feat(github-release): update flux group ( v2.5.1 → v2.9.0 ) by parsec-renovate[bot] · Pull Request #445 · parsec/home-cluster

parsec-renovate · 2025-05-29T13:18:20Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
fluxcd/flux2	Kustomization	minor	`v2.5.1` → `v2.9.0`
ghcr.io/fluxcd/flux-manifests		minor	`v2.5.1` → `v2.9.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

fluxcd/flux2 (fluxcd/flux2)

`v2.9.0`

Compare Source

Highlights

Flux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.9 GA blog post.

Overview of the new features:

Flux CLI Plugin System with the Mirror and Schema plugins (flux plugin)
Server-Side Apply field ignore rules for fine-grained drift control (Kustomization)
SOPS decryption with the Age post-quantum cipher (Kustomization)
Kubernetes Workload Identity authentication for OpenBao and Vault (Kustomization)
Helm post-render strategies, including chart hooks support (HelmRelease)
Literal mode for Helm values references mirroring helm --set-literal (HelmRelease)
Allow empty kind in CEL health check expressions (Kustomization, HelmRelease)
Git commit signing and verification with SSH keys (GitRepository, ImageUpdateAutomation)
AWS CodeCommit authentication using Workload Identity (GitRepository)
Custom Sigstore trusted root for keyless verification in air-gapped environments (OCIRepository)
Path pattern directory discovery for monorepos (ArtifactGenerator)
Secret-less, OIDC-secured webhook Receivers (Receiver)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
`v1.34`	`>= 1.34.1`
`v1.35`	`>= 1.35.0`
`v1.36`	`>= 1.36.0`

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs image.toolkit.fluxcd.io/v1beta2 and notification.toolkit.fluxcd.io/v1beta2
have reached end-of-life and have been removed from the CRDs.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from older versions of Flux to v2.9.

Components changelog

source-controller v1.9.1
kustomize-controller v1.9.1
notification-controller v1.9.1
helm-controller v1.6.1
image-reflector-controller v1.2.1
image-automation-controller v1.2.1
source-watcher v2.2.1

CLI changelog

Add backport label for Flux 2.8 by @matheuscscp in #5732
Remove no longer needed workaround for Flux 2.8 by @matheuscscp in #5733
Update toolkit components by @fluxcdbot in #5740
Add missing things to release notes template by @matheuscscp in #5743
ci: add top-level permissions to upgrade-fluxcd-pkg workflow by @gaganhr94 in #5763
build(deps): bump the ci group across 1 directory with 11 updates by @dependabot[bot] in #5764
Update fluxcd/pkg dependencies by @fluxcdbot in #5766
Update toolkit components by @fluxcdbot in #5769
Add target branch name to update branch by @matheuscscp in #5773
Fix/resume exit code by @Aman-Cool in #5701
Mark RFC 0010, 0011 and 0012 as implemented by @stefanprodan in #5776
Update toolkit components by @fluxcdbot in #5780
Add --resolve-symlinks flag to build and push artifact commands by @rohansood10 in #5724
fix: validate --source flag in create kustomization command by @gma1k in #5798
Update toolkit components by @fluxcdbot in #5821
Add --show-source to flux get ks and flux get hr by @rafaelperoco in #5828
Add flux create secret receiver command by @stefanprodan in #5835
fix: handle multiple symlinks to same target in build artifact by @Iam-Karan-Suresh in #5833
Add --in-memory-build to flux build ks and flux diff ks by @rycli in #5794
Migrate end-to-end test to latest cloud SDKs by @stefanprodan in #5840
docs: Add AI Coding Assistants Guidance by @stefanprodan in #5841
Add AI Agents guidance by @stefanprodan in #5847
[RFC-0013] Flux CLI Plugin System by @stefanprodan in #5795
Add --ignore-not-found to flux diff ks by @rycli in #5845
[RFC-0013] Implement plugin system by @stefanprodan in #5849
build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by @dependabot[bot] in #5853
Update toolkit components by @fluxcdbot in #5856
Add digest pinning support to flux plugin install by @Iam-Karan-Suresh in #5872
Add --ns-follows-kube-context global flag for using the kubeconfig context namespace by @jtyr in #5831
include source-watcher in install.yaml manifests by @tmmorin in #5881
Update toolkit components by @fluxcdbot in #5890
Update toolkit components by @fluxcdbot in #5903
Update fluxcd/pkg dependencies by @fluxcdbot in #5907
Validate Helm source URL schemes by @immanuwell in #5909
Introduce flux trigger receiver by @matheuscscp in #5908
refactor(api): migrate MakeDependsOn to shared apis/meta func by @vecil in #5912
Update to Kubernetes 1.36 and Go 1.26 by @stefanprodan in #5924
build(deps): bump the ci group across 1 directory with 19 updates by @dependabot[bot] in #5925
Run conformance tests for Kubernetes 1.36 by @stefanprodan in #5926
Add support for AWS CodeCommit to flux bootstrap git by @taraspos in #5868
Validate plugin binary path by @stefanprodan in #5927
Update fluxcd/pkg dependencies by @fluxcdbot in #5928
fix: preserve invalid metadata.labels in flux build ks by @raffis in #5906
build: target host arch for local builds/envtest by @stealthybox in #5932
build(deps): bump the ci group with 6 updates by @dependabot[bot] in #5938
Support specifing sparseCheckout in flux bootstrap by @piny940 in #5918
Update toolkit components by @fluxcdbot in #5944
Honor ks.spec.postBuild.substituteStrategy by @matheuscscp in #5945
Add DriftIgnoreRules support to flux diff kustomization by @dipti-pai in #5923
Allow signing commits using SSH key by @hiddeco in #5920
Update toolkit components by @fluxcdbot in #5950
Update fluxcd/pkg dependencies by @fluxcdbot in #5937
cmd: support type!=status in get --status-selector by @3uzbcqje in #5952
Fix flux get all --status-selector for empty results and notification resources by @matheuscscp in #5954
Upgrade go-git-providers to v0.27.0 by @matheuscscp in #5956
Fix using Receiver adapter for ArtifactGenerator by @matheuscscp in #5957
feat: Install Plugins alongside Flux setup in gh actions by @gat786 in #5955
Update fluxcd/pkg dependencies by @fluxcdbot in #5960
Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by @dme86 in #5892
Update toolkit components by @fluxcdbot in #5963

