Update Helm release external-secrets to v0.14.2 (integration)

[govuk-ci]

This PR contains the following updates:

Package	Update	Change
external-secrets	minor	0.13.0 -> 0.14.2

---

Release Notes

external-secrets/external-secrets (external-secrets)

v0.14.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.14.2
Image: ghcr.io/external-secrets/external-secrets:v0.14.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.14.2-ubi-boringssl

What's Changed

• chore: release v0.14.1 helm by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4401
• fix: skip injecting service and cert if conversion is disabled by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4362
• feat: add crd compliance tests by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4390
• feat: add PushSecret ability to the webhook provider by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4360
• docs: fix typo in the AWS Secrets manager provider docs by @​robertmarsal in https://github.com/external-secrets/external-secrets/pull/4403
• feat(chart): add support for revisionHistoryLimit on the cert by @​knechtionscoding in https://github.com/external-secrets/external-secrets/pull/4292
• fix: add push secret refreshInterval defaulting by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4404
• fix: Improved error message for unsupported secret store kind by @​peterswica in https://github.com/external-secrets/external-secrets/pull/4398
• chore(deps): bump golang from 1.23.5-bookworm to 1.23.6-bookworm in /e2e by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4414
• chore(deps): bump golang from 1.23.5 to 1.23.6 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4407
• chore(deps): bump mkdocs-material from 9.6.1 to 9.6.3 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4408
• chore(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4409
• chore(deps): bump docker/setup-qemu-action from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4410
• chore(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4411
• chore(deps): bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4412
• chore(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.1 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4413
• Add more flexibility to webhook service by @​ksangers in https://github.com/external-secrets/external-secrets/pull/4402
• kubernetes provider documentation - Added section explaining how to create shared secret without cluster wide access by @​renepupil in https://github.com/external-secrets/external-secrets/pull/4418
• doc: enhance best practices for cluster-wide resources reconciliation by @​ionicsolutions in https://github.com/external-secrets/external-secrets/pull/4423
• fix: ignore NoSecretErr in generator state by @​moolen in https://github.com/external-secrets/external-secrets/pull/4422
• chore: update go version to 1.23.6 by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4420

New Contributors

• @​robertmarsal made their first contribution in https://github.com/external-secrets/external-secrets/pull/4403
• @​knechtionscoding made their first contribution in https://github.com/external-secrets/external-secrets/pull/4292
• @​peterswica made their first contribution in https://github.com/external-secrets/external-secrets/pull/4398
• @​ksangers made their first contribution in https://github.com/external-secrets/external-secrets/pull/4402
• @​renepupil made their first contribution in https://github.com/external-secrets/external-secrets/pull/4418
• @​ionicsolutions made their first contribution in https://github.com/external-secrets/external-secrets/pull/4423

Full Changelog: external-secrets/external-secrets@v0.14.1...v0.14.2

v0.14.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.14.1
Image: ghcr.io/external-secrets/external-secrets:v0.14.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.14.1-ubi-boringssl

What's Changed

• Implement SecretExists in AWS ParameterStore by @​amirahav in https://github.com/external-secrets/external-secrets/pull/4377
• fix: the esoctl tooling website was not working by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4383
• chore: release v0.14.0 helm by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4385
• docs: fix typo in templating guide by @​sboschman in https://github.com/external-secrets/external-secrets/pull/4387
• Added additional validation for a usecase where a namespace is provided for SecretStore CAprovider by @​alekc in https://github.com/external-secrets/external-secrets/pull/4359
• docs(typo): Update doc references from BitWarden to Bitwarden. by @​mimartin12 in https://github.com/external-secrets/external-secrets/pull/4388
• feat: Merging metrics and service monitor services by @​remyj38 in https://github.com/external-secrets/external-secrets/pull/4356
• feat: allow accessing original Vault response from VaultDynamicSecret by @​m1so in https://github.com/external-secrets/external-secrets/pull/4358
• fix: Fix typo that prevents the Password ClusterGenerator from working by @​edeustua in https://github.com/external-secrets/external-secrets/pull/4389

New Contributors

• @​amirahav made their first contribution in https://github.com/external-secrets/external-secrets/pull/4377
• @​mimartin12 made their first contribution in https://github.com/external-secrets/external-secrets/pull/4388
• @​remyj38 made their first contribution in https://github.com/external-secrets/external-secrets/pull/4356
• @​m1so made their first contribution in https://github.com/external-secrets/external-secrets/pull/4358
• @​edeustua made their first contribution in https://github.com/external-secrets/external-secrets/pull/4389

Full Changelog: external-secrets/external-secrets@v0.14.0...v0.14.1

v0.14.0

Compare Source

Potential Breaking Change

Stateful Generators have been introduced with:

• feat: introduce state for generator and new grafana SA generator by @​moolen in https://github.com/external-secrets/external-secrets/pull/4203.

