chore(templating): Remove years in license and their checks by evrardj-roche · Pull Request #5955 · external-secrets/external-secrets

evrardj-roche · 2026-02-11T23:41:43Z

Without this, new files will fail license check, cause it's still pointing in 2025.

Problem Statement

What is the problem you're trying to solve?

Related Issue

Fixes #...

Proposed Changes

How do you like to solve the issue and why?

Format

Please ensure that your PR follows the following format for the title:

feat(scope): add new feature
fix(scope): fix bug
docs(scope): update documentation
chore(scope): update build tool or dependencies
ref(scope): refactor code
clean(scope): provider cleanup
test(scope): add tests
perf(scope): improve performance
desig(scope): improve design

Where scope is optionally one of:

charts
release
testing
security
templating

Checklist

I have read the contribution guidelines
All commits are signed with git commit --signoff
My changes have reasonable test coverage
All tests pass with make test
I ensured my PR is ready for review with make reviewable

Changes

Updated the copyright year in .licenserc.yaml from 2025 to 2026 to ensure newly created files pass the license check in the current year.

Files changed: 1
Lines changed: +1/-1

coderabbitai · 2026-02-11T23:42:01Z

Important

Review skipped

Too many files!

This PR contains 237 files, which is 87 over the limit of 150.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 2b4ccc92-dc59-4242-9793-864652feba90

📥 Commits

Reviewing files that changed from the base of the PR and between 56b72a8 and 3383ffc.

📒 Files selected for processing (237)

.licenserc.yaml
apis/doc.go
apis/externalsecrets/doc.go
apis/externalsecrets/v1/clusterexternalsecret_types.go
apis/externalsecrets/v1/doc.go
apis/externalsecrets/v1/externalsecret_types.go
apis/externalsecrets/v1/externalsecret_validator.go
apis/externalsecrets/v1/externalsecret_validator_test.go
apis/externalsecrets/v1/externalsecret_webhook.go
apis/externalsecrets/v1/fakes/pushremoteref.go
apis/externalsecrets/v1/generic_store.go
apis/externalsecrets/v1/provider.go
apis/externalsecrets/v1/provider_schema.go
apis/externalsecrets/v1/provider_schema_maintenance.go
apis/externalsecrets/v1/provider_schema_test.go
apis/externalsecrets/v1/pushsecret_interfaces.go
apis/externalsecrets/v1/register.go
apis/externalsecrets/v1/secretsstore_bitwarden_types.go
apis/externalsecrets/v1/secretsstore_delinea_types.go
apis/externalsecrets/v1/secretsstore_infisical_types.go
apis/externalsecrets/v1/secretsstore_passbolt_types.go
apis/externalsecrets/v1/secretsstore_secretserver_types.go
apis/externalsecrets/v1/secretstore_akeyless_types.go
apis/externalsecrets/v1/secretstore_aws_types.go
apis/externalsecrets/v1/secretstore_azurekv_types.go
apis/externalsecrets/v1/secretstore_barbican_types.go
apis/externalsecrets/v1/secretstore_beyondtrust_types.go
apis/externalsecrets/v1/secretstore_chef_types.go
apis/externalsecrets/v1/secretstore_cloudru_types.go
apis/externalsecrets/v1/secretstore_conjur_types.go
apis/externalsecrets/v1/secretstore_doppler_types.go
apis/externalsecrets/v1/secretstore_dvls_types.go
apis/externalsecrets/v1/secretstore_fake_types.go
apis/externalsecrets/v1/secretstore_fortanix_types.go
apis/externalsecrets/v1/secretstore_gcpsm_types.go
apis/externalsecrets/v1/secretstore_github_types.go
apis/externalsecrets/v1/secretstore_gitlab_types.go
apis/externalsecrets/v1/secretstore_ibm_types.go
apis/externalsecrets/v1/secretstore_keepersecurity_types.go
apis/externalsecrets/v1/secretstore_kubernetes_types.go
apis/externalsecrets/v1/secretstore_nebius_types.go
apis/externalsecrets/v1/secretstore_ngrok_types.go
apis/externalsecrets/v1/secretstore_onboardbase_types.go
apis/externalsecrets/v1/secretstore_onepassword_sdk_types.go
apis/externalsecrets/v1/secretstore_onepassword_types.go
apis/externalsecrets/v1/secretstore_oracle_types.go
apis/externalsecrets/v1/secretstore_passworddeport_types.go
apis/externalsecrets/v1/secretstore_previder_types.go
apis/externalsecrets/v1/secretstore_pulumi_types.go
apis/externalsecrets/v1/secretstore_scaleway_types.go
apis/externalsecrets/v1/secretstore_senhasegura_types.go
apis/externalsecrets/v1/secretstore_types.go
apis/externalsecrets/v1/secretstore_validator.go
apis/externalsecrets/v1/secretstore_validator_test.go
apis/externalsecrets/v1/secretstore_vault_types.go
apis/externalsecrets/v1/secretstore_volcengine_types.go
apis/externalsecrets/v1/secretstore_webhook.go
apis/externalsecrets/v1/secretstore_webhook_types.go
apis/externalsecrets/v1/secretstore_yandex_types.go
apis/externalsecrets/v1/secretstore_yandexcertificatemanager_types.go
apis/externalsecrets/v1/secretstore_yandexlockbox_types.go
apis/externalsecrets/v1/zz_generated.deepcopy.go
apis/externalsecrets/v1alpha1/doc.go
apis/externalsecrets/v1alpha1/pushsecret_types.go
apis/externalsecrets/v1alpha1/register.go
apis/externalsecrets/v1alpha1/zz_generated.deepcopy.go
apis/externalsecrets/v1beta1/clusterexternalsecret_types.go
apis/externalsecrets/v1beta1/doc.go
apis/externalsecrets/v1beta1/externalsecret_types.go
apis/externalsecrets/v1beta1/externalsecret_validator.go
apis/externalsecrets/v1beta1/externalsecret_validator_test.go
apis/externalsecrets/v1beta1/externalsecret_webhook.go
apis/externalsecrets/v1beta1/fakes/pushremoteref.go
apis/externalsecrets/v1beta1/generic_store.go
apis/externalsecrets/v1beta1/provider.go
apis/externalsecrets/v1beta1/provider_schema.go
apis/externalsecrets/v1beta1/provider_schema_test.go
apis/externalsecrets/v1beta1/pushsecret_interfaces.go
apis/externalsecrets/v1beta1/register.go
apis/externalsecrets/v1beta1/secretsstore_bitwarden_types.go
apis/externalsecrets/v1beta1/secretsstore_delinea_types.go
apis/externalsecrets/v1beta1/secretsstore_infisical_types.go
apis/externalsecrets/v1beta1/secretsstore_passbolt_types.go
apis/externalsecrets/v1beta1/secretsstore_secretserver_types.go
apis/externalsecrets/v1beta1/secretstore_akeyless_types.go
apis/externalsecrets/v1beta1/secretstore_alibaba_types.go
apis/externalsecrets/v1beta1/secretstore_aws_types.go
apis/externalsecrets/v1beta1/secretstore_azurekv_types.go
apis/externalsecrets/v1beta1/secretstore_beyondtrust_types.go
apis/externalsecrets/v1beta1/secretstore_chef_types.go
apis/externalsecrets/v1beta1/secretstore_cloudru_types.go
apis/externalsecrets/v1beta1/secretstore_conjur_types.go
apis/externalsecrets/v1beta1/secretstore_device42_types.go
apis/externalsecrets/v1beta1/secretstore_doppler_types.go
apis/externalsecrets/v1beta1/secretstore_fake_types.go
apis/externalsecrets/v1beta1/secretstore_fortanix_types.go
apis/externalsecrets/v1beta1/secretstore_gcpsm_types.go
apis/externalsecrets/v1beta1/secretstore_github_types.go
apis/externalsecrets/v1beta1/secretstore_gitlab_types.go
apis/externalsecrets/v1beta1/secretstore_ibm_types.go
apis/externalsecrets/v1beta1/secretstore_keepersecurity_types.go
apis/externalsecrets/v1beta1/secretstore_kubernetes_types.go
apis/externalsecrets/v1beta1/secretstore_onboardbase_types.go
apis/externalsecrets/v1beta1/secretstore_onepassword_types.go
apis/externalsecrets/v1beta1/secretstore_oracle_types.go
