feat(helm): update external-secrets ( 0.11.0 → 0.12.1 ) (#6081)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[external-secrets](https://redirect.github.com/external-secrets/external-secrets)
| minor | `0.11.0` -> `0.12.1` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.12.1`](https://redirect.github.com/external-secrets/external-secrets/releases/tag/v0.12.1)

[Compare
Source](https://redirect.github.com/external-secrets/external-secrets/compare/v0.11.0...v0.12.1)

#### RELEASE VERSION

My apologies, when creating the release, 0.12.0 failed. The branch and
tag however, have been created and I was unable to delete them. Thus,
the version has been increased to 0.12.1 after the fix and now that's
the current version. I hand updated the release notes to include
everyone into the changes.

#### BREAKING CHANGES

The following breaking changes have been introduced into this release:

- Permission update for AWS provider adding BulkFetch when getting
multiple secrets ( significant API reduce but comes with adding a
permission for bulk endpoint )
- fixed a typo for a generator in the json tag where before it was
`ecrRAuthorizationTokenSpec` with an extra R
- We standardized the GCP Secrets Manager Metadata structure for
PushSecrets ( be aware that existing manifests will stop working until
updated to the standardized version ) for more info see
[https://github.com/external-secrets/external-secrets/pull/4210](https://redirect.github.com/external-secrets/external-secrets/pull/4210)

#### Images

Image: `ghcr.io/external-secrets/external-secrets:v0.12.1`
Image: `ghcr.io/external-secrets/external-secrets:v0.12.1-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.12.1-ubi-boringssl`

#### What's Changed

- chore(deps): bump ubi8/ubi from `7287624` to `37cdac4` by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4245](https://redirect.github.com/external-secrets/external-secrets/pull/4245)
- revert: softprops update failing the release process by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/4248](https://redirect.github.com/external-secrets/external-secrets/pull/4248)
- chore: bump helm chart version v0.11.0 by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso)
[https://github.com/external-secrets/external-secrets/pull/4166](https://redirect.github.com/external-secrets/external-secrets/pull/4166)
- chore(deps): bump mkdocs-material in /hack/api-docs by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
[https://github.com/external-secrets/external-secrets/pull/4165](https://redirect.github.com/external-secrets/external-secrets/pull/4165)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://redirect.github.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/4169](https://redirect.github.com/external-secrets/external-secrets/pull/4169)
- Gc/fix clusterexternalsecret metrics by
[@&#8203;gusfcarvalho](https://redirect.github.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/4170](https://redirect.github.com/external-secrets/external-secrets/pull/4170)
- chore(deps): bump distroless/static from
[`f4a57e8`](https://redirect.github.com/external-secrets/external-secrets/commit/f4a57e8)
to
[`5c7e2b4`](https://redirect.github.com/external-secrets/external-secrets/commit/5c7e2b4)
by [@&#8203;dependabot](https://redirect.github.com/dependabot)
[https://github.com/external-secrets/external-secrets/pull/4164](https://redirect.github.com/external-secrets/external-secrets/pull/4164)
- chore: deprecate olm proposal by
[@&#8203;gusfcarvalho](https://redirect.github.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/4175](https://redirect.github.com/external-secrets/external-secrets/pull/4175)
- fix: error handling for gitlab variable fetch by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/4177](https://redirect.github.com/external-secrets/external-secrets/pull/4177)
- fix: v1 templates with metadata + always cleanup orphaned secrets by
[@&#8203;thesuperzapper](https://redirect.github.com/thesuperzapper) in
[https://github.com/external-secrets/external-secrets/pull/4174](https://redirect.github.com/external-secrets/external-secrets/pull/4174)
- fix: handle empty template engine version by
[@&#8203;thesuperzapper](https://redirect.github.com/thesuperzapper) in
[https://github.com/external-secrets/external-secrets/pull/4182](https://redirect.github.com/external-secrets/external-secrets/pull/4182)
- chore(deps): bump actions/cache from 4.1.2 to 4.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4190](https://redirect.github.com/external-secrets/external-secrets/pull/4190)
- chore(deps): bump actions/attest-build-provenance from 1.4.4 to 2.0.1
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4189](https://redirect.github.com/external-secrets/external-secrets/pull/4189)
- chore(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4188](https://redirect.github.com/external-secrets/external-secrets/pull/4188)
- update dependencies in
[https://github.com/external-secrets/external-secrets/pull/4196](https://redirect.github.com/external-secrets/external-secrets/pull/4196)
- chore(deps): bump codecov/codecov-action from 5.0.7 to 5.1.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4187](https://redirect.github.com/external-secrets/external-secrets/pull/4187)
- chore(deps): bump alpine from 3.20.3 to 3.21.0 in /e2e by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4184](https://redirect.github.com/external-secrets/external-secrets/pull/4184)
- chore(deps): bump golang from 1.23.3-bookworm to 1.23.4-bookworm by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4185](https://redirect.github.com/external-secrets/external-secrets/pull/4185)
- chore(deps): bump alpine from 3.20 to 3.21 in /hack/api-docs by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4186](https://redirect.github.com/external-secrets/external-secrets/pull/4186)
- chore(deps): bump alpine from
[`1e42bbe`](https://redirect.github.com/external-secrets/external-secrets/commit/1e42bbe)
to
[`21dc606`](https://redirect.github.com/external-secrets/external-secrets/commit/21dc606)
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4191](https://redirect.github.com/external-secrets/external-secrets/pull/4191)
- chore(deps): bump golang from 1.23.3 to 1.23.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4192](https://redirect.github.com/external-secrets/external-secrets/pull/4192)
- chore(deps): bump six from 1.16.0 to 1.17.0 in /hack/api-docs by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4193](https://redirect.github.com/external-secrets/external-secrets/pull/4193)
- chore(deps): bump mkdocs-material in /hack/api-docs by dependabot in
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/4194](https://redirect.github.com/external-secrets/external-secrets/pull/4194)

