External Secrets Files

Image: ghcr.io/external-secrets/external-secrets:v2.2.0 Image: ghcr.io/external-secrets/external-secrets:v2.2.0-ubi Image: ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl

What's Changed

General

• chore: release charts v2.1.0 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6030
• chore: fix the stability doc by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6035
• fix(security): Fix vulnerabilities by @othomann in https://github.com/external-secrets/external-secrets/pull/6052
• fix(aws): sync tags and resource policy even when secret value unchanged by @evs-secops in https://github.com/external-secrets/external-secrets/pull/6025
• fix: publish now uses docker build v4 which required some changes by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6062
• feat(gcpsm): auto-detect projectID from GCP metadata server by @patjlm in https://github.com/external-secrets/external-secrets/pull/5922
• chore(templating): Remove years in license and their checks by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/5955
• docs: Add Roche to official ADOPTERS by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/6076
• feat: Add Last Sync column to ExternalSecret and PushSecret printers by @jaruwat-panturat in https://github.com/external-secrets/external-secrets/pull/6068
• fix(onepassword): support native item IDs by @chadxz in https://github.com/external-secrets/external-secrets/pull/6073
• feat: extract LGTM processor to external JS file with tests by @mateenali66 in https://github.com/external-secrets/external-secrets/pull/6074
• feat: fail fast if LGTM label does not exist in repository by @mateenali66 in https://github.com/external-secrets/external-secrets/pull/6078
• feat(passbolt): add support for Passbolt V5 API by @cedricherzog-passbolt in https://github.com/external-secrets/external-secrets/pull/5919
• fix(infisical): dataFrom.find.path should filter by secret path not name by @johnvox in https://github.com/external-secrets/external-secrets/pull/6086
• fix: disable the priority queue which misbehaves at scale by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6083
• chore: update go version to 1.26.1 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6072
• docs(aws): fix PushSecret metadata indentation in resource policy exa... by @Br1an67 in https://github.com/external-secrets/external-secrets/pull/6056
• fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by @Br1an67 in https://github.com/external-secrets/external-secrets/pull/6036
• feat(templating): Add certSANs function to extract SANs from certificates by @mzdeb in https://github.com/external-secrets/external-secrets/pull/6058
• docs: document template.metadata labels/annotations behavior by @lucpas in https://github.com/external-secrets/external-secrets/pull/6102
• fix: CODEOWNERS are seriously out of date by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6106
• feat(helm): add readinessProbe support for external-secrets deployment by @AlexOQ in https://github.com/external-secrets/external-secrets/pull/5831
• fix: update grpc for CVE-2026-33186 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6108
• feat(azurekv): add expiration time to azure kv secret by @muraliavarma in https://github.com/external-secrets/external-secrets/pull/5935
• feat: add path to cloud.ru provider by @heavyandrew in https://github.com/external-secrets/external-secrets/pull/5952
• fix(add-eso-version): fix separator line pattern in add_eso_version.sh script by @riccardomc in https://github.com/external-secrets/external-secrets/pull/6113

Dependencies

• chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6038
• chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6047
• chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6050
• chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6049
• chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6039
• chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6043
• chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6040
• chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6044
• chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6042
• chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6041
• chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6046
• chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6048
• chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6093
• chore(deps): bump distroless/static from 28efbe9 to 47b2d72 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6088
• chore(deps): bump ubi9/ubi from cecb1cd to 6ed9f6f by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6087
• chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6096
• chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6094
• chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6095
• chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6089
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6092
• chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6090
• chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6091

New Contributors

• @othomann made their first contribution in https://github.com/external-secrets/external-secrets/pull/6052
• @evs-secops made their first contribution in https://github.com/external-secrets/external-secrets/pull/6025
• @patjlm made their first contribution in https://github.com/external-secrets/external-secrets/pull/5922
• @jaruwat-panturat made their first contribution in https://github.com/external-secrets/external-secrets/pull/6068
• @chadxz made their first contribution in https://github.com/external-secrets/external-secrets/pull/6073
• @mateenali66 made their first contribution in https://github.com/external-secrets/external-secrets/pull/6074
• @cedricherzog-passbolt made their first contribution in https://github.com/external-secrets/external-secrets/pull/5919
• @johnvox made their first contribution in https://github.com/external-secrets/external-secrets/pull/6086
• @Br1an67 made their first contribution in https://github.com/external-secrets/external-secrets/pull/6056
• @mzdeb made their first contribution in https://github.com/external-secrets/external-secrets/pull/6058
• @lucpas made their first contribution in https://github.com/external-secrets/external-secrets/pull/6102
• @AlexOQ made their first contribution in https://github.com/external-secrets/external-secrets/pull/5831
• @muraliavarma made their first contribution in https://github.com/external-secrets/external-secrets/pull/5935
• @heavyandrew made their first contribution in https://github.com/external-secrets/external-secrets/pull/5952

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0