apis/externalsecrets/v1beta1/secretstore_passworddeport_types.go
apis/externalsecrets/v1beta1/secretstore_previder_types.go
apis/externalsecrets/v1beta1/secretstore_pulumi_types.go
apis/externalsecrets/v1beta1/secretstore_scaleway_types.go
apis/externalsecrets/v1beta1/secretstore_senhasegura_types.go
apis/externalsecrets/v1beta1/secretstore_types.go
apis/externalsecrets/v1beta1/secretstore_validator.go
apis/externalsecrets/v1beta1/secretstore_validator_test.go
apis/externalsecrets/v1beta1/secretstore_vault_types.go
apis/externalsecrets/v1beta1/secretstore_webhook.go
apis/externalsecrets/v1beta1/secretstore_webhook_types.go
apis/externalsecrets/v1beta1/secretstore_yandexcertificatemanager_types.go
apis/externalsecrets/v1beta1/secretstore_yandexlockbox_types.go
apis/externalsecrets/v1beta1/zz_generated.deepcopy.go
apis/generators/v1alpha1/doc.go
apis/generators/v1alpha1/generator_interfaces.go
apis/generators/v1alpha1/generator_schema.go
apis/generators/v1alpha1/generator_state_types.go
apis/generators/v1alpha1/generator_types.go
apis/generators/v1alpha1/register.go
apis/generators/v1alpha1/types_acr.go
apis/generators/v1alpha1/types_cloudsmith.go
apis/generators/v1alpha1/types_cluster.go
apis/generators/v1alpha1/types_ecr.go
apis/generators/v1alpha1/types_fake.go
apis/generators/v1alpha1/types_gcr.go
apis/generators/v1alpha1/types_github.go
apis/generators/v1alpha1/types_grafana.go
apis/generators/v1alpha1/types_mfa.go
apis/generators/v1alpha1/types_password.go
apis/generators/v1alpha1/types_quay.go
apis/generators/v1alpha1/types_sshkey.go
apis/generators/v1alpha1/types_sts.go
apis/generators/v1alpha1/types_uuid.go
apis/generators/v1alpha1/types_vault.go
apis/generators/v1alpha1/types_webhook.go
apis/generators/v1alpha1/zz_generated.deepcopy.go
apis/meta/doc.go
apis/meta/v1/doc.go
apis/meta/v1/types.go
apis/meta/v1/zz_generated.deepcopy.go
cmd/controller/certcontroller.go
cmd/controller/root.go
cmd/controller/webhook.go
cmd/esoctl/bootstrap.go
cmd/esoctl/generator/bootstrap.go
cmd/esoctl/generator/templates/crd.go.tmpl
cmd/esoctl/generator/templates/implementation.go.tmpl
cmd/esoctl/generator/templates/test.go.tmpl
cmd/esoctl/generator/utils.go
cmd/esoctl/main.go
cmd/esoctl/root.go
cmd/esoctl/template.go
e2e/framework/addon/addon.go
e2e/framework/addon/chart.go
e2e/framework/addon/conjur.go
e2e/framework/addon/eso.go
e2e/framework/addon/eso_argocd_application.go
e2e/framework/addon/eso_flux_helm.go
e2e/framework/addon/helmserver.go
e2e/framework/addon/port_forward.go
e2e/framework/addon/uninstall_eso_crds.go
e2e/framework/addon/vault.go
e2e/framework/eso.go
e2e/framework/framework.go
e2e/framework/log/log.go
e2e/framework/testcase.go
e2e/framework/util/util.go
e2e/suites/argocd/argocd.go
e2e/suites/argocd/install.go
e2e/suites/argocd/suite_test.go
e2e/suites/flux/flux.go
e2e/suites/flux/install.go
e2e/suites/flux/suite_test.go
e2e/suites/generator/ecr.go
e2e/suites/generator/fake.go
e2e/suites/generator/grafana.go
e2e/suites/generator/manifest.go
e2e/suites/generator/password.go
e2e/suites/generator/suite_test.go
e2e/suites/generator/testcase.go
e2e/suites/provider/cases/akeyless/akeyless.go
e2e/suites/provider/cases/akeyless/provider.go
e2e/suites/provider/cases/aws/common.go
e2e/suites/provider/cases/aws/parameterstore/find_by_name.go
e2e/suites/provider/cases/aws/parameterstore/find_by_tags.go
e2e/suites/provider/cases/aws/parameterstore/parameterstore.go
e2e/suites/provider/cases/aws/parameterstore/parameterstore_managed.go
e2e/suites/provider/cases/aws/parameterstore/provider.go
e2e/suites/provider/cases/aws/parameterstore/version_secret.go
e2e/suites/provider/cases/aws/secretsmanager/assume_role.go
e2e/suites/provider/cases/aws/secretsmanager/provider.go
e2e/suites/provider/cases/aws/secretsmanager/secretsmanager.go
e2e/suites/provider/cases/aws/secretsmanager/secretsmanager_managed.go
e2e/suites/provider/cases/azure/azure_cert.go
e2e/suites/provider/cases/azure/azure_key.go
e2e/suites/provider/cases/azure/azure_managed.go
e2e/suites/provider/cases/azure/azure_secret.go
e2e/suites/provider/cases/azure/provider.go
e2e/suites/provider/cases/common/common.go
e2e/suites/provider/cases/common/find_by_name.go
e2e/suites/provider/cases/common/find_by_tags.go
e2e/suites/provider/cases/conjur/conjur.go
e2e/suites/provider/cases/conjur/policy.go
e2e/suites/provider/cases/conjur/provider.go
e2e/suites/provider/cases/delinea/config.go
e2e/suites/provider/cases/delinea/delinea.go
e2e/suites/provider/cases/delinea/provider.go
e2e/suites/provider/cases/fake/provider.go
e2e/suites/provider/cases/gcp/gcp.go
e2e/suites/provider/cases/gcp/gcp_managed.go
e2e/suites/provider/cases/gcp/provider.go
e2e/suites/provider/cases/gitlab/gitlab.go
e2e/suites/provider/cases/gitlab/provider.go
e2e/suites/provider/cases/import.go
e2e/suites/provider/cases/kubernetes/kubernetes.go
e2e/suites/provider/cases/kubernetes/provider.go
e2e/suites/provider/cases/oracle/oracle.go
e2e/suites/provider/cases/oracle/provider.go
e2e/suites/provider/cases/scaleway/config.go
e2e/suites/provider/cases/scaleway/provider.go
e2e/suites/provider/cases/scaleway/scaleway.go
e2e/suites/provider/cases/secretserver/config.go
e2e/suites/provider/cases/secretserver/provider.go
e2e/suites/provider/cases/secretserver/secretserver.go
e2e/suites/provider/cases/template/provider.go
e2e/suites/provider/cases/template/template.go
e2e/suites/provider/cases/vault/provider.go
e2e/suites/provider/cases/vault/vault.go
e2e/suites/provider/suite_test.go
e2e/tools.go
generators/v1/acr/acr.go

