fix(container): update image ghcr.io/external-secrets/charts/external-secrets ( 0.20.3 ➔ 0.20.4 )

[unsc-oni-ancilla]

This PR contains the following updates:

Package	Update	Change
ghcr.io/external-secrets/charts/external-secrets	patch	0.20.3 -> 0.20.4

---

Release Notes

external-secrets/external-secrets (ghcr.io/external-secrets/charts/external-secrets)

v0.20.4

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.20.4
Image: ghcr.io/external-secrets/external-secrets:v0.20.4-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.20.4-ubi-boringssl

What's Changed

General

• fix: re-enable secretserver e2e tests by @​moolen in #​5442
• chore: update dependencies by @​eso-service-account-app[bot] in #​5462
• chore: release helm chart for v0.20.3 by @​Skarlso in #​5467
• docs: remove jwt token authentication option from STSSessionToken generator by @​liununu in #​5468
• feat: re-implement e2e managed tests by @​moolen in #​5444
• docs: Update Segura DSM Branding by @​chellin-segura in #​5469
• ref: simplify and document transform rewrite method by @​riccardomc in #​5450
• fix: put back the expires into the github generator by @​Skarlso in #​5472
• chore(charts): remove unused values from chart by @​rkferreira in #​5334
• feat(generators): add hex generator by @​unique-jakub in #​5314
• fix: use GetClientCertificate in Vault Auth by @​shaxbee in #​5441
• feat(aws): add defining a resource policy via metadata for secretsmanager by @​Skarlso in #​5399
• fix: Webhook provider PushSecret not working by @​Skarlso in #​5445
• fix: remove the finalizer on namespace deletion by @​Skarlso in #​5473
• chore: update dependencies by @​eso-service-account-app[bot] in #​5487
• fix: missing config-file for github action scanning by @​Skarlso in #​5376
• chore(build): Update ubi Docker builds to UBI9 by @​IdanAdar in #​5465
• fix: typo in GitHub provider documentation by @​gecube in #​5493
• fix(oracle): prevent TCP connections leakage by @​adutchak in #​5491
• docs(controller-options): typo in controller-options by @​aslafy-z in #​5496
• chore(linter): fix linter issue in api and cmd package by @​Lumexralph in #​5413
• fix: remove extra json convert check by @​Skarlso in #​5501

Dependencies

• chore(deps): bump actions/dependency-review-action from 4.8.0 to 4.8.1 by @​dependabot[bot] in #​5454
• chore(deps): bump ubi8/ubi from 534c2c0 to 2f698e1 by @​dependabot[bot] in #​5452
• chore(deps): bump golang from 1.25.1 to 1.25.2 by @​dependabot[bot] in #​5456
• chore(deps): bump alpine from 4bcff63 to 4b7ce07 by @​dependabot[bot] in #​5451
• chore(deps): bump github/codeql-action from 3.30.6 to 4.30.8 by @​dependabot[bot] in #​5455
• chore(deps): bump alpine from 3.22.1 to 3.22.2 in /e2e by @​dependabot[bot] in #​5457
• chore(deps): bump golang from 1.25.1-bookworm to 1.25.2-bookworm in /e2e by @​dependabot[bot] in #​5460
• chore(deps): bump click from 8.1.8 to 8.3.0 in /hack/api-docs by @​dependabot[bot] in #​5458
• chore(deps): bump platformdirs from 4.4.0 to 4.5.0 in /hack/api-docs by @​dependabot[bot] in #​5459
• chore(deps): bump idna from 3.10 to 3.11 in /hack/api-docs by @​dependabot[bot] in #​5461
• chore(deps): bump softprops/action-gh-release from 2.3.4 to 2.4.1 by @​dependabot[bot] in #​5453
• chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 by @​dependabot[bot] in #​5481
• chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @​dependabot[bot] in #​5480
• chore(deps): bump anchore/sbom-action from 0.20.6 to 0.20.8 by @​dependabot[bot] in #​5483
• chore(deps): bump mkdocs-material from 9.6.21 to 9.6.22 in /hack/api-docs by @​dependabot[bot] in #​5485
• chore(deps): bump charset-normalizer from 3.4.3 to 3.4.4 in /hack/api-docs by @​dependabot[bot] in #​5486
• chore(deps): bump apache/skywalking-eyes from 0.7.0 to 0.8.0 by @​dependabot[bot] in #​5484
• chore(deps): bump aws-actions/configure-aws-credentials from 06083b7 to 5dc01db by @​dependabot[bot] in #​5482

New Contributors

• @​liununu made their first contribution in #​5468
• @​chellin-segura made their first contribution in #​5469
• @​unique-jakub made their first contribution in #​5314
• @​adutchak made their first contribution in #​5491

Full Changelog: external-secrets/external-secrets@v0.20.3...v0.20.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[unsc-oni-ancilla]

--- kubernetes/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets OCIRepository: external-secrets/external-secrets

+++ kubernetes/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets OCIRepository: external-secrets/external-secrets

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.20.3
+    tag: 0.20.4
   url: oci://ghcr.io/external-secrets/charts/external-secrets
 

[unsc-oni-ancilla]

--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.20.3
+        image: ghcr.io/external-secrets/external-secrets:v0.20.4
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.20.3
+        image: ghcr.io/external-secrets/external-secrets:v0.20.4
         imagePullPolicy: IfNotPresent
         args:
         - --enable-leader-election=true
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.20.3
+        image: ghcr.io/external-secrets/external-secrets:v0.20.4
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs