Update Helm release external-secrets to v0.20.3 (promote #1186 to master)

[mergify]

This PR contains the following updates:

Package	Type	Update	Change
external-secrets	fleet	patch	0.20.2 -> 0.20.3

---

Release Notes

external-secrets/external-secrets (external-secrets)

v0.20.3

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.20.3
Image: ghcr.io/external-secrets/external-secrets:v0.20.3-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.20.3-ubi-boringssl

What's Changed

General

• chore: release helm chart for v0.20.2 by @​Skarlso in #​5403
• fix(ci): Remove PAUL by @​evrardjp in #​5406
• docs: add note on Vault 1.21 audience requirement for roles by @​AddRain1 in #​5411
• docs: extend bitwarden example and integration to accomodate the ssh key feature by @​luilegeant in #​5414
• chore: update dependencies by @​eso-service-account-app[bot] in #​5427
• docs(getting-started): Change apply to use File (-f) instead of Kustomize (-k) by @​smellems in #​5433
• docs(release): Resolve incorrect references in documentation samples by @​blast-hardcheese in #​5431
• docs: Update scaleway json doc by @​RobinFrcd in #​5429
• chore(previder): Update Previder Provider dependency and fix ReadOnly token by @​gkwmiddelkamp in #​5327
• chore(linter): fix revive linter issues in pkg by @​Lumexralph in #​5412
• chore: move to new GCP account, temporarily disable delinea by @​moolen in #​5438
• chore(actions): always run helm test and update make check-diff by @​Skarlso in #​5440
• fix: make port in the schema file either a string of an integer by @​Skarlso in #​5439
• fix: use maps.Equal instead of bytes.Compare for JSON value by @​Skarlso in #​5448
• chore(docs): update refresh interval format by @​Skarlso in #​5447
• chore(docs): update ADOPTERS.md to include Criteo by @​alikhil in #​5446

Dependencies

• chore(deps): bump softprops/action-gh-release from 2.3.3 to 2.3.4 by @​dependabot[bot] in #​5417
• chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 by @​dependabot[bot] in #​5420
• chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @​dependabot[bot] in #​5418
• chore(deps): bump golang from 6ad9415 to c423747 in /e2e by @​dependabot[bot] in #​5423
• chore(deps): bump mkdocs-material from 9.6.20 to 9.6.21 in /hack/api-docs by @​dependabot[bot] in #​5425
• chore(deps): bump certifi from 2025.8.3 to 2025.10.5 in /hack/api-docs by @​dependabot[bot] in #​5424
• chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @​dependabot[bot] in #​5422
• chore(deps): bump actions/stale from 10.0.0 to 10.1.0 by @​dependabot[bot] in #​5416
• chore(deps): bump peter-evans/create-or-update-comment from 4.0.0 to 5.0.0 by @​dependabot[bot] in #​5421
• chore(deps): bump golang from b6ed3fd to b6ed3fd by @​dependabot[bot] in #​5419

New Contributors

• @​AddRain1 made their first contribution in #​5411
• @​luilegeant made their first contribution in #​5414
• @​smellems made their first contribution in #​5433
• @​blast-hardcheese made their first contribution in #​5431
• @​RobinFrcd made their first contribution in #​5429
• @​alikhil made their first contribution in #​5446

Full Changelog: external-secrets/external-secrets@v0.20.2...v0.20.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

This is an automatic backport of pull request #1186 done by [Mergify](https://mergify.com).