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Walkthrough

Updated the copyright year in the license configuration file from 2025 to 2026. No other modifications were made to the license block or surrounding content.

Changes

Cohort / File(s)	Summary
License Configuration `.licenserc.yaml`	Updated copyright year from 2025 to 2026 in the license header.

📝 Coding Plan

Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Skarlso · 2026-02-12T06:39:51Z

For sure, but that means updating EVERY FILE. :D

Skarlso · 2026-02-13T13:41:33Z

What I mean is, that you need to update the year in every file. :) Then, this is okay.

evrardj-roche · 2026-02-16T13:17:27Z

That's not how it should work. The copyright file should be the template for new files (optionally updated files), not the date of all files . BTW, we should not use "ESO authors" either (it's not a legal entity), but I did not want to change that.

How do we proceed?

evrardj-roche · 2026-02-16T13:22:39Z

Sources: https://hynek.me/til/copyright-years/ https://daniel.haxx.se/blog/2023/01/08/copyright-without-years/ https://matija.suklje.name/how-and-why-to-properly-write-copyright-statements-in-your-code#why-not-bump-the-year-on-change https://news.ycombinator.com/item?id=34880663

evrardj-roche · 2026-02-16T13:25:19Z

If you are okay, I can remove the dates of ALL FILES except license. that could help, but according to https://matija.suklje.name/how-and-why-to-properly-write-copyright-statements-in-your-code#why-not-bump-the-year-on-change , this is not what we should do.

I will not update the dates on all files, it is actually harmful.

Skarlso · 2026-02-16T17:53:03Z

What do you propose as an alternative? I'm open to legal suggestions here.

moolen · 2026-02-16T20:00:52Z

After reading through above blog posts i'm under the impression that we can just drop the year?!

If you are okay, I can remove the dates of ALL FILES except license. that could help, but according to https://matija.suklje.name/how-and-why-to-properly-write-copyright-statements-in-your-code#why-not-bump-the-year-on-change , this is not what we should do.

This post argues that keeping the year is beneficial:

Some might argue that for the sake of simplicity it would be much easier to maintain copyright statements if we just skip the years. In fact, that is a policy at Microsoft/GitHub at the time of this writing.

