Skip to content

feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache#3588

Merged
moolen merged 2 commits intoexternal-secrets:mainfrom
toVersus:certcontroller-partial-cache
Jun 16, 2024
Merged

feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache#3588
moolen merged 2 commits intoexternal-secrets:mainfrom
toVersus:certcontroller-partial-cache

Conversation

@toVersus
Copy link
Copy Markdown
Contributor

Problem Statement

The certcontroller watches CRDs and Webhook configurations, and manages CA certificates for conversion webhooks of CRDs and Webhook configurations. Some clusters have a large number of CRDs and Webhook configurations installed. Additionally, some CRDs have large object sizes. Currently, the certcontroller holds all CRDs and Webhook configurations in the Informer cache. Since this includes CRDs not managed by the certcontroller for CA certificates, memory usage tends to be high.

Related Issue

Fixes #...

Proposed Changes

This PR adds a label to the CRDs and configures the Informer cache to hold only the CRDs and Webhook configurations restricted by the label selector. It assumes that the CRDs have a label. Depending on how the External Secrets Operator is managed, it may be possible to update the External Secrets Operator without updating the CRDs, so as a precaution, it can be turned on/off via a startup option. It is disabled by default.

Memory usage before and after this change:

image

Checklist

  • I have read the contribution guidelines
  • All commits are signed with git commit --signoff
  • My changes have reasonable test coverage
  • All tests pass with make test
  • I ensured my PR is ready for review with make reviewable

@toVersus toVersus requested a review from a team as a code owner June 16, 2024 07:15
@toVersus toVersus requested a review from Skarlso June 16, 2024 07:15
Prerequisite for restricting the CRDs cached by Informer

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>
@toVersus toVersus force-pushed the certcontroller-partial-cache branch from 45fda65 to d76c50c Compare June 16, 2024 07:17
@moolen
Copy link
Copy Markdown
Member

moolen commented Jun 16, 2024

/ok-to-test sha=d76c50c

…nformer cache

The certcontroller watches CRDs and Webhook configurations, and
manages CA certificates for conversion webhooks of CRDs and Webhook
configurations. Some clusters have a large number of CRDs and Webhook
configurations installed. Additionally, some CRDs have large object sizes.
Currently, the certcontroller holds all CRDs and Webhook configurations
in the Informer cache. Since this includes CRDs not managed by the
certcontroller for CA certificates, memory usage tends to be high.
This PR adds a label to the CRDs and configures the Informer cache to hold
only the CRDs and Webhook configurations restricted by the label selector.
It assumes that the CRDs have a label. Depending on how the External Secrets
Operator is managed, it may be possible to update the External Secrets
Operator without updating the CRDs, so as a precaution, it can be turned
on/off via a startup option. It is disabled by default.

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>
@toVersus toVersus force-pushed the certcontroller-partial-cache branch from d76c50c to 2042fd3 Compare June 16, 2024 07:40
@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@toVersus
Copy link
Copy Markdown
Contributor Author

Sorry, I forgot to replace some parts after moving the label key and values to constants package, so I have modified them here.

@moolen
Copy link
Copy Markdown
Member

moolen commented Jun 16, 2024

/ok-to-test sha=2042fd3

Copy link
Copy Markdown
Member

@moolen moolen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you for this!
I guess it could be worthwhile to set --enable-partial-cache=true if installCRDs=true in the helm chart. Then we can expect that the well known labels are set on the CRDs, so everyone can benefit from this improvement. This is only a nice to have feature and can be addressed in a separate PR.

@moolen moolen merged commit 199c910 into external-secrets:main Jun 16, 2024
@toVersus toVersus deleted the certcontroller-partial-cache branch June 16, 2024 11:29
vsantos pushed a commit to vsantos/external-secrets that referenced this pull request Jun 17, 2024
…nformer cache (external-secrets#3588)

* feat: Add component labels to custom resource definitions

Prerequisite for restricting the CRDs cached by Informer

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>

* feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache

The certcontroller watches CRDs and Webhook configurations, and
manages CA certificates for conversion webhooks of CRDs and Webhook
configurations. Some clusters have a large number of CRDs and Webhook
configurations installed. Additionally, some CRDs have large object sizes.
Currently, the certcontroller holds all CRDs and Webhook configurations
in the Informer cache. Since this includes CRDs not managed by the
certcontroller for CA certificates, memory usage tends to be high.
This PR adds a label to the CRDs and configures the Informer cache to hold
only the CRDs and Webhook configurations restricted by the label selector.
It assumes that the CRDs have a label. Depending on how the External Secrets
Operator is managed, it may be possible to update the External Secrets
Operator without updating the CRDs, so as a precaution, it can be turned
on/off via a startup option. It is disabled by default.

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>

---------

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>
Bude8 pushed a commit to Bude8/external-secrets that referenced this pull request Jun 17, 2024
…nformer cache (external-secrets#3588)

* feat: Add component labels to custom resource definitions

Prerequisite for restricting the CRDs cached by Informer

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>

* feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache

The certcontroller watches CRDs and Webhook configurations, and
manages CA certificates for conversion webhooks of CRDs and Webhook
configurations. Some clusters have a large number of CRDs and Webhook
configurations installed. Additionally, some CRDs have large object sizes.
Currently, the certcontroller holds all CRDs and Webhook configurations
in the Informer cache. Since this includes CRDs not managed by the
certcontroller for CA certificates, memory usage tends to be high.
This PR adds a label to the CRDs and configures the Informer cache to hold
only the CRDs and Webhook configurations restricted by the label selector.
It assumes that the CRDs have a label. Depending on how the External Secrets
Operator is managed, it may be possible to update the External Secrets
Operator without updating the CRDs, so as a precaution, it can be turned
on/off via a startup option. It is disabled by default.

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>

---------

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>
pacificcode pushed a commit to pacificcode/external-secrets that referenced this pull request Jul 3, 2024
…nformer cache (external-secrets#3588)

* feat: Add component labels to custom resource definitions

Prerequisite for restricting the CRDs cached by Informer

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>

* feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache

The certcontroller watches CRDs and Webhook configurations, and
manages CA certificates for conversion webhooks of CRDs and Webhook
configurations. Some clusters have a large number of CRDs and Webhook
configurations installed. Additionally, some CRDs have large object sizes.
Currently, the certcontroller holds all CRDs and Webhook configurations
in the Informer cache. Since this includes CRDs not managed by the
certcontroller for CA certificates, memory usage tends to be high.
This PR adds a label to the CRDs and configures the Informer cache to hold
only the CRDs and Webhook configurations restricted by the label selector.
It assumes that the CRDs have a label. Depending on how the External Secrets
Operator is managed, it may be possible to update the External Secrets
Operator without updating the CRDs, so as a precaution, it can be turned
on/off via a startup option. It is disabled by default.

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>

---------

Signed-off-by: Tsubasa Nagasawa <toversus2357@gmail.com>
Signed-off-by: Bill Hamilton <bill.hamilton@delinea.com>
kireque referenced this pull request in kireque/home-ops-old Jul 6, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| patch | `0.9.19` -> `0.9.20` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.9.20`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

- bump 0.9.19 by [@&#8203;knelasevero](https://togithub.com/knelasevero)
in
[https://github.com/external-secrets/external-secrets/pull/3553](https://togithub.com/external-secrets/external-secrets/pull/3553)
- Fix typo: temaplate --> template by
[@&#8203;lindhe](https://togithub.com/lindhe) in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- Oracle Vault Provider Documentation by
[@&#8203;anders-swanson](https://togithub.com/anders-swanson) in
[https://github.com/external-secrets/external-secrets/pull/3551](https://togithub.com/external-secrets/external-secrets/pull/3551)
- feat: add location to GCP push secret by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3502](https://togithub.com/external-secrets/external-secrets/pull/3502)
- add log.level and log.encoding to all components by
[@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3561](https://togithub.com/external-secrets/external-secrets/pull/3561)
- chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3562](https://togithub.com/external-secrets/external-secrets/pull/3562)
- chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3563](https://togithub.com/external-secrets/external-secrets/pull/3563)
- chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3564](https://togithub.com/external-secrets/external-secrets/pull/3564)
- chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3565](https://togithub.com/external-secrets/external-secrets/pull/3565)
- chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3566](https://togithub.com/external-secrets/external-secrets/pull/3566)
- chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3568](https://togithub.com/external-secrets/external-secrets/pull/3568)
- chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3569](https://togithub.com/external-secrets/external-secrets/pull/3569)
- chore(deps): bump golang from 1.22.3 to 1.22.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3567](https://togithub.com/external-secrets/external-secrets/pull/3567)
- Infisical provider by
[@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- feat: kick github actions on main by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3572](https://togithub.com/external-secrets/external-secrets/pull/3572)
- feat: add support to set Type for AWS parameter store by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3576](https://togithub.com/external-secrets/external-secrets/pull/3576)
- Remove shuheiktgw from maintainers by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3573](https://togithub.com/external-secrets/external-secrets/pull/3573)
- Add device42 provider by
[@&#8203;smcavallo](https://togithub.com/smcavallo) in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- ref: parameter store should be called only once by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3584](https://togithub.com/external-secrets/external-secrets/pull/3584)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3570](https://togithub.com/external-secrets/external-secrets/pull/3570)
- feat(certcontroller): Allow restricting CRDs and Webhook configs in
Informer cache by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- Support glob for namespaces condition in ClusterSecretStore by
[@&#8203;speedfl](https://togithub.com/speedfl) in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- Fix typo privatKey in multiple files by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3578](https://togithub.com/external-secrets/external-secrets/pull/3578)
- chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3595](https://togithub.com/external-secrets/external-secrets/pull/3595)
- chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3591](https://togithub.com/external-secrets/external-secrets/pull/3591)
- chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3592](https://togithub.com/external-secrets/external-secrets/pull/3592)
- chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3590](https://togithub.com/external-secrets/external-secrets/pull/3590)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3596](https://togithub.com/external-secrets/external-secrets/pull/3596)
- chore(deps): bump golang from `aec4784` to `9678844` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3593](https://togithub.com/external-secrets/external-secrets/pull/3593)
- chore(deps): bump golang from `9bdd569` to `6522f0c` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3594](https://togithub.com/external-secrets/external-secrets/pull/3594)
- feat(chart): Enable partial cache for certcontroller when
installCRDs=true by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3589](https://togithub.com/external-secrets/external-secrets/pull/3589)
- Add skip unmanaged store logic for push secret controller by
[@&#8203;Bude8](https://togithub.com/Bude8) in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- fix(vault): Fix crash when caching is enabled and a token expires by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- Remove the use of "golang.org/x/crypto/pkcs12" by
[@&#8203;yihuaf](https://togithub.com/yihuaf) in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- Make UBI more tolerable from OS vulnerabilities by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3607](https://togithub.com/external-secrets/external-secrets/pull/3607)
- fix: explicitly fetch status subresource due to inconsistencies by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3608](https://togithub.com/external-secrets/external-secrets/pull/3608)
- Adds codepath for removing finalizers by
[@&#8203;lllamnyp](https://togithub.com/lllamnyp) in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3624](https://togithub.com/external-secrets/external-secrets/pull/3624)
- chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3622](https://togithub.com/external-secrets/external-secrets/pull/3622)
- chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3621](https://togithub.com/external-secrets/external-secrets/pull/3621)
- chore(deps): bump golang from `6522f0c` to `ace6cc3` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3620](https://togithub.com/external-secrets/external-secrets/pull/3620)
- chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3618](https://togithub.com/external-secrets/external-secrets/pull/3618)
- chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3617](https://togithub.com/external-secrets/external-secrets/pull/3617)
- chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3616](https://togithub.com/external-secrets/external-secrets/pull/3616)
- chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3615](https://togithub.com/external-secrets/external-secrets/pull/3615)
- chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3614](https://togithub.com/external-secrets/external-secrets/pull/3614)
- Fix ACR External Secret example by
[@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- feat: add bitwarden secret manager support by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3603](https://togithub.com/external-secrets/external-secrets/pull/3603)
- fix: e2e installation of ESO needs to update dependencies first by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3635](https://togithub.com/external-secrets/external-secrets/pull/3635)
- added secretserver env vars to e2e.yml by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- docs: fix dataFrom.find in ExternalSecret api example by
[@&#8203;sboschman](https://togithub.com/sboschman) in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3641](https://togithub.com/external-secrets/external-secrets/pull/3641)
- chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3640](https://togithub.com/external-secrets/external-secrets/pull/3640)
- chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3639](https://togithub.com/external-secrets/external-secrets/pull/3639)
- add AuthRef to kubernetes provider fixes
[#&#8203;3627](https://togithub.com/external-secrets/external-secrets/issues/3627)
by [@&#8203;kaedwen](https://togithub.com/kaedwen) in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- fix: implement handling for pushing whole k8s secret to gcsm by
[@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- bump e2e pipeline by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3646](https://togithub.com/external-secrets/external-secrets/pull/3646)
- fix e2e permissions by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3647](https://togithub.com/external-secrets/external-secrets/pull/3647)
- bump docs with e2e commands by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3648](https://togithub.com/external-secrets/external-secrets/pull/3648)
- also needs pull-requests by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3649](https://togithub.com/external-secrets/external-secrets/pull/3649)
- use github token to allow comment by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3651](https://togithub.com/external-secrets/external-secrets/pull/3651)
- fix(webhook): perform conversion of data by
[@&#8203;cardoe](https://togithub.com/cardoe) in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- feat: implement pushing whole k8s secret to Azure Keyvault by
[@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- fix(vault): Treat tokens expiring in <60s as expired by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3637](https://togithub.com/external-secrets/external-secrets/pull/3637)
- Allow specifying the same namespace for SecretStores by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3555](https://togithub.com/external-secrets/external-secrets/pull/3555)
- docs: add proposal for PushSecret metadata by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3612](https://togithub.com/external-secrets/external-secrets/pull/3612)
- fix github credentials by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3656](https://togithub.com/external-secrets/external-secrets/pull/3656)
- docs: updated k8s support for ESO v0.9 by
[@&#8203;shazib-summar](https://togithub.com/shazib-summar) in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

