15.json (19336B)
1 { 2 "number": 15, 3 "title": "chore(deps): update dependency fluxcd/flux2 to v2.6.4 - autoclosed", 4 "state": "closed", 5 "diff_file": "15.diff", 6 "author": "renovate[bot]", 7 "created_at": "2025-05-29T13:26:01Z", 8 "closed_at": "2025-07-09T19:53:11Z", 9 "merged_at": null, 10 "base_ref": "main", 11 "head_ref": "renovate/fluxcd-flux2-2.x", 12 "labels": [], 13 "assignees": [], 14 "requested_reviewers": [], 15 "body": "This PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `v2.5.1` -> `v2.6.4` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>fluxcd/flux2 (fluxcd/flux2)</summary>\n\n### [`v2.6.4`](https://redirect.github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4)\n\n### [`v2.6.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.2...v2.6.3)\n\n#### Highlights\n\nFlux v2.6.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\nFixes:\n\n- Fix for `rsa-sha2-512` and `rsa-sha2-256` algorithms not being prioritized for `ssh-rsa` host keys in source-controller, image-automation-controller and Flux CLI bootstrap.\n\n#### Components changelog\n\n- source-controller [v1.6.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.6.2/CHANGELOG.md)\n- image-automation-controller [v0.41.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v0.41.2/CHANGELOG.md)\n\n#### CLI changed\n\n- \\[release/v2.6.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5427](https://redirect.github.com/fluxcd/flux2/pull/5427)\n\n**Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.6.2...v2.6.3\n\n### [`v2.6.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.1...v2.6.2)\n\n#### Highlights\n\nFlux v2.6.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\nFixes:\n\n- Fix authentication for `flux push artifact --provider=azure` on Azure DevOps runners.\n- Fix OIDC authentication for [Amazon ECR Public](https://fluxcd.io/flux/integrations/aws/#for-amazon-public-elastic-container-registry) in source-controller and image-reflector-controller.\n- Fix `knownhosts key mismatch` regression bug in the Flux CLI, source-controller and image-automation-controller.\n\n#### Components changelog\n\n- source-controller [v1.6.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v0.35.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v0.35.2/CHANGELOG.md)\n- image-automation-controller [v0.41.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v0.41.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.6.x] fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5396](https://redirect.github.com/fluxcd/flux2/pull/5396)\n- \\[release/v2.6.x] Fix `knownhosts key mismatch` regression bug by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5405](https://redirect.github.com/fluxcd/flux2/pull/5405)\n- \\[release/v2.6.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5410](https://redirect.github.com/fluxcd/flux2/pull/5410)\n\n**Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.6.1...v2.6.2\n\n### [`v2.6.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.0...v2.6.1)\n\n#### Highlights\n\nFlux v2.6.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\nFixes:\n\n- Fix a bug introduced in image-reflector-controller v0.35.0 that was causing spurious error events for policies during image repository reconciliation.\n- Fix excessive logging in image-reflector-controller after a restart when the image tags cache is empty.\n\n#### Components changelog\n\n- image-reflector-controller [v0.35.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v0.35.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.6.x] Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5382](https://redirect.github.com/fluxcd/flux2/pull/5382)\n- \\[release/v2.6.x] Add digest pinning to image automation testing by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5384](https://redirect.github.com/fluxcd/flux2/pull/5384)\n\n**Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.6.0...v2.6.1\n\n### [`v2.6.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.5.1...v2.6.0)\n\n#### Highlights\n\nFlux v2.6.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.6 GA blog post](https://fluxcd.io/blog/2025/05/flux-v2.6.0/).