While I agree that not updating the year simplifies things enormously, I do think that keeping a date helps preserve at least a vague timeline in the codebase. As the question is when the work was first expressed in a medium, the earliest date provable is the time when that file was first created.

In addition, having an easy way to find the earliest date of a piece of code, might prove useful also in figuring out when an invention was first expressed to the general public. Something that might become useful for patent defense.

This is also why e.g. in Liferay our new policy is to write the year of the file creation, and then not change the year any more.

But i disagree. We use git, all is open source. If we need find "the earliest date of a piece of code", then we already have all that information. When would we even need that? Even once in a lifetime? 🤷

I think i'd just drop the dates for simplicity, as it seems it doesn't have a legal impact.

evrardj-roche · 2026-02-17T08:36:30Z

@moolen: Dropping the years in all the files is what @bagder has been doing for curl, so I think we would be fine.

Skarlso · 2026-02-18T14:32:47Z

Agreed to drop in today's community meeting. So adjust all files and the license checker template.

evrardj-roche · 2026-03-04T11:14:23Z

I will tackle this.

Without this, new files will fail license check, cause it's still pointing in 2025. We have decided to remove the year, so this adapts by removing the year AND adapting to LF guidelines: https://www.linuxfoundation.org/blog/blog/copyright-notices-in-open-source-software-projects Signed-off-by: Jean-Philippe Evrard <jean-philippe.evrard+rochepub@external.roche.com>

evrardjp · 2026-03-04T17:08:38Z

I will tackle codeql issue

evrardj-roche · 2026-03-05T22:40:25Z

(I will handle this on sunday or monday)

evrardj-roche · 2026-03-11T22:43:10Z

CodeQL was a red herring, we can merge this.

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com> On-behalf-of: Gergely Brautigam <gergely.brautigam@sap.com>

sonarqubecloud · 2026-03-13T12:15:26Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

…-secrets#5955) Co-authored-by: Gergely Bräutigam <gergely.brautigam@sap.com> Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com> Signed-off-by: AlexOQ <30403857+AlexOQ@users.noreply.github.com>

