infrastructure/weyma-talos
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(deps): update all-minor-patch-updates #357

Merged
williamp merged 1 commits from renovate/all-minor-patch-updates into main 2026-07-18 17:18:35 +00:00
Conversation 0 Commits 1 Files Changed 2
+2 -2
renovate-bot commented 2026-07-18 16:00:39 +00:00
Member
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
external-secrets minor 2.7.0 -> 2.8.0
kite minor 0.13.0 -> 0.14.0

Release Notes

external-secrets/external-secrets (external-secrets)

v2.8.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.8.0
Image: ghcr.io/external-secrets/external-secrets:v2.8.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.8.0-ubi-boringssl

What's Changed

General
Dependencies

New Contributors

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.7.0...v2.8.0

kite-org/kite (kite)

v0.14.0

Compare Source

What's Changed

[!IMPORTANT]
Starting with this release:

  • The legacy container image ghcr.io/zxh326/kite no longer receives updates. Please switch to ghcr.io/kite-org/kite.
  • The legacy Helm chart repository https://zxh326.github.io/kite/ no longer receives updates. Please switch to https://kite-org.github.io/kite/.
Highlights
  • Added custom resource history for create, update, delete, and apply operations.
  • Added richer StorageClass management, including provisioner filtering, default selection, and related PVC navigation.
  • Added customizable resource detail tabs with support for reordering and hiding tabs.
  • Added label selector filtering from resource search boxes, such as app=nginx and env=prod,team=backend. Thanks @​l0kki42!
Resource Management
  • Resource YAML now opens in read-only mode and requires an explicit action before editing.
  • Added support for Kubernetes-style [] JSONPath wildcards in CRD printer columns and made invalid expressions fail safely. Thanks @​MasterTos!
RBAC And Multi-Cluster
  • Fixed RBAC evaluation for users whose roles grant access across multiple namespaces.
  • Improved namespace-aware filtering across resource lists, search, events, metrics, related resources, Helm releases, apply operations, and AI tools.
  • Improved cluster-aware API routing, fixing pod file exports and related operations on non-default clusters.
  • Added broader support for group-qualified custom resource permissions.
Observability And Reliability
  • Pod log streams now preserve the historical tail buffer when connecting or reconnecting. Thanks @​ferdiina!
  • Memory usage now uses the working set metric for more representative container memory reporting.
  • Metrics endpoints now return empty arrays when no samples are available.
  • Increased the default Kubernetes cache synchronization timeout and client QPS/Burst settings for large or remote clusters, with KITE_CACHE_SYNC_TIMEOUT available for configuration. Thanks @​ferdiina!
Fixes And Hardening
  • Fixed PostgreSQL login failures when identity providers return avatar URLs longer than 500 characters. Thanks @​tedkulp!
  • Updated MFA, passkey, authentication, and user-management documentation.
  • Updated frontend and Go dependencies, including Helm 4.2.3, Gateway API 1.6.0, Recharts 3.9.2, Vite 8.1.4, and Anthropic SDK 1.57.0.

