chore(deps): update helm release external-secrets to v2.4.0

[dmuiX]

This PR contains the following updates:

Package	Update	Change
external-secrets	minor	2.3.0 → 2.4.0

---

Release Notes

external-secrets/external-secrets (external-secrets)

v2.4.0

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v2.4.0
Image: ghcr.io/external-secrets/external-secrets:v2.4.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v2.4.0-ubi-boringssl

What's Changed

General

• chore: release helm chart for v2.3.0 by @​Skarlso in #​6204
• fix(docs): hide Scarf tracking pixel to remove page whitespace by @​ppatel1604 in #​6209
• docs: Add Grafana generator documentation by @​jaruwat-panturat in #​6227
• docs: add TLS certificate authentication example for Vault provider by @​alliasgher in #​6212
• docs(cloudsmith): Improve cloudsmith generator documentation by @​cloudsmith-iduffy in #​6232
• docs: add missing specs to GeneratorSpec example by @​jaruwat-panturat in #​6236
• feat(keeper): implement get secret by id or name by @​tiberiuv in #​6163
• chore(secretserver): update dependencies to accept new DelineaXPM/tss-sdk-go by @​DelineaSahilWankhede in #​6240
• docs(release): update documentation links from /main to /latest by @​cinpol in #​6210
• fix: CAProvider cm access by @​moolen in #​6246
• fix(chart): add failurePolicy to ClusterSecretStore webhook by @​ryanjwong in #​6247
• feat(dvls): add name support for entries by @​rbstp in #​6099
• fix(akeyless): upgrade akeyless-go-cloud-id to v0.3.7 by @​alikdolg in #​6248
• chore(deps): bump azure/setup-helm from 3.5 to 5 by @​dependabot[bot] in #​6258
• fix: do not set tags if undefined by @​Skarlso in #​6103
• fix(conjur): return error for unimplemented PushSecret and DeleteSecret by @​antonio-mazzini in #​6266
• docs: Enhance ClusterExternalSecret documentation with "fan-out" approach by @​jaruwat-panturat in #​6241
• feat: add --leader-election-id flag to support HA deployments by @​mattcarp12 in #​6148
• feat(bug): Fix CVE-2026-34165, CVE-2026-33762 and GHSA-3xc5-wrhm-f963 by @​othomann in #​6271
• feat: enhance VaultDynamicSecret GET method to support parameters from the spec by @​samm-git in #​6267
• fix: use a separate parameter for GET calls in VaultDynamicSecrets by @​Skarlso in #​6275

Dependencies

• chore(deps): bump golang from c2a1f7b to c2a1f7b by @​dependabot[bot] in #​6214
• chore(deps): bump platformdirs from 4.9.4 to 4.9.6 in /hack/api-docs by @​dependabot[bot] in #​6219
• chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @​dependabot[bot] in #​6216
• chore(deps): bump codelytv/pr-size-labeler from 1.10.3 to 1.10.4 by @​dependabot[bot] in #​6221
• chore(deps): bump ubi9/ubi from 9e6e193 to 039095f by @​dependabot[bot] in #​6213
• chore(deps): bump importlib-resources from 6.5.2 to 7.1.0 in /hack/api-docs by @​dependabot[bot] in #​6220
• chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @​dependabot[bot] in #​6215
• chore(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 by @​dependabot[bot] in #​6217
• chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​6218
• chore(deps): bump azure/setup-helm from 3.4 to 3.5 by @​dependabot[bot] in #​6222
• chore(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @​dependabot[bot] in #​6223
• chore(deps): bump golang from c2a1f7b to f853308 by @​dependabot[bot] in #​6252
• chore(deps): bump alpine from 3.23.3 to 3.23.4 in /e2e by @​dependabot[bot] in #​6261
• chore(deps): bump step-security/harden-runner from 2.17.0 to 2.19.0 by @​dependabot[bot] in #​6254
• chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @​dependabot[bot] in #​6257
• chore(deps): bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in #​6259
• chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in #​6255
• chore(deps): bump packaging from 26.0 to 26.1 in /hack/api-docs by @​dependabot[bot] in #​6263
• chore(deps): bump zipp from 3.23.0 to 3.23.1 in /hack/api-docs by @​dependabot[bot] in #​6262
• chore(deps): bump alpine from 2510918 to 5b10f43 by @​dependabot[bot] in #​6251
• chore(deps): bump ubi9/ubi from 039095f to cf13fe2 by @​dependabot[bot] in #​6253
• chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @​dependabot[bot] in #​6260
• chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​6256

New Contributors

• @​alliasgher made their first contribution in #​6212
• @​tiberiuv made their first contribution in #​6163
• @​cinpol made their first contribution in #​6210
• @​ryanjwong made their first contribution in #​6247
• @​alikdolg made their first contribution in #​6248
• @​antonio-mazzini made their first contribution in #​6266
• @​mattcarp12 made their first contribution in #​6148

Full Changelog: external-secrets/external-secrets@v2.3.0...v2.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.