New Contributors

@gaganhr94 made their first contribution in #5763
@rohansood10 made their first contribution in #5724
@gma1k made their first contribution in #5798
@rafaelperoco made their first contribution in #5828
@Iam-Karan-Suresh made their first contribution in #5833
@rycli made their first contribution in #5794
@jtyr made their first contribution in #5831
@tmmorin made their first contribution in #5881
@immanuwell made their first contribution in #5909
@vecil made their first contribution in #5912
@taraspos made their first contribution in #5868
@piny940 made their first contribution in #5918
@3uzbcqje made their first contribution in #5952
@gat786 made their first contribution in #5955
@dme86 made their first contribution in #5892

Full Changelog: fluxcd/flux2@v2.8.0...v2.9.0

`v2.8.8`

Compare Source

Highlights

Flux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)
Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)
Stop force-applying non-CRD objects placed under a chart's crds/ directory (helm-controller)
Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)
Improve path handling in the source reconcilers (source-controller)
Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)

Improvements:

Update go-git to v5.19.1 which fixes CVE-2026-45571 and CVE-2026-45570 (source-controller, image-automation-controller)
Move Helm back to upstream v4.2.0 (source-controller, helm-controller)
Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)
Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)
Update fluxcd/pkg dependencies

Components changelog

helm-controller v1.5.5
image-automation-controller v1.1.4
image-reflector-controller v1.1.2
source-controller v1.8.5

CLI changelog

Update toolkit components by @fluxcdbot in #5904

Full Changelog: fluxcd/flux2@v2.8.7...v2.8.8

`v2.8.7`

Compare Source

Highlights

Flux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix management of objects annotated with kustomize.toolkit.fluxcd.io/ssa: IfNotPresent where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)

Improvements:

Update go-git to v5.19.0 which fixes CVE-2026-45022 (source-controller, image-automation-controller)
Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)

Components changelog

helm-controller v1.5.4
image-automation-controller v1.1.3
kustomize-controller v1.8.5
notification-controller v1.8.4
source-controller v1.8.4

CLI changelog

Update toolkit components by @fluxcdbot in #5891

Full Changelog: fluxcd/flux2@v2.8.6...v2.8.7

`v2.8.6`

Compare Source

Highlights

Flux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)
Ignore force replace when server-side apply is enabled (helm-controller)
Fix a regression where generic providers would not forward commit status events (notification-controller)
Require the audience field on the GCR Receiver secret for tighter verification — will become mandatory in Flux v2.9 (notification-controller)

