chore(deps): update dependency external-secrets/external-secrets to v2

[renovate]

This PR contains the following updates:

Package	Update	Change
external-secrets/external-secrets	major	v1.2.1 → v2.0.0

---

Release Notes

external-secrets/external-secrets (external-secrets/external-secrets)

v2.0.0

Compare Source

BREAKING CHANGE

Please note that this release removed two of the unsupported and unmaintained providers Alibaba and Device42.

Image: ghcr.io/external-secrets/external-secrets:v2.0.0
Image: ghcr.io/external-secrets/external-secrets:v2.0.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.0.0-ubi-boringssl

What's Changed

General

• chore: bump charts to 1.3.2 by @​gusfcarvalho in #​5923
• feat(charts): add hostAliases support by @​janlauber in #​5866
• chore: remove unmaintained secret stores by @​Skarlso in #​5918
• docs(infisical): document al provider auth methods by @​varonix0 in #​5929
• chore: Get validating webhook failurePolicy for Secretstore dynamically by @​LochanRn in #​5605

New Contributors

• @​LochanRn made their first contribution in #​5605

Full Changelog: external-secrets/external-secrets@v1.3.2...v2.0.0

v1.3.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.2
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi-boringssl

What's Changed

General

• chore: release helm chart for v1.3.1 by @​Skarlso in #​5860
• chore(chart): Add missing tests for readinessProbe by @​jcpunk in #​5769
• docs: Update FluxCD example by @​umizoom in #​5862
• fix(ci): Removed the unused check for Windows in Makefile by @​HauptJ in #​5870
• docs(release): Add actual dates for EOL of 1.x releases in stability and support page by @​n4zukker in #​5889
• docs: Passbolt provider maintenance ownership by @​stripthis in #​5886
• chore: Update Passbolt MaintenanceStatus to MaintenanceStatusMaintained by @​stripthis in #​5887
• fix(security): sanitize json.Unmarshal errors to prevent secret data … by @​moolen in #​5884
• fix: webhook initialization order by @​gusfcarvalho in #​5901
• chore: Cleanup flags by @​evrardj-roche in #​5845
• fix: onepasswordsdk shared tenant by altering the provider in the client cache by @​Skarlso in #​5921

Dependencies

• chore(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @​dependabot[bot] in #​5873
• chore(deps): bump pymdown-extensions from 10.20 to 10.20.1 in /hack/api-docs by @​dependabot[bot] in #​5877
• chore(deps): bump markdown from 3.10 to 3.10.1 in /hack/api-docs by @​dependabot[bot] in #​5880
• chore(deps): bump ubi9/ubi from 22e9573 to 1f84f5c by @​dependabot[bot] in #​5871
• chore(deps): bump actions/setup-python from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​5872
• chore(deps): bump hashicorp/setup-terraform from 93d5a27 to dcc3150 by @​dependabot[bot] in #​5875
• chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​5876
• chore(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 by @​dependabot[bot] in #​5878
• chore(deps): bump anchore/sbom-action from 0.21.1 to 0.22.0 by @​dependabot[bot] in #​5874
• chore(deps): bump packaging from 25.0 to 26.0 in /hack/api-docs by @​dependabot[bot] in #​5879
• chore(deps): bump golang from d9b2e14 to 98e6cff by @​dependabot[bot] in #​5907
• chore(deps): bump alpine from 865b95f to 2510918 in /hack/api-docs by @​dependabot[bot] in #​5914
• chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in #​5909
• chore(deps): bump actions/cache from 5.0.2 to 5.0.3 by @​dependabot[bot] in #​5912
• chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @​dependabot[bot] in #​5910
• chore(deps): bump hashicorp/setup-terraform from dcc3150 to ce70bcf by @​dependabot[bot] in #​5911
• chore(deps): bump ubi9/ubi from 1f84f5c to c8df11b by @​dependabot[bot] in #​5908
• chore(deps): bump alpine from 3.23.2 to 3.23.3 in /e2e by @​dependabot[bot] in #​5915
• chore(deps): bump alpine from 865b95f to 2510918 by @​dependabot[bot] in #​5906
• chore(deps): bump pathspec from 1.0.3 to 1.0.4 in /hack/api-docs by @​dependabot[bot] in #​5916
• chore(deps): bump babel from 2.17.0 to 2.18.0 in /hack/api-docs by @​dependabot[bot] in #​5917
• chore(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @​dependabot[bot] in #​5913

New Contributors

• @​umizoom made their first contribution in #​5862
• @​HauptJ made their first contribution in #​5870
• @​n4zukker made their first contribution in #​5889
• @​stripthis made their first contribution in #​5886

Full Changelog: external-secrets/external-secrets@v1.3.1...v1.3.2

v1.3.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.1
Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi-boringssl

For a Full release please referre to https://github.com/external-secrets/external-secrets/releases/tag/v1.3.0. This is a fix build for the docker publish flow.

