chore(deps): update helm release secrets-store-csi-driver to 1.5.4 #6867
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.3.1->1.5.4Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
kubernetes-sigs/secrets-store-csi-driver (secrets-store-csi-driver)
v1.5.4Compare Source
v1.5.4 - 2025-10-01
Changelog
Continuous Integration 💜
96dbbdcci: resolve azure e2e test flakes with rbac, windows vm size0071011ci: update azure scripts to use rbac for keyvault permissionsMaintenance 🔧
8d33239chore: bump version to v1.5.4 in release-1.56665902chore: bump kubectl to v1.34.1 in driver-crds321f0f4chore: update debian-base to bookworm-v1.0.6893cf34chore: update to go 1.24.7v1.5.3Compare Source
v1.5.3 - 2025-07-24
Changelog
Continuous Integration 💜
7cbb6ebci: use ubuntu-latest for gh workflowsMaintenance 🔧
f61041cchore: bump version to v1.5.3 in release-1.5a884676chore: bump golang.org/x/oauth2 from 0.7.0 to 0.27.0v1.5.2Compare Source
v1.5.2 - 2025-06-26
Changelog
Maintenance 🔧
Testing 💚
Security Fix 🛡️
Full Changelog: kubernetes-sigs/secrets-store-csi-driver@v1.5.1...v1.5.2
v1.5.1Compare Source
v1.5.1 - 2025-05-19
Changelog
Maintenance 🔧
Security Fix 🛡️
Full Changelog: kubernetes-sigs/secrets-store-csi-driver@v1.5.0...v1.5.1
v1.5.0Compare Source
v1.5.0 - 2025-04-09
Changelog
Bug Fixes 🐞
b0fdeb5fix: update sha generation logicf0e9dccfix: add unit test to show failures in current sha logicCode Refactoring 💎
9548c23refactor: cleanup unused err checkFeatures 🌈
bf7e77efeat: add build for windows ltsc2025Maintenance 🔧
a488327chore: bump kind to v0.27.0515358echore: disable trivy package testing for driver-crds924b3b8chore: bump docker golang base images to 1.23572e439chore: move tam7t to emeritus_approvers0b00da8chore: bump github/codeql-action from 3.28.0 to 3.28.8b8a1e5bchore: bump actions/setup-go from 5.2.0 to 5.3.04aad87bchore: bump golang.org/x/net from 0.28.0 to 0.33.0 in /hack/tools25d7756chore: bump gaurav-nelson/github-action-markdown-link-checkc3cb4ffchore: bump step-security/harden-runner from 2.10.2 to 2.10.3911b494chore: bump codecov/codecov-action from 5.1.1 to 5.1.2aaa4a3cchore: bump github/codeql-action from 3.26.13 to 3.28.05a8d6b5chore: bump actions/upload-artifact from 4.4.1 to 4.5.07c04af1chore: bump actions/setup-go from 5.0.2 to 5.2.0a24d2fdchore: bump golang.org/x/crypto from 0.22.0 to 0.31.05fe63f7chore: bump codecov/codecov-action from 4.5.0 to 5.1.1658a778chore: bump golang/govulncheck-action from 1.0.3 to 1.0.4041d142chore: bump to golang 1.22 builder image in dockerfilec5d2bd3chore: bump trivy to v0.57.1 to mitigate rate limit issuesf6bd4d8chore: bump step-security/harden-runner from 2.9.1 to 2.10.288d1253chore: bump actions/checkout from 4.1.7 to 4.2.144e7653chore: bump github/codeql-action from 3.26.6 to 3.26.13cb6fd1echore: bumps base imagesef8f5ebchore: bump actions/upload-artifact from 4.4.0 to 4.4.12f6e7d0chore: bump actions/upload-artifact from 4.3.6 to 4.4.092c73a0chore: bump github/codeql-action from 3.26.5 to 3.26.67710922chore: bump actions/dependency-review-action from 4.3.2 to 4.3.45e1d34fchore: bump golang/govulncheck-action from 1.0.2 to 1.0.36fe8bd5chore: bump actions/checkout from 4.1.5 to 4.1.7f09e97cchore: bump github/codeql-action from 3.25.8 to 3.26.5dae0961chore: bump actions/upload-artifact from 4.3.1 to 4.3.65e3935bchore: bump step-security/harden-runner from 2.6.1 to 2.9.10a0ed48chore: bump kind version and k8s version in test matrix36c6a8dchore: bump livenessprobe to v2.13.1c807dcachore: bump node-driver-registrar to v2.11.10c90683chore: bump ossf/scorecard-action from 2.3.1 to 2.4.009e9b3bchore: bump actions/setup-go from 4.0.1 to 5.0.20363edechore: bump codecov/codecov-action from 4.2.0 to 4.5.0549a1dechore: bump github/codeql-action from 3.25.0 to 3.25.85672b8dchore: update debian-base to bookworm-v1.0.3c49351achore: bump actions/checkout from 4.1.4 to 4.1.5c970d0echore: bump actions/dependency-review-action from 4.2.4 to 4.3.2f43e0b6chore: bump actions/checkout from 4.1.2 to 4.1.41c2a612chore: bump kubectl to v1.29.4 in driver-crds for CVE-2023-4528822da0ccchore: bump github/codeql-action from 3.24.10 to 3.25.0c1b0d9cchore: update debian-base to bookworm-v1.0.2d3c3968chore: bump codecov/codecov-action from 3.1.5 to 4.2.03fa13adchore: bump github/codeql-action from 3.24.8 to 3.24.10dfd7ff6chore: bump actions/dependency-review-action from 4.0.0 to 4.2.48f1c32echore: bump actions/checkout from 4.1.1 to 4.1.278e1995chore: bump github/codeql-action from 3.24.3 to 3.24.8987599fchore: bump google.golang.org/grpc in /test/e2eproviderab9df20chore: update node-driver-registrar:v2.10.0, livenessprobe:v2.12.010e8b27chore: update debian-base to bookworm-v1.0.1275cf5fchore: bump github/codeql-action from 3.23.1 to 3.24.36cbaa7cchore: bump actions/upload-artifact from 4.2.0 to 4.3.1d8daac9chore: bump actions/dependency-review-action from 3.1.5 to 4.0.091e5453chore: bump codecov/codecov-action from 3.1.4 to 3.1.5b91661fchore: bump github/codeql-action from 3.23.0 to 3.23.107c7f49chore: bump actions/upload-artifact from 4.0.0 to 4.2.00af3027chore: bump k8s.io/klog/v2 from 2.100.1 to 2.120.1 in /test/e2eprovider0a5d00echore: bump actions/checkout4fefeb8chore: bump actions/dependency-review-action from 3.1.3 to 3.1.5cc87fdcchore: bump ossf/scorecard-action from 2.2.0 to 2.3.13be4d17chore: bump actions/upload-artifact from 3.1.2 to 4.0.0903314fchore: update to go 1.21.6 in dockerb5f9ce6chore: bump google.golang.org/grpc in /test/e2eproviderf3c1bb8chore: bump github/codeql-action from 2.21.5 to 3.23.00117e89chore: bump step-security/harden-runner from 2.4.0 to 2.6.1abe4833chore: bump actions/dependency-review-action from 3.0.6 to 3.1.3c4b22ebchore: update to go 1.21.4 in docker7cdb803chore: update to go 1.215a184aechore: bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 in /test/e2eprovidera3fbe36chore: bump google.golang.org/grpc from 1.49.0 to 1.56.32a6ad3cchore: bump google.golang.org/grpc in /test/e2eprovider0de7b33chore: bump golang.org/x/net from 0.10.0 to 0.17.0 in /hack/tools41c8819chore: bump golang.org/x/net from 0.8.0 to 0.17.07cf7be9chore: bump golang.org/x/net from 0.8.0 to 0.17.0 in /test/e2eprovider9743144chore: bump actions/checkout from 3.5.3 to 4.0.0a4aa61dchore: bump github/codeql-action from 2.21.2 to 2.21.5dca6d3fchore: cleanup secretproviderclass statusda9fd72chore: bump github/codeql-action from 2.21.0 to 2.21.21b10489chore: bump k8s.io/code-generator from 0.27.3 to 0.27.4 in /hack/tools663d733chore: bump github/codeql-action from 2.20.4 to 2.21.0a4aea02chore: bump sigs.k8s.io/controller-tools in /hack/toolsdb8c839chore: bump github/codeql-action from 2.20.3 to 2.20.414952e6chore: bump github/codeql-action from 2.20.1 to 2.20.32403169chore: update debian-base to bookworm-v1.0.0ca06ac3chore: bump github/codeql-action from 2.20.0 to 2.20.119f5ce2chore: bump ossf/scorecard-action from 2.1.3 to 2.2.061e53b7chore: bump sigs.k8s.io/controller-tools in /hack/tools3e9a018chore: bump k8s.io/code-generator from 0.27.2 to 0.27.3 in /hack/tools47468b8chore: bump github.com/golangci/golangci-lint in /hack/tools0d6bd57chore: bump github/codeql-action from 2.3.6 to 2.20.0f87cf12chore: bump actions/dependency-review-action from 3.0.4 to 3.0.6fb2ff09chore: bump actions/checkout from 3.5.2 to 3.5.3d2ac05dchore: bump goreleaser/goreleaser-action from 4.2.0 to 4.3.049f966fchore: bump github/codeql-action from 2.3.3 to 2.3.66938b86chore: bump github.com/golangci/golangci-lint in /hack/toolsc8b330cchore: bump k8s.io/code-generator from 0.26.4 to 0.27.2 in /hack/tools6551fe2chore: bump k8s deps tov1.26.4(#1254)7b9e0f9chore: bump codecov/codecov-action from 3.1.3 to 3.1.4ceb7ec6chore: bump actions/setup-go from 4.0.0 to 4.0.17e5b5dcchore: bump golang from79ffe35to31a8f92in /test/e2eprovider73fd4ccchore: bump golang fromeaf1267to31a8f92in /docker26c8cd5chore: bump github/codeql-action from 2.3.2 to 2.3.3bc0fbbbchore: bump step-security/harden-runner from 2.3.1 to 2.4.0086c6b6chore: update node-driver-registrar:v2.8.0, livenessprobe:v2.10.0ace8c5achore: bump google.golang.org/grpc in /test/e2eprovidercb49b72chore: bump k8s.io/klog/v2 from 2.80.1 to 2.100.1 in /test/e2eproviderbeb650echore: bump golang from403f486to79ffe35in /docker7b4879fchore: bump monis.app/mlog from 0.0.2 to 0.0.4 in /test/e2eproviderca9178echore: bump golang from403f486to79ffe35in /test/e2eproviderb855553chore: bump codecov/codecov-action from 3.1.2 to 3.1.34f2eae2chore: bump github/codeql-action from 2.3.0 to 2.3.25743ab3chore: bump sigs.k8s.io/controller-tools in /hack/tools0b457dfchore: bump github/codeql-action from 2.2.12 to 2.3.00e85ac0chore: enable gocritic linter and fix errors1ef0c67chore: cleanup WritePayloads to be easier to use23b30d1chore: allow retries on pre-upgrade hook jobs7c7b3e5chore: bump actions/checkout from 3.5.0 to 3.5.2b8069f4chore: bump github/codeql-action from 2.2.11 to 2.2.12dc4bf06chore: update to go 1.208048905chore: bump trivy version to v0.39.1379a4a4chore: bump kind version to v0.18.0e582845chore: bump github/codeql-action from 2.2.9 to 2.2.117cce3bbchore: updates error messagecab63b3chore: remove unused node name in rotation reconciler957817echore: remove unused providerVolumePath code paths34afcefchore: bump actions/checkout from 3.4.0 to 3.5.076f266achore: bump github.com/golangci/golangci-lint in /hack/tools8b508b2chore: bump github/codeql-action from 2.2.7 to 2.2.9adba078chore: bump k8s.io/code-generator from 0.26.2 to 0.26.3 in /hack/toolsa556236chore: bump google.golang.org/protobuf in /hack/toolsfa40c79chore: update golangci-lint to v1.52.1ead9b01chore: bump github/codeql-action from 2.2.6 to 2.2.7b4e4c6achore: bump actions/checkout from 3.3.0 to 3.4.0f62667cchore: bump google.golang.org/protobuf in /hack/toolsba9625bchore: bump google.golang.org/protobuf in /hack/tools8d15bd1chore: bump github/codeql-action from 2.2.5 to 2.2.61367ef6chore: bump k8s.io/code-generator from 0.26.1 to 0.26.2 in /hack/tools9d23ab4chore: bump google.golang.org/grpc/cmd/protoc-gen-go-grpc in /hack/tools686b1dcchore: bump gaurav-nelson/github-action-markdown-link-checkc9e9052chore: bump github/codeql-action from 2.2.4 to 2.2.58da23b0chore: bump golang.org/x/net from 0.4.0 to 0.7.0f62048echore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /hack/tools8bf3ceachore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /test/e2eprovider37b523cchore: bump github/codeql-action from 2.2.2 to 2.2.47951913chore: use base and test image fromregistry.k8s.iobd9efb6chore: bump sigs.k8s.io/controller-tools in /hack/tools06130f8chore: bump github/codeql-action from 2.2.1 to 2.2.2bd549eachore: bump sigs.k8s.io/controller-tools in /hack/tools3042513chore: bump github/codeql-action from 2.1.39 to 2.2.1ebce4e4chore: bump goreleaser/goreleaser-action from 4.1.0 to 4.2.00a3fee2chore: bump k8s.io/code-generator from 0.26.0 to 0.26.1 in /hack/tools98ec718chore: bump github/codeql-action from 2.1.38 to 2.1.39143dc71chore: pin buildx tov0.10.6fe84ebcchore: bump github/codeql-action from 2.1.37 to 2.1.388979367chore: bump actions/checkout from 3.2.0 to 3.3.0c4229cbchore: update livenessprobe to v2.9.094fc545chore: update node-driver-registrar to v2.7.042e786echore: bump sigs.k8s.io/controller-tools in /hack/tools1b6d197chore: remove windows version 1903, 1909 and 2004 (EOL)93d0e05chore: bump goreleaser/goreleaser-action from 3.2.0 to 4.1.068c4a7achore: bump github/codeql-action from 2.1.36 to 2.1.37d2398b1chore: bump actions/checkout from 3.1.0 to 3.2.0df7c1a5chore: bump k8s.io/code-generator from 0.25.4 to 0.26.0 in /hack/toolsd772515chore: bump github/codeql-action from 2.1.35 to 2.1.367513988chore: reenable trivy scan for binary4c1a8f5chore: use kubectl v1.26.0 in driver-crdsda5a280chore: switch toregistry.k8s.io215e5c2chore: update node-driver-registrar to v2.6.24e6cc57chore: bump github/codeql-action from 2.1.32 to 2.1.35c60d93fchore: bump stefanprodan/helm-gh-pages from 1.6.0 to 1.7.06a64a91chore: bump k8s.io/code-generator from 0.25.3 to 0.25.4 in /hack/toolsc9ec363chore: bump github/codeql-action from 2.1.31 to 2.1.321111a97chore: use kubectl 1.25.4 in driver-crdsca89febchore: remove k8s.io/kubernetes dep59473a2chore: bump github/codeql-action from 2.1.29 to 2.1.318778a4cchore: update livenessprobe to v2.8.0b12d68achore: bump github/codeql-action from 2.1.28 to 2.1.292beee6fchore: bump sigs.k8s.io/controller-tools in /hack/tools4776c62chore: bump k8s.io/code-generator from 0.25.0 to 0.25.3 in /hack/tools603bb66chore: bump github.com/golangci/golangci-lint in /hack/tools358b8a3chore: bump google.golang.org/protobuf in /hack/tools75b1134chore: bump actions/checkout from 2 to 36841c6dchore: bump sigs.k8s.io/kustomize/kustomize/v4 in /hack/toolsf6021d8chore: bump goreleaser/goreleaser-action from 2.8.1 to 3.2.0d3e4260chore: addsok-to-testlabel on dependabot prs8a52d33chore: bump github.com/golangci/golangci-lint in /hack/toolsc8fc68fchore: bump stefanprodan/helm-gh-pages from 1.4.1 to 1.6.057a5cb9chore: bump gaurav-nelson/github-action-markdown-link-check762f81fchore: add dependabot.ymle3ed2f2chore: use kubectl 1.25.x in driver-crdsf938672chore: update golangci-lint to v1.49.06fda350chore: run apt update && apt upgrade -y in dockerfile0dc8c0fchore: support kubernetes v1.25.0980a539chore: remove pspf020bdfchore: update debian-base to bullseye-v1.4.25680241chore: update k8s deps to v0.24.44be2208chore: update to go 1.19e272dc9chore: update debian-base to bullseye-v1.4.1efb3274chore: update debian-base to bullseye-v1.4.027032f6chore: update boilerplate for the generated proto filesfe049c3chore: usegoogle.golang.org/protobufand regenerate protoa95f0e5chore: update kustomize to v41d264d2chore: update tools dependencies and generate manifestse0f1850chore: update kubernetes deps to v1.24.15ddc969chore: addcrds.podLabelsfor helm hook jobs (#962)d70d198chore: update debian-base to bullseye-v1.3.0a48fddechore: bumpnode-driver-registrar:v2.5.1andlivenessprobe:v2.7.068ef471chore: bump kind version to v0.13.0 to support kubernetes v1.2475d28a4chore: update pull request template1faac89chore: change default to/var/runfor providers pathe6cc3d5chore: upgrade makefile test binary versions4b09e85chore: upgrade to go 1.181ec0f8bchore: remove deprecated minimumProviderVersions in helm chartb46dfcbchore: make token requests conditional for v1.20+37f55b2chore: bumpnode-driver-registrar:v2.5.0andlivenessprobe:v2.6.0ca257a8chore: markv1alpha1api version as deprecatedae87243chore: remove old helm packages and indexccb9fa4chore: updates trivy commanda596624chore: log invalid key in errordac5381chore: update debian-base to bullseye-v1.1.0f694be2chore: bump node-driver-reegistrar image to v2.4.09750771chore: remove deprecated--filtered-watch-secretflagc78559echore: bump livenessprobe image to v2.5.02b27e0cchore: upgrade kubernetes deps6069215chore: use TARGETARCH for image build and makefile updatee1f143cchore: usecorev1as import alias instead ofv1Security Fix 🛡️
7e85471security: bump golang.org/x/net to v0.38.0 to fix CVE-2025-228720a9f6c3security: bump golang.org/x/net to v0.33.0 to fix CVE-2024-453380abfaa3security: bump golang.org/x/net to v0.23.0+ to fix GO-2024-2687b54143dsecurity: bump kubectl to v1.29.3 in driver-crds for CVE-2024-247869f4a2bbsecurity: bump golang.org/x/crypto to v0.17.0 to fix CVE-2023-48795d3a4a98security: bump kubernetes version to v1.27.0 in driver-crds369ab7bsecurity: fix CVE-2022-41717fe26e98security: fix CVE-2022-27664586ff3fsecurity: fix CVE-2022-27664e24efb7security: fix multiple CVEs0dde850security: fix CVE-2022-374342d85ba6security: fix CVE-2022-199694077a6security: fix multiple CVEs3bfd4f2security: fix CVE-2022-29526ce8133dsecurity: fix CVE-2021-42099357134security: fix CVE-2022-19960c70232security: fix CVE-2022-349036152bf1security: fix CVE-2022-206884f8b21security: fix CVE-2022-1664860c83esecurity: fix CVE-2022-129228a14d2security: fix CVE-2022-1271f4b9d0fsecurity: fix CVE-2018-25032 and update to debian-base:bullseye-v1.2.05a34967security: fix CVEsb558858security: fix CVE-2022-0778, CVE-2021-4160e6d1c8fsecurity: fix CVE-2021-3995, CVE-2021-39966462375security: fix CVE-2021-43618Testing 💚
71fdb54test: reset rotation response in mock server for upgrade tests8feeb00test: delete metrics ns in e2e for upgrade testsfd1821btest: use e2e-provider for manifest testsc99911ftest: remove target path check in fake provider server4a54858test: improve nodeserver testingca6a736test: more usage of t.TempDir()cc6f126test: replace tmpdir with t.TempDir()df67b53test: cleanup provider tests (part 1)725b77dtest: use helm upgrade --install for azure e2e86d368etest: use helm charts for azure provider0ec6250test: conditionally check token requests role and binding899d3edtest: add test for view and admin cluster role (#845)v1.4.8Compare Source
v1.4.8 - 2025-01-29
Changelog
Maintenance 🔧
848b50dchore: bump version to v1.4.8 in release-1.4Security Fix 🛡️
38e2bd2security: bump golang.org/x/net to v0.33.0 to fix CVE-2024-45338v1.4.7Compare Source
v1.4.7 - 2024-12-07
Changelog
Maintenance 🔧
9c9e8f9chore: bump version to v1.4.7 in release-1.480a2c34chore: bump to golang 1.22 builder image in dockerfiled54527dchore: bump trivy to v0.57.1 to mitigate rate limit issues7523104chore: bump kind version and k8s version in test matrix[
v1.4.6](https://redirect.github.com/kubernetes-sigs/secrets-store-csi-drConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.