feat(helm): update chart external-secrets ( 1.2.1 ➔ 1.3.2 ) by renovate[bot] · Pull Request #3160 · anthr76/infra

renovate · 2026-01-23T20:36:24Z

This PR contains the following updates:

Package	Update	Change
external-secrets	minor	`1.2.1` → `1.3.2`

Release Notes

external-secrets/external-secrets (external-secrets)

`v1.3.2`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.2
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi-boringssl

What's Changed

General

chore: release helm chart for v1.3.1 by @Skarlso in #5860
chore(chart): Add missing tests for readinessProbe by @jcpunk in #5769
docs: Update FluxCD example by @umizoom in #5862
fix(ci): Removed the unused check for Windows in Makefile by @HauptJ in #5870
docs(release): Add actual dates for EOL of 1.x releases in stability and support page by @n4zukker in #5889
docs: Passbolt provider maintenance ownership by @stripthis in #5886
chore: Update Passbolt MaintenanceStatus to MaintenanceStatusMaintained by @stripthis in #5887
fix(security): sanitize json.Unmarshal errors to prevent secret data … by @moolen in #5884
fix: webhook initialization order by @gusfcarvalho in #5901
chore: Cleanup flags by @evrardj-roche in #5845
fix: onepasswordsdk shared tenant by altering the provider in the client cache by @Skarlso in #5921

Dependencies

chore(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #5873
chore(deps): bump pymdown-extensions from 10.20 to 10.20.1 in /hack/api-docs by @dependabot[bot] in #5877
chore(deps): bump markdown from 3.10 to 3.10.1 in /hack/api-docs by @dependabot[bot] in #5880
chore(deps): bump ubi9/ubi from 22e9573 to 1f84f5c by @dependabot[bot] in #5871
chore(deps): bump actions/setup-python from 6.1.0 to 6.2.0 by @dependabot[bot] in #5872
chore(deps): bump hashicorp/setup-terraform from 93d5a27 to dcc3150 by @dependabot[bot] in #5875
chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #5876
chore(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 by @dependabot[bot] in #5878
chore(deps): bump anchore/sbom-action from 0.21.1 to 0.22.0 by @dependabot[bot] in #5874
chore(deps): bump packaging from 25.0 to 26.0 in /hack/api-docs by @dependabot[bot] in #5879
chore(deps): bump golang from d9b2e14 to 98e6cff by @dependabot[bot] in #5907
chore(deps): bump alpine from 865b95f to 2510918 in /hack/api-docs by @dependabot[bot] in #5914
chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #5909
chore(deps): bump actions/cache from 5.0.2 to 5.0.3 by @dependabot[bot] in #5912
chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot[bot] in #5910
chore(deps): bump hashicorp/setup-terraform from dcc3150 to ce70bcf by @dependabot[bot] in #5911
chore(deps): bump ubi9/ubi from 1f84f5c to c8df11b by @dependabot[bot] in #5908
chore(deps): bump alpine from 3.23.2 to 3.23.3 in /e2e by @dependabot[bot] in #5915
chore(deps): bump alpine from 865b95f to 2510918 by @dependabot[bot] in #5906
chore(deps): bump pathspec from 1.0.3 to 1.0.4 in /hack/api-docs by @dependabot[bot] in #5916
chore(deps): bump babel from 2.17.0 to 2.18.0 in /hack/api-docs by @dependabot[bot] in #5917
chore(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @dependabot[bot] in #5913

New Contributors

@umizoom made their first contribution in #5862
@HauptJ made their first contribution in #5870
@n4zukker made their first contribution in #5889
@stripthis made their first contribution in #5886

Full Changelog: external-secrets/external-secrets@v1.3.1...v1.3.2

`v1.3.1`

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.1
Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.1-ubi-boringssl

For a Full release please referre to https://github.com/external-secrets/external-secrets/releases/tag/v1.3.0. This is a fix build for the docker publish flow.

