump aws-actions/configure-aws-credentials from 6.1.1 to 6.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6408
- chore(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6409
- chore(deps): bump idna from 3.16 to 3.17 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6411
#### New Contributors
- [@​m-k8s](https://github.com/m-k8s) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6345
- [@​phil9909](https://github.com/phil9909) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6396
- [@​blindrood](https://github.com/blindrood) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6360
**Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.5.0...v2.6.0
</details>
<details>
<summary>kite-org/kite (kite)</summary>
### [`v0.12.3`](https://github.com/kite-org/kite/releases/tag/v0.12.3)
[Compare Source](https://github.com/kite-org/kite/compare/v0.12.2...v0.12.3)
#### What's Changed
##### Authentication And Access Control
- Added stricter cluster access checks for metrics, search, and system endpoints.
- Fixed login redirects to preserve the original target after authentication.
##### Cluster And Streaming
- Fixed cluster names with non-ASCII characters.
- Fixed WebSocket cleanup to close active and connecting sockets and clear timers reliably.
- Fixed terminal pod selection so refreshes do not reset a still-valid selected pod.
##### Helm Releases
- Improved Helm auto-upgrades to preserve custom values while picking up new chart defaults.
- Aligned Helm upgrade field manager behavior with Helm CLI defaults.
##### Resources And UI
- Fixed pod status filtering to match the displayed status reason.
- Improved resource table filter options so active filters remain visible when result sets change.
- Improved tab active-state styling.
##### Fixes And Hardening
- Updated frontend and Go dependencies, including Recharts 3.8.1, React Router 7.17.0, Helm 4.2.0, and related security/runtime packages.
Thanks [@​kincoy](https://github.com/kincoy) [@​zxh326](https://github.com/zxh326)
**Full Changelog**: https://github.com/kite-org/kite/compare/v0.12.2...v0.12.3
</details>
<details>
<summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary>
### [`v86.2.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-86.2.0)
[Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-86.1.1...kube-prometheus-stack-86.2.0)
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
#### What's Changed
- \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@​renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/6971
**Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/alertmanager-1.38.1...kube-prometheus-stack-86.2.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot
changed title from chore(deps): update helm release kube-prometheus-stack to v86.2.0 to chore(deps): update all-minor-patch-updates2026-06-06 19:00:59 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
9.5.19->9.5.202.5.0->2.6.00.12.2->0.12.386.1.1->86.2.0Release Notes
argoproj/argo-helm (argo-cd)
v9.5.20Compare Source
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
What's Changed
Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-rollouts-2.41.0...argo-cd-9.5.20
external-secrets/external-secrets (external-secrets)
v2.6.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.6.0Image:
ghcr.io/external-secrets/external-secrets:v2.6.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.6.0-ubi-boringsslWhat's Changed
General
Dependencies
91eda97to91eda97by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/636347b2d72to3592aa8by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/63622323fcfto151fc1bby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/636191eda97to91eda97by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6383252599ato386d475in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6389151fc1bto8942b73by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6407New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.5.0...v2.6.0
kite-org/kite (kite)
v0.12.3Compare Source
What's Changed
Authentication And Access Control
Cluster And Streaming
Helm Releases
Resources And UI
Fixes And Hardening
Thanks @kincoy @zxh326
Full Changelog: https://github.com/kite-org/kite/compare/v0.12.2...v0.12.3
prometheus-community/helm-charts (kube-prometheus-stack)
v86.2.0Compare Source
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
What's Changed
Full Changelog: https://github.com/prometheus-community/helm-charts/compare/alertmanager-1.38.1...kube-prometheus-stack-86.2.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
e2347ed011toab88d009f7chore(deps): update helm release kube-prometheus-stack to v86.2.0to chore(deps): update all-minor-patch-updatesab88d009f7toc5182b3153c5182b3153to2f3b3104b5