#### New Contributors

- [@&#8203;lindhe](https://togithub.com/lindhe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- [@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- [@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- [@&#8203;smcavallo](https://togithub.com/smcavallo) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- [@&#8203;toVersus](https://togithub.com/toVersus) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- [@&#8203;speedfl](https://togithub.com/speedfl) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- [@&#8203;Bude8](https://togithub.com/Bude8) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- [@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic)
made their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- [@&#8203;yihuaf](https://togithub.com/yihuaf) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- [@&#8203;lllamnyp](https://togithub.com/lllamnyp) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- [@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- [@&#8203;pacificcode](https://togithub.com/pacificcode) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- [@&#8203;sboschman](https://togithub.com/sboschman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- [@&#8203;kaedwen](https://togithub.com/kaedwen) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- [@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- [@&#8203;cardoe](https://togithub.com/cardoe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- [@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- [@&#8203;shazib-summar](https://togithub.com/shazib-summar) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

**Full Changelog**:
external-secrets/external-secrets@v0.9.19...v0.9.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjQuMyIsInVwZGF0ZWRJblZlciI6IjM3LjQyNC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9oZWxtIiwidHlwZS9wYXRjaCJdfQ==-->

Co-authored-by: kireque-bot[bot] <143391978+kireque-bot[bot]@users.noreply.github.com>
lambchop4prez referenced this pull request in lambchop4prez/network Jul 7, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| patch | `0.9.18` -> `0.9.20` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.9.20`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

- bump 0.9.19 by [@&#8203;knelasevero](https://togithub.com/knelasevero)
in
[https://github.com/external-secrets/external-secrets/pull/3553](https://togithub.com/external-secrets/external-secrets/pull/3553)
- Fix typo: temaplate --> template by
[@&#8203;lindhe](https://togithub.com/lindhe) in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- Oracle Vault Provider Documentation by
[@&#8203;anders-swanson](https://togithub.com/anders-swanson) in
[https://github.com/external-secrets/external-secrets/pull/3551](https://togithub.com/external-secrets/external-secrets/pull/3551)
- feat: add location to GCP push secret by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3502](https://togithub.com/external-secrets/external-secrets/pull/3502)
- add log.level and log.encoding to all components by
[@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3561](https://togithub.com/external-secrets/external-secrets/pull/3561)
- chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3562](https://togithub.com/external-secrets/external-secrets/pull/3562)
- chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3563](https://togithub.com/external-secrets/external-secrets/pull/3563)
- chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3564](https://togithub.com/external-secrets/external-secrets/pull/3564)
- chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3565](https://togithub.com/external-secrets/external-secrets/pull/3565)
- chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3566](https://togithub.com/external-secrets/external-secrets/pull/3566)
- chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3568](https://togithub.com/external-secrets/external-secrets/pull/3568)
- chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3569](https://togithub.com/external-secrets/external-secrets/pull/3569)
- chore(deps): bump golang from 1.22.3 to 1.22.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3567](https://togithub.com/external-secrets/external-secrets/pull/3567)
- Infisical provider by
[@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- feat: kick github actions on main by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3572](https://togithub.com/external-secrets/external-secrets/pull/3572)
- feat: add support to set Type for AWS parameter store by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3576](https://togithub.com/external-secrets/external-secrets/pull/3576)
- Remove shuheiktgw from maintainers by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3573](https://togithub.com/external-secrets/external-secrets/pull/3573)
- Add device42 provider by
[@&#8203;smcavallo](https://togithub.com/smcavallo) in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- ref: parameter store should be called only once by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3584](https://togithub.com/external-secrets/external-secrets/pull/3584)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3570](https://togithub.com/external-secrets/external-secrets/pull/3570)
- feat(certcontroller): Allow restricting CRDs and Webhook configs in
Informer cache by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- Support glob for namespaces condition in ClusterSecretStore by
[@&#8203;speedfl](https://togithub.com/speedfl) in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- Fix typo privatKey in multiple files by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3578](https://togithub.com/external-secrets/external-secrets/pull/3578)
- chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3595](https://togithub.com/external-secrets/external-secrets/pull/3595)
- chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3591](https://togithub.com/external-secrets/external-secrets/pull/3591)
- chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3592](https://togithub.com/external-secrets/external-secrets/pull/3592)
- chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3590](https://togithub.com/external-secrets/external-secrets/pull/3590)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3596](https://togithub.com/external-secrets/external-secrets/pull/3596)
- chore(deps): bump golang from `aec4784` to `9678844` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3593](https://togithub.com/external-secrets/external-secrets/pull/3593)
- chore(deps): bump golang from `9bdd569` to `6522f0c` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3594](https://togithub.com/external-secrets/external-secrets/pull/3594)
- feat(chart): Enable partial cache for certcontroller when
installCRDs=true by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3589](https://togithub.com/external-secrets/external-secrets/pull/3589)
- Add skip unmanaged store logic for push secret controller by
[@&#8203;Bude8](https://togithub.com/Bude8) in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- fix(vault): Fix crash when caching is enabled and a token expires by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- Remove the use of "golang.org/x/crypto/pkcs12" by
[@&#8203;yihuaf](https://togithub.com/yihuaf) in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- Make UBI more tolerable from OS vulnerabilities by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3607](https://togithub.com/external-secrets/external-secrets/pull/3607)
- fix: explicitly fetch status subresource due to inconsistencies by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3608](https://togithub.com/external-secrets/external-secrets/pull/3608)
- Adds codepath for removing finalizers by
[@&#8203;lllamnyp](https://togithub.com/lllamnyp) in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3624](https://togithub.com/external-secrets/external-secrets/pull/3624)
- chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3622](https://togithub.com/external-secrets/external-secrets/pull/3622)
- chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3621](https://togithub.com/external-secrets/external-secrets/pull/3621)
- chore(deps): bump golang from `6522f0c` to `ace6cc3` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3620](https://togithub.com/external-secrets/external-secrets/pull/3620)
- chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3618](https://togithub.com/external-secrets/external-secrets/pull/3618)
- chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3617](https://togithub.com/external-secrets/external-secrets/pull/3617)
- chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3616](https://togithub.com/external-secrets/external-secrets/pull/3616)
- chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3615](https://togithub.com/external-secrets/external-secrets/pull/3615)
- chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3614](https://togithub.com/external-secrets/external-secrets/pull/3614)
- Fix ACR External Secret example by
[@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- feat: add bitwarden secret manager support by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3603](https://togithub.com/external-secrets/external-secrets/pull/3603)
- fix: e2e installation of ESO needs to update dependencies first by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3635](https://togithub.com/external-secrets/external-secrets/pull/3635)
- added secretserver env vars to e2e.yml by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- docs: fix dataFrom.find in ExternalSecret api example by
[@&#8203;sboschman](https://togithub.com/sboschman) in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3641](https://togithub.com/external-secrets/external-secrets/pull/3641)
- chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3640](https://togithub.com/external-secrets/external-secrets/pull/3640)
- chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3639](https://togithub.com/external-secrets/external-secrets/pull/3639)
- add AuthRef to kubernetes provider fixes
[#&#8203;3627](https://togithub.com/external-secrets/external-secrets/issues/3627)
by [@&#8203;kaedwen](https://togithub.com/kaedwen) in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- fix: implement handling for pushing whole k8s secret to gcsm by
[@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- bump e2e pipeline by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3646](https://togithub.com/external-secrets/external-secrets/pull/3646)
- fix e2e permissions by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3647](https://togithub.com/external-secrets/external-secrets/pull/3647)
- bump docs with e2e commands by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3648](https://togithub.com/external-secrets/external-secrets/pull/3648)
- also needs pull-requests by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3649](https://togithub.com/external-secrets/external-secrets/pull/3649)
- use github token to allow comment by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3651](https://togithub.com/external-secrets/external-secrets/pull/3651)
- fix(webhook): perform conversion of data by
[@&#8203;cardoe](https://togithub.com/cardoe) in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- feat: implement pushing whole k8s secret to Azure Keyvault by
[@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- fix(vault): Treat tokens expiring in <60s as expired by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3637](https://togithub.com/external-secrets/external-secrets/pull/3637)
- Allow specifying the same namespace for SecretStores by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3555](https://togithub.com/external-secrets/external-secrets/pull/3555)
- docs: add proposal for PushSecret metadata by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3612](https://togithub.com/external-secrets/external-secrets/pull/3612)
- fix github credentials by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3656](https://togithub.com/external-secrets/external-secrets/pull/3656)
- docs: updated k8s support for ESO v0.9 by
[@&#8203;shazib-summar](https://togithub.com/shazib-summar) in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

#### New Contributors

- [@&#8203;lindhe](https://togithub.com/lindhe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- [@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- [@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- [@&#8203;smcavallo](https://togithub.com/smcavallo) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- [@&#8203;toVersus](https://togithub.com/toVersus) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- [@&#8203;speedfl](https://togithub.com/speedfl) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- [@&#8203;Bude8](https://togithub.com/Bude8) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- [@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic)
made their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- [@&#8203;yihuaf](https://togithub.com/yihuaf) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- [@&#8203;lllamnyp](https://togithub.com/lllamnyp) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- [@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- [@&#8203;pacificcode](https://togithub.com/pacificcode) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- [@&#8203;sboschman](https://togithub.com/sboschman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- [@&#8203;kaedwen](https://togithub.com/kaedwen) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- [@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- [@&#8203;cardoe](https://togithub.com/cardoe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- [@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- [@&#8203;shazib-summar](https://togithub.com/shazib-summar) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

**Full Changelog**:
external-secrets/external-secrets@v0.9.19...v0.9.20

###
[`v0.9.19`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.19)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.18...v0.9.19)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.19`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.19-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.19-ubi-boringssl`

#### What's Changed

- bump 0.9.18 by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3492](https://togithub.com/external-secrets/external-secrets/pull/3492)
- Fix flaky ES controller test by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3493](https://togithub.com/external-secrets/external-secrets/pull/3493)
- Raise error when unknown key specified in template by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3480](https://togithub.com/external-secrets/external-secrets/pull/3480)
- Update ci.yml with ppc64le arch support by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3500](https://togithub.com/external-secrets/external-secrets/pull/3500)
- chore(deps): bump regex from 2024.5.10 to 2024.5.15 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3512](https://togithub.com/external-secrets/external-secrets/pull/3512)
- chore(deps): bump zipp from 3.18.1 to 3.18.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3511](https://togithub.com/external-secrets/external-secrets/pull/3511)
- chore(deps): bump platformdirs from 4.2.1 to 4.2.2 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3510](https://togithub.com/external-secrets/external-secrets/pull/3510)
- chore(deps): bump golang from `6d71b7c` to `5c56bd4` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3508](https://togithub.com/external-secrets/external-secrets/pull/3508)
- chore(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3507](https://togithub.com/external-secrets/external-secrets/pull/3507)
- chore(deps): bump codecov/codecov-action from 4.3.1 to 4.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3506](https://togithub.com/external-secrets/external-secrets/pull/3506)
- chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3505](https://togithub.com/external-secrets/external-secrets/pull/3505)
- chore(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3504](https://togithub.com/external-secrets/external-secrets/pull/3504)
- chore(deps): bump golang from `2a88224` to `f1fe698` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3503](https://togithub.com/external-secrets/external-secrets/pull/3503)
- chore(deps): bump mkdocs-material from 9.5.22 to 9.5.23 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3509](https://togithub.com/external-secrets/external-secrets/pull/3509)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3513](https://togithub.com/external-secrets/external-secrets/pull/3513)
- ppc64le additions by [@&#8203;IdanAdar](https://togithub.com/IdanAdar)
in
[https://github.com/external-secrets/external-secrets/pull/3535](https://togithub.com/external-secrets/external-secrets/pull/3535)
- chore(deps): bump ubi8/ubi-minimal from `2fa47fa` to `f729a7f` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3523](https://togithub.com/external-secrets/external-secrets/pull/3523)
- doc(BitWarden): extends the liveness timeout by
[@&#8203;acolombier](https://togithub.com/acolombier) in
[https://github.com/external-secrets/external-secrets/pull/3542](https://togithub.com/external-secrets/external-secrets/pull/3542)
- chore(deps): bump mkdocs-material from 9.5.23 to 9.5.24 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3526](https://togithub.com/external-secrets/external-secrets/pull/3526)
- chore(deps): bump zipp from 3.18.2 to 3.19.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3527](https://togithub.com/external-secrets/external-secrets/pull/3527)
- chore(deps): bump requests from 2.31.0 to 2.32.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3528](https://togithub.com/external-secrets/external-secrets/pull/3528)
- chore(deps): bump codecov/codecov-action from 4.4.0 to 4.4.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3530](https://togithub.com/external-secrets/external-secrets/pull/3530)
- chore(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3531](https://togithub.com/external-secrets/external-secrets/pull/3531)
- chore(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3532](https://togithub.com/external-secrets/external-secrets/pull/3532)
- chore(deps): bump ubi8/ubi-minimal from `f729a7f` to `9e458f4` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3543](https://togithub.com/external-secrets/external-secrets/pull/3543)
- chore(deps): bump golang from `f1fe698` to `b8ded51` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3522](https://togithub.com/external-secrets/external-secrets/pull/3522)
- chore(deps): bump alpine from 3.19.1 to 3.20.0 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3525](https://togithub.com/external-secrets/external-secrets/pull/3525)
- chore(deps): bump watchdog from 4.0.0 to 4.0.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3529](https://togithub.com/external-secrets/external-secrets/pull/3529)
- chore(deps): bump alpine from 3.19 to 3.20 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3533](https://togithub.com/external-secrets/external-secrets/pull/3533)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3534](https://togithub.com/external-secrets/external-secrets/pull/3534)
- Fix: ESO template crash when Kubernetes secret data is nil by
[@&#8203;ma-ble](https://togithub.com/ma-ble) in
[https://github.com/external-secrets/external-secrets/pull/3537](https://togithub.com/external-secrets/external-secrets/pull/3537)
- chore(deps): bump alpine from `c5b1261` to `77726ef` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3524](https://togithub.com/external-secrets/external-secrets/pull/3524)
- Add CA-Bundle to pemToPkcs12 output by
[@&#8203;WatcherWhale](https://togithub.com/WatcherWhale) in
[https://github.com/external-secrets/external-secrets/pull/3494](https://togithub.com/external-secrets/external-secrets/pull/3494)
- chore(deps): bump docker/login-action from 3.1.0 to 3.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3544](https://togithub.com/external-secrets/external-secrets/pull/3544)
- chore(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3545](https://togithub.com/external-secrets/external-secrets/pull/3545)
- chore(deps): bump certifi from 2024.2.2 to 2024.6.2 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3546](https://togithub.com/external-secrets/external-secrets/pull/3546)
- chore(deps): bump mkdocs-material from 9.5.24 to 9.5.25 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3547](https://togithub.com/external-secrets/external-secrets/pull/3547)
- chore(deps): bump zipp from 3.19.0 to 3.19.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3549](https://togithub.com/external-secrets/external-secrets/pull/3549)
- chore(deps): bump requests from 2.32.2 to 2.32.3 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3548](https://togithub.com/external-secrets/external-secrets/pull/3548)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3550](https://togithub.com/external-secrets/external-secrets/pull/3550)