…2.2.0 (#4923) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets/external-secrets](https://github.com/external-secrets/external-secrets) | minor | `v2.1.0` → `v2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets/external-secrets)</summary> ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](external-secrets/external-secrets@v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl`  #### What's Changed ##### General - chore: release charts v2.1.0 by [@Skarlso](https://github.com/Skarlso) in [#6030](external-secrets/external-secrets#6030) - chore: fix the stability doc by [@Skarlso](https://github.com/Skarlso) in [#6035](external-secrets/external-secrets#6035) - fix(security): Fix vulnerabilities by [@othomann](https://github.com/othomann) in [#6052](external-secrets/external-secrets#6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@evs-secops](https://github.com/evs-secops) in [#6025](external-secrets/external-secrets#6025) - fix: publish now uses docker build v4 which required some changes by [@Skarlso](https://github.com/Skarlso) in [#6062](external-secrets/external-secrets#6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@patjlm](https://github.com/patjlm) in [#5922](external-secrets/external-secrets#5922) - chore(templating): Remove years in license and their checks by [@evrardj-roche](https://github.com/evrardj-roche) in [#5955](external-secrets/external-secrets#5955) - docs: Add Roche to official ADOPTERS by [@evrardj-roche](https://github.com/evrardj-roche) in [#6076](external-secrets/external-secrets#6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@jaruwat-panturat](https://github.com/jaruwat-panturat) in [#6068](external-secrets/external-secrets#6068) - fix(onepassword): support native item IDs by [@chadxz](https://github.com/chadxz) in [#6073](external-secrets/external-secrets#6073) - feat: extract LGTM processor to external JS file with tests by [@mateenali66](https://github.com/mateenali66) in [#6074](external-secrets/external-secrets#6074) - feat: fail fast if LGTM label does not exist in repository by [@mateenali66](https://github.com/mateenali66) in [#6078](external-secrets/external-secrets#6078) - feat(passbolt): add support for Passbolt V5 API by [@cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#5919](external-secrets/external-secrets#5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@johnvox](https://github.com/johnvox) in [#6086](external-secrets/external-secrets#6086) - fix: disable the priority queue which misbehaves at scale by [@Skarlso](https://github.com/Skarlso) in [#6083](external-secrets/external-secrets#6083) - chore: update go version to 1.26.1 by [@Skarlso](https://github.com/Skarlso) in [#6072](external-secrets/external-secrets#6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@Br1an67](https://github.com/Br1an67) in [#6056](external-secrets/external-secrets#6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@Br1an67](https://github.com/Br1an67) in [#6036](external-secrets/external-secrets#6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@mzdeb](https://github.com/mzdeb) in [#6058](external-secrets/external-secrets#6058) - docs: document template.metadata labels/annotations behavior by [@lucpas](https://github.com/lucpas) in [#6102](external-secrets/external-secrets#6102) - fix: CODEOWNERS are seriously out of date by [@Skarlso](https://github.com/Skarlso) in [#6106](external-secrets/external-secrets#6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@AlexOQ](https://github.com/AlexOQ) in [#5831](external-secrets/external-secrets#5831) - fix: update grpc for CVE-2026-33186 by [@Skarlso](https://github.com/Skarlso) in [#6108](external-secrets/external-secrets#6108) - feat(azurekv): add expiration time to azure kv secret by [@muraliavarma](https://github.com/muraliavarma) in [#5935](external-secrets/external-secrets#5935) - feat: add path to cloud.ru provider by [@heavyandrew](https://github.com/heavyandrew) in [#5952](external-secrets/external-secrets#5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@riccardomc](https://github.com/riccardomc) in [#6113](external-secrets/external-secrets#6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#6038](external-secrets/external-secrets#6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6047](external-secrets/external-secrets#6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6050](external-secrets/external-secrets#6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6049](external-secrets/external-secrets#6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#6039](external-secrets/external-secrets#6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#6043](external-secrets/external-secrets#6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6040](external-secrets/external-secrets#6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6044](external-secrets/external-secrets#6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6042](external-secrets/external-secrets#6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6041](external-secrets/external-secrets#6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6046](external-secrets/external-secrets#6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6048](external-secrets/external-secrets#6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#6093](external-secrets/external-secrets#6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@dependabot](https://github.com/dependabot)\[bot] in [#6088](external-secrets/external-secrets#6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@dependabot](https://github.com/dependabot)\[bot] in [#6087](external-secrets/external-secrets#6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6096](external-secrets/external-secrets#6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6094](external-secrets/external-secrets#6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6095](external-secrets/external-secrets#6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6089](external-secrets/external-secrets#6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6092](external-secrets/external-secrets#6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#6090](external-secrets/external-secrets#6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6091](external-secrets/external-secrets#6091) #### New Contributors - [@othomann](https://github.com/othomann) made their first contribution in [#6052](external-secrets/external-secrets#6052) - [@evs-secops](https://github.com/evs-secops) made their first contribution in [#6025](external-secrets/external-secrets#6025) - [@patjlm](https://github.com/patjlm) made their first contribution in [#5922](external-secrets/external-secrets#5922) - [@jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#6068](external-secrets/external-secrets#6068) - [@chadxz](https://github.com/chadxz) made their first contribution in [#6073](external-secrets/external-secrets#6073) - [@mateenali66](https://github.com/mateenali66) made their first contribution in [#6074](external-secrets/external-secrets#6074) - [@cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#5919](external-secrets/external-secrets#5919) - [@johnvox](https://github.com/johnvox) made their first contribution in [#6086](external-secrets/external-secrets#6086) - [@Br1an67](https://github.com/Br1an67) made their first contribution in [#6056](external-secrets/external-secrets#6056) - [@mzdeb](https://github.com/mzdeb) made their first contribution in [#6058](external-secrets/external-secrets#6058) - [@lucpas](https://github.com/lucpas) made their first contribution in [#6102](external-secrets/external-secrets#6102) - [@AlexOQ](https://github.com/AlexOQ) made their first contribution in [#5831](external-secrets/external-secrets#5831) - [@muraliavarma](https://github.com/muraliavarma) made their first contribution in [#5935](external-secrets/external-secrets#5935) - [@heavyandrew](https://github.com/heavyandrew) made their first contribution in [#5952](external-secrets/external-secrets#5952) **Full Changelog**: <external-secrets/external-secrets@v2.1.0...v2.