Image: ghcr.io/external-secrets/external-secrets:v2.3.0
Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.3.0-ubi-boringssl
What's Changed
General
- chore: release charts v2.2.0 by @riccardomc in #6115
- ref(modernize): modernize go code by @ivankatliarchuk in #6114
- chore: bump bitwarden helm chart version to v0.6.0 by @Skarlso in #6118
- chore: fix EoL in compatiblity table for version 2.2 by @riccardomc in #6128
- docs: add missing jinja2 tags by @MindTooth in #6136
- fix: cached uid after deleting a store by @Skarlso in #6138
- feat(doppler): add ETag-based caching by @mikesellitto in #5997
- fix(docs): fix metadata structure in Google Secrets Manager docs by @mruoss in #6139
- feat: ovh provider implementation by @ldesauw in #6101
- feat(providers): Implement PushSecret for Delinea Secret Server by @pr0ton11 in #6031
- fix: propagate objectMeta and ownerReferences to target resources by @jaruwat-panturat in #6132
- fix(release): remove docs.check and all relative calls by @jaruwat-panturat in #6146
- feat: support service account impersonation when using Workload Identity Federation with a k8s service account by @zoomoid in #5707
- fix: remove getHostByName from template funcs by @moolen in #6164
- ref(kubernetes): move auth package from kubernetes to esutils by @alekc in #6149
- docs: fix templating.md by @dangbert in #6168
- fix(onepasswordsdk): support native 1Password item IDs in findItem by @LeahArmstrong in #6167
- docs(ovhcloud): fix heterogeneous configuration documentation by @ldesauw in #6169
- docs: add OVHcloud in ADOPTERS by @scraly in #6172
- fix(docs): resolve macro syntax error in templating guide by @ManvithaP-hub in #6171
- chore: rip out sprig dependency by @Skarlso in #6170
- chore: fix jose cve by @Skarlso in #6178
- docs: document correct htpasswd function usage by @Atomsoldat in #6177
- feat(pushsecret): add dataTo support for bulk secret pushing by @mohamed-rekiba in #5850
- docs: add existing blog post: ESO integration with ovhcloud secret manager with vault provider by @scraly in #6190
- feat: move experimental-enable-vault-token-cache out of experimental and add expiry to validation by @sfotony in #5397
- fix: prevent feedback loop by @moolen in #6021
- fix: code scanning issues by @Skarlso in #6063
- feat: add source null byte policy by @knelasevero in #6194
- fix(test): fix broken test from automerge rebase by @knelasevero in #6199
- fix(aws): handle empty resource policy in PushSecret for SecretsManager by @maks3201 in #6145
- feat(github): add orgSecretVisibility field to GithubProvider by @iamnoah in #6202
- feat(onepasswordSDK): multi-field and complete PushSecret by @Dariusch in #6187
- feat(vault): add VaultRole attribute for TLS auth by @RicoGunawan12 in #6160
- chore: bump go version to 1.26.2 by @Skarlso in #6203
Dependencies
- chore(deps): bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #6121
- chore(deps): bump mkdocs-material from 9.7.5 to 9.7.6 in /hack/api-docs by @dependabot[bot] in #6125
- chore(deps): bump ubi9/ubi from
6ed9f6fto1fc04e8by @dependabot[bot] in #6119 - chore(deps): bump azure/login from 2.3.0 to 3.0.0 by @dependabot[bot] in #6120
- chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in #6124
- chore(deps): bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot[bot] in #6122
- chore(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @dependabot[bot] in #6123
- chore(deps): bump importlib-metadata from 8.7.1 to 9.0.0 in /hack/api-docs by @dependabot[bot] in #6126
- chore(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #6154
- chore(deps): bump pymdown-extensions from 10.21 to 10.21.2 in /hack/api-docs by @dependabot[bot] in #6157
- chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #6151
- chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #6152
- chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @dependabot[bot] in #6153
- chore(deps): bump pygments from 2.19.2 to 2.20.0 in /hack/api-docs by @dependabot[bot] in #6155
- chore(deps): bump regex from 2026.2.28 to 2026.3.32 in /hack/api-docs by @dependabot[bot] in #6156
- chore(deps): bump requests from 2.32.5 to 2.33.0 in /hack/api-docs by @dependabot[bot] in #6158
- chore(deps): bump ubi9/ubi from
1fc04e8to9e6e193by @dependabot[bot] in #6150 - chore(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 by @dependabot[bot] in #6180
- chore(deps): bump charset-normalizer from 3.4.6 to 3.4.7 in /hack/api-docs by @dependabot[bot] in #6183
- chore(deps): bump click from 8.3.1 to 8.3.2 in /hack/api-docs by @dependabot[bot] in #6185
- chore(deps): bump fossas/fossa-action from 1.8.0 to 1.9.0 by @dependabot[bot] in #6181
- chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6182
- chore(deps): bump regex from 2026.3.32 to 2026.4.4 in /hack/api-docs by @dependabot[bot] in #6184
New Contributors
- @MindTooth made their first contribution in #6136
- @ldesauw made their first contribution in #6101
- @pr0ton11 made their first contribution in #6031
- @zoomoid made their first contribution in #5707
- @dangbert made their first contribution in #6168
- @LeahArmstrong made their first contribution in #6167
- @scraly made their first contribution in #6172
- @ManvithaP-hub made their first contribution in #6171
- @Atomsoldat made their first contribution in #6177
- @mohamed-rekiba made their first contribution in #5850
- @sfotony made their first contribution in #5397
- @maks3201 made their first contribution in #6145
- @iamnoah made their first contribution in #6202
- @RicoGunawan12 made their first contribution in #6160
Full Changelog: v2.2.0...v2.3.0