chore(deps): update helm release external-secrets to v1.3.1 (#3394)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `1.2.1` → `1.3.1` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

### [`v1.3.1`](https://github.com/external-secrets/external-secrets/releases/tag/v1.3.1)

[Compare Source](https://github.com/external-secrets/external-secrets/compare/v1.2.1...v1.3.1)

Image: `ghcr.io/external-secrets/external-secrets:v1.3.1`
Image: `ghcr.io/external-secrets/external-secrets:v1.3.1-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v1.3.1-ubi-boringssl`

<!-- Release notes generated using configuration in .github/release.yml at main -->

For a Full release please referre to <https://github.com/external-secrets/external-secrets/releases/tag/v1.3.0>. This is a fix build for the docker publish flow.

#### What's Changed

##### General

- fix: ignore the in-toto manifest when promoting the docker build by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5859](https://github.com/external-secrets/external-secrets/pull/5859)

**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v1.3.0...v1.3.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #3394
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 1.2.1
-digest: sha256:20d4fe97e96c6bd5ba958b23121d807d8154c39d58b01511b80025166713a141
-generated: "2026-01-03T23:02:15.181743082Z"
+  version: 1.3.1
+digest: sha256:3b10d4cfe0d38cba02fa79a0d7aed6611faeb68408f4ebb05099280a5f585883
+generated: "2026-01-23T20:01:34.461022413Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,7 +12,7 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 1.2.1
+    version: 1.3.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: github=external-secrets/external-secrets