chore(deps): update helm release external-secrets to v0.19.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
external-secrets	HelmChart	minor	0.18.2 -> 0.19.2

---

Release Notes

external-secrets/external-secrets (external-secrets)

v0.19.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.19.2
Image: ghcr.io/external-secrets/external-secrets:v0.19.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.19.2-ubi-boringssl

What's Changed

• chore: release helm chart for v0.19.1 by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5111
• fix: update governance by @​gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5115
• chore(deps): bump golang from 1.24.5 to 1.24.6 and helm-values-schema-json plugin to 2.2.1 by @​jakobmoellerdev in https://github.com/external-secrets/external-secrets/pull/5126
• fix: bump image digest to fix e2e tests by @​moolen in https://github.com/external-secrets/external-secrets/pull/5127
• chore(deps): bump charset-normalizer from 3.4.2 to 3.4.3 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51255
• chore(deps): bump tornado from 6.5.1 to 6.5.2 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51244
• chore(deps): bump actions/create-github-app-token from 2.0.6 to 2.1.0 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51233
• feat(infisical): Kubernetes, AWS, and token auth methods by @​x032205 in https://github.com/external-secrets/external-secrets/pull/5080
• chore: update MAINTAINERS.md with information by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5128
• chore(deps): bump actions/cache from 4.2.3 to 4.2.4 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51222
• chore(deps): bump github/codeql-action from 3.29.7 to 3.29.8 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51200
• chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51199
• chore(deps): bump distroless/static from b7b9a69 to 2e114d2 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51188
• chore(deps): bump ubi8/ubi from a463a8e to 4f0a4e4 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51166
• fix: select secretstores in same ns as pushsecret by @​gracedo in https://github.com/external-secrets/external-secrets/pull/5109
• fix: scope secret list call to the namespace the push secret was created by @​moolen in https://github.com/external-secrets/external-secrets/pull/5133
• fix: bump support table by @​moolen in https://github.com/external-secrets/external-secrets/pull/5135

New Contributors

• @​x032205 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5080
• @​gracedo made their first contribution in https://github.com/external-secrets/external-secrets/pull/5109

Full Changelog: external-secrets/external-secrets@v0.19.1...v0.19.2

v0.19.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.19.1
Image: ghcr.io/external-secrets/external-secrets:v0.19.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.19.1-ubi-boringssl

What's Changed

• chore: release helm chart for v0.19.0 by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5093
• chore: remove ubi note by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5094
• chore(deps): bump pymdown-extensions from 10.16 to 10.16.1 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/51000
• chore(deps): bump ubi8/ubi from a910ffa to a463a8e by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50999
• chore(deps): bump certifi from 2025.7.14 to 2025.8.3 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50977
• chore(deps): bump regex from 2024.11.6 to 2025.7.34 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50966
• Fail helm install if ClusterPushSecrets processing is enabled but PushSecrets processing is disabled. by @​tspearconquest in https://github.com/external-secrets/external-secrets/pull/4896
• fix: use server-side apply for CRD installation in Makefile by @​alekc in https://github.com/external-secrets/external-secrets/pull/5103
• deployment strategy support by @​jjacobs-poa in https://github.com/external-secrets/external-secrets/pull/5091
• feat: migration from endpoint to endpointslice by @​xvirgov in https://github.com/external-secrets/external-secrets/pull/5008
• feat(helm) Just use named port for webhook by @​jcpunk in https://github.com/external-secrets/external-secrets/pull/5108
• add support for overriding name of PDB by @​megashby in https://github.com/external-secrets/external-secrets/pull/5090
• fix: do not run ApplyTemplate for immutable secrets in mutationFunc by @​jakobmoellerdev in https://github.com/external-secrets/external-secrets/pull/5110

New Contributors

• @​tspearconquest made their first contribution in https://github.com/external-secrets/external-secrets/pull/4896
• @​jjacobs-poa made their first contribution in https://github.com/external-secrets/external-secrets/pull/5091
• @​xvirgov made their first contribution in https://github.com/external-secrets/external-secrets/pull/5008
• @​jcpunk made their first contribution in https://github.com/external-secrets/external-secrets/pull/5108
• @​megashby made their first contribution in https://github.com/external-secrets/external-secrets/pull/5090
• @​jakobmoellerdev made their first contribution in https://github.com/external-secrets/external-secrets/pull/5110

Full Changelog: external-secrets/external-secrets@v0.19.0...v0.19.1

v0.19.0

Compare Source

BREAKING CHANGE

🔴 🔴 BREAKING CHANGE 🔴 🔴

Please note that this a breaking change because our CRDs are now too big. Meaning a simple kubectl apply or Argo's default client side apply WILL NOT WORK! You have to add --server-side to kubectl apply and in argo add:

spec:
  project: default
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
    - CreateNamespace=true
    - ServerSideApply=true

How to do it in kubectl:

kubectl apply --server-side ...

for it to correctly install the CRDs. Thank you.