Improvements:

Introduce the MigrateAPIVersion feature gate for migrating the API version of resources in managed field entries (kustomize-controller)
Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)

Components changelog

helm-controller v1.5.4
image-automation-controller v1.1.2
kustomize-controller v1.8.4
notification-controller v1.8.4
source-controller v1.8.3

CLI changelog

Update toolkit components by @fluxcdbot in #5857

Full Changelog: fluxcd/flux2@v2.8.5...v2.8.6

`v2.8.5`

Compare Source

Highlights

Flux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)
Fix Azure Blob prefix option not being passed to the storage client (source-controller)

Improvements:

Improve error message for encrypted SSH keys without password (source-controller)
Add optional email and audience fields to the GCR Receiver for tighter verification (notification-controller)
Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)

Components changelog

kustomize-controller v1.8.3
source-controller v1.8.2
notification-controller v1.8.3

CLI changelog

Update toolkit components by @fluxcdbot in #5822

Full Changelog: fluxcd/flux2@v2.8.4...v2.8.5

`v2.8.4`

Compare Source

Highlights

Flux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix flux build ks and flux diff ks on Windows
Fix --source flag validation in create kustomization command

CLI changelog

Update fluxcd/pkg dependencies by @fluxcdbot in #5796
[release/v2.8.x] fix: validate --source flag in create kustomization command by @fluxcdbot in #5799

Full Changelog: fluxcd/flux2@v2.8.3...v2.8.4

`v2.8.3`

Compare Source

Highlights

Flux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix templating errors for charts that include --- in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)

Components changelog

helm-controller v1.5.3

CLI changelog

[release/v2.8.x] Add target branch name to update branch by @fluxcdbot in #5774
Update toolkit components by @fluxcdbot in #5779

Full Changelog: fluxcd/flux2@v2.8.2...v2.8.3

`v2.8.2`

Compare Source

Highlights

Flux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)
Fix the Go templates bug of YAML separator --- getting concatenated to apiVersion: by updating to Helm 4.1.3 (helm-controller)
Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate DefaultToRetryOnFailure that improves the experience when the CancelHealthCheckOnNewRevision is enabled (helm-controller)
Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)
Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1

Components changelog

source-controller v1.8.1
kustomize-controller v1.8.2
notification-controller v1.8.2
helm-controller v1.5.2
image-reflector-controller v1.1.1
image-automation-controller v1.1.1
source-watcher v2.1.1

CLI changelog

[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by @fluxcdbot in #5765
Update fluxcd/pkg dependencies by @fluxcdbot in #5767
Update toolkit components by @matheuscscp in #5770
Update fluxcd/pkg dependencies by @fluxcdbot in #5771

Full Changelog: fluxcd/flux2@v2.8.1...v2.8.2

`v2.8.1`

Compare Source

Highlights

Flux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix Git commit status events being dropped for Kustomizations (notification-controller)
Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)

Components changelog

kustomize-controller v1.8.1
notification-controller v1.8.1
helm-controller v1.5.1

CLI changelog

[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by @fluxcdbot in #5735
Update fluxcd/pkg dependencies by @fluxcdbot in #5739
[release/v2.8.x] Update toolkit components by @fluxcdbot in #5741

Full Changelog: fluxcd/flux2@v2.8.0...v2.8.1

`v2.8.0`

Compare Source

Highlights

Flux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.8 GA blog post.

Overview of the new features:

Helm v4 support, including server-side apply and kstatus-based health checking (HelmRelease)
Readiness evaluation of Helm-managed objects with CEL expressions (HelmRelease)
Improved observability of Helm releases with inventory tracking in .status.inventory (HelmRelease)
Reduced the mean time to recovery of Flux-managed applications via CancelHealthCheckOnNewRevision feature gate (Kustomization, HelmRelease)
Support for commenting on Pull Requests directly from Flux notifications (Provider)
Custom SSA apply stages for ordering resource application in kustomize-controller (Kustomization)
Automatic GitHub App installation ID lookup from the repository owner (GitRepository, ImageUpdateAutomation, Provider)
Support for Cosign v3 for verifying OCI artifacts and container images (OCIRepository)
ArtifactGenerator support for extracting and modifying Helm charts (ArtifactGenerator)
Bypass cache when fetching source objects via DirectSourceFetch feature gate (Kustomization, HelmRelease, ArtifactGenerator)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
`v1.33`	`>= 1.32.0`
`v1.34`	`>= 1.34.1`
`v1.35`	`>= 1.35.0`

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs v1beta2 and v2beta2 (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from older versions of Flux to v2.8.