#### New Contributors

- [@&#8203;acolombier](https://togithub.com/acolombier) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3542](https://togithub.com/external-secrets/external-secrets/pull/3542)
- [@&#8203;ma-ble](https://togithub.com/ma-ble) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3537](https://togithub.com/external-secrets/external-secrets/pull/3537)

**Full Changelog**:
external-secrets/external-secrets@v0.9.18...v0.9.19

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/lambchop4prez/network).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zODguMSIsInVwZGF0ZWRJblZlciI6IjM3LjQyMS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
nrdufour pushed a commit to nrdufour/home-ops that referenced this pull request Jul 7, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | patch | `0.9.19` -> `0.9.20` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

### [`v0.9.20`](https://github.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare Source](external-secrets/external-secrets@v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

-   bump 0.9.19 by [@&#8203;knelasevero](https://github.com/knelasevero) in external-secrets/external-secrets#3553
-   Fix typo: temaplate --> template by [@&#8203;lindhe](https://github.com/lindhe) in external-secrets/external-secrets#3554
-   Oracle Vault Provider Documentation by [@&#8203;anders-swanson](https://github.com/anders-swanson) in external-secrets/external-secrets#3551
-   feat: add location to GCP push secret by [@&#8203;Skarlso](https://github.com/Skarlso) in external-secrets/external-secrets#3502
-   add log.level and log.encoding to all components by [@&#8203;KyriosGN0](https://github.com/KyriosGN0) in external-secrets/external-secrets#3558
-   chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3561
-   chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3562
-   chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3563
-   chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3564
-   chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3565
-   chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3566
-   chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3568
-   chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in /e2e by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3569
-   chore(deps): bump golang from 1.22.3 to 1.22.4 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3567
-   Infisical provider by [@&#8203;akhilmhdh](https://github.com/akhilmhdh) in external-secrets/external-secrets#3477
-   feat: kick github actions on main by [@&#8203;Skarlso](https://github.com/Skarlso) in external-secrets/external-secrets#3572
-   feat: add support to set Type for AWS parameter store by [@&#8203;vsantos](https://github.com/vsantos) in external-secrets/external-secrets#3576
-   Remove shuheiktgw from maintainers by [@&#8203;shuheiktgw](https://github.com/shuheiktgw) in external-secrets/external-secrets#3573
-   Add device42 provider by [@&#8203;smcavallo](https://github.com/smcavallo) in external-secrets/external-secrets#3571
-   ref: parameter store should be called only once by [@&#8203;Skarlso](https://github.com/Skarlso) in external-secrets/external-secrets#3584
-   chore: update dependencies by [@&#8203;eso-service-account-app](https://github.com/eso-service-account-app) in external-secrets/external-secrets#3570
-   feat(certcontroller): Allow restricting CRDs and Webhook configs in Informer cache by [@&#8203;toVersus](https://github.com/toVersus) in external-secrets/external-secrets#3588
-   Support glob for namespaces condition in ClusterSecretStore by [@&#8203;speedfl](https://github.com/speedfl) in external-secrets/external-secrets#2920
-   Fix typo privatKey in multiple files by [@&#8203;IdanAdar](https://github.com/IdanAdar) in external-secrets/external-secrets#3578
-   chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3595
-   chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3591
-   chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3592
-   chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3590
-   chore: update dependencies by [@&#8203;eso-service-account-app](https://github.com/eso-service-account-app) in external-secrets/external-secrets#3596
-   chore(deps): bump golang from `aec4784` to `9678844` in /e2e by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3593
-   chore(deps): bump golang from `9bdd569` to `6522f0c` by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3594
-   feat(chart): Enable partial cache for certcontroller when installCRDs=true by [@&#8203;toVersus](https://github.com/toVersus) in external-secrets/external-secrets#3589
-   Add skip unmanaged store logic for push secret controller by [@&#8203;Bude8](https://github.com/Bude8) in external-secrets/external-secrets#3123
-   fix(vault): Fix crash when caching is enabled and a token expires by [@&#8203;agunnerson-elastic](https://github.com/agunnerson-elastic) in external-secrets/external-secrets#3598
-   Remove the use of "golang.org/x/crypto/pkcs12" by [@&#8203;yihuaf](https://github.com/yihuaf) in external-secrets/external-secrets#3601
-   Make UBI more tolerable from OS vulnerabilities by [@&#8203;IdanAdar](https://github.com/IdanAdar) in external-secrets/external-secrets#3607
-   fix: explicitly fetch status subresource due to inconsistencies by [@&#8203;moolen](https://github.com/moolen) in external-secrets/external-secrets#3608
-   Adds codepath for removing finalizers by [@&#8203;lllamnyp](https://github.com/lllamnyp) in external-secrets/external-secrets#3610
-   chore: update dependencies by [@&#8203;eso-service-account-app](https://github.com/eso-service-account-app) in external-secrets/external-secrets#3624
-   chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3622
-   chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3621
-   chore(deps): bump golang from `6522f0c` to `ace6cc3` by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3620
-   chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3618
-   chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3617
-   chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3616
-   chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3615
-   chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3614
-   Fix ACR External Secret example by [@&#8203;ellenfieldn](https://github.com/ellenfieldn) in external-secrets/external-secrets#3626
-   feat: add bitwarden secret manager support by [@&#8203;Skarlso](https://github.com/Skarlso) in external-secrets/external-secrets#3603
-   fix: e2e installation of ESO needs to update dependencies first by [@&#8203;Skarlso](https://github.com/Skarlso) in external-secrets/external-secrets#3635
-   added secretserver env vars to e2e.yml by [@&#8203;pacificcode](https://github.com/pacificcode) in external-secrets/external-secrets#3636
-   docs: fix dataFrom.find in ExternalSecret api example by [@&#8203;sboschman](https://github.com/sboschman) in external-secrets/external-secrets#3633
-   chore: update dependencies by [@&#8203;eso-service-account-app](https://github.com/eso-service-account-app) in external-secrets/external-secrets#3641
-   chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3640
-   chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot) in external-secrets/external-secrets#3639
-   add AuthRef to kubernetes provider fixes [#&#8203;3627](external-secrets/external-secrets#3627) by [@&#8203;kaedwen](https://github.com/kaedwen) in external-secrets/external-secrets#3628
-   fix: implement handling for pushing whole k8s secret to gcsm by [@&#8203;thejosephstevens](https://github.com/thejosephstevens) in external-secrets/external-secrets#3644
-   bump e2e pipeline by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in external-secrets/external-secrets#3646
-   fix e2e permissions by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in external-secrets/external-secrets#3647
-   bump docs with e2e commands by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in external-secrets/external-secrets#3648
-   also needs pull-requests by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in external-secrets/external-secrets#3649
-   use github token to allow comment by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in external-secrets/external-secrets#3651
-   fix(webhook): perform conversion of data by [@&#8203;cardoe](https://github.com/cardoe) in external-secrets/external-secrets#3638
-   feat: implement pushing whole k8s secret to Azure Keyvault by [@&#8203;CCOLLOT](https://github.com/CCOLLOT) in external-secrets/external-secrets#3650
-   fix(vault): Treat tokens expiring in <60s as expired by [@&#8203;agunnerson-elastic](https://github.com/agunnerson-elastic) in external-secrets/external-secrets#3637
-   Allow specifying the same namespace for SecretStores by [@&#8203;shuheiktgw](https://github.com/shuheiktgw) in external-secrets/external-secrets#3555
-   docs: add proposal for PushSecret metadata by [@&#8203;moolen](https://github.com/moolen) in external-secrets/external-secrets#3612
-   fix github credentials by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in external-secrets/external-secrets#3656
-   docs: updated k8s support for ESO v0.9 by [@&#8203;shazib-summar](https://github.com/shazib-summar) in external-secrets/external-secrets#3659

#### New Contributors

-   [@&#8203;lindhe](https://github.com/lindhe) made their first contribution in external-secrets/external-secrets#3554
-   [@&#8203;KyriosGN0](https://github.com/KyriosGN0) made their first contribution in external-secrets/external-secrets#3558
-   [@&#8203;akhilmhdh](https://github.com/akhilmhdh) made their first contribution in external-secrets/external-secrets#3477
-   [@&#8203;smcavallo](https://github.com/smcavallo) made their first contribution in external-secrets/external-secrets#3571
-   [@&#8203;toVersus](https://github.com/toVersus) made their first contribution in external-secrets/external-secrets#3588
-   [@&#8203;speedfl](https://github.com/speedfl) made their first contribution in external-secrets/external-secrets#2920
-   [@&#8203;Bude8](https://github.com/Bude8) made their first contribution in external-secrets/external-secrets#3123
-   [@&#8203;agunnerson-elastic](https://github.com/agunnerson-elastic) made their first contribution in external-secrets/external-secrets#3598
-   [@&#8203;yihuaf](https://github.com/yihuaf) made their first contribution in external-secrets/external-secrets#3601
-   [@&#8203;lllamnyp](https://github.com/lllamnyp) made their first contribution in external-secrets/external-secrets#3610
-   [@&#8203;ellenfieldn](https://github.com/ellenfieldn) made their first contribution in external-secrets/external-secrets#3626
-   [@&#8203;pacificcode](https://github.com/pacificcode) made their first contribution in external-secrets/external-secrets#3636
-   [@&#8203;sboschman](https://github.com/sboschman) made their first contribution in external-secrets/external-secrets#3633
-   [@&#8203;kaedwen](https://github.com/kaedwen) made their first contribution in external-secrets/external-secrets#3628
-   [@&#8203;thejosephstevens](https://github.com/thejosephstevens) made their first contribution in external-secrets/external-secrets#3644
-   [@&#8203;cardoe](https://github.com/cardoe) made their first contribution in external-secrets/external-secrets#3638
-   [@&#8203;CCOLLOT](https://github.com/CCOLLOT) made their first contribution in external-secrets/external-secrets#3650
-   [@&#8203;shazib-summar](https://github.com/shazib-summar) made their first contribution in external-secrets/external-secrets#3659

**Full Changelog**: external-secrets/external-secrets@v0.9.19...v0.9.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjQuMCIsInVwZGF0ZWRJblZlciI6IjM3LjQyNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: https://git.internal/nrdufour/home-ops/pulls/478
Co-authored-by: Renovate <renovate@ptinem.casa>
Co-committed-by: Renovate <renovate@ptinem.casa>
lumiere-bot bot referenced this pull request in coolguy1771/home-ops Jul 13, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| patch | `0.9.19` -> `0.9.20` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.9.20`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

- bump 0.9.19 by [@&#8203;knelasevero](https://togithub.com/knelasevero)
in
[https://github.com/external-secrets/external-secrets/pull/3553](https://togithub.com/external-secrets/external-secrets/pull/3553)
- Fix typo: temaplate --> template by
[@&#8203;lindhe](https://togithub.com/lindhe) in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- Oracle Vault Provider Documentation by
[@&#8203;anders-swanson](https://togithub.com/anders-swanson) in
[https://github.com/external-secrets/external-secrets/pull/3551](https://togithub.com/external-secrets/external-secrets/pull/3551)
- feat: add location to GCP push secret by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3502](https://togithub.com/external-secrets/external-secrets/pull/3502)
- add log.level and log.encoding to all components by
[@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3561](https://togithub.com/external-secrets/external-secrets/pull/3561)
- chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3562](https://togithub.com/external-secrets/external-secrets/pull/3562)
- chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3563](https://togithub.com/external-secrets/external-secrets/pull/3563)
- chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3564](https://togithub.com/external-secrets/external-secrets/pull/3564)
- chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3565](https://togithub.com/external-secrets/external-secrets/pull/3565)
- chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3566](https://togithub.com/external-secrets/external-secrets/pull/3566)
- chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3568](https://togithub.com/external-secrets/external-secrets/pull/3568)
- chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3569](https://togithub.com/external-secrets/external-secrets/pull/3569)
- chore(deps): bump golang from 1.22.3 to 1.22.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3567](https://togithub.com/external-secrets/external-secrets/pull/3567)
- Infisical provider by
[@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- feat: kick github actions on main by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3572](https://togithub.com/external-secrets/external-secrets/pull/3572)
- feat: add support to set Type for AWS parameter store by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3576](https://togithub.com/external-secrets/external-secrets/pull/3576)
- Remove shuheiktgw from maintainers by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3573](https://togithub.com/external-secrets/external-secrets/pull/3573)
- Add device42 provider by
[@&#8203;smcavallo](https://togithub.com/smcavallo) in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- ref: parameter store should be called only once by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3584](https://togithub.com/external-secrets/external-secrets/pull/3584)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3570](https://togithub.com/external-secrets/external-secrets/pull/3570)
- feat(certcontroller): Allow restricting CRDs and Webhook configs in
Informer cache by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- Support glob for namespaces condition in ClusterSecretStore by
[@&#8203;speedfl](https://togithub.com/speedfl) in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- Fix typo privatKey in multiple files by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3578](https://togithub.com/external-secrets/external-secrets/pull/3578)
- chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3595](https://togithub.com/external-secrets/external-secrets/pull/3595)
- chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3591](https://togithub.com/external-secrets/external-secrets/pull/3591)
- chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3592](https://togithub.com/external-secrets/external-secrets/pull/3592)
- chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3590](https://togithub.com/external-secrets/external-secrets/pull/3590)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3596](https://togithub.com/external-secrets/external-secrets/pull/3596)
- chore(deps): bump golang from `aec4784` to `9678844` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3593](https://togithub.com/external-secrets/external-secrets/pull/3593)
- chore(deps): bump golang from `9bdd569` to `6522f0c` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3594](https://togithub.com/external-secrets/external-secrets/pull/3594)
- feat(chart): Enable partial cache for certcontroller when
installCRDs=true by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3589](https://togithub.com/external-secrets/external-secrets/pull/3589)
- Add skip unmanaged store logic for push secret controller by
[@&#8203;Bude8](https://togithub.com/Bude8) in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- fix(vault): Fix crash when caching is enabled and a token expires by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- Remove the use of "golang.org/x/crypto/pkcs12" by
[@&#8203;yihuaf](https://togithub.com/yihuaf) in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- Make UBI more tolerable from OS vulnerabilities by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3607](https://togithub.com/external-secrets/external-secrets/pull/3607)
- fix: explicitly fetch status subresource due to inconsistencies by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3608](https://togithub.com/external-secrets/external-secrets/pull/3608)
- Adds codepath for removing finalizers by
[@&#8203;lllamnyp](https://togithub.com/lllamnyp) in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3624](https://togithub.com/external-secrets/external-secrets/pull/3624)
- chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3622](https://togithub.com/external-secrets/external-secrets/pull/3622)
- chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3621](https://togithub.com/external-secrets/external-secrets/pull/3621)
- chore(deps): bump golang from `6522f0c` to `ace6cc3` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3620](https://togithub.com/external-secrets/external-secrets/pull/3620)
- chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3618](https://togithub.com/external-secrets/external-secrets/pull/3618)
- chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3617](https://togithub.com/external-secrets/external-secrets/pull/3617)
- chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3616](https://togithub.com/external-secrets/external-secrets/pull/3616)
- chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3615](https://togithub.com/external-secrets/external-secrets/pull/3615)
- chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3614](https://togithub.com/external-secrets/external-secrets/pull/3614)
- Fix ACR External Secret example by
[@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- feat: add bitwarden secret manager support by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3603](https://togithub.com/external-secrets/external-secrets/pull/3603)
- fix: e2e installation of ESO needs to update dependencies first by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3635](https://togithub.com/external-secrets/external-secrets/pull/3635)
- added secretserver env vars to e2e.yml by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- docs: fix dataFrom.find in ExternalSecret api example by
[@&#8203;sboschman](https://togithub.com/sboschman) in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3641](https://togithub.com/external-secrets/external-secrets/pull/3641)
- chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3640](https://togithub.com/external-secrets/external-secrets/pull/3640)
- chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3639](https://togithub.com/external-secrets/external-secrets/pull/3639)
- add AuthRef to kubernetes provider fixes
[#&#8203;3627](https://togithub.com/external-secrets/external-secrets/issues/3627)
by [@&#8203;kaedwen](https://togithub.com/kaedwen) in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- fix: implement handling for pushing whole k8s secret to gcsm by
[@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- bump e2e pipeline by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3646](https://togithub.com/external-secrets/external-secrets/pull/3646)
- fix e2e permissions by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3647](https://togithub.com/external-secrets/external-secrets/pull/3647)
- bump docs with e2e commands by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3648](https://togithub.com/external-secrets/external-secrets/pull/3648)
- also needs pull-requests by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3649](https://togithub.com/external-secrets/external-secrets/pull/3649)
- use github token to allow comment by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3651](https://togithub.com/external-secrets/external-secrets/pull/3651)
- fix(webhook): perform conversion of data by
[@&#8203;cardoe](https://togithub.com/cardoe) in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- feat: implement pushing whole k8s secret to Azure Keyvault by
[@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- fix(vault): Treat tokens expiring in <60s as expired by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3637](https://togithub.com/external-secrets/external-secrets/pull/3637)
- Allow specifying the same namespace for SecretStores by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3555](https://togithub.com/external-secrets/external-secrets/pull/3555)
- docs: add proposal for PushSecret metadata by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3612](https://togithub.com/external-secrets/external-secrets/pull/3612)
- fix github credentials by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3656](https://togithub.com/external-secrets/external-secrets/pull/3656)
- docs: updated k8s support for ESO v0.9 by
[@&#8203;shazib-summar](https://togithub.com/shazib-summar) in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

