Image: ghcr.io/external-secrets/external-secrets:v2.10.0
Image: ghcr.io/external-secrets/external-secrets:v2.10.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.10.0-ubi-boringssl
What's Changed
General
- chore: release helm chart for 2.9.0 by @Skarlso in #6808
- docs: correct the design type in the PR template by @sanchpet in #6813
- fix(aws): redact credentials in aws auth config logs by @hixichen in #6683
- fix(gcp): preserve workload identity token expiry by @jakobtfr in #6772
- feat(conjur): Conjur PushSecret by @aidy in #6272
- fix(infisical): scope dataFrom.find.path in list requests by @thc1006 in #6821
- chore: bump golangci-lint and fix new linting issues by @evrardj-roche in #6740
- feat(openbao): add
auth.kubernetesauth method by @Nerkho in #6591 - docs: add OpenChoreo to the adopters list by @kavishkafernando in #6820
- feat(passbolt): add support for custom fields by @saknopper in #6696
- chore: update go version to 1.26.6 by @alekc in #6835
- feat(core): report safe reconcile errors in status conditions by @alekc in #6834
- fix(secretserver): missing field siteId in secret creation by @pr0ton11 in #6649
- fix: Reconcile sha and version by @evrardj-roche in #6843
- chore(deps): bump aws acm by @evrardj-roche in #6705
- chore(deps): update go-ntlmssp to v0.1.1 by @evrardj-roche in #6701
- clean: Get rid of tests importing provider deps by @evrardj-roche in #6846
- chore(deps): bump GitLab API client to v1.46.0 by @evrardj-roche in #6700
- docs(webhook): escape Go template examples with {% raw %} by @atobaum in #6852
- fix(ci): put CODEOWNERS at a path GitHub actually reads by @alekc in #6853
- feat(passbolt): PB-53915 - Surface custom field functions in SDK by @cedricherzog-passbolt in #6848
- design: Guarantee module import boundaries by @evrardj-roche in #6851
- feat(providers): Nebius MysteryBox SA token federation auth option added by @greenmapc in #6784
- fix: Unblock CI by @evrardj-roche in #6874
- fix(vault): only apply deprecated token-cache flags when explicitly set by @markof88 in #6827
- feat: apply TLS security profile to the external-secrets deployment by @siddhibhor-56 in #6617
- feat(github): support Dependabot secrets by @SanderKnape in #6878
Dependencies
- chore(deps): bump golang from
0178a64to0178a64by @dependabot[bot] in #6818 - chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #6819
- chore(deps): bump setuptools from 83.0.0 to 84.0.0 in /hack/api-docs by @dependabot[bot] in #6826
- chore(deps): bump golang from
af8d674to3889b42by @dependabot[bot] in #6838 - chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 by @dependabot[bot] in #6840
- chore(deps): bump the codeql group across 1 directory with 3 updates by @dependabot[bot] in #6839
- chore(deps): bump the codeql group with 3 updates by @dependabot[bot] in #6867
- chore(deps): bump ubi9/ubi from
2a6bd69to5426a8fby @dependabot[bot] in #6865 - chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #6868
- chore(deps): bump golang from 1.26.6-bookworm to 1.27.0-bookworm in /e2e by @dependabot[bot] in #6866
- chore(deps): bump golang from
3889b42to4c9fe60by @dependabot[bot] in #6864 - chore(deps): bump distroless/static from
9197324tof2ea270by @dependabot[bot] in #6863
New Contributors
- @sanchpet made their first contribution in #6813
- @hixichen made their first contribution in #6683
- @jakobtfr made their first contribution in #6772
- @aidy made their first contribution in #6272
- @thc1006 made their first contribution in #6821
- @Nerkho made their first contribution in #6591
- @kavishkafernando made their first contribution in #6820
- @saknopper made their first contribution in #6696
- @atobaum made their first contribution in #6852
- @markof88 made their first contribution in #6827
- @SanderKnape made their first contribution in #6878
Full Changelog: v2.9.0...v2.10.0