Draft: SKIP UPDATE CHECK Update Helm release external-secrets to v2

This MR contains the following updates:

Package	Update	Change
external-secrets	major	1.2.1 -> 2.0.0

Complete MR checklist

Assignee

• Followed upgrade instructions outlined in docs/DEVELOPMENT_MAINTENANCE.md
• Update Docs with new/updated steps as needed
• Tested and Validated Changes made with supporting info like logs or screenshots from test pipelines

Add supporting info below

Reviewer only

• Tested and Validated changes

---

Release Notes

external-secrets/external-secrets (external-secrets)

v2.0.0

Compare Source

BREAKING CHANGE

Please note that this release removed two of the unsupported and unmaintained providers Alibaba and Device42.

Image: ghcr.io/external-secrets/external-secrets:v2.0.0 Image: ghcr.io/external-secrets/external-secrets:v2.0.0-ubi Image: ghcr.io/external-secrets/external-secrets:v2.0.0-ubi-boringssl

What's Changed

General

• chore: bump charts to 1.3.2 by @​gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5923
• feat(charts): add hostAliases support by @​janlauber in https://github.com/external-secrets/external-secrets/pull/5866
• chore: remove unmaintained secret stores by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5918
• docs(infisical): document al provider auth methods by @​varonix0 in https://github.com/external-secrets/external-secrets/pull/5929
• chore: Get validating webhook failurePolicy for Secretstore dynamically by @​LochanRn in https://github.com/external-secrets/external-secrets/pull/5605

New Contributors

• @​LochanRn made their first contribution in https://github.com/external-secrets/external-secrets/pull/5605

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v1.3.2...v2.0.0

v1.3.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.2 Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi-boringssl

What's Changed

General

• chore: release helm chart for v1.3.1 by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5860
• chore(chart): Add missing tests for readinessProbe by @​jcpunk in https://github.com/external-secrets/external-secrets/pull/5769
• docs: Update FluxCD example by @​umizoom in https://github.com/external-secrets/external-secrets/pull/5862
• fix(ci): Removed the unused check for Windows in Makefile by @​HauptJ in https://github.com/external-secrets/external-secrets/pull/5870
• docs(release): Add actual dates for EOL of 1.x releases in stability and support page by @​n4zukker in https://github.com/external-secrets/external-secrets/pull/5889
• docs: Passbolt provider maintenance ownership by @​stripthis in https://github.com/external-secrets/external-secrets/pull/5886
• chore: Update Passbolt MaintenanceStatus to MaintenanceStatusMaintained by @​stripthis in https://github.com/external-secrets/external-secrets/pull/5887
• fix(security): sanitize json.Unmarshal errors to prevent secret data … by @​moolen in https://github.com/external-secrets/external-secrets/pull/5884
• fix: webhook initialization order by @​gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5901
• chore: Cleanup flags by @​evrardj-roche in https://github.com/external-secrets/external-secrets/pull/5845
• fix: onepasswordsdk shared tenant by altering the provider in the client cache by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5921

Dependencies

• chore(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5873
• chore(deps): bump pymdown-extensions from 10.20 to 10.20.1 in /hack/api-docs by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5877
• chore(deps): bump markdown from 3.10 to 3.10.1 in /hack/api-docs by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5880
• chore(deps): bump ubi9/ubi from 22e9573 to 1f84f5c by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5871
• chore(deps): bump actions/setup-python from 6.1.0 to 6.2.0 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5872
• chore(deps): bump hashicorp/setup-terraform from 93d5a27 to dcc3150 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5875
• chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5876
• chore(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5878
• chore(deps): bump anchore/sbom-action from 0.21.1 to 0.22.0 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5874
• chore(deps): bump packaging from 25.0 to 26.0 in /hack/api-docs by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5879
• chore(deps): bump golang from d9b2e14 to 98e6cff by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5907
• chore(deps): bump alpine from 865b95f to 2510918 in /hack/api-docs by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5914
• chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5909
• chore(deps): bump actions/cache from 5.0.2 to 5.0.3 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5912
• chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5910
• chore(deps): bump hashicorp/setup-terraform from dcc3150 to ce70bcf by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5911
• chore(deps): bump ubi9/ubi from 1f84f5c to c8df11b by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5908
• chore(deps): bump alpine from 3.23.2 to 3.23.3 in /e2e by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5915
• chore(deps): bump alpine from 865b95f to 2510918 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5906
• chore(deps): bump pathspec from 1.0.3 to 1.0.4 in /hack/api-docs by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5916
• chore(deps): bump babel from 2.17.0 to 2.18.0 in /hack/api-docs by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5917
• chore(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @​dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5913

New Contributors

• @​umizoom made their first contribution in https://github.com/external-secrets/external-secrets/pull/5862
• @​HauptJ made their first contribution in https://github.com/external-secrets/external-secrets/pull/5870
• @​n4zukker made their first contribution in https://github.com/external-secrets/external-secrets/pull/5889
• @​stripthis made their first contribution in https://github.com/external-secrets/external-secrets/pull/5886

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v1.3.1...v1.3.2

v1.3.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.1 Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi-boringssl

For a Full release please referre to https://github.com/external-secrets/external-secrets/releases/tag/v1.3.0. This is a fix build for the docker publish flow.

What's Changed

General

• fix: ignore the in-toto manifest when promoting the docker build by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5859

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v1.3.0...v1.3.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR was automatically generated by Renovate Bot.

Upgrade Notices

(Include any relevant notes about upgrades here or write "N/A" if there are none)