<!---->

- feat: 1password add support for tags and configurable PushSecret vault
by [@&#8203;Dariusch](https://redirect.github.com/Dariusch)
([#&#8203;4173](https://redirect.github.com/external-secrets/external-secrets/issues/4173))
- fix: ensure existing labels are retained for secrets in GCP secrets by
[@&#8203;newtondev](https://redirect.github.com/newtondev)
([#&#8203;4160](https://redirect.github.com/external-secrets/external-secrets/issues/4160))
- fix: return not found error when there is no secret for vault provider
by [@&#8203;Skarlso](https://redirect.github.com/Skarlso)
([#&#8203;4183](https://redirect.github.com/external-secrets/external-secrets/issues/4183))
- fix: error in order of function call UpdateEnvironment by
[@&#8203;dirien](https://redirect.github.com/dirien)
([#&#8203;4201](https://redirect.github.com/external-secrets/external-secrets/issues/4201))
- BREAKING: Standardize GCP Secret Manager PushSecret metadata format
and add CMEK support
[@&#8203;janlauber](https://redirect.github.com/janlauber) in
([#&#8203;4210](https://redirect.github.com/external-secrets/external-secrets/issues/4210))
- docs: add raw markdown tags to PushSecret example in Google Secrets
Manager documentation by
[@&#8203;janlauber](https://redirect.github.com/janlauber) in
([#&#8203;4213](https://redirect.github.com/external-secrets/external-secrets/issues/4213))
- Design/target custom resources by
[@&#8203;gusfcarvalho](https://redirect.github.com/gusfcarvalho)
([#&#8203;3449](https://redirect.github.com/external-secrets/external-secrets/issues/3449))
- chore(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;4215](https://redirect.github.com/external-secrets/external-secrets/issues/4215))
- chore(deps): bump actions/attest-build-provenance from 2.0.1 to 2.1.0
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
([#&#8203;4216](https://redirect.github.com/external-secrets/external-secrets/issues/4216))
- feat: update to use Batch value get instead of List and Fetch all
secrets for AWS provider by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso) in
([#&#8203;4181](https://redirect.github.com/external-secrets/external-secrets/issues/4181))
- fix: increase default QPS/Burst to 50/100 by
[@&#8203;thesuperzapper](https://redirect.github.com/thesuperzapper)
([#&#8203;4202](https://redirect.github.com/external-secrets/external-secrets/issues/4202))
- chore(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;4217](https://redirect.github.com/external-secrets/external-secrets/issues/4217))
- chore(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;4218](https://redirect.github.com/external-secrets/external-secrets/issues/4218))
- chore(deps): bump certifi from 2024.8.30 to 2024.12.14 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
- chore(deps): bump golang from
[`6c5c959`](https://redirect.github.com/external-secrets/external-secrets/commit/6c5c959)
to
[`6c5c959`](https://redirect.github.com/external-secrets/external-secrets/commit/6c5c959)
by [@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;4220](https://redirect.github.com/external-secrets/external-secrets/issues/4220))
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://redirect.github.com/eso-service-account-app)
([#&#8203;4223](https://redirect.github.com/external-secrets/external-secrets/issues/4223))
- Add AWS ECR Public authorization token support by
[@&#8203;pmcenery](https://redirect.github.com/pmcenery)
([#&#8203;4229](https://redirect.github.com/external-secrets/external-secrets/issues/4229))
- fix: typo in the ecrAuthorizationTokenSpec json tag by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso)
([#&#8203;4212](https://redirect.github.com/external-secrets/external-secrets/issues/4212))
- feat: fix a bunch of Sonar issues by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso)
([#&#8203;4208](https://redirect.github.com/external-secrets/external-secrets/issues/4208))
- fix: Dockerfile.ubi using the wrong registry by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso)
([#&#8203;4234](https://redirect.github.com/external-secrets/external-secrets/issues/4234))
- feat: add filterCertChain template helper function by
[@&#8203;sboschman](https://redirect.github.com/sboschman)
([#&#8203;3934](https://redirect.github.com/external-secrets/external-secrets/issues/3934))
- fix: SonarCloud security hotspot by
[@&#8203;Skarlso](https://redirect.github.com/Skarlso) in
([#&#8203;4235](https://redirect.github.com/external-secrets/external-secrets/issues/4235))

**Full Changelog**:
external-secrets/external-secrets@v0.11.0...v0.12.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi4zIiwidXBkYXRlZEluVmVyIjoiMzkuODIuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvaGVsbSIsInR5cGUvbWlub3IiXX0=-->

Co-authored-by: lumiere-bot[bot] <98047013+lumiere-bot[bot]@users.noreply.github.com>

kubernetes/kyak/apps/external-secrets-system/external-secrets/app/helmrelease.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: external-secrets
-      version: 0.11.0
+      version: 0.12.1
       sourceRef:
         kind: HelmRepository
         name: external-secrets