#### New Contributors

- [@&#8203;lindhe](https://togithub.com/lindhe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- [@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- [@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- [@&#8203;smcavallo](https://togithub.com/smcavallo) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- [@&#8203;toVersus](https://togithub.com/toVersus) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- [@&#8203;speedfl](https://togithub.com/speedfl) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- [@&#8203;Bude8](https://togithub.com/Bude8) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- [@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic)
made their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- [@&#8203;yihuaf](https://togithub.com/yihuaf) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- [@&#8203;lllamnyp](https://togithub.com/lllamnyp) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- [@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- [@&#8203;pacificcode](https://togithub.com/pacificcode) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- [@&#8203;sboschman](https://togithub.com/sboschman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- [@&#8203;kaedwen](https://togithub.com/kaedwen) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- [@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- [@&#8203;cardoe](https://togithub.com/cardoe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- [@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- [@&#8203;shazib-summar](https://togithub.com/shazib-summar) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

**Full Changelog**:
external-secrets/external-secrets@v0.9.19...v0.9.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjQuMyIsInVwZGF0ZWRJblZlciI6IjM3LjQyNC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9oZWxtIiwidHlwZS9wYXRjaCJdfQ==-->

Co-authored-by: lumiere-bot[bot] <98047013+lumiere-bot[bot]@users.noreply.github.com>
lumiere-bot bot referenced this pull request in coolguy1771/home-ops Jul 13, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| patch | `0.9.19` -> `0.9.20` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.9.20`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

- bump 0.9.19 by [@&#8203;knelasevero](https://togithub.com/knelasevero)
in
[https://github.com/external-secrets/external-secrets/pull/3553](https://togithub.com/external-secrets/external-secrets/pull/3553)
- Fix typo: temaplate --> template by
[@&#8203;lindhe](https://togithub.com/lindhe) in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- Oracle Vault Provider Documentation by
[@&#8203;anders-swanson](https://togithub.com/anders-swanson) in
[https://github.com/external-secrets/external-secrets/pull/3551](https://togithub.com/external-secrets/external-secrets/pull/3551)
- feat: add location to GCP push secret by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3502](https://togithub.com/external-secrets/external-secrets/pull/3502)
- add log.level and log.encoding to all components by
[@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3561](https://togithub.com/external-secrets/external-secrets/pull/3561)
- chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3562](https://togithub.com/external-secrets/external-secrets/pull/3562)
- chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3563](https://togithub.com/external-secrets/external-secrets/pull/3563)
- chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3564](https://togithub.com/external-secrets/external-secrets/pull/3564)
- chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3565](https://togithub.com/external-secrets/external-secrets/pull/3565)
- chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3566](https://togithub.com/external-secrets/external-secrets/pull/3566)
- chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3568](https://togithub.com/external-secrets/external-secrets/pull/3568)
- chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3569](https://togithub.com/external-secrets/external-secrets/pull/3569)
- chore(deps): bump golang from 1.22.3 to 1.22.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3567](https://togithub.com/external-secrets/external-secrets/pull/3567)
- Infisical provider by
[@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- feat: kick github actions on main by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3572](https://togithub.com/external-secrets/external-secrets/pull/3572)
- feat: add support to set Type for AWS parameter store by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3576](https://togithub.com/external-secrets/external-secrets/pull/3576)
- Remove shuheiktgw from maintainers by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3573](https://togithub.com/external-secrets/external-secrets/pull/3573)
- Add device42 provider by
[@&#8203;smcavallo](https://togithub.com/smcavallo) in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- ref: parameter store should be called only once by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3584](https://togithub.com/external-secrets/external-secrets/pull/3584)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3570](https://togithub.com/external-secrets/external-secrets/pull/3570)
- feat(certcontroller): Allow restricting CRDs and Webhook configs in
Informer cache by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- Support glob for namespaces condition in ClusterSecretStore by
[@&#8203;speedfl](https://togithub.com/speedfl) in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- Fix typo privatKey in multiple files by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3578](https://togithub.com/external-secrets/external-secrets/pull/3578)
- chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3595](https://togithub.com/external-secrets/external-secrets/pull/3595)
- chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3591](https://togithub.com/external-secrets/external-secrets/pull/3591)
- chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3592](https://togithub.com/external-secrets/external-secrets/pull/3592)
- chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3590](https://togithub.com/external-secrets/external-secrets/pull/3590)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3596](https://togithub.com/external-secrets/external-secrets/pull/3596)
- chore(deps): bump golang from `aec4784` to `9678844` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3593](https://togithub.com/external-secrets/external-secrets/pull/3593)
- chore(deps): bump golang from `9bdd569` to `6522f0c` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3594](https://togithub.com/external-secrets/external-secrets/pull/3594)
- feat(chart): Enable partial cache for certcontroller when
installCRDs=true by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3589](https://togithub.com/external-secrets/external-secrets/pull/3589)
- Add skip unmanaged store logic for push secret controller by
[@&#8203;Bude8](https://togithub.com/Bude8) in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- fix(vault): Fix crash when caching is enabled and a token expires by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- Remove the use of "golang.org/x/crypto/pkcs12" by
[@&#8203;yihuaf](https://togithub.com/yihuaf) in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- Make UBI more tolerable from OS vulnerabilities by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3607](https://togithub.com/external-secrets/external-secrets/pull/3607)
- fix: explicitly fetch status subresource due to inconsistencies by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3608](https://togithub.com/external-secrets/external-secrets/pull/3608)
- Adds codepath for removing finalizers by
[@&#8203;lllamnyp](https://togithub.com/lllamnyp) in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3624](https://togithub.com/external-secrets/external-secrets/pull/3624)
- chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3622](https://togithub.com/external-secrets/external-secrets/pull/3622)
- chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3621](https://togithub.com/external-secrets/external-secrets/pull/3621)
- chore(deps): bump golang from `6522f0c` to `ace6cc3` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3620](https://togithub.com/external-secrets/external-secrets/pull/3620)
- chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3618](https://togithub.com/external-secrets/external-secrets/pull/3618)
- chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3617](https://togithub.com/external-secrets/external-secrets/pull/3617)
- chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3616](https://togithub.com/external-secrets/external-secrets/pull/3616)
- chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3615](https://togithub.com/external-secrets/external-secrets/pull/3615)
- chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3614](https://togithub.com/external-secrets/external-secrets/pull/3614)
- Fix ACR External Secret example by
[@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- feat: add bitwarden secret manager support by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3603](https://togithub.com/external-secrets/external-secrets/pull/3603)
- fix: e2e installation of ESO needs to update dependencies first by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3635](https://togithub.com/external-secrets/external-secrets/pull/3635)
- added secretserver env vars to e2e.yml by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- docs: fix dataFrom.find in ExternalSecret api example by
[@&#8203;sboschman](https://togithub.com/sboschman) in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3641](https://togithub.com/external-secrets/external-secrets/pull/3641)
- chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3640](https://togithub.com/external-secrets/external-secrets/pull/3640)
- chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3639](https://togithub.com/external-secrets/external-secrets/pull/3639)
- add AuthRef to kubernetes provider fixes
[#&#8203;3627](https://togithub.com/external-secrets/external-secrets/issues/3627)
by [@&#8203;kaedwen](https://togithub.com/kaedwen) in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- fix: implement handling for pushing whole k8s secret to gcsm by
[@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- bump e2e pipeline by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3646](https://togithub.com/external-secrets/external-secrets/pull/3646)
- fix e2e permissions by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3647](https://togithub.com/external-secrets/external-secrets/pull/3647)
- bump docs with e2e commands by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3648](https://togithub.com/external-secrets/external-secrets/pull/3648)
- also needs pull-requests by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3649](https://togithub.com/external-secrets/external-secrets/pull/3649)
- use github token to allow comment by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3651](https://togithub.com/external-secrets/external-secrets/pull/3651)
- fix(webhook): perform conversion of data by
[@&#8203;cardoe](https://togithub.com/cardoe) in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- feat: implement pushing whole k8s secret to Azure Keyvault by
[@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- fix(vault): Treat tokens expiring in <60s as expired by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3637](https://togithub.com/external-secrets/external-secrets/pull/3637)
- Allow specifying the same namespace for SecretStores by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3555](https://togithub.com/external-secrets/external-secrets/pull/3555)
- docs: add proposal for PushSecret metadata by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3612](https://togithub.com/external-secrets/external-secrets/pull/3612)
- fix github credentials by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3656](https://togithub.com/external-secrets/external-secrets/pull/3656)
- docs: updated k8s support for ESO v0.9 by
[@&#8203;shazib-summar](https://togithub.com/shazib-summar) in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

#### New Contributors

- [@&#8203;lindhe](https://togithub.com/lindhe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- [@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- [@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- [@&#8203;smcavallo](https://togithub.com/smcavallo) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- [@&#8203;toVersus](https://togithub.com/toVersus) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- [@&#8203;speedfl](https://togithub.com/speedfl) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- [@&#8203;Bude8](https://togithub.com/Bude8) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- [@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic)
made their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- [@&#8203;yihuaf](https://togithub.com/yihuaf) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- [@&#8203;lllamnyp](https://togithub.com/lllamnyp) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- [@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- [@&#8203;pacificcode](https://togithub.com/pacificcode) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- [@&#8203;sboschman](https://togithub.com/sboschman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- [@&#8203;kaedwen](https://togithub.com/kaedwen) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- [@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- [@&#8203;cardoe](https://togithub.com/cardoe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- [@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- [@&#8203;shazib-summar](https://togithub.com/shazib-summar) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

**Full Changelog**:
external-secrets/external-secrets@v0.9.19...v0.9.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjQuMyIsInVwZGF0ZWRJblZlciI6IjM3LjQyNC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9oZWxtIiwidHlwZS9wYXRjaCJdfQ==-->

Co-authored-by: lumiere-bot[bot] <98047013+lumiere-bot[bot]@users.noreply.github.com>
dc-tec referenced this pull request in dc-tec/k8s-gitops Aug 29, 2024
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| HelmChart | minor | `0.9.19` -> `0.10.2` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.10.2`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.2)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.10.1...v0.10.2)

Image: `ghcr.io/external-secrets/external-secrets:v0.10.2`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.2-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.2-ubi-boringssl`

#### What's Changed

- release: update helm charts to version v0.10.1 by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3842](https://togithub.com/external-secrets/external-secrets/pull/3842)
- fix: add watch to validatingwebhookconfigs by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3845](https://togithub.com/external-secrets/external-secrets/pull/3845)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.10.1...v0.10.2

###
[`v0.10.1`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.1)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.10.0...v0.10.1)

Image: `ghcr.io/external-secrets/external-secrets:v0.10.1`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.1-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.1-ubi-boringssl`

