External Secrets Files

Image: ghcr.io/external-secrets/external-secrets:v1.1.0 Image: ghcr.io/external-secrets/external-secrets:v1.1.0-ubi Image: ghcr.io/external-secrets/external-secrets:v1.1.0-ubi-boringssl

What's Changed

!NOTE!: During last community meeting we discussed that we are retiring our scarf account. With that, we will be changing back to ghcr.io/external-secrets/external-secrets instead of oci.external-secrets.io/external-secrets/external-secrets.

For now, the old domain will live for a couple months to give people to change back. With this release , the helm chart switched back to ghcr.

General

• chore(chart): release helm chart 1.0.0 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5552
• feat(security): add support for ECDSA ssh keys by @bigjazzsound in https://github.com/external-secrets/external-secrets/pull/5559
• fix: minor typo in comment of KeeperSecurity example by @mdjong1 in https://github.com/external-secrets/external-secrets/pull/5573
• docs(gcp): update documentation for using WorkloadIdentityFederation in non-GKE cluster by @jennweir in https://github.com/external-secrets/external-secrets/pull/5556
• chore(release): add darwin_arm64 releases by @lbordowitz in https://github.com/external-secrets/external-secrets/pull/5583
• feat: support override IAM endpoint in IBM provider for APIkey auth by @fidel-ruiz in https://github.com/external-secrets/external-secrets/pull/5550
• feat(security): build tags for all the providers to disable them on d… by @ShimonDarshan in https://github.com/external-secrets/external-secrets/pull/5578
• fix: do not include the last element of the path in the iteration by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5588
• fix(k8s): support deleting whole secret by @tiagolobocastro in https://github.com/external-secrets/external-secrets/pull/5538
• fix(provider): configure TLS for secret server provider by @Lumexralph in https://github.com/external-secrets/external-secrets/pull/5558
• chore(aws): remove any usage of aws-sdk-v1 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5590
• fix(gcp): check for secret version exists in PushSecret by @bpalko in https://github.com/external-secrets/external-secrets/pull/5593
• feat(vault): add GCP Workload Identity authentication support by @SamuelMolling in https://github.com/external-secrets/external-secrets/pull/5356
• chore: fix sonar cloud issues by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5405
• chore(aws-sdk-v2): update dependencies to accept new aws regions by @damienpuig in https://github.com/external-secrets/external-secrets/pull/5577
• feat(chart): use ghcr.io instead of our own domain by @evrardjp in https://github.com/external-secrets/external-secrets/pull/5617

Dependencies

• chore(deps): bump golang from 1.25.3 to 1.25.4 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5560
• chore(deps): bump golang from 1.25.3-bookworm to 1.25.4-bookworm in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5568
• chore(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5561
• chore(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5564
• chore(deps): bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5565
• chore(deps): bump aws-actions/configure-aws-credentials from [0d00a5] to [2475ef] by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5562
• chore(deps): bump helm/kind-action from 1.12.0 to 1.13.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5563
• chore(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5567
• chore(deps): bump regex from 2025.10.23 to 2025.11.3 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5570
• chore(deps): bump markdown from 3.9 to 3.10 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5569
• chore(deps): bump hashicorp/setup-terraform from [982f6f] to [4c5fda] by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5566
• chore(deps): bump golang from d3f0cf7 to d3f0cf7 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5595
• chore(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5596
• chore(deps): bump click from 8.3.0 to 8.3.1 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5602
• chore(deps): bump ubi9/ubi from dec374e to dcd8128 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5594
• chore(deps): bump aws-actions/configure-aws-credentials from [2475ef] to [f2964c] by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5597
• chore(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5598
• chore(deps): bump pymdown-extensions from 10.16.1 to 10.17.1 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5599
• chore(deps): bump certifi from 2025.10.5 to 2025.11.12 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5600
• chore(deps): bump mkdocs-material from 9.6.23 to 9.7.0 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5601
• chore(deps): bump mkdocs-macros-plugin from 1.4.1 to 1.5.0 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5603

New Contributors

• @bigjazzsound made their first contribution in https://github.com/external-secrets/external-secrets/pull/5559
• @mdjong1 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5573
• @jennweir made their first contribution in https://github.com/external-secrets/external-secrets/pull/5556
• @lbordowitz made their first contribution in https://github.com/external-secrets/external-secrets/pull/5583
• @fidel-ruiz made their first contribution in https://github.com/external-secrets/external-secrets/pull/5550
• @ShimonDarshan made their first contribution in https://github.com/external-secrets/external-secrets/pull/5578
• @bpalko made their first contribution in https://github.com/external-secrets/external-secrets/pull/5593
• @SamuelMolling made their first contribution in https://github.com/external-secrets/external-secrets/pull/5356
• @damienpuig made their first contribution in https://github.com/external-secrets/external-secrets/pull/5577

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v1.0.0...v1.1.0