While normally this isn't a problem, external secrets controller and push secrets controller have been changed.

If any normal operation that should work encounters a problem, please don't hesitate to open an issue. Please also include that the problem appeared after switching to this version. Thank you!

Image: ghcr.io/external-secrets/external-secrets:v0.14.0
Image: ghcr.io/external-secrets/external-secrets:v0.14.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.14.0-ubi-boringssl

What's Changed

• chore: release v0.13.0 helm by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4322
• fix: documentation and naming for render tool by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4324
• fix: security issues with esoctl release action by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4325
• sonar: ignore duplication warnings in test files by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4320
• fix: sonar ignore duplication warning in test files only by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4329
• fix: sonar configs by @​thesuperzapper in https://github.com/external-secrets/external-secrets/pull/4334
• feat: column storeType by @​brenob6 in https://github.com/external-secrets/external-secrets/pull/4337
• fix: retry failed reconciles much less aggressively by @​thesuperzapper in https://github.com/external-secrets/external-secrets/pull/4339
• chore(deps): bump pymdown-extensions from 10.14 to 10.14.1 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4341
• chore(deps): bump importlib-metadata from 8.5.0 to 8.6.1 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4342
• chore(deps): bump helm/chart-releaser-action from 1.6.0 to 1.7.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4343
• chore(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4344
• chore(deps): bump actions/stale from 9.0.0 to 9.1.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4345
• chore(deps): bump fossas/fossa-action from 1.4.0 to 1.5.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4346
• chore(deps): bump anchore/sbom-action from 0.17.9 to 0.18.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4347
• chore(deps): bump golang from 47d3375 to 47d3375 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4348
• chore: update dependencies by @​eso-service-account-app in https://github.com/external-secrets/external-secrets/pull/4350
• Adding prerequisites and a glossary to the documentation by @​CarolCoCe in https://github.com/external-secrets/external-secrets/pull/4299
• fix: security issues with esoctl release action take 2 by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4326
• Fix passbolt refreshInterval by @​cedricalfonsi in https://github.com/external-secrets/external-secrets/pull/4353
• feat: add API version parameter to BeyondTrust Provider by @​btfhernandez in https://github.com/external-secrets/external-secrets/pull/4354
• feat: introduce state for generator and new grafana SA generator by @​moolen in https://github.com/external-secrets/external-secrets/pull/4203
• doc: link to the CNCF code of conduct by @​Skarlso in https://github.com/external-secrets/external-secrets/pull/4364
• chore(deps): bump ubi8/ubi from 2e863fb to 881aaf5 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4365
• chore(deps): bump actions/attest-build-provenance from 2.1.0 to 2.2.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4366
• chore(deps): bump helm/chart-testing-action from 2.6.1 to 2.7.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4367
• chore(deps): bump codecov/codecov-action from 5.1.2 to 5.3.1 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4369
• chore(deps): bump github/codeql-action from 3.28.1 to 3.28.8 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4370
• chore(deps): bump babel from 2.16.0 to 2.17.0 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4371
• chore(deps): bump certifi from 2024.12.14 to 2025.1.31 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4372
• chore(deps): bump pymdown-extensions from 10.14.1 to 10.14.3 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4373
• chore(deps): bump mkdocs-material from 9.5.50 to 9.6.1 in /hack/api-docs by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4374
• chore(deps): bump actions/setup-python from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/external-secrets/external-secrets/pull/4368
• fix: gitlab group variable regression by @​babs in https://github.com/external-secrets/external-secrets/pull/4379

New Contributors

• @​brenob6 made their first contribution in https://github.com/external-secrets/external-secrets/pull/4337
• @​CarolCoCe made their first contribution in https://github.com/external-secrets/external-secrets/pull/4299
• @​cedricalfonsi made their first contribution in https://github.com/external-secrets/external-secrets/pull/4353
• @​babs made their first contribution in https://github.com/external-secrets/external-secrets/pull/4379

Full Changelog: external-secrets/external-secrets@v0.13.0...v0.14.0

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.