#### What's Changed

- release: update helm chart to v0.10.0 by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3758](https://togithub.com/external-secrets/external-secrets/pull/3758)
- doc: add maintainer of the bitwarden secret manager provider by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3762](https://togithub.com/external-secrets/external-secrets/pull/3762)
- chore(deps): bump mkdocs-material from 9.5.30 to 9.5.31 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3763](https://togithub.com/external-secrets/external-secrets/pull/3763)
- fix: decrypt remote parameter for SecureString type by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3761](https://togithub.com/external-secrets/external-secrets/pull/3761)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3766](https://togithub.com/external-secrets/external-secrets/pull/3766)
- chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3765](https://togithub.com/external-secrets/external-secrets/pull/3765)
- chore(deps): bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3764](https://togithub.com/external-secrets/external-secrets/pull/3764)
- feat: add beyondtrust provider by
[@&#8203;btfhernandez](https://togithub.com/btfhernandez) in
[https://github.com/external-secrets/external-secrets/pull/3683](https://togithub.com/external-secrets/external-secrets/pull/3683)
- chore: add minimal policy for fetching parameters from ssm by
[@&#8203;KrisJohnstone](https://togithub.com/KrisJohnstone) in
[https://github.com/external-secrets/external-secrets/pull/3770](https://togithub.com/external-secrets/external-secrets/pull/3770)
- Add Grafana Labs to ADOPTERS.md by
[@&#8203;Duologic](https://togithub.com/Duologic) in
[https://github.com/external-secrets/external-secrets/pull/3787](https://togithub.com/external-secrets/external-secrets/pull/3787)
- chore(deps): bump golang from 1.22.5 to 1.22.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3778](https://togithub.com/external-secrets/external-secrets/pull/3778)
- chore(deps): bump pyyaml from 6.0.1 to 6.0.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3779](https://togithub.com/external-secrets/external-secrets/pull/3779)
- chore(deps): bump zipp from 3.19.2 to 3.20.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3780](https://togithub.com/external-secrets/external-secrets/pull/3780)
- chore(deps): bump babel from 2.15.0 to 2.16.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3781](https://togithub.com/external-secrets/external-secrets/pull/3781)
- chore(deps): bump golang from 1.22.5-bookworm to 1.22.6-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3783](https://togithub.com/external-secrets/external-secrets/pull/3783)
- chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3784](https://togithub.com/external-secrets/external-secrets/pull/3784)
- chore(deps): bump fossas/fossa-action from 1.3.3 to 1.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3785](https://togithub.com/external-secrets/external-secrets/pull/3785)
- chore(deps): bump watchdog from 4.0.1 to 4.0.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3782](https://togithub.com/external-secrets/external-secrets/pull/3782)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3786](https://togithub.com/external-secrets/external-secrets/pull/3786)
- chore: update security best practice by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3794](https://togithub.com/external-secrets/external-secrets/pull/3794)
- feat: add CAProvider to Bitwarden provider by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3699](https://togithub.com/external-secrets/external-secrets/pull/3699)
- fix: run helm.test.update on main branch by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3816](https://togithub.com/external-secrets/external-secrets/pull/3816)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3815](https://togithub.com/external-secrets/external-secrets/pull/3815)
- chore(deps): bump importlib-resources from 6.4.0 to 6.4.3 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3810](https://togithub.com/external-secrets/external-secrets/pull/3810)
- chore(deps): bump markdown from 3.6 to 3.7 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3811](https://togithub.com/external-secrets/external-secrets/pull/3811)
- Bump helm-docs image version to v1.7.0 in Makefile by
[@&#8203;PrateekKumar1709](https://togithub.com/PrateekKumar1709) in
[https://github.com/external-secrets/external-secrets/pull/3806](https://togithub.com/external-secrets/external-secrets/pull/3806)
- chore(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3812](https://togithub.com/external-secrets/external-secrets/pull/3812)
- chore(deps): bump golang from 1.22.6-bookworm to 1.23.0-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3813](https://togithub.com/external-secrets/external-secrets/pull/3813)
- chore: update go version of the project to 1.23 by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3829](https://togithub.com/external-secrets/external-secrets/pull/3829)
- Use maps package from standard library by
[@&#8203;BooleanCat](https://togithub.com/BooleanCat) in
[https://github.com/external-secrets/external-secrets/pull/3828](https://togithub.com/external-secrets/external-secrets/pull/3828)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3836](https://togithub.com/external-secrets/external-secrets/pull/3836)
- add the resourceNames(git commit -s) by
[@&#8203;younaman](https://togithub.com/younaman) in
[https://github.com/external-secrets/external-secrets/pull/3822](https://togithub.com/external-secrets/external-secrets/pull/3822)
- chore(deps): bump mkdocs-material from 9.5.31 to 9.5.33 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3830](https://togithub.com/external-secrets/external-secrets/pull/3830)
- chore(deps): bump importlib-metadata from 8.2.0 to 8.4.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3831](https://togithub.com/external-secrets/external-secrets/pull/3831)
- chore(deps): bump paginate from 0.5.6 to 0.5.7 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3832](https://togithub.com/external-secrets/external-secrets/pull/3832)
- chore(deps): bump golang from 1.22.6 to 1.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3814](https://togithub.com/external-secrets/external-secrets/pull/3814)
- chore(deps): bump github/codeql-action from 3.26.2 to 3.26.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3835](https://togithub.com/external-secrets/external-secrets/pull/3835)
- chore(deps): bump idna from 3.7 to 3.8 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3834](https://togithub.com/external-secrets/external-secrets/pull/3834)
- chore(deps): bump importlib-resources from 6.4.3 to 6.4.4 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3833](https://togithub.com/external-secrets/external-secrets/pull/3833)
- feat: implement GetSecretMap for Bitwarden provider by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3800](https://togithub.com/external-secrets/external-secrets/pull/3800)
- Demonstrate new slices/maps packages by
[@&#8203;BooleanCat](https://togithub.com/BooleanCat) in
[https://github.com/external-secrets/external-secrets/pull/3839](https://togithub.com/external-secrets/external-secrets/pull/3839)

#### New Contributors

- [@&#8203;btfhernandez](https://togithub.com/btfhernandez) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3683](https://togithub.com/external-secrets/external-secrets/pull/3683)
- [@&#8203;KrisJohnstone](https://togithub.com/KrisJohnstone) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3770](https://togithub.com/external-secrets/external-secrets/pull/3770)
- [@&#8203;PrateekKumar1709](https://togithub.com/PrateekKumar1709) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3806](https://togithub.com/external-secrets/external-secrets/pull/3806)
- [@&#8203;BooleanCat](https://togithub.com/BooleanCat) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3828](https://togithub.com/external-secrets/external-secrets/pull/3828)
- [@&#8203;younaman](https://togithub.com/younaman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3822](https://togithub.com/external-secrets/external-secrets/pull/3822)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.10.0...v0.10.1

###
[`v0.10.0`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.0)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.20...v0.10.0)

:warning: :red-alert:  BREAKING CHANGE :red-alert:  :warning:

-   Webhook Generator
Webhook generator labels have changed from
`generators.external-secrets.io/type: webhook` to
`external-secrets.io/type: webhook`.

-   Webhook Provider
Webhook provider now can only use secrets that are labeled with
`external-secrets.io/type: webhook`. This enforces explicit setup for
webhook secrets by users.

##### Fixing the issue:

add the label for the secret used by the webhook:

    apiVersion: v1
    kind: Secret
    metadata:
      name: your-secret
      labels:
        external-secrets.io/type: webhook ### <<<<<<<<<<<<< ADD THIS
    data:
    ...

Image: `ghcr.io/external-secrets/external-secrets:v0.10.0`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.0-ubi-boringssl`

#### What's Changed

- chore: bump to 0.9.20 by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3660](https://togithub.com/external-secrets/external-secrets/pull/3660)
- chore(deps): bump golang from 1.22.4 to 1.22.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3662](https://togithub.com/external-secrets/external-secrets/pull/3662)
- chore(deps): bump distroless/static from `4197211` to `ce46866` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3663](https://togithub.com/external-secrets/external-secrets/pull/3663)
- chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3665](https://togithub.com/external-secrets/external-secrets/pull/3665)
- chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3666](https://togithub.com/external-secrets/external-secrets/pull/3666)
- chore(deps): bump mkdocs-material from 9.5.27 to 9.5.28 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3667](https://togithub.com/external-secrets/external-secrets/pull/3667)
- chore(deps): bump certifi from 2024.6.2 to 2024.7.4 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3668](https://togithub.com/external-secrets/external-secrets/pull/3668)
- chore(deps): bump golang from 1.22.4-bookworm to 1.22.5-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3669](https://togithub.com/external-secrets/external-secrets/pull/3669)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3670](https://togithub.com/external-secrets/external-secrets/pull/3670)
- sets eso-service-account for creating e2e comments by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3678](https://togithub.com/external-secrets/external-secrets/pull/3678)
- use github token for the actions check by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3679](https://togithub.com/external-secrets/external-secrets/pull/3679)
- Add support for Delinea Secret Server by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3468](https://togithub.com/external-secrets/external-secrets/pull/3468)
- Fix: Only URL encode data being passed to URLs
([#&#8203;3652](https://togithub.com/external-secrets/external-secrets/issues/3652))
by [@&#8203;ryanmeans](https://togithub.com/ryanmeans) in
[https://github.com/external-secrets/external-secrets/pull/3674](https://togithub.com/external-secrets/external-secrets/pull/3674)
- Commenting secrets manifest from hashicorp vault integration
[#&#8203;3661](https://togithub.com/external-secrets/external-secrets/issues/3661)
by [@&#8203;jeffmachado](https://togithub.com/jeffmachado) in
[https://github.com/external-secrets/external-secrets/pull/3680](https://togithub.com/external-secrets/external-secrets/pull/3680)
- docs: Fix `namespaceRegexes` in full-cluster-secret-store.yaml by
[@&#8203;excalq](https://togithub.com/excalq) in
[https://github.com/external-secrets/external-secrets/pull/3681](https://togithub.com/external-secrets/external-secrets/pull/3681)
- Support for Oracle PushSecret.property
[#&#8203;2911](https://togithub.com/external-secrets/external-secrets/issues/2911)
by [@&#8203;Aeyk](https://togithub.com/Aeyk) in
[https://github.com/external-secrets/external-secrets/pull/3577](https://togithub.com/external-secrets/external-secrets/pull/3577)
- support for adding headers in vault provider by
[@&#8203;abhinav1708](https://togithub.com/abhinav1708) in
[https://github.com/external-secrets/external-secrets/pull/3677](https://togithub.com/external-secrets/external-secrets/pull/3677)
- chore(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3688](https://togithub.com/external-secrets/external-secrets/pull/3688)
- chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3691](https://togithub.com/external-secrets/external-secrets/pull/3691)
- chore(deps): bump actions/setup-python from 5.1.0 to 5.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3690](https://togithub.com/external-secrets/external-secrets/pull/3690)
- chore(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3689](https://togithub.com/external-secrets/external-secrets/pull/3689)
- chore(deps): bump golang from `8c9183f` to `8c9183f` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3687](https://togithub.com/external-secrets/external-secrets/pull/3687)
- chore(deps): bump mkdocs-material from 9.5.28 to 9.5.29 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3692](https://togithub.com/external-secrets/external-secrets/pull/3692)
- fix: aws secretmanager's SecretExists returns true for non-existent
secrets by [@&#8203;mintbomb27](https://togithub.com/mintbomb27) in
[https://github.com/external-secrets/external-secrets/pull/3684](https://togithub.com/external-secrets/external-secrets/pull/3684)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3693](https://togithub.com/external-secrets/external-secrets/pull/3693)
- Added 2 articles I wrote on AWS secrets injection and ESO templating
by [@&#8203;alinadir44](https://togithub.com/alinadir44) in
[https://github.com/external-secrets/external-secrets/pull/3707](https://togithub.com/external-secrets/external-secrets/pull/3707)
- Update docs for namespaceSelectors usage and namespaceSelector
deprecation by [@&#8203;mtougeron](https://togithub.com/mtougeron) in
[https://github.com/external-secrets/external-secrets/pull/3695](https://togithub.com/external-secrets/external-secrets/pull/3695)
- fix: add namespace to path and route construction by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3632](https://togithub.com/external-secrets/external-secrets/pull/3632)
- chore(deps): bump softprops/action-gh-release from 2.0.6 to 2.0.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3708](https://togithub.com/external-secrets/external-secrets/pull/3708)
- chore(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3709](https://togithub.com/external-secrets/external-secrets/pull/3709)
- Update bitwarden-secrets-manager.md by
[@&#8203;zazathomas](https://togithub.com/zazathomas) in
[https://github.com/external-secrets/external-secrets/pull/3710](https://togithub.com/external-secrets/external-secrets/pull/3710)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3711](https://togithub.com/external-secrets/external-secrets/pull/3711)
- feat: add `PushSecret` support for Pulumi ESC by
[@&#8203;dirien](https://togithub.com/dirien) in
[https://github.com/external-secrets/external-secrets/pull/3597](https://togithub.com/external-secrets/external-secrets/pull/3597)
- remove redundant parameter grab call, we already have the data by
[@&#8203;rumenvasilev](https://togithub.com/rumenvasilev) in
[https://github.com/external-secrets/external-secrets/pull/3722](https://togithub.com/external-secrets/external-secrets/pull/3722)
- chore(deps): bump docker/login-action from 3.2.0 to 3.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3729](https://togithub.com/external-secrets/external-secrets/pull/3729)
- chore(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3727](https://togithub.com/external-secrets/external-secrets/pull/3727)
- chore(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3728](https://togithub.com/external-secrets/external-secrets/pull/3728)
- chore(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3731](https://togithub.com/external-secrets/external-secrets/pull/3731)
- chore(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3730](https://togithub.com/external-secrets/external-secrets/pull/3730)
- chore(deps): bump alpine from `77726ef` to `0a4eaa0` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3733](https://togithub.com/external-secrets/external-secrets/pull/3733)
- chore(deps): bump golang from `8c9183f` to `0d3653d` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3732](https://togithub.com/external-secrets/external-secrets/pull/3732)
- feat: increase verbosity of error message during validation by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3742](https://togithub.com/external-secrets/external-secrets/pull/3742)
- chore(deps): bump golang from `6c27802` to `af9b40f` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3734](https://togithub.com/external-secrets/external-secrets/pull/3734)
- chore(deps): bump alpine from 3.20.1 to 3.20.2 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3735](https://togithub.com/external-secrets/external-secrets/pull/3735)
- chore(deps): bump alpine from `b89d9c9` to `0a4eaa0` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3736](https://togithub.com/external-secrets/external-secrets/pull/3736)
- chore(deps): bump regex from 2024.5.15 to 2024.7.24 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3737](https://togithub.com/external-secrets/external-secrets/pull/3737)
- chore(deps): bump mkdocs-material from 9.5.29 to 9.5.30 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3738](https://togithub.com/external-secrets/external-secrets/pull/3738)
- chore(deps): bump importlib-metadata from 8.0.0 to 8.2.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3739](https://togithub.com/external-secrets/external-secrets/pull/3739)
- chore(deps): bump pymdown-extensions from 10.8.1 to 10.9 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3740](https://togithub.com/external-secrets/external-secrets/pull/3740)
- docs: Remove references to pemCertificate and pemPrivateKey functions
by [@&#8203;trenslow](https://togithub.com/trenslow) in
[https://github.com/external-secrets/external-secrets/pull/3744](https://togithub.com/external-secrets/external-secrets/pull/3744)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3741](https://togithub.com/external-secrets/external-secrets/pull/3741)
- docs: Improvements in the ExternalSecret comments in API section by
[@&#8203;c-neto](https://togithub.com/c-neto) in
[https://github.com/external-secrets/external-secrets/pull/3725](https://togithub.com/external-secrets/external-secrets/pull/3725)
- feat: add prefix definition to all secret keys for aws parameter store
by [@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3718](https://togithub.com/external-secrets/external-secrets/pull/3718)
- feat: do not modify the secret in case of a NotModified by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3746](https://togithub.com/external-secrets/external-secrets/pull/3746)
- feat: webhook secrets must be labeled by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3753](https://togithub.com/external-secrets/external-secrets/pull/3753)
- feat: support pkcs12 with chain in pushsecret to Azure KeyVault by
[@&#8203;mysteq](https://togithub.com/mysteq) in
[https://github.com/external-secrets/external-secrets/pull/3747](https://togithub.com/external-secrets/external-secrets/pull/3747)
- docs: document fullPemToPkcs12 and fullPemToPkcs12Pass helper
functions by [@&#8203;mysteq](https://togithub.com/mysteq) in
[https://github.com/external-secrets/external-secrets/pull/3749](https://togithub.com/external-secrets/external-secrets/pull/3749)