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4923 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.1.0` → `2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](external-secrets/external-secrets@v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl`  ##### What's Changed ##### General - chore: release charts v2.1.0 by [@Skarlso](https://github.com/Skarlso) in [#6030](external-secrets/external-secrets#6030) - chore: fix the stability doc by [@Skarlso](https://github.com/Skarlso) in [#6035](external-secrets/external-secrets#6035) - fix(security): Fix vulnerabilities by [@othomann](https://github.com/othomann) in [#6052](external-secrets/external-secrets#6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@evs-secops](https://github.com/evs-secops) in [#6025](external-secrets/external-secrets#6025) - fix: publish now uses docker build v4 which required some changes by [@Skarlso](https://github.com/Skarlso) in [#6062](external-secrets/external-secrets#6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@patjlm](https://github.com/patjlm) in [#5922](external-secrets/external-secrets#5922) - chore(templating): Remove years in license and their checks by [@evrardj-roche](https://github.com/evrardj-roche) in [#5955](external-secrets/external-secrets#5955) - docs: Add Roche to official ADOPTERS by [@evrardj-roche](https://github.com/evrardj-roche) in [#6076](external-secrets/external-secrets#6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@jaruwat-panturat](https://github.com/jaruwat-panturat) in [#6068](external-secrets/external-secrets#6068) - fix(onepassword): support native item IDs by [@chadxz](https://github.com/chadxz) in [#6073](external-secrets/external-secrets#6073) - feat: extract LGTM processor to external JS file with tests by [@mateenali66](https://github.com/mateenali66) in [#6074](external-secrets/external-secrets#6074) - feat: fail fast if LGTM label does not exist in repository by [@mateenali66](https://github.com/mateenali66) in [#6078](external-secrets/external-secrets#6078) - feat(passbolt): add support for Passbolt V5 API by [@cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#5919](external-secrets/external-secrets#5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@johnvox](https://github.com/johnvox) in [#6086](external-secrets/external-secrets#6086) - fix: disable the priority queue which misbehaves at scale by [@Skarlso](https://github.com/Skarlso) in [#6083](external-secrets/external-secrets#6083) - chore: update go version to 1.26.1 by [@Skarlso](https://github.com/Skarlso) in [#6072](external-secrets/external-secrets#6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@Br1an67](https://github.com/Br1an67) in [#6056](external-secrets/external-secrets#6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@Br1an67](https://github.com/Br1an67) in [#6036](external-secrets/external-secrets#6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@mzdeb](https://github.com/mzdeb) in [#6058](external-secrets/external-secrets#6058) - docs: document template.metadata labels/annotations behavior by [@lucpas](https://github.com/lucpas) in [#6102](external-secrets/external-secrets#6102) - fix: CODEOWNERS are seriously out of date by [@Skarlso](https://github.com/Skarlso) in [#6106](external-secrets/external-secrets#6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@AlexOQ](https://github.com/AlexOQ) in [#5831](external-secrets/external-secrets#5831) - fix: update grpc for CVE-2026-33186 by [@Skarlso](https://github.com/Skarlso) in [#6108](external-secrets/external-secrets#6108) - feat(azurekv): add expiration time to azure kv secret by [@muraliavarma](https://github.com/muraliavarma) in [#5935](external-secrets/external-secrets#5935) - feat: add path to cloud.ru provider by [@heavyandrew](https://github.com/heavyandrew) in [#5952](external-secrets/external-secrets#5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@riccardomc](https://github.com/riccardomc) in [#6113](external-secrets/external-secrets#6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#6038](external-secrets/external-secrets#6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6047](external-secrets/external-secrets#6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6050](external-secrets/external-secrets#6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6049](external-secrets/external-secrets#6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#6039](external-secrets/external-secrets#6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#6043](external-secrets/external-secrets#6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6040](external-secrets/external-secrets#6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6044](external-secrets/external-secrets#6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6042](external-secrets/external-secrets#6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6041](external-secrets/external-secrets#6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6046](external-secrets/external-secrets#6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6048](external-secrets/external-secrets#6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#6093](external-secrets/external-secrets#6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@dependabot](https://github.com/dependabot)\[bot] in [#6088](external-secrets/external-secrets#6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@dependabot](https://github.com/dependabot)\[bot] in [#6087](external-secrets/external-secrets#6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6096](external-secrets/external-secrets#6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6094](external-secrets/external-secrets#6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@dependabot](https://github.com/dependabot)\[bot] in [#6095](external-secrets/external-secrets#6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6089](external-secrets/external-secrets#6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6092](external-secrets/external-secrets#6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#6090](external-secrets/external-secrets#6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#6091](external-secrets/external-secrets#6091) ##### New Contributors - [@othomann](https://github.com/othomann) made their first contribution in [#6052](external-secrets/external-secrets#6052) - [@evs-secops](https://github.com/evs-secops) made their first contribution in [#6025](external-secrets/external-secrets#6025) - [@patjlm](https://github.com/patjlm) made their first contribution in [#5922](external-secrets/external-secrets#5922) - [@jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#6068](external-secrets/external-secrets#6068) - [@chadxz](https://github.com/chadxz) made their first contribution in [#6073](external-secrets/external-secrets#6073) - [@mateenali66](https://github.com/mateenali66) made their first contribution in [#6074](external-secrets/external-secrets#6074) - [@cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#5919](external-secrets/external-secrets#5919) - [@johnvox](https://github.com/johnvox) made their first contribution in [#6086](external-secrets/external-secrets#6086) - [@Br1an67](https://github.com/Br1an67) made their first contribution in [#6056](external-secrets/external-secrets#6056) - [@mzdeb](https://github.com/mzdeb) made their first contribution in [#6058](external-secrets/external-secrets#6058) - [@lucpas](https://github.com/lucpas) made their first contribution in [#6102](external-secrets/external-secrets#6102) - [@AlexOQ](https://github.com/AlexOQ) made their first contribution in [#5831](external-secrets/external-secrets#5831) - [@muraliavarma](https://github.com/muraliavarma) made their first contribution in [#5935](external-secrets/external-secrets#5935) - [@heavyandrew](https://github.com/heavyandrew) made their first contribution in [#5952](external-secrets/external-secrets#5952) **Full Changelog**: <external-secrets/external-secrets@v2.1.0...v2.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4927 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

…-secrets#5955) Co-authored-by: Gergely Bräutigam <gergely.brautigam@sap.com> Co-authored-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>

github-project-automation bot added this to External Secrets Feb 11, 2026

github-actions bot added area/templating Issues / Pull Requests related to templating engines kind/chore Categorizes Pull Requests for chore activities (like bumping versions) size/xs labels Feb 11, 2026

evrardj-roche self-assigned this Mar 4, 2026

evrardj-roche force-pushed the fix-license-check branch from 56b72a8 to 80c1cff Compare March 4, 2026 16:18

github-actions bot added the size/l label Mar 4, 2026

evrardj-roche force-pushed the fix-license-check branch from 80c1cff to 25e99ad Compare March 4, 2026 16:20

evrardj-roche force-pushed the fix-license-check branch from 25e99ad to a3251c8 Compare March 4, 2026 16:28

evrardj-roche changed the title ~~chore(templating): licensecheck need yearly update~~ chore(templating): Remove years in license and their checks Mar 4, 2026

Skarlso previously approved these changes Mar 13, 2026

View reviewed changes

Skarlso and others added 2 commits March 13, 2026 13:03

Merge branch 'main' into fix-license-check

247cdfa

fix header of the newley added files since

3383ffc

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com> On-behalf-of: Gergely Brautigam <gergely.brautigam@sap.com>

Skarlso dismissed their stale review via 3383ffc March 13, 2026 12:13

Skarlso approved these changes Mar 13, 2026

View reviewed changes

Skarlso merged commit 3b3cf7a into external-secrets:main Mar 13, 2026
28 checks passed

github-project-automation bot moved this to Done in External Secrets Mar 13, 2026

Uh oh!

Conversation

evrardj-roche commented Feb 11, 2026 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem Statement

Related Issue

Proposed Changes

Format

Checklist

Changes

Uh oh!

coderabbitai bot commented Feb 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Uh oh!

Skarlso commented Feb 12, 2026

Uh oh!

Skarlso commented Feb 13, 2026

Uh oh!

evrardj-roche commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

evrardj-roche commented Feb 16, 2026

Uh oh!

evrardj-roche commented Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Skarlso commented Feb 16, 2026

Uh oh!

moolen commented Feb 16, 2026

Uh oh!

evrardj-roche commented Feb 17, 2026

Uh oh!

Skarlso commented Feb 18, 2026

Uh oh!

evrardj-roche commented Mar 4, 2026

Uh oh!

evrardjp commented Mar 4, 2026

Uh oh!

evrardj-roche commented Mar 5, 2026

Uh oh!

evrardj-roche commented Mar 11, 2026

Uh oh!

sonarqubecloud bot commented Mar 13, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

evrardj-roche commented Feb 11, 2026 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Feb 11, 2026 •

edited

Loading

evrardj-roche commented Feb 16, 2026 •

edited

Loading

evrardj-roche commented Feb 16, 2026 •

edited

Loading