Full Changelog: v0.13.0...v0.14.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.7.0` -> `2.8.0` | | [kite](https://github.com/kite-org/kite) | minor | `0.13.0` -> `0.14.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.8.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.8.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.7.0...v2.8.0) Image: `ghcr.io/external-secrets/external-secrets:v2.8.0` Image: `ghcr.io/external-secrets/external-secrets:v2.8.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.8.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart 2.7.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6529 - docs(barbican): correct find semantics and document property/extract by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6531 - docs(gcp): use external-secrets.io/v1 in SecretStore examples by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6563 - feat(generators): add GitLab deploy token generator by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6493 - fix(barbican): validate store config and fix SecretExists error message by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6534 - docs(beyondtrust): fix capability matrix and document decrypt/separator by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6535 - feat: Make SecondsToLive optional for Grafana generator by [@&#8203;jaruwat-panturat](https://github.com/jaruwat-panturat) in https://github.com/external-secrets/external-secrets/pull/6479 - docs: add missing generators to ClusterGenerator spec snippet by [@&#8203;jaruwat-panturat](https://github.com/jaruwat-panturat) in https://github.com/external-secrets/external-secrets/pull/6590 - docs(doppler): fix download format list and heading levels by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6559 - docs(fortanix): add to support matrix and tidy provider page by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6562 - docs(yandex): fix Lockbox referent cell and add Certificate Manager rows by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6585 - docs(volcengine): mark referent authentication as supported by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6584 - docs(senhasegura): mark deletion + referent in matrix and fix title by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6583 - docs(scaleway): mark referent auth in matrix and fix headings by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6581 - docs(pulumi): correct find/referent matrix cells and fix headings by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6578 - docs(previder): correct find/referent matrix cells and fix headings by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6577 - docs(1password): mark SDK find support in matrix and promote titles by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6568 - feat(charts): Add aggregateToAdmin toggle by [@&#8203;illrill](https://github.com/illrill) in https://github.com/external-secrets/external-secrets/pull/6586 - docs(providers): consolidate 11 conflicting provider-doc PRs by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6592 - feat(charts): add startupProbe support to webhook deployment by [@&#8203;alpcanaydin](https://github.com/alpcanaydin) in https://github.com/external-secrets/external-secrets/pull/6612 - feat(akeyless): support azure_ad Workload Identity via serviceAccountRef by [@&#8203;baraka-akeyless](https://github.com/baraka-akeyless) in https://github.com/external-secrets/external-secrets/pull/6530 - docs(kubernetes): fix invalid tab indentation and heading levels by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6565 - docs(dvls): mark DeletionPolicy supported and fix page title by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6557 - docs(bitwarden): fix find behaviour, find-by-name rules, and admonitions by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6551 - docs(github): add to support matrix, fix auth field, tidy page by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6564 - docs: Improve explanations of pem_chain by [@&#8203;evrardjp](https://github.com/evrardjp) in https://github.com/external-secrets/external-secrets/pull/6623 - feat: Make our stance regarding AI usage more explicit. by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6621 - fix(barbican): treat find.name.regexp as a regexp, not an exact match by [@&#8203;arpitjain099](https://github.com/arpitjain099) in https://github.com/external-secrets/external-secrets/pull/6614 - chore: update go version 1.26.5 - Fix CVE-2026-39822 by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6631 - ref(testing): change the e2e workflow to separate building stage from e2e stage (and free up resources) by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6634 - chore: updating ok-to-test to allow interim maintainers by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in https://github.com/external-secrets/external-secrets/pull/6638 - fix(onepassword): support PushSecret IfNotExists by [@&#8203;civilizedBaboon](https://github.com/civilizedBaboon) in https://github.com/external-secrets/external-secrets/pull/6646 - fix(testing): check out PR head in fork e2e instead of main by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6647 - fix(secretserver): validate store and map fields correctly by [@&#8203;dbinger](https://github.com/dbinger) in https://github.com/external-secrets/external-secrets/pull/6616 - feat(charts): Add optional networkPolicy by [@&#8203;jcpunk](https://github.com/jcpunk) in https://github.com/external-secrets/external-secrets/pull/5779 - feat(akeyless): add SecretStore ignoreCache to bypass Gateway cache by [@&#8203;baraka-akeyless](https://github.com/baraka-akeyless) in https://github.com/external-secrets/external-secrets/pull/6507 - feat(provider): implement AWS Certificate Manager provider by [@&#8203;dsp0x4](https://github.com/dsp0x4) in https://github.com/external-secrets/external-secrets/pull/6117 - feat: expose more values for custom metadata for vault v2 by [@&#8203;Skarlso](https://github.com/Skarlso) in https://github.com/external-secrets/external-secrets/pull/6652 - clean: Remove duplicate code by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6629 - feat: configurable leader election lease timings by [@&#8203;izz-linux](https://github.com/izz-linux) in https://github.com/external-secrets/external-secrets/pull/6644 - fix(akeyless): support dataFrom.extract.property for nested JSON by [@&#8203;baraka-akeyless](https://github.com/baraka-akeyless) in https://github.com/external-secrets/external-secrets/pull/6633 - feat(conjur): Certificate Auth support by [@&#8203;hdabrowski](https://github.com/hdabrowski) in https://github.com/external-secrets/external-secrets/pull/6393 - docs(aws): restore dropped access section and document missing fields by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6517 - feat(secretserver): support authentication via access token by [@&#8203;sumanpal97](https://github.com/sumanpal97) in https://github.com/external-secrets/external-secrets/pull/6597 - docs(secretserver): document authentication, key formats, property behavior, and limitations by [@&#8203;dbinger](https://github.com/dbinger) in https://github.com/external-secrets/external-secrets/pull/6619 - feat(release): Support reading values from kubernetes CRD by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6211 - clean: Standardize and friendly name for validations policies by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6630 - feat: add CreateOrMerge