#### New Contributors

- [@&#8203;ryanmeans](https://togithub.com/ryanmeans) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3674](https://togithub.com/external-secrets/external-secrets/pull/3674)
- [@&#8203;jeffmachado](https://togithub.com/jeffmachado) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3680](https://togithub.com/external-secrets/external-secrets/pull/3680)
- [@&#8203;excalq](https://togithub.com/excalq) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3681](https://togithub.com/external-secrets/external-secrets/pull/3681)
- [@&#8203;Aeyk](https://togithub.com/Aeyk) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3577](https://togithub.com/external-secrets/external-secrets/pull/3577)
- [@&#8203;abhinav1708](https://togithub.com/abhinav1708) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3677](https://togithub.com/external-secrets/external-secrets/pull/3677)
- [@&#8203;mintbomb27](https://togithub.com/mintbomb27) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3684](https://togithub.com/external-secrets/external-secrets/pull/3684)
- [@&#8203;alinadir44](https://togithub.com/alinadir44) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3707](https://togithub.com/external-secrets/external-secrets/pull/3707)
- [@&#8203;mtougeron](https://togithub.com/mtougeron) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3695](https://togithub.com/external-secrets/external-secrets/pull/3695)
- [@&#8203;zazathomas](https://togithub.com/zazathomas) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3710](https://togithub.com/external-secrets/external-secrets/pull/3710)
- [@&#8203;rumenvasilev](https://togithub.com/rumenvasilev) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3722](https://togithub.com/external-secrets/external-secrets/pull/3722)
- [@&#8203;trenslow](https://togithub.com/trenslow) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3744](https://togithub.com/external-secrets/external-secrets/pull/3744)
- [@&#8203;c-neto](https://togithub.com/c-neto) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3725](https://togithub.com/external-secrets/external-secrets/pull/3725)
- [@&#8203;mysteq](https://togithub.com/mysteq) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3747](https://togithub.com/external-secrets/external-secrets/pull/3747)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.9.20...v0.10.0

###
[`v0.9.20`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

- bump 0.9.19 by [@&#8203;knelasevero](https://togithub.com/knelasevero)
in
[https://github.com/external-secrets/external-secrets/pull/3553](https://togithub.com/external-secrets/external-secrets/pull/3553)
- Fix typo: temaplate --> template by
[@&#8203;lindhe](https://togithub.com/lindhe) in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- Oracle Vault Provider Documentation by
[@&#8203;anders-swanson](https://togithub.com/anders-swanson) in
[https://github.com/external-secrets/external-secrets/pull/3551](https://togithub.com/external-secrets/external-secrets/pull/3551)
- feat: add location to GCP push secret by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3502](https://togithub.com/external-secrets/external-secrets/pull/3502)
- add log.level and log.encoding to all components by
[@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3561](https://togithub.com/external-secrets/external-secrets/pull/3561)
- chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3562](https://togithub.com/external-secrets/external-secrets/pull/3562)
- chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3563](https://togithub.com/external-secrets/external-secrets/pull/3563)
- chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3564](https://togithub.com/external-secrets/external-secrets/pull/3564)
- chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3565](https://togithub.com/external-secrets/external-secrets/pull/3565)
- chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3566](https://togithub.com/external-secrets/external-secrets/pull/3566)
- chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3568](https://togithub.com/external-secrets/external-secrets/pull/3568)
- chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3569](https://togithub.com/external-secrets/external-secrets/pull/3569)
- chore(deps): bump golang from 1.22.3 to 1.22.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3567](https://togithub.com/external-secrets/external-secrets/pull/3567)
- Infisical provider by
[@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- feat: kick github actions on main by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3572](https://togithub.com/external-secrets/external-secrets/pull/3572)
- feat: add support to set Type for AWS parameter store by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3576](https://togithub.com/external-secrets/external-secrets/pull/3576)
- Remove shuheiktgw from maintainers by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3573](https://togithub.com/external-secrets/external-secrets/pull/3573)
- Add device42 provider by
[@&#8203;smcavallo](https://togithub.com/smcavallo) in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- ref: parameter store should be called only once by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3584](https://togithub.com/external-secrets/external-secrets/pull/3584)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3570](https://togithub.com/external-secrets/external-secrets/pull/3570)
- feat(certcontroller): Allow restricting CRDs and Webhook configs in
Informer cache by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- Support glob for namespaces condition in ClusterSecretStore by
[@&#8203;speedfl](https://togithub.com/speedfl) in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- Fix typo privatKey in multiple files by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3578](https://togithub.com/external-secrets/external-secrets/pull/3578)
- chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3595](https://togithub.com/external-secrets/external-secrets/pull/3595)
- chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3591](https://togithub.com/external-secrets/external-secrets/pull/3591)
- chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3592](https://togithub.com/external-secrets/external-secrets/pull/3592)
- chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3590](https://togithub.com/external-secrets/external-secrets/pull/3590)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3596](https://togithub.com/external-secrets/external-secrets/pull/3596)
- chore(deps): bump golang from `aec4784` to `9678844` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3593](https://togithub.com/external-secrets/external-secrets/pull/3593)
- chore(deps): bump golang from `9bdd569` to `6522f0c` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3594](https://togithub.com/external-secrets/external-secrets/pull/3594)
- feat(chart): Enable partial cache for certcontroller when
installCRDs=true by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3589](https://togithub.com/external-secrets/external-secrets/pull/3589)
- Add skip unmanaged store logic for push secret controller by
[@&#8203;Bude8](https://togithub.com/Bude8) in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- fix(vault): Fix crash when caching is enabled and a token expires by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- Remove the use of "golang.org/x/crypto/pkcs12" by
[@&#8203;yihuaf](https://togithub.com/yihuaf) in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- Make UBI more tolerable from OS vulnerabilities by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3607](https://togithub.com/external-secrets/external-secrets/pull/3607)
- fix: explicitly fetch status subresource due to inconsistencies by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3608](https://togithub.com/external-secrets/external-secrets/pull/3608)
- Adds codepath for removing finalizers by
[@&#8203;lllamnyp](https://togithub.com/lllamnyp) in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3624](https://togithub.com/external-secrets/external-secrets/pull/3624)
- chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3622](https://togithub.com/external-secrets/external-secrets/pull/3622)
- chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3621](https://togithub.com/external-secrets/external-secrets/pull/3621)
- chore(deps): bump golang from `6522f0c` to `ace6cc3` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3620](https://togithub.com/external-secrets/external-secrets/pull/3620)
- chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3618](https://togithub.com/external-secrets/external-secrets/pull/3618)
- chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3617](https://togithub.com/external-secrets/external-secrets/pull/3617)
- chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3616](https://togithub.com/external-secrets/external-secrets/pull/3616)
- chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3615](https://togithub.com/external-secrets/external-secrets/pull/3615)
- chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3614](https://togithub.com/external-secrets/external-secrets/pull/3614)
- Fix ACR External Secret example by
[@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- feat: add bitwarden secret manager support by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3603](https://togithub.com/external-secrets/external-secrets/pull/3603)
- fix: e2e installation of ESO needs to update dependencies first by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3635](https://togithub.com/external-secrets/external-secrets/pull/3635)
- added secretserver env vars to e2e.yml by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- docs: fix dataFrom.find in ExternalSecret api example by
[@&#8203;sboschman](https://togithub.com/sboschman) in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3641](https://togithub.com/external-secrets/external-secrets/pull/3641)
- chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3640](https://togithub.com/external-secrets/external-secrets/pull/3640)
- chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3639](https://togithub.com/external-secrets/external-secrets/pull/3639)
- add AuthRef to kubernetes provider fixes
[#&#8203;3627](https://togithub.com/external-secrets/external-secrets/issues/3627)
by [@&#8203;kaedwen](https://togithub.com/kaedwen) in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- fix: implement handling for pushing whole k8s secret to gcsm by
[@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- bump e2e pipeline by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3646](https://togithub.com/external-secrets/external-secrets/pull/3646)
- fix e2e permissions by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3647](https://togithub.com/external-secrets/external-secrets/pull/3647)
- bump docs with e2e commands by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3648](https://togithub.com/external-secrets/external-secrets/pull/3648)
- also needs pull-requests by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3649](https://togithub.com/external-secrets/external-secrets/pull/3649)
- use github token to allow comment by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3651](https://togithub.com/external-secrets/external-secrets/pull/3651)
- fix(webhook): perform conversion of data by
[@&#8203;cardoe](https://togithub.com/cardoe) in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- feat: implement pushing whole k8s secret to Azure Keyvault by
[@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- fix(vault): Treat tokens expiring in <60s as expired by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3637](https://togithub.com/external-secrets/external-secrets/pull/3637)
- Allow specifying the same namespace for SecretStores by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3555](https://togithub.com/external-secrets/external-secrets/pull/3555)
- docs: add proposal for PushSecret metadata by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3612](https://togithub.com/external-secrets/external-secrets/pull/3612)
- fix github credentials by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3656](https://togithub.com/external-secrets/external-secrets/pull/3656)
- docs: updated k8s support for ESO v0.9 by
[@&#8203;shazib-summar](https://togithub.com/shazib-summar) in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

#### New Contributors

- [@&#8203;lindhe](https://togithub.com/lindhe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- [@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- [@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- [@&#8203;smcavallo](https://togithub.com/smcavallo) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- [@&#8203;toVersus](https://togithub.com/toVersus) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- [@&#8203;speedfl](https://togithub.com/speedfl) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- [@&#8203;Bude8](https://togithub.com/Bude8) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- [@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic)
made their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- [@&#8203;yihuaf](https://togithub.com/yihuaf) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- [@&#8203;lllamnyp](https://togithub.com/lllamnyp) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- [@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- [@&#8203;pacificcode](https://togithub.com/pacificcode) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- [@&#8203;sboschman](https://togithub.com/sboschman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- [@&#8203;kaedwen](https://togithub.com/kaedwen) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- [@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- [@&#8203;cardoe](https://togithub.com/cardoe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- [@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- [@&#8203;shazib-summar](https://togithub.com/shazib-summar) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjQuMyIsInVwZGF0ZWRJblZlciI6IjM4LjU3LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->

Co-authored-by: Renovate Bot <renovate@whitesourcesoftware.com>
dc-tec referenced this pull request in dc-tec/k8s-gitops Aug 30, 2024
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| HelmChart | minor | `0.9.19` -> `0.10.2` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.10.2`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.2)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.10.1...v0.10.2)

Image: `ghcr.io/external-secrets/external-secrets:v0.10.2`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.2-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.2-ubi-boringssl`

#### What's Changed

- release: update helm charts to version v0.10.1 by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3842](https://togithub.com/external-secrets/external-secrets/pull/3842)
- fix: add watch to validatingwebhookconfigs by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3845](https://togithub.com/external-secrets/external-secrets/pull/3845)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.10.1...v0.10.2

###
[`v0.10.1`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.1)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.10.0...v0.10.1)

Image: `ghcr.io/external-secrets/external-secrets:v0.10.1`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.1-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.1-ubi-boringssl`

#### What's Changed

- release: update helm chart to v0.10.0 by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3758](https://togithub.com/external-secrets/external-secrets/pull/3758)
- doc: add maintainer of the bitwarden secret manager provider by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3762](https://togithub.com/external-secrets/external-secrets/pull/3762)
- chore(deps): bump mkdocs-material from 9.5.30 to 9.5.31 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3763](https://togithub.com/external-secrets/external-secrets/pull/3763)
- fix: decrypt remote parameter for SecureString type by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3761](https://togithub.com/external-secrets/external-secrets/pull/3761)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3766](https://togithub.com/external-secrets/external-secrets/pull/3766)
- chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3765](https://togithub.com/external-secrets/external-secrets/pull/3765)
- chore(deps): bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3764](https://togithub.com/external-secrets/external-secrets/pull/3764)
- feat: add beyondtrust provider by
[@&#8203;btfhernandez](https://togithub.com/btfhernandez) in
[https://github.com/external-secrets/external-secrets/pull/3683](https://togithub.com/external-secrets/external-secrets/pull/3683)
- chore: add minimal policy for fetching parameters from ssm by
[@&#8203;KrisJohnstone](https://togithub.com/KrisJohnstone) in
[https://github.com/external-secrets/external-secrets/pull/3770](https://togithub.com/external-secrets/external-secrets/pull/3770)
- Add Grafana Labs to ADOPTERS.md by
[@&#8203;Duologic](https://togithub.com/Duologic) in
[https://github.com/external-secrets/external-secrets/pull/3787](https://togithub.com/external-secrets/external-secrets/pull/3787)
- chore(deps): bump golang from 1.22.5 to 1.22.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3778](https://togithub.com/external-secrets/external-secrets/pull/3778)
- chore(deps): bump pyyaml from 6.0.1 to 6.0.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3779](https://togithub.com/external-secrets/external-secrets/pull/3779)
- chore(deps): bump zipp from 3.19.2 to 3.20.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3780](https://togithub.com/external-secrets/external-secrets/pull/3780)
- chore(deps): bump babel from 2.15.0 to 2.16.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3781](https://togithub.com/external-secrets/external-secrets/pull/3781)
- chore(deps): bump golang from 1.22.5-bookworm to 1.22.6-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3783](https://togithub.com/external-secrets/external-secrets/pull/3783)
- chore(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3784](https://togithub.com/external-secrets/external-secrets/pull/3784)
- chore(deps): bump fossas/fossa-action from 1.3.3 to 1.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3785](https://togithub.com/external-secrets/external-secrets/pull/3785)
- chore(deps): bump watchdog from 4.0.1 to 4.0.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3782](https://togithub.com/external-secrets/external-secrets/pull/3782)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3786](https://togithub.com/external-secrets/external-secrets/pull/3786)
- chore: update security best practice by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3794](https://togithub.com/external-secrets/external-secrets/pull/3794)
- feat: add CAProvider to Bitwarden provider by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3699](https://togithub.com/external-secrets/external-secrets/pull/3699)
- fix: run helm.test.update on main branch by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3816](https://togithub.com/external-secrets/external-secrets/pull/3816)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3815](https://togithub.com/external-secrets/external-secrets/pull/3815)
- chore(deps): bump importlib-resources from 6.4.0 to 6.4.3 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3810](https://togithub.com/external-secrets/external-secrets/pull/3810)
- chore(deps): bump markdown from 3.6 to 3.7 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3811](https://togithub.com/external-secrets/external-secrets/pull/3811)
- Bump helm-docs image version to v1.7.0 in Makefile by
[@&#8203;PrateekKumar1709](https://togithub.com/PrateekKumar1709) in
[https://github.com/external-secrets/external-secrets/pull/3806](https://togithub.com/external-secrets/external-secrets/pull/3806)
- chore(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3812](https://togithub.com/external-secrets/external-secrets/pull/3812)
- chore(deps): bump golang from 1.22.6-bookworm to 1.23.0-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3813](https://togithub.com/external-secrets/external-secrets/pull/3813)
- chore: update go version of the project to 1.23 by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3829](https://togithub.com/external-secrets/external-secrets/pull/3829)
- Use maps package from standard library by
[@&#8203;BooleanCat](https://togithub.com/BooleanCat) in
[https://github.com/external-secrets/external-secrets/pull/3828](https://togithub.com/external-secrets/external-secrets/pull/3828)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3836](https://togithub.com/external-secrets/external-secrets/pull/3836)
- add the resourceNames(git commit -s) by
[@&#8203;younaman](https://togithub.com/younaman) in
[https://github.com/external-secrets/external-secrets/pull/3822](https://togithub.com/external-secrets/external-secrets/pull/3822)
- chore(deps): bump mkdocs-material from 9.5.31 to 9.5.33 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3830](https://togithub.com/external-secrets/external-secrets/pull/3830)
- chore(deps): bump importlib-metadata from 8.2.0 to 8.4.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3831](https://togithub.com/external-secrets/external-secrets/pull/3831)
- chore(deps): bump paginate from 0.5.6 to 0.5.7 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3832](https://togithub.com/external-secrets/external-secrets/pull/3832)
- chore(deps): bump golang from 1.22.6 to 1.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3814](https://togithub.com/external-secrets/external-secrets/pull/3814)
- chore(deps): bump github/codeql-action from 3.26.2 to 3.26.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3835](https://togithub.com/external-secrets/external-secrets/pull/3835)
- chore(deps): bump idna from 3.7 to 3.8 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3834](https://togithub.com/external-secrets/external-secrets/pull/3834)
- chore(deps): bump importlib-resources from 6.4.3 to 6.4.4 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3833](https://togithub.com/external-secrets/external-secrets/pull/3833)
- feat: implement GetSecretMap for Bitwarden provider by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3800](https://togithub.com/external-secrets/external-secrets/pull/3800)
- Demonstrate new slices/maps packages by
[@&#8203;BooleanCat](https://togithub.com/BooleanCat) in
[https://github.com/external-secrets/external-secrets/pull/3839](https://togithub.com/external-secrets/external-secrets/pull/3839)

#### New Contributors

- [@&#8203;btfhernandez](https://togithub.com/btfhernandez) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3683](https://togithub.com/external-secrets/external-secrets/pull/3683)
- [@&#8203;KrisJohnstone](https://togithub.com/KrisJohnstone) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3770](https://togithub.com/external-secrets/external-secrets/pull/3770)
- [@&#8203;PrateekKumar1709](https://togithub.com/PrateekKumar1709) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3806](https://togithub.com/external-secrets/external-secrets/pull/3806)
- [@&#8203;BooleanCat](https://togithub.com/BooleanCat) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3828](https://togithub.com/external-secrets/external-secrets/pull/3828)
- [@&#8203;younaman](https://togithub.com/younaman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3822](https://togithub.com/external-secrets/external-secrets/pull/3822)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.10.0...v0.10.1

###
[`v0.10.0`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.0)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.20...v0.10.0)

:warning: :red-alert:  BREAKING CHANGE :red-alert:  :warning:

-   Webhook Generator
Webhook generator labels have changed from
`generators.external-secrets.io/type: webhook` to
`external-secrets.io/type: webhook`.

-   Webhook Provider
Webhook provider now can only use secrets that are labeled with
`external-secrets.io/type: webhook`. This enforces explicit setup for
webhook secrets by users.

##### Fixing the issue:

add the label for the secret used by the webhook:

    apiVersion: v1
    kind: Secret
    metadata:
      name: your-secret
      labels:
        external-secrets.io/type: webhook ### <<<<<<<<<<<<< ADD THIS
    data:
    ...

Image: `ghcr.io/external-secrets/external-secrets:v0.10.0`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.0-ubi-boringssl`

#### What's Changed

- chore: bump to 0.9.20 by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3660](https://togithub.com/external-secrets/external-secrets/pull/3660)
- chore(deps): bump golang from 1.22.4 to 1.22.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3662](https://togithub.com/external-secrets/external-secrets/pull/3662)
- chore(deps): bump distroless/static from `4197211` to `ce46866` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3663](https://togithub.com/external-secrets/external-secrets/pull/3663)
- chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3665](https://togithub.com/external-secrets/external-secrets/pull/3665)
- chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3666](https://togithub.com/external-secrets/external-secrets/pull/3666)
- chore(deps): bump mkdocs-material from 9.5.27 to 9.5.28 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3667](https://togithub.com/external-secrets/external-secrets/pull/3667)
- chore(deps): bump certifi from 2024.6.2 to 2024.7.4 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3668](https://togithub.com/external-secrets/external-secrets/pull/3668)
- chore(deps): bump golang from 1.22.4-bookworm to 1.22.5-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3669](https://togithub.com/external-secrets/external-secrets/pull/3669)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3670](https://togithub.com/external-secrets/external-secrets/pull/3670)
- sets eso-service-account for creating e2e comments by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3678](https://togithub.com/external-secrets/external-secrets/pull/3678)
- use github token for the actions check by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3679](https://togithub.com/external-secrets/external-secrets/pull/3679)
- Add support for Delinea Secret Server by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3468](https://togithub.com/external-secrets/external-secrets/pull/3468)
- Fix: Only URL encode data being passed to URLs
([#&#8203;3652](https://togithub.com/external-secrets/external-secrets/issues/3652))
by [@&#8203;ryanmeans](https://togithub.com/ryanmeans) in
[https://github.com/external-secrets/external-secrets/pull/3674](https://togithub.com/external-secrets/external-secrets/pull/3674)
- Commenting secrets manifest from hashicorp vault integration
[#&#8203;3661](https://togithub.com/external-secrets/external-secrets/issues/3661)
by [@&#8203;jeffmachado](https://togithub.com/jeffmachado) in
[https://github.com/external-secrets/external-secrets/pull/3680](https://togithub.com/external-secrets/external-secrets/pull/3680)
- docs: Fix `namespaceRegexes` in full-cluster-secret-store.yaml by
[@&#8203;excalq](https://togithub.com/excalq) in
[https://github.com/external-secrets/external-secrets/pull/3681](https://togithub.com/external-secrets/external-secrets/pull/3681)
- Support for Oracle PushSecret.property
[#&#8203;2911](https://togithub.com/external-secrets/external-secrets/issues/2911)
by [@&#8203;Aeyk](https://togithub.com/Aeyk) in
[https://github.com/external-secrets/external-secrets/pull/3577](https://togithub.com/external-secrets/external-secrets/pull/3577)
- support for adding headers in vault provider by
[@&#8203;abhinav1708](https://togithub.com/abhinav1708) in
[https://github.com/external-secrets/external-secrets/pull/3677](https://togithub.com/external-secrets/external-secrets/pull/3677)
- chore(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3688](https://togithub.com/external-secrets/external-secrets/pull/3688)
- chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3691](https://togithub.com/external-secrets/external-secrets/pull/3691)
- chore(deps): bump actions/setup-python from 5.1.0 to 5.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3690](https://togithub.com/external-secrets/external-secrets/pull/3690)
- chore(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3689](https://togithub.com/external-secrets/external-secrets/pull/3689)
- chore(deps): bump golang from `8c9183f` to `8c9183f` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3687](https://togithub.com/external-secrets/external-secrets/pull/3687)
- chore(deps): bump mkdocs-material from 9.5.28 to 9.5.29 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3692](https://togithub.com/external-secrets/external-secrets/pull/3692)
- fix: aws secretmanager's SecretExists returns true for non-existent
secrets by [@&#8203;mintbomb27](https://togithub.com/mintbomb27) in
[https://github.com/external-secrets/external-secrets/pull/3684](https://togithub.com/external-secrets/external-secrets/pull/3684)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3693](https://togithub.com/external-secrets/external-secrets/pull/3693)
- Added 2 articles I wrote on AWS secrets injection and ESO templating
by [@&#8203;alinadir44](https://togithub.com/alinadir44) in
[https://github.com/external-secrets/external-secrets/pull/3707](https://togithub.com/external-secrets/external-secrets/pull/3707)
- Update docs for namespaceSelectors usage and namespaceSelector
deprecation by [@&#8203;mtougeron](https://togithub.com/mtougeron) in
[https://github.com/external-secrets/external-secrets/pull/3695](https://togithub.com/external-secrets/external-secrets/pull/3695)
- fix: add namespace to path and route construction by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3632](https://togithub.com/external-secrets/external-secrets/pull/3632)
- chore(deps): bump softprops/action-gh-release from 2.0.6 to 2.0.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3708](https://togithub.com/external-secrets/external-secrets/pull/3708)
- chore(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3709](https://togithub.com/external-secrets/external-secrets/pull/3709)
- Update bitwarden-secrets-manager.md by
[@&#8203;zazathomas](https://togithub.com/zazathomas) in
[https://github.com/external-secrets/external-secrets/pull/3710](https://togithub.com/external-secrets/external-secrets/pull/3710)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3711](https://togithub.com/external-secrets/external-secrets/pull/3711)
- feat: add `PushSecret` support for Pulumi ESC by
[@&#8203;dirien](https://togithub.com/dirien) in
[https://github.com/external-secrets/external-secrets/pull/3597](https://togithub.com/external-secrets/external-secrets/pull/3597)
- remove redundant parameter grab call, we already have the data by
[@&#8203;rumenvasilev](https://togithub.com/rumenvasilev) in
[https://github.com/external-secrets/external-secrets/pull/3722](https://togithub.com/external-secrets/external-secrets/pull/3722)
- chore(deps): bump docker/login-action from 3.2.0 to 3.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3729](https://togithub.com/external-secrets/external-secrets/pull/3729)
- chore(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3727](https://togithub.com/external-secrets/external-secrets/pull/3727)
- chore(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3728](https://togithub.com/external-secrets/external-secrets/pull/3728)
- chore(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3731](https://togithub.com/external-secrets/external-secrets/pull/3731)
- chore(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3730](https://togithub.com/external-secrets/external-secrets/pull/3730)
- chore(deps): bump alpine from `77726ef` to `0a4eaa0` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3733](https://togithub.com/external-secrets/external-secrets/pull/3733)
- chore(deps): bump golang from `8c9183f` to `0d3653d` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3732](https://togithub.com/external-secrets/external-secrets/pull/3732)
- feat: increase verbosity of error message during validation by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3742](https://togithub.com/external-secrets/external-secrets/pull/3742)
- chore(deps): bump golang from `6c27802` to `af9b40f` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3734](https://togithub.com/external-secrets/external-secrets/pull/3734)
- chore(deps): bump alpine from 3.20.1 to 3.20.2 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3735](https://togithub.com/external-secrets/external-secrets/pull/3735)
- chore(deps): bump alpine from `b89d9c9` to `0a4eaa0` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3736](https://togithub.com/external-secrets/external-secrets/pull/3736)
- chore(deps): bump regex from 2024.5.15 to 2024.7.24 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3737](https://togithub.com/external-secrets/external-secrets/pull/3737)
- chore(deps): bump mkdocs-material from 9.5.29 to 9.5.30 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3738](https://togithub.com/external-secrets/external-secrets/pull/3738)
- chore(deps): bump importlib-metadata from 8.0.0 to 8.2.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3739](https://togithub.com/external-secrets/external-secrets/pull/3739)
- chore(deps): bump pymdown-extensions from 10.8.1 to 10.9 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3740](https://togithub.com/external-secrets/external-secrets/pull/3740)
- docs: Remove references to pemCertificate and pemPrivateKey functions
by [@&#8203;trenslow](https://togithub.com/trenslow) in
[https://github.com/external-secrets/external-secrets/pull/3744](https://togithub.com/external-secrets/external-secrets/pull/3744)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3741](https://togithub.com/external-secrets/external-secrets/pull/3741)
- docs: Improvements in the ExternalSecret comments in API section by
[@&#8203;c-neto](https://togithub.com/c-neto) in
[https://github.com/external-secrets/external-secrets/pull/3725](https://togithub.com/external-secrets/external-secrets/pull/3725)
- feat: add prefix definition to all secret keys for aws parameter store
by [@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3718](https://togithub.com/external-secrets/external-secrets/pull/3718)
- feat: do not modify the secret in case of a NotModified by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3746](https://togithub.com/external-secrets/external-secrets/pull/3746)
- feat: webhook secrets must be labeled by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3753](https://togithub.com/external-secrets/external-secrets/pull/3753)
- feat: support pkcs12 with chain in pushsecret to Azure KeyVault by
[@&#8203;mysteq](https://togithub.com/mysteq) in
[https://github.com/external-secrets/external-secrets/pull/3747](https://togithub.com/external-secrets/external-secrets/pull/3747)
- docs: document fullPemToPkcs12 and fullPemToPkcs12Pass helper
functions by [@&#8203;mysteq](https://togithub.com/mysteq) in
[https://github.com/external-secrets/external-secrets/pull/3749](https://togithub.com/external-secrets/external-secrets/pull/3749)

