feat(helm): update external-secrets ( 0.9.20 → 0.10.0 ) (#5157)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[external-secrets](https://togithub.com/external-secrets/external-secrets)
| minor | `0.9.20` -> `0.10.0` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

###
[`v0.10.0`](https://togithub.com/external-secrets/external-secrets/releases/tag/v0.10.0)

[Compare
Source](https://togithub.com/external-secrets/external-secrets/compare/v0.9.20...v0.10.0)

:warning: :red-alert:  BREAKING CHANGE :red-alert:  :warning:

-   Webhook Generator
Webhook generator labels have changed from
`generators.external-secrets.io/type: webhook` to
`external-secrets.io/type: webhook`.

-   Webhook Provider
Webhook provider now can only use secrets that are labeled with
`external-secrets.io/type: webhook`. This enforces explicit setup for
webhook secrets by users.

##### Fixing the issue:

add the label for the secret used by the webhook:

    apiVersion: v1
    kind: Secret
    metadata:
      name: your-secret
      labels:
        external-secrets.io/type: webhook ### <<<<<<<<<<<<< ADD THIS
    data:
    ...

Image: `ghcr.io/external-secrets/external-secrets:v0.10.0`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v0.10.0-ubi-boringssl`

#### What's Changed

- chore: bump to 0.9.20 by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3660](https://togithub.com/external-secrets/external-secrets/pull/3660)
- chore(deps): bump golang from 1.22.4 to 1.22.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3662](https://togithub.com/external-secrets/external-secrets/pull/3662)
- chore(deps): bump distroless/static from `4197211` to `ce46866` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3663](https://togithub.com/external-secrets/external-secrets/pull/3663)
- chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3665](https://togithub.com/external-secrets/external-secrets/pull/3665)
- chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3666](https://togithub.com/external-secrets/external-secrets/pull/3666)
- chore(deps): bump mkdocs-material from 9.5.27 to 9.5.28 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3667](https://togithub.com/external-secrets/external-secrets/pull/3667)
- chore(deps): bump certifi from 2024.6.2 to 2024.7.4 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3668](https://togithub.com/external-secrets/external-secrets/pull/3668)
- chore(deps): bump golang from 1.22.4-bookworm to 1.22.5-bookworm in
/e2e by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3669](https://togithub.com/external-secrets/external-secrets/pull/3669)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3670](https://togithub.com/external-secrets/external-secrets/pull/3670)
- sets eso-service-account for creating e2e comments by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3678](https://togithub.com/external-secrets/external-secrets/pull/3678)
- use github token for the actions check by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3679](https://togithub.com/external-secrets/external-secrets/pull/3679)
- Add support for Delinea Secret Server by
[@&#8203;pacificcode](https://togithub.com/pacificcode) in
[https://github.com/external-secrets/external-secrets/pull/3468](https://togithub.com/external-secrets/external-secrets/pull/3468)
- Fix: Only URL encode data being passed to URLs
([#&#8203;3652](https://togithub.com/external-secrets/external-secrets/issues/3652))
by [@&#8203;ryanmeans](https://togithub.com/ryanmeans) in
[https://github.com/external-secrets/external-secrets/pull/3674](https://togithub.com/external-secrets/external-secrets/pull/3674)
- Commenting secrets manifest from hashicorp vault integration
[#&#8203;3661](https://togithub.com/external-secrets/external-secrets/issues/3661)
by [@&#8203;jeffmachado](https://togithub.com/jeffmachado) in
[https://github.com/external-secrets/external-secrets/pull/3680](https://togithub.com/external-secrets/external-secrets/pull/3680)
- docs: Fix `namespaceRegexes` in full-cluster-secret-store.yaml by
[@&#8203;excalq](https://togithub.com/excalq) in
[https://github.com/external-secrets/external-secrets/pull/3681](https://togithub.com/external-secrets/external-secrets/pull/3681)
- Support for Oracle PushSecret.property
[#&#8203;2911](https://togithub.com/external-secrets/external-secrets/issues/2911)
by [@&#8203;Aeyk](https://togithub.com/Aeyk) in
[https://github.com/external-secrets/external-secrets/pull/3577](https://togithub.com/external-secrets/external-secrets/pull/3577)
- support for adding headers in vault provider by
[@&#8203;abhinav1708](https://togithub.com/abhinav1708) in
[https://github.com/external-secrets/external-secrets/pull/3677](https://togithub.com/external-secrets/external-secrets/pull/3677)
- chore(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3688](https://togithub.com/external-secrets/external-secrets/pull/3688)
- chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3691](https://togithub.com/external-secrets/external-secrets/pull/3691)
- chore(deps): bump actions/setup-python from 5.1.0 to 5.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3690](https://togithub.com/external-secrets/external-secrets/pull/3690)
- chore(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3689](https://togithub.com/external-secrets/external-secrets/pull/3689)
- chore(deps): bump golang from `8c9183f` to `8c9183f` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3687](https://togithub.com/external-secrets/external-secrets/pull/3687)
- chore(deps): bump mkdocs-material from 9.5.28 to 9.5.29 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3692](https://togithub.com/external-secrets/external-secrets/pull/3692)
- fix: aws secretmanager's SecretExists returns true for non-existent
secrets by [@&#8203;mintbomb27](https://togithub.com/mintbomb27) in
[https://github.com/external-secrets/external-secrets/pull/3684](https://togithub.com/external-secrets/external-secrets/pull/3684)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3693](https://togithub.com/external-secrets/external-secrets/pull/3693)
- Added 2 articles I wrote on AWS secrets injection and ESO templating
by [@&#8203;alinadir44](https://togithub.com/alinadir44) in
[https://github.com/external-secrets/external-secrets/pull/3707](https://togithub.com/external-secrets/external-secrets/pull/3707)