What's Changed

General

fix: ignore the in-toto manifest when promoting the docker build by @Skarlso in #5859

Full Changelog: external-secrets/external-secrets@v1.3.0...v1.3.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-01-23T20:36:53Z

civo-mgmt-0 - kustomization

--- k8s/base/external-secrets/external-secrets Kustomization: flux-system/external-secrets-external-secrets HelmRelease: external-secrets/external-secrets

+++ k8s/base/external-secrets/external-secrets Kustomization: flux-system/external-secrets-external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

       chart: external-secrets
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 1.2.1
+      version: 1.3.2
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m

github-actions · 2026-01-23T20:36:54Z

civo-mgmt-0 - helmrelease

--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.2.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
@@ -52,13 +52,16 @@

         - --zap-time-encoding=epoch
         - --enable-partial-cache=true
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.2.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.2.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs
@@ -53,15 +53,18 @@

         - containerPort: 8080
           protocol: TCP
           name: metrics
         - containerPort: 10250
           protocol: TCP
           name: webhook
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
         volumeMounts:
         - name: certs
           mountPath: /tmp/certs

github-actions · 2026-01-23T20:37:03Z

qgr1-cluster-0 - helmrelease

--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.2.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
@@ -52,13 +52,16 @@

         - --zap-time-encoding=epoch
         - --enable-partial-cache=true
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
 
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.2.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v1.2.1
+        image: ghcr.io/external-secrets/external-secrets:v1.3.2
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs
@@ -53,15 +53,18 @@

         - containerPort: 8080
           protocol: TCP
           name: metrics
         - containerPort: 10250
           protocol: TCP
           name: webhook
+        - containerPort: 8081
+          protocol: TCP
+          name: ready
         readinessProbe:
           httpGet:
-            port: 8081
+            port: ready
             path: /readyz
           initialDelaySeconds: 20
           periodSeconds: 5
         volumeMounts:
         - name: certs
           mountPath: /tmp/certs

github-actions · 2026-01-23T20:37:04Z

qgr1-cluster-0 - kustomization

--- k8s/base/external-secrets/external-secrets Kustomization: flux-system/external-secrets-external-secrets HelmRelease: external-secrets/external-secrets

+++ k8s/base/external-secrets/external-secrets Kustomization: flux-system/external-secrets-external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

       chart: external-secrets
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 1.2.1
+      version: 1.3.2
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m

renovate bot requested a review from anthr76 as a code owner January 23, 2026 20:36

renovate bot added renovate/helm type/minor labels Jan 23, 2026

pull-request-size bot added the size/XS label Jan 23, 2026

renovate bot force-pushed the renovate/external-secrets-1.x branch from 6b636e4 to 8d6b9ed Compare February 2, 2026 20:11

renovate bot changed the title ~~feat(helm): update chart external-secrets ( 1.2.1 ➔ 1.3.1 )~~ feat(helm): update chart external-secrets ( 1.2.1 ➔ 1.3.2 ) Feb 4, 2026

renovate bot force-pushed the renovate/external-secrets-1.x branch from 8d6b9ed to 723a1f8 Compare February 4, 2026 00:56

feat(helm): update chart external-secrets ( 1.2.1 ➔ 1.3.2 )

c2e1f04

renovate bot force-pushed the renovate/external-secrets-1.x branch from 723a1f8 to c2e1f04 Compare March 9, 2026 17:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(helm): update chart external-secrets ( 1.2.1 ➔ 1.3.2 )#3160

feat(helm): update chart external-secrets ( 1.2.1 ➔ 1.3.2 )#3160
renovate[bot] wants to merge 1 commit intomainfrom
renovate/external-secrets-1.x

renovate bot commented Jan 23, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 23, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 23, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 23, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Jan 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.3.2

What's Changed

General

Dependencies

New Contributors

v1.3.1

What's Changed

General

Configuration

Uh oh!

github-actions bot commented Jan 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

civo-mgmt-0 - kustomization

Uh oh!

github-actions bot commented Jan 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

civo-mgmt-0 - helmrelease

Uh oh!

github-actions bot commented Jan 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

qgr1-cluster-0 - helmrelease

Uh oh!

github-actions bot commented Jan 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

qgr1-cluster-0 - kustomization

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jan 23, 2026 •

edited

Loading

`v1.3.2`

`v1.3.1`

github-actions bot commented Jan 23, 2026 •

edited

Loading

github-actions bot commented Jan 23, 2026 •

edited

Loading

github-actions bot commented Jan 23, 2026 •

edited

Loading

github-actions bot commented Jan 23, 2026 •

edited

Loading