#### New Contributors

- [@&#8203;ryanmeans](https://togithub.com/ryanmeans) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3674](https://togithub.com/external-secrets/external-secrets/pull/3674)
- [@&#8203;jeffmachado](https://togithub.com/jeffmachado) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3680](https://togithub.com/external-secrets/external-secrets/pull/3680)
- [@&#8203;excalq](https://togithub.com/excalq) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3681](https://togithub.com/external-secrets/external-secrets/pull/3681)
- [@&#8203;Aeyk](https://togithub.com/Aeyk) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3577](https://togithub.com/external-secrets/external-secrets/pull/3577)
- [@&#8203;abhinav1708](https://togithub.com/abhinav1708) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3677](https://togithub.com/external-secrets/external-secrets/pull/3677)
- [@&#8203;mintbomb27](https://togithub.com/mintbomb27) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3684](https://togithub.com/external-secrets/external-secrets/pull/3684)
- [@&#8203;alinadir44](https://togithub.com/alinadir44) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3707](https://togithub.com/external-secrets/external-secrets/pull/3707)
- [@&#8203;mtougeron](https://togithub.com/mtougeron) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3695](https://togithub.com/external-secrets/external-secrets/pull/3695)
- [@&#8203;zazathomas](https://togithub.com/zazathomas) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3710](https://togithub.com/external-secrets/external-secrets/pull/3710)
- [@&#8203;rumenvasilev](https://togithub.com/rumenvasilev) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3722](https://togithub.com/external-secrets/external-secrets/pull/3722)
- [@&#8203;trenslow](https://togithub.com/trenslow) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3744](https://togithub.com/external-secrets/external-secrets/pull/3744)
- [@&#8203;c-neto](https://togithub.com/c-neto) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3725](https://togithub.com/external-secrets/external-secrets/pull/3725)
- [@&#8203;mysteq](https://togithub.com/mysteq) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3747](https://togithub.com/external-secrets/external-secrets/pull/3747)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.9.20...v0.10.0

###
[`v0.9.20`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.9.20)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20)

Image: `ghcr.io/external-secrets/external-secrets:v0.9.20`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl`

#### What's Changed

- bump 0.9.19 by [@&#8203;knelasevero](https://togithub.com/knelasevero)
in
[https://github.com/external-secrets/external-secrets/pull/3553](https://togithub.com/external-secrets/external-secrets/pull/3553)
- Fix typo: temaplate --> template by
[@&#8203;lindhe](https://togithub.com/lindhe) in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- Oracle Vault Provider Documentation by
[@&#8203;anders-swanson](https://togithub.com/anders-swanson) in
[https://github.com/external-secrets/external-secrets/pull/3551](https://togithub.com/external-secrets/external-secrets/pull/3551)
- feat: add location to GCP push secret by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3502](https://togithub.com/external-secrets/external-secrets/pull/3502)
- add log.level and log.encoding to all components by
[@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- chore(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3561](https://togithub.com/external-secrets/external-secrets/pull/3561)
- chore(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3562](https://togithub.com/external-secrets/external-secrets/pull/3562)
- chore(deps): bump tornado from 6.4 to 6.4.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3563](https://togithub.com/external-secrets/external-secrets/pull/3563)
- chore(deps): bump packaging from 24.0 to 24.1 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3564](https://togithub.com/external-secrets/external-secrets/pull/3564)
- chore(deps): bump mkdocs-material from 9.5.25 to 9.5.26 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3565](https://togithub.com/external-secrets/external-secrets/pull/3565)
- chore(deps): bump zipp from 3.19.1 to 3.19.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3566](https://togithub.com/external-secrets/external-secrets/pull/3566)
- chore(deps): bump ubi8/ubi-minimal from `9e458f4` to `5f1cd34` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3568](https://togithub.com/external-secrets/external-secrets/pull/3568)
- chore(deps): bump golang from 1.22.3-bookworm to 1.22.4-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3569](https://togithub.com/external-secrets/external-secrets/pull/3569)
- chore(deps): bump golang from 1.22.3 to 1.22.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3567](https://togithub.com/external-secrets/external-secrets/pull/3567)
- Infisical provider by
[@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- feat: kick github actions on main by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3572](https://togithub.com/external-secrets/external-secrets/pull/3572)
- feat: add support to set Type for AWS parameter store by
[@&#8203;vsantos](https://togithub.com/vsantos) in
[https://github.com/external-secrets/external-secrets/pull/3576](https://togithub.com/external-secrets/external-secrets/pull/3576)
- Remove shuheiktgw from maintainers by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3573](https://togithub.com/external-secrets/external-secrets/pull/3573)
- Add device42 provider by
[@&#8203;smcavallo](https://togithub.com/smcavallo) in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- ref: parameter store should be called only once by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3584](https://togithub.com/external-secrets/external-secrets/pull/3584)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3570](https://togithub.com/external-secrets/external-secrets/pull/3570)
- feat(certcontroller): Allow restricting CRDs and Webhook configs in
Informer cache by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- Support glob for namespaces condition in ClusterSecretStore by
[@&#8203;speedfl](https://togithub.com/speedfl) in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- Fix typo privatKey in multiple files by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3578](https://togithub.com/external-secrets/external-secrets/pull/3578)
- chore(deps): bump mkdocs-material from 9.5.26 to 9.5.27 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3595](https://togithub.com/external-secrets/external-secrets/pull/3595)
- chore(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3591](https://togithub.com/external-secrets/external-secrets/pull/3591)
- chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3592](https://togithub.com/external-secrets/external-secrets/pull/3592)
- chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3590](https://togithub.com/external-secrets/external-secrets/pull/3590)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3596](https://togithub.com/external-secrets/external-secrets/pull/3596)
- chore(deps): bump golang from `aec4784` to `9678844` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3593](https://togithub.com/external-secrets/external-secrets/pull/3593)
- chore(deps): bump golang from `9bdd569` to `6522f0c` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3594](https://togithub.com/external-secrets/external-secrets/pull/3594)
- feat(chart): Enable partial cache for certcontroller when
installCRDs=true by [@&#8203;toVersus](https://togithub.com/toVersus) in
[https://github.com/external-secrets/external-secrets/pull/3589](https://togithub.com/external-secrets/external-secrets/pull/3589)
- Add skip unmanaged store logic for push secret controller by
[@&#8203;Bude8](https://togithub.com/Bude8) in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- fix(vault): Fix crash when caching is enabled and a token expires by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- Remove the use of "golang.org/x/crypto/pkcs12" by
[@&#8203;yihuaf](https://togithub.com/yihuaf) in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- Make UBI more tolerable from OS vulnerabilities by
[@&#8203;IdanAdar](https://togithub.com/IdanAdar) in
[https://github.com/external-secrets/external-secrets/pull/3607](https://togithub.com/external-secrets/external-secrets/pull/3607)
- fix: explicitly fetch status subresource due to inconsistencies by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3608](https://togithub.com/external-secrets/external-secrets/pull/3608)
- Adds codepath for removing finalizers by
[@&#8203;lllamnyp](https://togithub.com/lllamnyp) in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3624](https://togithub.com/external-secrets/external-secrets/pull/3624)
- chore(deps): bump alpine from 3.20.0 to 3.20.1 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3622](https://togithub.com/external-secrets/external-secrets/pull/3622)
- chore(deps): bump alpine from `77726ef` to `b89d9c9` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3621](https://togithub.com/external-secrets/external-secrets/pull/3621)
- chore(deps): bump golang from `6522f0c` to `ace6cc3` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3620](https://togithub.com/external-secrets/external-secrets/pull/3620)
- chore(deps): bump urllib3 from 2.2.1 to 2.2.2 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3618](https://togithub.com/external-secrets/external-secrets/pull/3618)
- chore(deps): bump importlib-metadata from 7.1.0 to 7.2.1 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3617](https://togithub.com/external-secrets/external-secrets/pull/3617)
- chore(deps): bump livereload from 2.6.3 to 2.7.0 in /hack/api-docs by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3616](https://togithub.com/external-secrets/external-secrets/pull/3616)
- chore(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3615](https://togithub.com/external-secrets/external-secrets/pull/3615)
- chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3614](https://togithub.com/external-secrets/external-secrets/pull/3614)
- Fix ACR External Secret example by
[@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- feat: add bitwarden secret manager support by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3603](https://togithub.com/external-secrets/external-secrets/pull/3603)
- fix: e2e installation of ESO needs to update dependencies first by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3635](https://togithub.com/external-secrets/external-secrets/pull/3635)
- added secretserver env vars to e2e.yml by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- docs: fix dataFrom.find in ExternalSecret api example by
[@&#8203;sboschman](https://togithub.com/sboschman) in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3641](https://togithub.com/external-secrets/external-secrets/pull/3641)
- chore(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3640](https://togithub.com/external-secrets/external-secrets/pull/3640)
- chore(deps): bump importlib-metadata from 7.2.1 to 8.0.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3639](https://togithub.com/external-secrets/external-secrets/pull/3639)
- add AuthRef to kubernetes provider fixes
[#&#8203;3627](https://togithub.com/external-secrets/external-secrets/issues/3627)
by [@&#8203;kaedwen](https://togithub.com/kaedwen) in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- fix: implement handling for pushing whole k8s secret to gcsm by
[@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- bump e2e pipeline by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3646](https://togithub.com/external-secrets/external-secrets/pull/3646)
- fix e2e permissions by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3647](https://togithub.com/external-secrets/external-secrets/pull/3647)
- bump docs with e2e commands by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3648](https://togithub.com/external-secrets/external-secrets/pull/3648)
- also needs pull-requests by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3649](https://togithub.com/external-secrets/external-secrets/pull/3649)
- use github token to allow comment by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3651](https://togithub.com/external-secrets/external-secrets/pull/3651)
- fix(webhook): perform conversion of data by
[@&#8203;cardoe](https://togithub.com/cardoe) in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- feat: implement pushing whole k8s secret to Azure Keyvault by
[@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- fix(vault): Treat tokens expiring in <60s as expired by
[@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic) in
[https://github.com/external-secrets/external-secrets/pull/3637](https://togithub.com/external-secrets/external-secrets/pull/3637)
- Allow specifying the same namespace for SecretStores by
[@&#8203;shuheiktgw](https://togithub.com/shuheiktgw) in
[https://github.com/external-secrets/external-secrets/pull/3555](https://togithub.com/external-secrets/external-secrets/pull/3555)
- docs: add proposal for PushSecret metadata by
[@&#8203;moolen](https://togithub.com/moolen) in
[https://github.com/external-secrets/external-secrets/pull/3612](https://togithub.com/external-secrets/external-secrets/pull/3612)
- fix github credentials by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3656](https://togithub.com/external-secrets/external-secrets/pull/3656)
- docs: updated k8s support for ESO v0.9 by
[@&#8203;shazib-summar](https://togithub.com/shazib-summar) in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

#### New Contributors

- [@&#8203;lindhe](https://togithub.com/lindhe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3554](https://togithub.com/external-secrets/external-secrets/pull/3554)
- [@&#8203;KyriosGN0](https://togithub.com/KyriosGN0) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3558](https://togithub.com/external-secrets/external-secrets/pull/3558)
- [@&#8203;akhilmhdh](https://togithub.com/akhilmhdh) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3477](https://togithub.com/external-secrets/external-secrets/pull/3477)
- [@&#8203;smcavallo](https://togithub.com/smcavallo) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3571](https://togithub.com/external-secrets/external-secrets/pull/3571)
- [@&#8203;toVersus](https://togithub.com/toVersus) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3588](https://togithub.com/external-secrets/external-secrets/pull/3588)
- [@&#8203;speedfl](https://togithub.com/speedfl) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/2920](https://togithub.com/external-secrets/external-secrets/pull/2920)
- [@&#8203;Bude8](https://togithub.com/Bude8) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3123](https://togithub.com/external-secrets/external-secrets/pull/3123)
- [@&#8203;agunnerson-elastic](https://togithub.com/agunnerson-elastic)
made their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3598](https://togithub.com/external-secrets/external-secrets/pull/3598)
- [@&#8203;yihuaf](https://togithub.com/yihuaf) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3601](https://togithub.com/external-secrets/external-secrets/pull/3601)
- [@&#8203;lllamnyp](https://togithub.com/lllamnyp) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3610](https://togithub.com/external-secrets/external-secrets/pull/3610)
- [@&#8203;ellenfieldn](https://togithub.com/ellenfieldn) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3626](https://togithub.com/external-secrets/external-secrets/pull/3626)
- [@&#8203;pacificcode](https://togithub.com/pacificcode) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3636](https://togithub.com/external-secrets/external-secrets/pull/3636)
- [@&#8203;sboschman](https://togithub.com/sboschman) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3633](https://togithub.com/external-secrets/external-secrets/pull/3633)
- [@&#8203;kaedwen](https://togithub.com/kaedwen) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3628](https://togithub.com/external-secrets/external-secrets/pull/3628)
- [@&#8203;thejosephstevens](https://togithub.com/thejosephstevens) made
their first contribution in
[https://github.com/external-secrets/external-secrets/pull/3644](https://togithub.com/external-secrets/external-secrets/pull/3644)
- [@&#8203;cardoe](https://togithub.com/cardoe) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3638](https://togithub.com/external-secrets/external-secrets/pull/3638)
- [@&#8203;CCOLLOT](https://togithub.com/CCOLLOT) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3650](https://togithub.com/external-secrets/external-secrets/pull/3650)
- [@&#8203;shazib-summar](https://togithub.com/shazib-summar) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3659](https://togithub.com/external-secrets/external-secrets/pull/3659)

**Full Changelog**:
https://github.com/external-secrets/external-secrets/compare/v0.9.19...v0.9.20

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjQuMyIsInVwZGF0ZWRJblZlciI6IjM4LjU3LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->

Co-authored-by: Renovate Bot <renovate@whitesourcesoftware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants