chore(deps): update umbrella chart dependency updates

[renovate]

This PR contains the following updates:

Package	Update	Change
cert-manager (source)	patch	v1.19.2 → v1.19.3
external-secrets	patch	1.3.1 → 1.3.2

---

Release Notes

cert-manager/cert-manager (cert-manager)

v1.19.3

Compare Source

external-secrets/external-secrets (external-secrets)

v1.3.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v1.3.2
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v1.3.2-ubi-boringssl

What's Changed

General

• chore: release helm chart for v1.3.1 by @​Skarlso in #​5860
• chore(chart): Add missing tests for readinessProbe by @​jcpunk in #​5769
• docs: Update FluxCD example by @​umizoom in #​5862
• fix(ci): Removed the unused check for Windows in Makefile by @​HauptJ in #​5870
• docs(release): Add actual dates for EOL of 1.x releases in stability and support page by @​n4zukker in #​5889
• docs: Passbolt provider maintenance ownership by @​stripthis in #​5886
• chore: Update Passbolt MaintenanceStatus to MaintenanceStatusMaintained by @​stripthis in #​5887
• fix(security): sanitize json.Unmarshal errors to prevent secret data … by @​moolen in #​5884
• fix: webhook initialization order by @​gusfcarvalho in #​5901
• chore: Cleanup flags by @​evrardj-roche in #​5845
• fix: onepasswordsdk shared tenant by altering the provider in the client cache by @​Skarlso in #​5921

Dependencies

• chore(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @​dependabot[bot] in #​5873
• chore(deps): bump pymdown-extensions from 10.20 to 10.20.1 in /hack/api-docs by @​dependabot[bot] in #​5877
• chore(deps): bump markdown from 3.10 to 3.10.1 in /hack/api-docs by @​dependabot[bot] in #​5880
• chore(deps): bump ubi9/ubi from 22e9573 to 1f84f5c by @​dependabot[bot] in #​5871
• chore(deps): bump actions/setup-python from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​5872
• chore(deps): bump hashicorp/setup-terraform from 93d5a27 to dcc3150 by @​dependabot[bot] in #​5875
• chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​5876
• chore(deps): bump step-security/harden-runner from 2.14.0 to 2.14.1 by @​dependabot[bot] in #​5878
• chore(deps): bump anchore/sbom-action from 0.21.1 to 0.22.0 by @​dependabot[bot] in #​5874
• chore(deps): bump packaging from 25.0 to 26.0 in /hack/api-docs by @​dependabot[bot] in #​5879
• chore(deps): bump golang from d9b2e14 to 98e6cff by @​dependabot[bot] in #​5907
• chore(deps): bump alpine from 865b95f to 2510918 in /hack/api-docs by @​dependabot[bot] in #​5914
• chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in #​5909
• chore(deps): bump actions/cache from 5.0.2 to 5.0.3 by @​dependabot[bot] in #​5912
• chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @​dependabot[bot] in #​5910
• chore(deps): bump hashicorp/setup-terraform from dcc3150 to ce70bcf by @​dependabot[bot] in #​5911
• chore(deps): bump ubi9/ubi from 1f84f5c to c8df11b by @​dependabot[bot] in #​5908
• chore(deps): bump alpine from 3.23.2 to 3.23.3 in /e2e by @​dependabot[bot] in #​5915
• chore(deps): bump alpine from 865b95f to 2510918 by @​dependabot[bot] in #​5906
• chore(deps): bump pathspec from 1.0.3 to 1.0.4 in /hack/api-docs by @​dependabot[bot] in #​5916
• chore(deps): bump babel from 2.17.0 to 2.18.0 in /hack/api-docs by @​dependabot[bot] in #​5917
• chore(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @​dependabot[bot] in #​5913

New Contributors

• @​umizoom made their first contribution in #​5862
• @​HauptJ made their first contribution in #​5870
• @​n4zukker made their first contribution in #​5889
• @​stripthis made their first contribution in #​5886

Full Changelog: external-secrets/external-secrets@v1.3.1...v1.3.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.