creation policy for ExternalSecrets by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6641 - feat(core): accept duration string for SecretStore refreshInterval by [@&#8203;alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/6594 - fix(beyondtrust): validate store without panicking on API key auth by [@&#8203;emmayusufu](https://github.com/emmayusufu) in https://github.com/external-secrets/external-secrets/pull/6553 - fix(oracle): cache default WorkloadIdentity provider to prevent tcp port exhaustion by [@&#8203;Ashutosh-3601](https://github.com/Ashutosh-3601) in https://github.com/external-secrets/external-secrets/pull/6421 ##### Dependencies - chore(deps): bump golang from `3ad5730` to `3ad5730` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6538 - chore(deps): bump ubi9/ubi from `1b99266` to `37a1589` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6537 - chore(deps): bump golang from `5f68ec6` to `b305420` in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6539 - chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6540 - chore(deps): bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6542 - chore(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6543 - chore(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6544 - chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6541 - chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6545 - chore(deps): bump golang from `3ad5730` to `3ad5730` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6600 - chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6606 - chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6603 - chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6607 - chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6604 - chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6608 - chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6605 - chore(deps): bump docker/login-action from 4.2.0 to 4.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6602 - chore(deps): bump fossas/fossa-action from 1.9.0 to 2.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6601 - chore(deps): bump ubi9/ubi from `37a1589` to `8bf0e8f` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6599 - chore(deps): bump golang from 1.26.4 to 1.26.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6636 - chore(deps): bump distroless/static from `3592aa8` to `d5f030c` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6635 #### New Contributors - [@&#8203;alpcanaydin](https://github.com/alpcanaydin) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6612 - [@&#8203;baraka-akeyless](https://github.com/baraka-akeyless) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6530 - [@&#8203;arpitjain099](https://github.com/arpitjain099) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6614 - [@&#8203;civilizedBaboon](https://github.com/civilizedBaboon) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6646 - [@&#8203;dbinger](https://github.com/dbinger) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6616 - [@&#8203;dsp0x4](https://github.com/dsp0x4) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6117 - [@&#8203;izz-linux](https://github.com/izz-linux) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6644 - [@&#8203;hdabrowski](https://github.com/hdabrowski) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6393 - [@&#8203;sumanpal97](https://github.com/sumanpal97) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6597 - [@&#8203;emmayusufu](https://github.com/emmayusufu) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6553 - [@&#8203;Ashutosh-3601](https://github.com/Ashutosh-3601) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6421 **Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.7.0...v2.8.0 </details> <details> <summary>kite-org/kite (kite)</summary> ### [`v0.14.0`](https://github.com/kite-org/kite/releases/tag/v0.14.0) [Compare Source](https://github.com/kite-org/kite/compare/v0.13.0...v0.14.0) #### What's Changed > \[!IMPORTANT] > Starting with this release: > > - The legacy container image `ghcr.io/zxh326/kite` no longer receives updates. Please switch to `ghcr.io/kite-org/kite`. > - The legacy Helm chart repository `https://zxh326.github.io/kite/` no longer receives updates. Please switch to `https://kite-org.github.io/kite/`. ##### Highlights - Added custom resource history for create, update, delete, and apply operations. - Added richer StorageClass management, including provisioner filtering, default selection, and related PVC navigation. - Added customizable resource detail tabs with support for reordering and hiding tabs. - Added label selector filtering from resource search boxes, such as `app=nginx` and `env=prod,team=backend`. Thanks [@&#8203;l0kki42](https://github.com/l0kki42)! ##### Resource Management - Resource YAML now opens in read-only mode and requires an explicit action before editing. - Added support for Kubernetes-style `[]` JSONPath wildcards in CRD printer columns and made invalid expressions fail safely. Thanks [@&#8203;MasterTos](https://github.com/MasterTos)! ##### RBAC And Multi-Cluster - Fixed RBAC evaluation for users whose roles grant access across multiple namespaces. - Improved namespace-aware filtering across resource lists, search, events, metrics, related resources, Helm releases, apply operations, and AI tools. - Improved cluster-aware API routing, fixing pod file exports and related operations on non-default clusters. - Added broader support for group-qualified custom resource permissions. ##### Observability And Reliability - Pod log streams now preserve the historical tail buffer when connecting or reconnecting. Thanks [@&#8203;ferdiina](https://github.com/ferdiina)! - Memory usage now uses the working set metric for more representative container memory reporting. - Metrics endpoints now return empty arrays when no samples are available. - Increased the default Kubernetes cache synchronization timeout and client QPS/Burst settings for large or remote clusters, with `KITE_CACHE_SYNC_TIMEOUT` available for configuration. Thanks [@&#8203;ferdiina](https://github.com/ferdiina)! ##### Fixes And Hardening - Fixed PostgreSQL login failures when identity providers return avatar URLs longer than 500 characters. Thanks [@&#8203;tedkulp](https://github.com/tedkulp)! - Updated MFA, passkey, authentication, and user-management documentation. - Updated frontend and Go dependencies, including Helm 4.2.3, Gateway API 1.6.0, Recharts 3.9.2, Vite 8.1.4, and Anthropic SDK 1.57.0. Full Changelog: [v0.13.0...v0.14.0](https://github.com/kite-org/kite/compare/v0.13.0...v0.14.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot added 1 commit 2026-07-18 17:00:24 +00:00
chore(deps): update all-minor-patch-updates 29e9c88e72
renovate-bot force-pushed renovate/all-minor-patch-updates from 2ebbd8759b to 29e9c88e72 2026-07-18 17:00:24 +00:00 Compare
renovate-bot changed title from chore(deps): update helm release kite to v0.14.0 to chore(deps): update all-minor-patch-updates 2026-07-18 17:00:27 +00:00
williamp merged commit a3c0068165 into main 2026-07-18 17:18:35 +00:00
williamp deleted branch renovate/all-minor-patch-updates 2026-07-18 17:18:35 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
actions renovate-bot (Renovate Bot) williamp (William Peebles)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: infrastructure/weyma-talos#357
Delete Branch "renovate/all-minor-patch-updates"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?