Components changelog

source-controller v1.8.0
kustomize-controller v1.8.0
notification-controller v1.8.0
helm-controller v1.5.0
image-reflector-controller v1.1.0
image-automation-controller v1.1.0
source-watcher v2.1.0

CLI changelog

ci: Set GITHUB_TOKEN in the release-flux-manifests workflow by @stefanprodan in #5547
Add backport label for Flux 2.7 by @matheuscscp in #5550
build(deps): bump the ci group across 1 directory with 3 updates by @dependabot[bot] in #5548
Fix flux push artifact not working with --provider by @matheuscscp in #5551
Extend flux migrate to work with local files by @matheuscscp in #5554
Improve flux migrate for live cluster migrations by @stefanprodan in #5558
Fix flux migrate -f command to work with comments by @matheuscscp in #5560
Add source-watcher to docs by @stefanprodan in #5562
Fix flux migrate -f not considering kind comments by @matheuscscp in #5563
refactor: convert Kustomization resource into unstructured map only once during variable substitution by @ramasai1 in #5566
Update toolkit components by @fluxcdbot in #5568
Disable AUR publishing by @stefanprodan in #5570
Fix manifest generation for --storage-adv-addr and --events-addr flags by @stefanprodan in #5574
Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by @stefanprodan in #5576
Update toolkit components by @fluxcdbot in #5578
Restore GitHub PAT for backports by @matheuscscp in #5581
[RFC-0012] Add command flux get source external by @dgunzy in #5555
fix: handle error when writing password prompt to stdout by @akshatsinha0 in #5589
Pin cosign to v2.6.1 by @matheuscscp in #5594
[RFC-0012] Add command flux export source external by @dgunzy in #5583
Fix bootstrap e2e test for image policy by @matheuscscp in #5604
Update toolkit components by @fluxcdbot in #5603
fix: return accepted values for flags when calling Values.Type() by @jaxels10 in #5602
ci: Include source-watcher in the e2e test suite by @stefanprodan in #5614
Add source.extensions.fluxcd.io group to aggregated RBAC roles by @matheuscscp in #5627
Fix panic on reconcile with source of ExternalArtifact kind by @matheuscscp in #5630
Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by @matheuscscp in #5633
diff: report if object is skipped by @hown3d in #5625
Update toolkit components by @fluxcdbot in #5639
Allow option to skip tenant namespace creation by @anshuishere in #5597
Update toolkit components by @fluxcdbot in #5648
fix: #5654 by checking if both --chart and --chart-ref are set by @jaxels10 in #5656
Added retry logic with delays to the Flux CLI download by @ivan-munteanu in #5659
Run conformance tests for Kubernetes 1.35.0 by @stefanprodan in #5663
fix: normalize path for Windows compatibility by @sibasispadhi in #5674
Introduce support for looking up GH app installation ID by @matheuscscp in #5682
Update dependencies to Kubernetes v1.35.0 by @stefanprodan in #5688
Fix resume command logging success after reconciliation failure by @Aman-Cool in #5690
Add 2.8 to supported versions for flux migrate -f by @matheuscscp in #5713
Introduce workflow for bumping fluxcd/pkg deps by @matheuscscp in #5717
Update fluxcd/pkg dependencies by @fluxcdbot in #5719
Fix event listing ignoring pagination token by @matheuscscp in #5721
Build with Go 1.26 by @stefanprodan in #5723
Update toolkit components by @fluxcdbot in #5722
Update helm-controller to v1.5.0 by @fluxcdbot in #5725
build(deps): bump the ci group across 1 directory with 12 updates by @dependabot[bot] in #5720
Fix bootstrap failure on Windows cross-drive paths by @veeceey in #5726
Dump debug info on e2e tests by @matheuscscp in #5729
Set Kubernetes 1.33 as min supported version by @matheuscscp in #5730
Update conformance tests to min Kubernetes 1.33 by @stefanprodan in #5731

New Contributors

@ramasai1 made their first contribution in #5566
@akshatsinha0 made their first contribution in #5589
@jaxels10 made their first contribution in #5602
@hown3d made their first contribution in #5625
@anshuishere made their first contribution in #5597
@ivan-munteanu made their first contribution in #5659
@sibasispadhi made their first contribution in #5674
@Aman-Cool made their first contribution in #5690
@veeceey made their first contribution in #5726

Full Changelog: fluxcd/flux2@v2.7.0...v2.8.0

`v2.7.5`

Compare Source

Highlights

Flux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix HelmRelease history truncation when using the RetryOnFailure strategy.

