bump kopium, cargo audit bump (#152)

Signed-off-by: Daniel Guns <danbguns@gmail.com>

Author: dgunzy

Cargo.lock

@@ -110,6 +110,15 @@ spec:
                   input provider objects are used. Defaults to flattening all inputs
                   from all providers into a single list of input sets.
                 properties:
+                  includeEmptyProviders:
+                    description: |-
+                      IncludeEmptyProviders controls how input providers that export no
+                      inputs are treated. Only applies when Name is Permute. When true, if
+                      any provider has zero inputs the resulting permutation set is empty
+                      (mathematically correct Cartesian product behavior). When false or
+                      unset (default), providers with zero inputs are silently skipped and
+                      the remaining providers still permute among themselves.
+                    type: boolean
                   name:
                     description: |-
                       Name defines how the inputs are combined when multiple
@@ -132,6 +141,9 @@ spec:
                 required:
                 - name
                 type: object
+                x-kubernetes-validations:
+                - message: includeEmptyProviders only applies when name is Permute
+                  rule: '!has(self.includeEmptyProviders) || self.name == ''Permute'''
               inputs:
                 description: Inputs contains the list of ResourceSet inputs.
                 items:
@@ -310,6 +322,16 @@ spec:
                   - type
                   type: object
                 type: array
+              externalChecksumRefs:
+                description: |-
+                  ExternalChecksumRefs lists the ConfigMap and Secret references
+                  discovered in checksumFrom annotations on the last reconciliation
+                  that point to objects not rendered by this ResourceSet. Each entry
+                  has the form "Kind/namespace/name". It is used to trigger a
+                  reconciliation when one of the referenced objects changes.
+                items:
+                  type: string
+                type: array
               history:
                 description: |-
                   History contains the reconciliation history of the ResourceSet

crds/flux-operator-resourcesets.crds.yaml

@@ -925,7 +925,11 @@ spec:
               secretRef:
                 description: |-
                   SecretRef specifies the Secret containing the token used
-                  to validate the payload authenticity.
+                  to validate the payload authenticity. The Secret must contain a 'token'
+                  key. For GCR receivers, the Secret must also contain an 'email' key
+                  with the IAM service account email configured on the Pub/Sub push
+                  subscription, and may optionally contain an 'audience' key with the
+                  expected OIDC token audience.
                 properties:
                   name:
                     description: Name of the referent.

crds/notification-controller.crds.yaml

@@ -1,10 +1,10 @@
 {
-  "generated_at": "2026-03-18T21:17:45Z",
+  "generated_at": "2026-04-19T14:01:37Z",
   "flux_versions": {
-    "source-controller": "v1.8.1",
-    "kustomize-controller": "v1.8.2",
+    "source-controller": "v1.8.2",
+    "kustomize-controller": "v1.8.3",
     "helm-controller": "v1.5.3",
-    "notification-controller": "v1.8.2",
+    "notification-controller": "v1.8.3",
     "image-reflector-controller": "v1.1.1",
     "image-automation-controller": "v1.1.1",
     "source-watcher": "v2.1.1"

manifest.json

@@ -7,7 +7,7 @@ use crate::watcher::WatchableResource;
 use crate::watcher::{
     Alert, ArtifactGenerator, Bucket, ExternalArtifact, FluxInstance, FluxReport, GitRepository,
     HelmChart, HelmRelease, HelmRepository, ImagePolicy, ImageRepository, ImageUpdateAutomation,
-    Kustomization, OCIRepository, Provider, Receiver, ResourceSet, ResourceSetInputProvider,
+    Kustomization, OciRepository, Provider, Receiver, ResourceSet, ResourceSetInputProvider,
 };
 
 /// Get GroupVersionKind for a resource type
@@ -19,9 +19,9 @@ pub fn get_gvk_for_resource_type(resource_type: &str) -> Result<(String, String,
             GitRepository::plural(),
         ),
         Some(FluxResourceKind::OCIRepository) => (
-            OCIRepository::api_group(),
-            OCIRepository::api_version(),
-            OCIRepository::plural(),
+            OciRepository::api_group(),
+            OciRepository::api_version(),
+            OciRepository::plural(),
         ),
         Some(FluxResourceKind::HelmRepository) => (
             HelmRepository::api_group(),

src/kube/api.rs

@@ -4,8 +4,8 @@
 #![allow(clippy::all)]
 
 // WARNING: generated by kopium - manual changes will be overwritten
-// kopium command: kopium --filename /tmp/tmp.2Fvl7XedTH/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
-// kopium version: 0.22.5
+// kopium command: kopium --filename /var/folders/1q/psj8yk_n0xl8hzv7rzrzcv8w0000gn/T/tmp.mEFdcGHu5e/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
+// kopium version: 0.23.0
 
 #[allow(unused_imports)]
 mod prelude {
@@ -14,6 +14,7 @@ mod prelude {
     pub use serde::{Deserialize, Serialize};
     pub use std::collections::BTreeMap;
 }
+
 use self::prelude::*;
 
 /// FluxInstanceSpec defines the desired state of FluxInstance

src/models/_generated/flux_operator_fluxinstances.rs

@@ -4,8 +4,8 @@
 #![allow(clippy::all)]
 
 // WARNING: generated by kopium - manual changes will be overwritten
-// kopium command: kopium --filename /tmp/tmp.m1lEvLtQNS/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
-// kopium version: 0.22.5
+// kopium command: kopium --filename /var/folders/1q/psj8yk_n0xl8hzv7rzrzcv8w0000gn/T/tmp.qvZB6DG72D/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
+// kopium version: 0.23.0
 
 #[allow(unused_imports)]
 mod prelude {
@@ -14,6 +14,7 @@ mod prelude {
     pub use serde::{Deserialize, Serialize};
     pub use std::collections::BTreeMap;
 }
+
 use self::prelude::*;
 
 /// FluxReportSpec defines the observed state of a Flux installation.

src/models/_generated/flux_operator_fluxreports.rs

@@ -4,8 +4,8 @@
 #![allow(clippy::all)]
 
 // WARNING: generated by kopium - manual changes will be overwritten
-// kopium command: kopium --filename /tmp/tmp.PBnYA3D1Aw/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
-// kopium version: 0.22.5
+// kopium command: kopium --filename /var/folders/1q/psj8yk_n0xl8hzv7rzrzcv8w0000gn/T/tmp.jRRXv0oQTR/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
+// kopium version: 0.23.0
 
 #[allow(unused_imports)]
 mod prelude {
@@ -14,6 +14,7 @@ mod prelude {
     pub use serde::{Deserialize, Serialize};
     pub use std::collections::BTreeMap;
 }
+
 use self::prelude::*;
 
 /// ResourceSetInputProviderSpec defines the desired state of ResourceSetInputProvider

src/models/_generated/flux_operator_resourcesetinputproviders.rs

@@ -4,8 +4,8 @@
 #![allow(clippy::all)]
 
 // WARNING: generated by kopium - manual changes will be overwritten
-// kopium command: kopium --filename /tmp/tmp.QXkPWXMGqT/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
-// kopium version: 0.22.5
+// kopium command: kopium --filename /var/folders/1q/psj8yk_n0xl8hzv7rzrzcv8w0000gn/T/tmp.kUIatysCxH/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
+// kopium version: 0.23.0
 
 #[allow(unused_imports)]
 mod prelude {
@@ -14,6 +14,7 @@ mod prelude {
     pub use serde::{Deserialize, Serialize};
     pub use std::collections::BTreeMap;
 }
+
 use self::prelude::*;
 
 /// ResourceSetSpec defines the desired state of ResourceSet
@@ -133,6 +134,18 @@ pub struct ResourceSetDependsOn {
 /// from all providers into a single list of input sets.
 #[derive(Serialize, Deserialize, Clone, Debug, PartialEq)]
 pub struct ResourceSetInputStrategy {
+    /// IncludeEmptyProviders controls how input providers that export no
+    /// inputs are treated. Only applies when Name is Permute. When true, if
+    /// any provider has zero inputs the resulting permutation set is empty
+    /// (mathematically correct Cartesian product behavior). When false or
+    /// unset (default), providers with zero inputs are silently skipped and
+    /// the remaining providers still permute among themselves.
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "includeEmptyProviders"
+    )]
+    pub include_empty_providers: Option<bool>,
     /// Name defines how the inputs are combined when multiple
     /// input provider objects are used. Supported values are:
     /// - Flatten: all inputs sets from all input provider objects are
@@ -243,6 +256,17 @@ pub struct ResourceSetStatus {
     /// Conditions contains the readiness conditions of the object.
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub conditions: Option<Vec<Condition>>,
+    /// ExternalChecksumRefs lists the ConfigMap and Secret references
+    /// discovered in checksumFrom annotations on the last reconciliation
+    /// that point to objects not rendered by this ResourceSet. Each entry
+    /// has the form "Kind/namespace/name". It is used to trigger a
+    /// reconciliation when one of the referenced objects changes.
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "externalChecksumRefs"
+    )]
+    pub external_checksum_refs: Option<Vec<String>>,
     /// History contains the reconciliation history of the ResourceSet
     /// as a list of snapshots ordered by the last reconciled time.
     #[serde(default, skip_serializing_if = "Option::is_none")]

src/models/_generated/flux_operator_resourcesets.rs

@@ -4,8 +4,8 @@
 #![allow(clippy::all)]
 
 // WARNING: generated by kopium - manual changes will be overwritten
-// kopium command: kopium --filename /tmp/tmp.39BHcZMzvV/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
-// kopium version: 0.22.5
+// kopium command: kopium --filename /var/folders/1q/psj8yk_n0xl8hzv7rzrzcv8w0000gn/T/tmp.pGnT07Scut/doc1.yaml --derive Default --derive PartialEq --docs --smart-derive-elision
+// kopium version: 0.23.0
 
 #[allow(unused_imports)]
 mod prelude {
@@ -14,6 +14,7 @@ mod prelude {
     pub use serde::{Deserialize, Serialize};
     pub use std::collections::BTreeMap;
 }
+
 use self::prelude::*;
 
 /// HelmReleaseSpec defines the desired state of a Helm release.