- Update docs for namespaceSelectors usage and namespaceSelector
deprecation by [@&#8203;mtougeron](https://togithub.com/mtougeron) in
[https://github.com/external-secrets/external-secrets/pull/3695](https://togithub.com/external-secrets/external-secrets/pull/3695)
- fix: add namespace to path and route construction by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3632](https://togithub.com/external-secrets/external-secrets/pull/3632)
- chore(deps): bump softprops/action-gh-release from 2.0.6 to 2.0.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3708](https://togithub.com/external-secrets/external-secrets/pull/3708)
- chore(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3709](https://togithub.com/external-secrets/external-secrets/pull/3709)
- Update bitwarden-secrets-manager.md by
[@&#8203;zazathomas](https://togithub.com/zazathomas) in
[https://github.com/external-secrets/external-secrets/pull/3710](https://togithub.com/external-secrets/external-secrets/pull/3710)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3711](https://togithub.com/external-secrets/external-secrets/pull/3711)
- feat: add `PushSecret` support for Pulumi ESC by
[@&#8203;dirien](https://togithub.com/dirien) in
[https://github.com/external-secrets/external-secrets/pull/3597](https://togithub.com/external-secrets/external-secrets/pull/3597)
- remove redundant parameter grab call, we already have the data by
[@&#8203;rumenvasilev](https://togithub.com/rumenvasilev) in
[https://github.com/external-secrets/external-secrets/pull/3722](https://togithub.com/external-secrets/external-secrets/pull/3722)
- chore(deps): bump docker/login-action from 3.2.0 to 3.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3729](https://togithub.com/external-secrets/external-secrets/pull/3729)
- chore(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3727](https://togithub.com/external-secrets/external-secrets/pull/3727)
- chore(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3728](https://togithub.com/external-secrets/external-secrets/pull/3728)
- chore(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3731](https://togithub.com/external-secrets/external-secrets/pull/3731)
- chore(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3730](https://togithub.com/external-secrets/external-secrets/pull/3730)
- chore(deps): bump alpine from `77726ef` to `0a4eaa0` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3733](https://togithub.com/external-secrets/external-secrets/pull/3733)
- chore(deps): bump golang from `8c9183f` to `0d3653d` by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3732](https://togithub.com/external-secrets/external-secrets/pull/3732)
- feat: increase verbosity of error message during validation by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3742](https://togithub.com/external-secrets/external-secrets/pull/3742)
- chore(deps): bump golang from `6c27802` to `af9b40f` in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3734](https://togithub.com/external-secrets/external-secrets/pull/3734)
- chore(deps): bump alpine from 3.20.1 to 3.20.2 in /e2e by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3735](https://togithub.com/external-secrets/external-secrets/pull/3735)
- chore(deps): bump alpine from `b89d9c9` to `0a4eaa0` in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3736](https://togithub.com/external-secrets/external-secrets/pull/3736)
- chore(deps): bump regex from 2024.5.15 to 2024.7.24 in /hack/api-docs
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/external-secrets/external-secrets/pull/3737](https://togithub.com/external-secrets/external-secrets/pull/3737)
- chore(deps): bump mkdocs-material from 9.5.29 to 9.5.30 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3738](https://togithub.com/external-secrets/external-secrets/pull/3738)
- chore(deps): bump importlib-metadata from 8.0.0 to 8.2.0 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3739](https://togithub.com/external-secrets/external-secrets/pull/3739)
- chore(deps): bump pymdown-extensions from 10.8.1 to 10.9 in
/hack/api-docs by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[https://github.com/external-secrets/external-secrets/pull/3740](https://togithub.com/external-secrets/external-secrets/pull/3740)
- docs: Remove references to pemCertificate and pemPrivateKey functions
by [@&#8203;trenslow](https://togithub.com/trenslow) in
[https://github.com/external-secrets/external-secrets/pull/3744](https://togithub.com/external-secrets/external-secrets/pull/3744)
- chore: update dependencies by
[@&#8203;eso-service-account-app](https://togithub.com/eso-service-account-app)
in
[https://github.com/external-secrets/external-secrets/pull/3741](https://togithub.com/external-secrets/external-secrets/pull/3741)
- docs: Improvements in the ExternalSecret comments in API section by
[@&#8203;c-neto](https://togithub.com/c-neto) in
[https://github.com/external-secrets/external-secrets/pull/3725](https://togithub.com/external-secrets/external-secrets/pull/3725)
- feat: add prefix definition to all secret keys for aws parameter store
by [@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3718](https://togithub.com/external-secrets/external-secrets/pull/3718)
- feat: do not modify the secret in case of a NotModified by
[@&#8203;Skarlso](https://togithub.com/Skarlso) in
[https://github.com/external-secrets/external-secrets/pull/3746](https://togithub.com/external-secrets/external-secrets/pull/3746)
- feat: webhook secrets must be labeled by
[@&#8203;gusfcarvalho](https://togithub.com/gusfcarvalho) in
[https://github.com/external-secrets/external-secrets/pull/3753](https://togithub.com/external-secrets/external-secrets/pull/3753)
- feat: support pkcs12 with chain in pushsecret to Azure KeyVault by
[@&#8203;mysteq](https://togithub.com/mysteq) in
[https://github.com/external-secrets/external-secrets/pull/3747](https://togithub.com/external-secrets/external-secrets/pull/3747)
- docs: document fullPemToPkcs12 and fullPemToPkcs12Pass helper
functions by [@&#8203;mysteq](https://togithub.com/mysteq) in
[https://github.com/external-secrets/external-secrets/pull/3749](https://togithub.com/external-secrets/external-secrets/pull/3749)