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

helm-controller v1.4.5

CLI changelog

[release/v2.7.x] Update toolkit components by @fluxcdbot in #5649

Full Changelog: fluxcd/flux2@v2.7.4...v2.7.5

`v2.7.4`

Compare Source

Highlights

Flux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Add DisableConfigWatchers feature gate to all controllers for disabling the Secrets/ConfigMaps watchers
Fix Workload Identity for Azure China Cloud in all controllers
Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller
Skip secret decryption for remote kustomize patches in kustomize-controller
Improve post-build error reporting in kustomize-controller
Add ArtifactGenerator to aggregated RBAC roles

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

source-controller v1.7.4
kustomize-controller v1.7.3
notification-controller v1.7.5
helm-controller v1.4.4
image-reflector-controller v1.0.4
image-automation-controller v1.0.4
source-watcher v2.0.3

CLI changelog

[release/v2.7.x] ci: Include source-watcher in the e2e test suite by @fluxcdbot in #5615
[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by @fluxcdbot in #5628
[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by @fluxcdbot in #5631
[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by @fluxcdbot in #5634
[release/v2.7.x] diff: report if object is skipped by @fluxcdbot in #5635
[release/v2.7.x] Update toolkit components by @fluxcdbot in #5640
[release/v2.7.x] Allow option to skip tenant namespace creation by @fluxcdbot in #5642

Full Changelog: fluxcd/flux2@v2.7.3...v2.7.4

`v2.7.3`

Compare Source

Highlights

Flux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Restore SOCKS5 proxy support in all controllers
Fix status reporting of HelmReleases with RetryOnFailure strategy
Automated retries for ImagePolicies when no image tags are found in the database
Fix alerting for Telegram's message_thread_id
Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

source-controller v1.7.3
kustomize-controller v1.7.2
notification-controller v1.7.4
helm-controller v1.4.3
image-reflector-controller v1.0.3
image-automation-controller v1.0.3

CLI changelog

[release/v2.7.x] Pin cosign to v2.6.1 by @fluxcdbot in #5595
[release/v2.7.x] Update toolkit components by @fluxcdbot in #5605
[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by @fluxcdbot in #5606

Full Changelog: fluxcd/flux2@v2.7.2...v2.7.3

`v2.7.2`

Compare Source

Highlights

Flux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

All Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the Go 1.25.2 release notes.

Components changelog

source-controller v1.7.2
kustomize-controller v1.7.1
notification-controller v1.7.3
helm-controller v1.4.2
image-reflector-controller v1.0.2
image-automation-controller v1.0.2
source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGE

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

parsec-renovate Bot added renovate/container renovate/github-release type/minor labels May 29, 2025

github-actions Bot added area/kubernetes area/bootstrap labels May 29, 2025

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.6.0 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.6.1 ) (minor) Jun 2, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 4172fda to dcd410a Compare June 2, 2025 07:10

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.6.1 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.6.2 ) (minor) Jun 16, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from dcd410a to f5f2536 Compare June 16, 2025 13:21

parsec-renovate Bot force-pushed the renovate/flux branch from f5f2536 to 5f0f01c Compare June 27, 2025 11:09

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.6.2 ) (minor)~~ feat(github-release): update flux group (minor) Jun 27, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 5f0f01c to 1d2d91c Compare June 27, 2025 12:11

parsec-renovate Bot changed the title ~~feat(github-release): update flux group (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.6.3 ) (minor) Jun 27, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 1d2d91c to 908aabc Compare July 8, 2025 10:09

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.6.3 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.6.4 ) (minor) Jul 8, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 908aabc to f14f2fd Compare September 30, 2025 09:12

