Image: ghcr.io/external-secrets/external-secrets:v2.7.0
Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl
What's Changed
General
- chore: release helm charts 2.6.0 by @Skarlso in #6427
- test: add Infisical provider e2e suite by @alekc in #6415
- docs: fix discrepancies and add missing documentation for GitLab provider by @alekc in #6430
- docs: fix discrepancies and add missing documentation for Infisical provider by @alekc in #6431
- feat(templating): add hexdec function by @tstenner in #6422
- fix(volcengine): honor secretRef.namespace for ClusterSecretStore by @ruslan-rm in #6423
- docs(core): correct CRD examples and document missing fields by @alekc in #6441
- feat(provider): initial dedicated OpenBao provider by @phil9909 in #6405
- feat(onepasswordsdk): implement GetAllSecrets by @calebmckay in #6445
- feat(controller): log secret deletions and data-key changes by @alekc in #6443
- feat: Add BeyondTrust WorkloadCredentials provider by @sdahal-bt in #5999
- fix(charts): truncate component names to stay within 63-char DNS limit by @alekc in #6428
- docs(gitops-fluxcd): fix webhook race condition in Flux deployment guide by @alekc in #6455
- fix: no need for the field to have a default if it can be omitted by @knelasevero in #6453
- fix(templating): preserve mixed-case in generic target paths by @alekc in #6459
- docs(generator): document Password secretKeys for multiple keys by @alekc in #6440
- docs: Update deprecated field in docs by @evrardj-roche in #6456
- chore(deps): Bump passbolt SDK to v0.8.0 by @cedricherzog-passbolt in #6447
- chore(charts): Expose storeRequeueInterval in helm charts by @jfhcagip in #6140
- feat(openbao): support custom CAs via
caBundleandcaProviderby @phil9909 in #6461 - feat(ngrok): use API filtering for vault and secret lookups by @jonstacks in #6376
- fix: remove broken link from blog section by @riccardomc in #6465
- chore: fix the template parser for resolving slice notations by @Skarlso in #6449
- fix: bump docs deps for python3.13 by @evrardj-roche in #6475
- fix(kubernetes): replace entire remote secret when pushing rather than merging by @riccardomc in #6485
- feat(infisical): return NoSecretErr on 404 and add PushSecret support by @alekc in #6434
- feat(AWS): add
replicationLocationsto AWS SecretsManager provider by @cmoscofian in #6451 - feat(openbao): add
auth.userPassauth method by @phil9909 in #6492 - chore(deps): Bump
github.com/pulumi/esc-sdk/sdkto v0.14.0 by @phil9909 in #6495 - chore(onepasswordsdk): fix the caching logic and cleanup the code a bit by @Skarlso in #6466
- feat(charts): scope cert-controller RBAC to managed CRDs and webhook secret by @somaz94 in #6481
- test(ngrok): Remove over complicated mocks by @jonstacks in #6483
- chore: Unpin mike by @evrardj-roche in #6477
- docs(akeyless): fix errors and expand provider documentation by @alekc in #6506
- chore: update go sys net and crypto libs by @Skarlso in #6511
- chore(onepasswordsdk): enable the GetAllSecrets and GetSecret unit test and fix it by @Skarlso in #6513
- feat(infisical): allow organization slug to be set in secret scope by @mathnogueira in #6508
- feat(templating): decode templateFrom values by @evrardj-roche in #6482
- chore(bug): fix missing lgtm runner script from the workflow by @Skarlso in #6512
- fix(akeyless): return ReadWrite so PushSecret is routed by @alekc in #6515
- feat(openbao): add
auth.appRoleauth method by @phil9909 in #6497 - feat(externalsecret): add SyncWindows to gate periodic refresh by @alekc in #6452
- docs(azure): correct Azure Stack example version and note expiry limit by @alekc in #6522
- feat(openbao): add support for OpenBao Namespaces by @phil9909 in #6527
- fix(github): preserve selected repositories on org secret update by @alekc in #6519
- docs(azure): list WorkloadIdentity in authType field description by @alekc in #6523
- feat(doppler): include HTTP status in API errors by @alekc in #6489
Dependencies
- chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #6437
- chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #6438
- chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #6435
- chore(deps): bump idna from 3.17 to 3.18 in /hack/api-docs by @dependabot[bot] in #6439
- chore(deps): bump ubi9/ubi from
8942b73to46d19c1by @dependabot[bot] in #6436 - chore(deps): bump platformdirs from 4.9.6 to 4.10.0 in /hack/api-docs by @dependabot[bot] in #6410
- chore(deps): bump golang from
f23e8b2to7a3e500by @dependabot[bot] in #6468 - chore(deps): bump golang from
5d2b868to5f68ec6in /e2e by @dependabot[bot] in #6471 - chore(deps): bump tornado from 6.5.6 to 6.5.7 in /hack/api-docs by @dependabot[bot] in #6473
- chore(deps): bump alpine from 3.23.4 to 3.24.0 in /e2e by @dependabot[bot] in #6470
- chore(deps): bump alpine from
5b10f43toa2d49eaby @dependabot[bot] in #6469 - chore(deps): bump ubi9/ubi from
46d19c1to1b99266by @dependabot[bot] in #6467 - chore(deps): bump alpine from
a2d49eato28bd5fein /hack/api-docs by @dependabot[bot] in #6472 - chore(deps): bump alpine from 3.24.0 to 3.24.1 in /e2e by @dependabot[bot] in #6498
- chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #6500
- chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 by @dependabot[bot] in #6502
- chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #6503
- chore(deps): bump alpine from
a2d49eato28bd5feby @dependabot[bot] in #6499 - chore(deps): bump golang from
7a3e500to3ad5730by @dependabot[bot] in #6501
New Contributors
- @tstenner made their first contribution in #6422
- @ruslan-rm made their first contribution in #6423
- @calebmckay made their first contribution in #6445
- @sdahal-bt made their first contribution in #5999
- @jfhcagip made their first contribution in #6140
- @somaz94 made their first contribution in #6481
- @mathnogueira made their first contribution in #6508
Full Changelog: v2.6.0...v2.7.0