#### New Contributors

- [@&#8203;ryanmeans](https://togithub.com/ryanmeans) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3674](https://togithub.com/external-secrets/external-secrets/pull/3674)
- [@&#8203;jeffmachado](https://togithub.com/jeffmachado) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3680](https://togithub.com/external-secrets/external-secrets/pull/3680)
- [@&#8203;excalq](https://togithub.com/excalq) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3681](https://togithub.com/external-secrets/external-secrets/pull/3681)
- [@&#8203;Aeyk](https://togithub.com/Aeyk) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3577](https://togithub.com/external-secrets/external-secrets/pull/3577)
- [@&#8203;abhinav1708](https://togithub.com/abhinav1708) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3677](https://togithub.com/external-secrets/external-secrets/pull/3677)
- [@&#8203;mintbomb27](https://togithub.com/mintbomb27) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3684](https://togithub.com/external-secrets/external-secrets/pull/3684)
- [@&#8203;alinadir44](https://togithub.com/alinadir44) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3707](https://togithub.com/external-secrets/external-secrets/pull/3707)
- [@&#8203;mtougeron](https://togithub.com/mtougeron) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3695](https://togithub.com/external-secrets/external-secrets/pull/3695)
- [@&#8203;zazathomas](https://togithub.com/zazathomas) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3710](https://togithub.com/external-secrets/external-secrets/pull/3710)
- [@&#8203;rumenvasilev](https://togithub.com/rumenvasilev) made their
first contribution in
[https://github.com/external-secrets/external-secrets/pull/3722](https://togithub.com/external-secrets/external-secrets/pull/3722)
- [@&#8203;trenslow](https://togithub.com/trenslow) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3744](https://togithub.com/external-secrets/external-secrets/pull/3744)
- [@&#8203;c-neto](https://togithub.com/c-neto) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3725](https://togithub.com/external-secrets/external-secrets/pull/3725)
- [@&#8203;mysteq](https://togithub.com/mysteq) made their first
contribution in
[https://github.com/external-secrets/external-secrets/pull/3747](https://togithub.com/external-secrets/external-secrets/pull/3747)

**Full Changelog**:
external-secrets/external-secrets@v0.9.20...v0.10.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xOC45IiwidXBkYXRlZEluVmVyIjoiMzguMTguMTIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlL2hlbG0iLCJ0eXBlL21pbm9yIl19-->

Co-authored-by: lumiere-bot[bot] <98047013+lumiere-bot[bot]@users.noreply.github.com>

kubernetes/kyak/apps/external-secrets-system/external-secrets/app/helmrelease.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: external-secrets
-      version: 0.9.20
+      version: 0.10.0
       sourceRef:
         kind: HelmRepository
         name: external-secrets