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.6.4 ) (minor)~~ feat(github-release): update flux group (minor) Sep 30, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from f14f2fd to 4791d6f Compare September 30, 2025 21:09

parsec-renovate Bot changed the title ~~feat(github-release): update flux group (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.7.0 ) (minor) Sep 30, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 4791d6f to bddab52 Compare October 6, 2025 16:11

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.0 ) (minor)~~ feat(github-release): update flux group (minor) Oct 6, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from bddab52 to 1581308 Compare October 6, 2025 17:11

parsec-renovate Bot changed the title ~~feat(github-release): update flux group (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.7.1 ) (minor) Oct 6, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 1581308 to af36670 Compare October 8, 2025 18:12

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.1 ) (minor)~~ feat(github-release): update flux group (minor) Oct 8, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from af36670 to 564cb70 Compare October 8, 2025 19:10

parsec-renovate Bot changed the title ~~feat(github-release): update flux group (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.7.2 ) (minor) Oct 8, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from 564cb70 to e55f76a Compare October 28, 2025 17:10

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.2 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.7.3 ) (minor) Oct 28, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from e55f76a to f85d9f3 Compare November 24, 2025 16:12

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.3 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.7.4 ) (minor) Nov 24, 2025

parsec-renovate Bot force-pushed the renovate/flux branch from f85d9f3 to 104ee30 Compare November 27, 2025 12:13

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.4 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.7.5 ) (minor) Nov 27, 2025

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.5 ) (minor)~~ feat(container): update ghcr.io/fluxcd/flux-manifests ( v2.5.1 → v2.7.5 ) Feb 4, 2026

parsec-renovate Bot changed the title ~~feat(container): update ghcr.io/fluxcd/flux-manifests ( v2.5.1 → v2.7.5 )~~ feat(github-release): update flux group ( v2.5.1 → v2.7.5 ) (minor) Feb 4, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 104ee30 to b8ce937 Compare February 24, 2026 13:40

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.7.5 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.0 ) (minor) Feb 24, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from b8ce937 to 497d77c Compare February 27, 2026 13:32

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.0 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.1 ) (minor) Feb 27, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 497d77c to a8c79ee Compare March 12, 2026 15:28

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.1 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.2 ) (minor) Mar 12, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from a8c79ee to 2efc7e9 Compare March 16, 2026 14:36

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.2 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.3 ) (minor) Mar 16, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 2efc7e9 to 4877a1b Compare April 7, 2026 15:39

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.3 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.4 ) (minor) Apr 7, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 4877a1b to c78f571 Compare April 7, 2026 18:27

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.4 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.5 ) (minor) Apr 7, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from c78f571 to 8786182 Compare April 21, 2026 12:30

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.5 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.6 ) (minor) Apr 21, 2026

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.6 ) (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.6 ) May 6, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 8786182 to 17c817b Compare May 12, 2026 11:46

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.6 )~~ feat(github-release): update flux group (minor) May 12, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 17c817b to 07f2311 Compare May 12, 2026 12:50

parsec-renovate Bot changed the title ~~feat(github-release): update flux group (minor)~~ feat(github-release): update flux group ( v2.5.1 → v2.8.7 ) May 12, 2026

parsec-renovate Bot force-pushed the renovate/flux branch from 07f2311 to 068c9d5 Compare May 20, 2026 13:02

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.7 )~~ feat(github-release): update flux group ( v2.5.1 → v2.8.8 ) May 20, 2026

feat(github-release): update flux group ( v2.5.1 → v2.9.0 )

44eafc1

parsec-renovate Bot force-pushed the renovate/flux branch from 068c9d5 to 44eafc1 Compare June 30, 2026 16:00

parsec-renovate Bot changed the title ~~feat(github-release): update flux group ( v2.5.1 → v2.8.8 )~~ feat(github-release): update flux group ( v2.5.1 → v2.9.0 ) Jun 30, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(github-release): update flux group ( v2.5.1 → v2.9.0 )#445

feat(github-release): update flux group ( v2.5.1 → v2.9.0 )#445
parsec-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/flux

parsec-renovate Bot commented May 29, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

parsec-renovate Bot commented May 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Highlights

Kubernetes compatibility

OpenShift compatibility

Upgrade procedure

Components changelog

CLI changelog

New Contributors

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Kubernetes compatibility

OpenShift compatibility

Upgrade procedure

Components changelog

CLI changelog

New Contributors

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

CLI changelog

Highlights

Components changelog

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

parsec-renovate Bot commented May 29, 2025 •

edited

Loading