chore(deps): update all-minor-patch-updates #341
Reference in New Issue
Block a user
Delete Branch "renovate/all-minor-patch-updates"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
9.7.0->9.7.1v1.20.2->v1.20.32.6.0->2.7.087.2.0->87.2.112.0.3->12.1.0v1.14.1->v1.14.2Release Notes
argoproj/argo-helm (argo-cd)
v9.7.1Compare Source
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
What's Changed
New Contributors
Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-workflows-1.0.18...argo-cd-9.7.1
cert-manager/cert-manager (cert-manager)
v1.20.3Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
This patch release fixes a security issue (
GHSA-8rvj-mm4h-c258, HIGH) where the defaultcert-manager-editaggregate ClusterRole granted namespace users permission to create ACMEChallengeandOrderresources directly. A user who could create aChallengereferencing aClusterIssuercould supply attacker-controlled solver configuration while cert-manager loaded credentials from theClusterIssuer's namespace, bypassing Issuer solver selectors (dnsZones,dnsNames,matchLabels). With the acme-dns provider specifically, this could disclose DNS credentials to an attacker-controlled endpoint.This release also removes the issuer owner reference from Challenges which was blocking Challenge garbage collection, and updates Go to fix reported CVEs.
All users should upgrade.
Changes by Kind
Bug or Regression
createand Ordercreate,patch,updateverbs from thecert-manager-editaggregate ClusterRole (GHSA-8rvj-mm4h-c258). (#8940, @wallrj-cyberark)Other (Cleanup or Flake)
v1.26.4to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507 (#8926, @wallrj-cyberark)external-secrets/external-secrets (external-secrets)
v2.7.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.7.0Image:
ghcr.io/external-secrets/external-secrets:v2.7.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringsslWhat's Changed
General
caBundleandcaProviderby @phil9909 in https://github.com/external-secrets/external-secrets/pull/6461replicationLocationsto AWS SecretsManager provider by @cmoscofian in https://github.com/external-secrets/external-secrets/pull/6451auth.userPassauth method by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6492github.com/pulumi/esc-sdk/sdkto v0.14.0 by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6495auth.appRoleauth method by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6497Dependencies
8942b73to46d19c1by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6436f23e8b2to7a3e500by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/64685d2b868to5f68ec6in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/64715b10f43toa2d49eaby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/646946d19c1to1b99266by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6467a2d49eato28bd5fein /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6472a2d49eato28bd5feby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/64997a3e500to3ad5730by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6501New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0
prometheus-community/helm-charts (kube-prometheus-stack)
v87.2.1Compare Source
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
What's Changed
Full Changelog: https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-87.2.0...kube-prometheus-stack-87.2.1
vmware-tanzu/helm-charts (velero)
v12.1.0Compare Source
A Helm chart for velero
What's Changed
New Contributors
Full Changelog: https://github.com/vmware-tanzu/helm-charts/compare/velero-12.0.3...velero-12.1.0
vmware-tanzu/velero-plugin-for-aws (velero/velero-plugin-for-aws)
v1.14.2Compare Source
All changes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
7e4e3955dcto4f76a208cdchore(deps): update helm release kube-prometheus-stack to v87.2.1to chore(deps): update all-minor-patch-updates4f76a208cdto88c78b37f988c78b37f9to596a041799596a041799to69a30fc946