External Secrets Files

Image: ghcr.io/external-secrets/external-secrets:v2.1.0 Image: ghcr.io/external-secrets/external-secrets:v2.1.0-ubi Image: ghcr.io/external-secrets/external-secrets:v2.1.0-ubi-boringssl

What's Changed

General

• chore(release): Update helm chart by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/5981
• fix: cosign verify does not use signing config by @gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5982
• docs: Update release process by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/5980
• fix: allow cross-namespace push with ClusterSecretStore objects by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5998
• feat(charts): add new flag enable leader for cert-manager by @nutmos in https://github.com/external-secrets/external-secrets/pull/5863
• feat(kubernetes): fall back to system CA roots when no CA is configured by @rajsinghtech in https://github.com/external-secrets/external-secrets/pull/5961
• feat: dedup sbom but keep it monolithic by @moolen in https://github.com/external-secrets/external-secrets/pull/6004
• fix: add missing metrics and fundamentally fix the caching logic by @Skarlso in https://github.com/external-secrets/external-secrets/pull/5894
• docs: designate Oracle Vault provider as 'stable' by @anders-swanson in https://github.com/external-secrets/external-secrets/pull/6020
• docs: Oracle Vault provider capabilities by @anders-swanson in https://github.com/external-secrets/external-secrets/pull/6023
• docs(azurekv): cert-manager pushsecret example and cleanups by @illrill in https://github.com/external-secrets/external-secrets/pull/5972
• feat(kubernetes): implement SecretExists by @Saku2 in https://github.com/external-secrets/external-secrets/pull/5973
• fix(charts): Fix wrongly set annotations for cert-controller metrics service by @josemaia in https://github.com/external-secrets/external-secrets/pull/6029
• feat(providers): Nebius MysteryBox integration by @greenmapc in https://github.com/external-secrets/external-secrets/pull/5868

Dependencies

• chore(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5986
• chore(deps): bump mkdocs-material from 9.7.1 to 9.7.2 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5992
• chore(deps): bump ubi9/ubi from b8923f5 to cecb1cd by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5984
• chore(deps): bump helm/kind-action from 1.13.0 to 1.14.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5985
• chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5990
• chore(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5989
• chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5987
• chore(deps): bump regex from 2026.1.15 to 2026.2.19 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5991
• chore(deps): bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/5988
• chore(deps): bump regex from 2026.2.19 to 2026.2.28 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6012
• chore(deps): bump mkdocs-material from 9.7.2 to 9.7.3 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6014
• chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6015
• chore(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6016
• chore(deps): bump certifi from 2026.1.4 to 2026.2.25 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6013
• chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6010
• chore(deps): bump hashicorp/setup-terraform from [ce70bc] to [5e8dbf] by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6011
• chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6009
• chore(deps): bump distroless/static from 972618c to 28efbe9 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6008

New Contributors

• @nutmos made their first contribution in https://github.com/external-secrets/external-secrets/pull/5863
• @rajsinghtech made their first contribution in https://github.com/external-secrets/external-secrets/pull/5961
• @illrill made their first contribution in https://github.com/external-secrets/external-secrets/pull/5972
• @Saku2 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5973
• @greenmapc made their first contribution in https://github.com/external-secrets/external-secrets/pull/5868

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.0.1...v2.1.0