What's Changed

General

• fix: ignore the in-toto manifest when promoting the docker build by @​Skarlso in #​5859

Full Changelog: external-secrets/external-secrets@v1.3.0...v1.3.1

v1.3.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.0
Image: ghcr.io/external-secrets/external-secrets:v1.3.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.0-ubi-boringssl

BROKEN:

Hey everyone, this sadly broken because the image promotion wasn't working. I'm going to release 1.3.1 which will contain these changes, plus the fix to the promotion.

What's Changed

General

• chore(chart): release helm chart 1.2.1 by @​Skarlso in #​5789
• chore(lint): enable concurrent execution for the linter and enable formatters by @​Skarlso in #​5752
• fix: Dockerfile standalone by @​gusfcarvalho in #​5797
• feat: make the serving of the old beta version configurable for a period of time by @​Skarlso in #​5809
• docs: document the behavior of advanced templating for custom targets by @​Skarlso in #​5810
• fix: push secret delete was removing the wrong key by @​Skarlso in #​5799
• feat: add caching to the 1Password SDK provider by @​Skarlso in #​5811
• feat(provider): add devolutions server provider support by @​rbstp in #​5712
• chore: add debug output to the docker ubi build by @​Skarlso in #​5825
• fix: remove the arm build for ubi publish by @​Skarlso in #​5826
• design: feature flag consolidation by @​evrardjp in #​5801
• feat(beyondtrust): add support for decrypt parameter on get secret by @​btfhernandez in #​5786
• feat(charts): Add flag for hostUsers by @​jcpunk in #​5823
• fix: re-enable the ubi arm build by @​Skarlso in #​5833
• fix: ubi build with very VERY old docker buildx version by @​Skarlso in #​5846
• fix: lets not use the docker buildx cache by @​Skarlso in #​5847
• fix: lets not use dereference of symlinks by @​Skarlso in #​5848
• fix: lets remove the usage of tar completely by @​Skarlso in #​5849
• fix: Include all providers in default dev build by @​evrardj-roche in #​5851
• feat(charts): Add control of certificate algorithms by @​jcpunk in #​5774
• fix: try to fix most of the code scanning issues by @​Skarlso in #​5812
• chore: remove unmaintained secret stores by @​Skarlso in #​5854
• chore(charts): define and use named ports for probes by @​jcpunk in #​5775
• chore: revert remove unmaintained secret stores by @​Skarlso in #​5857

Dependencies

• chore(deps): bump golang from ac09a5f to ac09a5f by @​dependabot[bot] in #​5791
• chore(deps): bump golang from 09f53de to 2c7c656 in /e2e by @​dependabot[bot] in #​5792
• chore(deps): bump pymdown-extensions from 10.19.1 to 10.20 in /hack/api-docs by @​dependabot[bot] in #​5795
• chore(deps): bump certifi from 2025.11.12 to 2026.1.4 in /hack/api-docs by @​dependabot[bot] in #​5794
• chore(deps): bump termcolor from 3.2.0 to 3.3.0 in /hack/api-docs by @​dependabot[bot] in #​5793
• chore(deps): bump anchore/sbom-action from 0.21.0 to 0.21.1 by @​dependabot[bot] in #​5816
• chore(deps): bump urllib3 from 2.6.2 to 2.6.3 in /hack/api-docs by @​dependabot[bot] in #​5818
• chore(deps): bump pathspec from 0.12.1 to 1.0.3 in /hack/api-docs by @​dependabot[bot] in #​5819
• chore(deps): bump distroless/static from 4b2a093 to cd64bec by @​dependabot[bot] in #​5814
• chore(deps): bump ubi9/ubi from 3816d30 to 2c9bb68 by @​dependabot[bot] in #​5815
• chore(deps): bump actions/cache from 5.0.1 to 5.0.2 by @​dependabot[bot] in #​5839
• chore(deps): bump github/codeql-action from 4.31.9 to 4.31.10 by @​dependabot[bot] in #​5841
• chore(deps): bump ubi9/ubi from 2c9bb68 to 22e9573 by @​dependabot[bot] in #​5836
• chore(deps): bump hashicorp/setup-terraform from 92e4d08 to 93d5a27 by @​dependabot[bot] in #​5838
• chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​5842
• chore(deps): bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1 by @​dependabot[bot] in #​5840
• chore(deps): bump golang from 1.25.5 to 1.26rc2 by @​dependabot[bot] in #​5837
• chore(deps): bump regex from 2025.11.3 to 2026.1.15 in /hack/api-docs by @​dependabot[bot] in #​5844
• chore(deps): bump golang from 1.25.5-bookworm to 1.26rc2-bookworm in /e2e by @​dependabot[bot] in #​5843
• chore(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 by @​dependabot[bot] in #​5817

New Contributors

• @​rbstp made their first contribution in #​5712
• @​evrardj-roche made their first contribution in #​5851

Full Changelog: external-secrets/external-secrets@v1.2.1...v1.3.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.