Image: ghcr.io/external-secrets/external-secrets:v0.19.0
Image: ghcr.io/external-secrets/external-secrets:v0.19.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.19.0-ubi-boringssl

What's Changed

• chore: release helm chart for v0.18.2 by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4985
• chore(deps): bump golang from ee7ff13 to 10f549d in /e2e by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/49977
• chore(deps): bump golang from 68932fa to 68932fa by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50000
• chore(deps): bump mkdocs-material from 9.6.14 to 9.6.15 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/49988
• chore(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50011
• chore(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50033
• chore(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50022
• fix: do not turn original value into string on value scope by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5011
• fix: add uuid in edit and view clusterroles by @​sylvainOL in https://github.com/external-secrets/external-secrets/pull/5017
• chore: update dependencies by @​eso-service-account-app[bot] inhttps://github.com/external-secrets/external-secrets/pull/49999
• fix: template data should not be the secret Data itself by @​gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5023
• Fix: Return appropriate error in ValidateStore by @​prakash-218 in https://github.com/external-secrets/external-secrets/pull/5019
• feat(helm): allow to set init containers by @​rclsilver in https://github.com/external-secrets/external-secrets/pull/4745
• chore(deps): bump certifi from 2025.6.15 to 2025.7.14 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50322
• Fix: Remove root/buildinfo from ubi build files by @​bainsy88 in https://github.com/external-secrets/external-secrets/pull/5037
• chore(deps): bump ubi8/ubi from 19eae3d to c0b0729 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50333
• chore(deps): bump golang from 1.24.4-bookworm to 1.24.5-bookworm in /e2e by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50299
• chore(deps): bump golang from 1.24.4 to 1.24.5 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50344
• chore: update dependencies by @​eso-service-account-app[bot] inhttps://github.com/external-secrets/external-secrets/pull/50311
• Add Red Hat OpenShift in Adopters by @​KeenonLee in https://github.com/external-secrets/external-secrets/pull/5039
• fix: remove authentication option with JWT token from STSSessionToken generator by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5026
• fix: add validation constraints to ExternalSecretRewrite by @​Aakkash-Suresh in https://github.com/external-secrets/external-secrets/pull/5006
• fix: stability support matrix by @​gusfcarvalho in https://github.com/external-secrets/external-secrets/pull/5043
• docs(decoding-strategy): clarify base64 auto-detection limitations by @​orymate in https://github.com/external-secrets/external-secrets/pull/5004
• feat(infisical): auth methods by @​DanielHougaard in https://github.com/external-secrets/external-secrets/pull/5040
• chore(deps): bump alpine from 3.22.0 to 3.22.1 in /e2e by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50466
• chore(aws): parameterstore unit tests improvement by @​ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4986
• fix(helm): grafana dashboard: fix heatmaps to actually be heatmaps, not time series by @​desaintmartin in https://github.com/external-secrets/external-secrets/pull/5069
• chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50477
• chore(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50488
• chore(deps): bump golang from ddf5200 to daae04e by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50499
• chore(deps): bump alpine from 8a1f59f to 4bcff63 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50511
• chore(deps): bump alpine from 8a1f59f to 4bcff63 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50522
• chore(deps): bump mkdocs-material from 9.6.15 to 9.6.16 in /hack/api-docs by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50777
• Add SelfSubjectAccessReview as a fallback for failing SelfSubjectRulesReview by @​alvin-rw in https://github.com/external-secrets/external-secrets/pull/5025
• chore(deps): bump golang from 69adc37 to ef8c5c7 in /e2e by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50766
• chore(deps): bump ubi8/ubi from c0b0729 to 785d38c by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50755
• chore(deps): bump github/codeql-action from 3.29.2 to 3.29.4 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50722
• chore(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @​dependabot[bot] inhttps://github.com/external-secrets/external-secrets/pull/50733
• SSHKey generator by @​dex4er in https://github.com/external-secrets/external-secrets/pull/5083
• fix: restore AWS credential chain resolution for ECRAuthorizationToken generator by @​aditmeno in https://github.com/external-secrets/external-secrets/pull/5082
• fix(helm): grafana dashboard: add widget for sum of not ready secrets by @​desaintmartin in https://github.com/external-secrets/external-secrets/pull/5086
• feat(aws): secretsmanager to update/patch/delete tags by @​ivankatliarchuk in https://github.com/external-secrets/external-secrets/pull/4984
• fix: update the e2e test with the new store status value by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5089
• fix: correct usage of if in dlc and update for server side apply by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/5092

New Contributors

• @​sylvainOL made their first contribution in https://github.com/external-secrets/external-secrets/pull/5017
• @​prakash-218 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5019
• @​rclsilver made their first contribution in https://github.com/external-secrets/external-secrets/pull/4745
• @​bainsy88 made their first contribution in https://github.com/external-secrets/external-secrets/pull/5037
• @​KeenonLee made their first contribution in https://github.com/external-secrets/external-secrets/pull/5039
• @​orymate made their first contribution in https://github.com/external-secrets/external-secrets/pull/5004
• @​desaintmartin made their first contribution in https://github.com/external-secrets/external-secrets/pull/5069
• @​alvin-rw made their first contribution in https://github.com/external-secrets/external-secrets/pull/5025
• @​dex4er made their first contribution in https://github.com/external-secrets/external-secrets/pull/5083
• @​aditmeno made their first contribution in https://github.com/external-secrets/external-secrets/pull/5082

Full Changelog: external-secrets/external-secrets@v0.18.2...v0.19.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.