External Secrets Files

Image: ghcr.io/external-secrets/external-secrets:v2.7.0 Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi Image: ghcr.io/external-secrets/external-secrets:v2.7.0-ubi-boringssl

What's Changed

General

• chore: release helm charts 2.6.0 by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6427
• test: add Infisical provider e2e suite by @alekc in https://github.com/external-secrets/external-secrets/pull/6415
• docs: fix discrepancies and add missing documentation for GitLab provider by @alekc in https://github.com/external-secrets/external-secrets/pull/6430
• docs: fix discrepancies and add missing documentation for Infisical provider by @alekc in https://github.com/external-secrets/external-secrets/pull/6431
• feat(templating): add hexdec function by @tstenner in https://github.com/external-secrets/external-secrets/pull/6422
• fix(volcengine): honor secretRef.namespace for ClusterSecretStore by @ruslan-rm in https://github.com/external-secrets/external-secrets/pull/6423
• docs(core): correct CRD examples and document missing fields by @alekc in https://github.com/external-secrets/external-secrets/pull/6441
• feat(provider): initial dedicated OpenBao provider by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6405
• feat(onepasswordsdk): implement GetAllSecrets by @calebmckay in https://github.com/external-secrets/external-secrets/pull/6445
• feat(controller): log secret deletions and data-key changes by @alekc in https://github.com/external-secrets/external-secrets/pull/6443
• feat: Add BeyondTrust WorkloadCredentials provider by @sdahal-bt in https://github.com/external-secrets/external-secrets/pull/5999
• fix(charts): truncate component names to stay within 63-char DNS limit by @alekc in https://github.com/external-secrets/external-secrets/pull/6428
• docs(gitops-fluxcd): fix webhook race condition in Flux deployment guide by @alekc in https://github.com/external-secrets/external-secrets/pull/6455
• fix: no need for the field to have a default if it can be omitted by @knelasevero in https://github.com/external-secrets/external-secrets/pull/6453
• fix(templating): preserve mixed-case in generic target paths by @alekc in https://github.com/external-secrets/external-secrets/pull/6459
• docs(generator): document Password secretKeys for multiple keys by @alekc in https://github.com/external-secrets/external-secrets/pull/6440
• docs: Update deprecated field in docs by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/6456
• chore(deps): Bump passbolt SDK to v0.8.0 by @cedricherzog-passbolt in https://github.com/external-secrets/external-secrets/pull/6447
• chore(charts): Expose storeRequeueInterval in helm charts by @jfhcagip in https://github.com/external-secrets/external-secrets/pull/6140
• feat(openbao): support custom CAs via caBundle and caProvider by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6461
• feat(ngrok): use API filtering for vault and secret lookups by @jonstacks in https://github.com/external-secrets/external-secrets/pull/6376
• fix: remove broken link from blog section by @riccardomc in https://github.com/external-secrets/external-secrets/pull/6465
• chore: fix the template parser for resolving slice notations by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6449
• fix: bump docs deps for python3.13 by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/6475
• fix(kubernetes): replace entire remote secret when pushing rather than merging by @riccardomc in https://github.com/external-secrets/external-secrets/pull/6485
• feat(infisical): return NoSecretErr on 404 and add PushSecret support by @alekc in https://github.com/external-secrets/external-secrets/pull/6434
• feat(AWS): add replicationLocations to AWS SecretsManager provider by @cmoscofian in https://github.com/external-secrets/external-secrets/pull/6451
• feat(openbao): add auth.userPass auth method by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6492
• chore(deps): Bump github.com/pulumi/esc-sdk/sdk to v0.14.0 by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6495
• chore(onepasswordsdk): fix the caching logic and cleanup the code a bit by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6466
• feat(charts): scope cert-controller RBAC to managed CRDs and webhook secret by @somaz94 in https://github.com/external-secrets/external-secrets/pull/6481
• test(ngrok): Remove over complicated mocks by @jonstacks in https://github.com/external-secrets/external-secrets/pull/6483
• chore: Unpin mike by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/6477
• docs(akeyless): fix errors and expand provider documentation by @alekc in https://github.com/external-secrets/external-secrets/pull/6506
• chore: update go sys net and crypto libs by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6511
• chore(onepasswordsdk): enable the GetAllSecrets and GetSecret unit test and fix it by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6513
• feat(infisical): allow organization slug to be set in secret scope by @mathnogueira in https://github.com/external-secrets/external-secrets/pull/6508
• feat(templating): decode templateFrom values by @evrardj-roche in https://github.com/external-secrets/external-secrets/pull/6482
• chore(bug): fix missing lgtm runner script from the workflow by @Skarlso in https://github.com/external-secrets/external-secrets/pull/6512
• fix(akeyless): return ReadWrite so PushSecret is routed by @alekc in https://github.com/external-secrets/external-secrets/pull/6515
• feat(openbao): add auth.appRole auth method by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6497
• feat(externalsecret): add SyncWindows to gate periodic refresh by @alekc in https://github.com/external-secrets/external-secrets/pull/6452
• docs(azure): correct Azure Stack example version and note expiry limit by @alekc in https://github.com/external-secrets/external-secrets/pull/6522
• feat(openbao): add support for OpenBao Namespaces by @phil9909 in https://github.com/external-secrets/external-secrets/pull/6527
• fix(github): preserve selected repositories on org secret update by @alekc in https://github.com/external-secrets/external-secrets/pull/6519
• docs(azure): list WorkloadIdentity in authType field description by @alekc in https://github.com/external-secrets/external-secrets/pull/6523
• feat(doppler): include HTTP status in API errors by @alekc in https://github.com/external-secrets/external-secrets/pull/6489

Dependencies

• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6437
• chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6438
• chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6435
• chore(deps): bump idna from 3.17 to 3.18 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6439
• chore(deps): bump ubi9/ubi from 8942b73 to 46d19c1 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6436
• chore(deps): bump platformdirs from 4.9.6 to 4.10.0 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6410
• chore(deps): bump golang from f23e8b2 to 7a3e500 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6468
• chore(deps): bump golang from 5d2b868 to 5f68ec6 in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6471
• chore(deps): bump tornado from 6.5.6 to 6.5.7 in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6473
• chore(deps): bump alpine from 3.23.4 to 3.24.0 in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6470
• chore(deps): bump alpine from 5b10f43 to a2d49ea by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6469
• chore(deps): bump ubi9/ubi from 46d19c1 to 1b99266 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6467
• chore(deps): bump alpine from a2d49ea to 28bd5fe in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6472
• chore(deps): bump alpine from 3.24.0 to 3.24.1 in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6498
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6500
• chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6502
• chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6503
• chore(deps): bump alpine from a2d49ea to 28bd5fe by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6499
• chore(deps): bump golang from 7a3e500 to 3ad5730 by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/6501

New Contributors

• @tstenner made their first contribution in https://github.com/external-secrets/external-secrets/pull/6422
• @ruslan-rm made their first contribution in https://github.com/external-secrets/external-secrets/pull/6423
• @calebmckay made their first contribution in https://github.com/external-secrets/external-secrets/pull/6445
• @sdahal-bt made their first contribution in https://github.com/external-secrets/external-secrets/pull/5999
• @jfhcagip made their first contribution in https://github.com/external-secrets/external-secrets/pull/6140
• @somaz94 made their first contribution in https://github.com/external-secrets/external-secrets/pull/6481
• @mathnogueira made their first contribution in https://github.com/external-secrets/external-secrets/pull/6508

Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.6.0...v2.7.0