Image: ghcr.io/external-secrets/external-secrets:v0.16.2
Image: ghcr.io/external-secrets/external-secrets:v0.16.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.16.2-ubi-boringssl
What's Changed
- chore: release charts v0.16.1 by @Skarlso in #4678
- feat: adds harden-runner to pipelines by @gusfcarvalho in #4683
- [StepSecurity] Apply security best practices by @step-security-bot in #4684
- docs: update example for bitwarden password manager by @lunarys in #4674
- feat(helm): add grafana dashboard by @onedr0p in #4686
- chore(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 by @dependabot in #4688
- chore(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 by @dependabot in #4689
- chore(deps): bump mkdocs-material from 9.6.11 to 9.6.12 in /hack/api-docs by @dependabot in #4690
- chore(deps): bump golang from 1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee to sha256:d9db32125db0c3a680cfb7a1afcaefb89c898a075ec148fdc2f0f646cc2ed509 by @dependabot in #4691
- chore(deps): bump packaging from 24.2 to 25.0 in /hack/api-docs by @dependabot in #4693
- chore: update dependencies by @eso-service-account-app in #4694
- chore: Add skeeled to ADOPTERS.md by @carneiroskeeled in #4695
- Update md5 hashing algorithim to sha3 by @kbsteere in #4696
- fix: ci artefact push by @moolen in #4699
- chore(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot in #4710
- chore(deps): bump actions/setup-python from 5.5.0 to 5.6.0 by @dependabot in #4711
- chore(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by @dependabot in #4712
- chore(deps): bump step-security/harden-runner from 2.11.1 to 2.12.0 by @dependabot in #4713
- chore(deps): bump ubi8/ubi from
8bd1b63to244e985by @dependabot in #4719 - chore(deps): bump certifi from 2025.1.31 to 2025.4.26 in /hack/api-docs by @dependabot in #4717
- chore(deps): bump importlib-metadata from 8.6.1 to 8.7.0 in /hack/api-docs by @dependabot in #4716
- chore(deps): bump pymdown-extensions from 10.14.3 to 10.15 in /hack/api-docs by @dependabot in #4715
- chore(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in #4714
- fix: add kmskeyid to secret creation by @Skarlso in #4729
- fix: ClusterExternalSecrets were not able to adopt externalSecret after update to v1 by @Meallia in #4724
- chore(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot in #4735
- chore(deps): bump actions/create-github-app-token from 2.0.2 to 2.0.6 by @dependabot in #4736
- chore(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in #4737
- chore(deps): bump golang from
00eccd4to79390b5in /e2e by @dependabot in #4738 - chore(deps): bump termcolor from 3.0.1 to 3.1.0 in /hack/api-docs by @dependabot in #4739
- chore(deps): bump charset-normalizer from 3.4.1 to 3.4.2 in /hack/api-docs by @dependabot in #4740
- chore(deps): bump golang from
7772cb5to7772cb5by @dependabot in #4741 - chore(deps): bump golangci/golangci-lint-action from 6.5.2 to 8.0.0 by @dependabot in #4734
- chore: document kubernetes provider pushsecret type by @mhrabovcin in #4725
- feat(helm): Offer the possiblity to disable aggreate-to-view and aggregate-to-edit on default ClusterRoles by @linoleparquet in #4733
- Feat/generic webhook ntlm auth by @yifongau in #4316
New Contributors
- @step-security-bot made their first contribution in #4684
- @lunarys made their first contribution in #4674
- @carneiroskeeled made their first contribution in #4695
- @kbsteere made their first contribution in #4696
- @Meallia made their first contribution in #4724
- @mhrabovcin made their first contribution in #4725
- @linoleparquet made their first contribution in #4733
- @yifongau made their first contribution in #4316
Full Changelog: v0.16.1...v0.16.2