\n\nOverview of the new features:\n\n- General availability release for the Flux OCI Artifacts APIs and `flux artifact` commands\n- Support for OCI digests pinning (ImagePolicy, ImageUpdateAutomation)\n- Object-level workload identity authentication (OCIRepository, ImageRepository, Kustomization, Alert Provider)\n- Cache registry credentials for cloud providers (OCIRepository, ImageRepository)\n- Git HTTP/S Mutual TLS authentication (GitRepository, ImageUpdateAutomation)\n- Support for sparse checkout (GitRepository)\n- Support for GitHub App authentication (Alert Provider)\n- Support for managed Identity authentication to Azure Event Hub (Alert Provider)\n- Customize the ID of the Git commit status with CEL expressions (Alert Provider)\n- `WaitForTermination` deletion policy (Kustomization)\n- `DisableChartDigestTracking` feature gate (HelmRelease)\n\n\u2764\ufe0f Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n|--------------------|------------------|\n| `v1.31` | `>= 1.31.0` |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` | `>= 1.33.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator).\nThe operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\nUpgrade Flux from `v2.5.0` to `v2.6.0` by following the [upgrade guide](https://fluxcd.io/flux/installation/upgrade/).\n\nTo upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git:\n\n1. Set `apiVersion: source.toolkit.fluxcd.io/v1` in the YAML files that contain `OCIRepository` definitions.\n2. Add an annotation `api.fluxcd.io/upgrade: \"v2.6.0\"` to the `OCIRepository` resources. (this is not required if Flux Operator is used for upgrade)\n3. Commit, push, and reconcile the API version changes.\n\nBumping the APIs version in manifests can be done gradually.\nIt is advised to not delay this procedure as the deprecated versions will be removed after 6 months.\n\n#### Components changelog\n\n- source-controller [v1.6.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.6.0/CHANGELOG.md)\n- kustomize-controller [v1.6.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.6.0/CHANGELOG.md)\n- notification-controller [v1.6.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.6.0/CHANGELOG.md)\n- helm-controller [v1.3.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.3.0/CHANGELOG.md)\n- image-reflector-controller [v0.35.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v0.35.0/CHANGELOG.md)\n- image-automation-controller [v0.41.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v0.41.0/CHANGELOG.md)\n\n##### New Documentation\n\n- [OCIRepository v1 specification](https://fluxcd.io/flux/components/source/ocirepositories/)\n- [AWS integrations](https://fluxcd.io/flux/integrations/aws/)\n- [Azure integrations](https://fluxcd.io/flux/integrations/azure/)\n- [GCP integrations](https://fluxcd.io/flux/integrations/gcp/)\n\n#### What's Changed\n\n- fix: correct name on github app secret by [@​NotAwar](https://redirect.github.com/NotAwar) in [https://github.com/fluxcd/flux2/pull/5202](https://redirect.github.com/fluxcd/flux2/pull/5202)\n- Update RFC 0008 and RFC 0009 milestones by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5141](https://redirect.github.com/fluxcd/flux2/pull/5141)\n- Update kustomize-controller to v1.5.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5214](https://redirect.github.com/fluxcd/flux2/pull/5214)\n- Update backport labels for 2.5 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5215](https://redirect.github.com/fluxcd/flux2/pull/5215)\n- Fix command debug hr not taking targetPath into account by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5227](https://redirect.github.com/fluxcd/flux2/pull/5227)\n- Remove redundant space. by [@​laiminhtrung1997](https://redirect.github.com/laiminhtrung1997) in [https://github.com/fluxcd/flux2/pull/5038](https://redirect.github.com/fluxcd/flux2/pull/5038)\n- ci: switch to goreleaser changelog generation by [@​y-eight](https://redirect.github.com/y-eight) in [https://github.com/fluxcd/flux2/pull/5284](https://redirect.github.com/fluxcd/flux2/pull/5284)\n- change: use the default ephemeral GITHUB\\_TOKEN instead of the static one by [@​piontec](https://redirect.github.com/piontec) in [https://github.com/fluxcd/flux2/pull/5282](https://redirect.github.com/fluxcd/flux2/pull/5282)\n- add: OSSF scorecard configuration file - ignore false-positive by [@​piontec](https://redirect.github.com/piontec) in [https://github.com/fluxcd/flux2/pull/5287](https://redirect.github.com/fluxcd/flux2/pull/5287)\n- build(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/fluxcd/flux2/pull/5295](https://redirect.github.com/fluxcd/flux2/pull/5295)\n- Allow to pull/push artifacts to insecure registries without TLS by [@​mottetm](https://redirect.github.com/mottetm) in [https://github.com/fluxcd/flux2/pull/5299](https://redirect.github.com/fluxcd/flux2/pull/5299)\n- \\[RFC-0010] Multi-Tenant Workload Identity by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5209](https://redirect.github.com/fluxcd/flux2/pull/5209)\n- flux diff: Reset target struct before decoding by [@​maboehm](https://redirect.github.com/maboehm) in [https://github.com/fluxcd/flux2/pull/5302](https://redirect.github.com/fluxcd/flux2/pull/5302)\n- fix: allow recursive dry-run over local sources by [@​niveau0](https://redirect.github.com/niveau0) in [https://github.com/fluxcd/flux2/pull/5219](https://redirect.github.com/fluxcd/flux2/pull/5219)\n- Run conformance tests for Kubernetes 1.33.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5318](https://redirect.github.com/fluxcd/flux2/pull/5318)\n- Update to Kubernetes 1.33.0 and Go 1.24.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5323](https://redirect.github.com/fluxcd/flux2/pull/5323)\n- \\[RFC-0010] Remove EKS Pod Identity from the proposal by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5309](https://redirect.github.com/fluxcd/flux2/pull/5309)\n- \\[RFC-0010] Add RBAC for creating service account tokens by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5332](https://redirect.github.com/fluxcd/flux2/pull/5332)\n- Upgrade fluxcd/pkg auth, oci, git and git/gogit by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5333](https://redirect.github.com/fluxcd/flux2/pull/5333)\n- Fix exit code handling in get command by [@​dgunzy](https://redirect.github.com/dgunzy) in [https://github.com/fluxcd/flux2/pull/5338](https://redirect.github.com/fluxcd/flux2/pull/5338)\n- build(deps): bump the ci group across 1 directory with 18 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/fluxcd/flux2/pull/5325](https://redirect.github.com/fluxcd/flux2/pull/5325)\n- Fix `flux trace` for HRs from `OCIRepository`s by [@​makkes](https://redirect.github.com/makkes) in [https://github.com/fluxcd/flux2/pull/5349](https://redirect.github.com/fluxcd/flux2/pull/5349)\n- Fix e2e workflow by [@​makkes](https://redirect.github.com/makkes) in [https://github.com/fluxcd/flux2/pull/5351](https://redirect.github.com/fluxcd/flux2/pull/5351)\n- \\[RFC-0010] Update RFC to include opt-in feature gate by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5354](https://redirect.github.com/fluxcd/flux2/pull/5354)\n- \\[RFC-0010] Update RFC feature gate behavior by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5355](https://redirect.github.com/fluxcd/flux2/pull/5355)\n- Upgrade fluxcd/pkg packages by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5356](https://redirect.github.com/fluxcd/flux2/pull/5356)\n- Upgrade fluxcd/pkg packages by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5357](https://redirect.github.com/fluxcd/flux2/pull/5357)\n- Set Kubernetes 1.31 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5364](https://redirect.github.com/fluxcd/flux2/pull/5364)\n- Update dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5366](https://redirect.github.com/fluxcd/flux2/pull/5366)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5368](https://redirect.github.com/fluxcd/flux2/pull/5368)\n- Promote artifact commands to stable by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5369](https://redirect.github.com/fluxcd/flux2/pull/5369)\n- Add --interval and --reflect-digest flags to flux create image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5345](https://redirect.github.com/fluxcd/flux2/pull/5345)\n- Update CLI to OCIRepository v1 (GA) by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5371](https://redirect.github.com/fluxcd/flux2/pull/5371)\n- Update dependabot config by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5373](https://redirect.github.com/fluxcd/flux2/pull/5373)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5370](https://redirect.github.com/fluxcd/flux2/pull/5370)\n\n#### New Contributors\n\n- [@​NotAwar](https://redirect.github.com/NotAwar) made their first contribution in [https://github.com/fluxcd/flux2/pull/5202](https://redirect.github.com/fluxcd/flux2/pull/5202)\n- [@​laiminhtrung1997](https://redirect.github.com/laiminhtrung1997) made their first contribution in [https://github.com/fluxcd/flux2/pull/5038](https://redirect.github.com/fluxcd/flux2/pull/5038)\n- [@​y-eight](https://redirect.github.com/y-eight) made their first contribution in [https://github.com/fluxcd/flux2/pull/5284](https://redirect.github.com/fluxcd/flux2/pull/5284)\n- [@​piontec](https://redirect.github.com/piontec) made their first contribution in [https://github.com/fluxcd/flux2/pull/5282](https://redirect.github.com/fluxcd/flux2/pull/5282)\n- [@​mottetm](https://redirect.github.com/mottetm) made their first contribution in [https://github.com/fluxcd/flux2/pull/5299](https://redirect.github.com/fluxcd/flux2/pull/5299)\n- [@​maboehm](https://redirect.github.com/maboehm) made their first contribution in [https://github.com/fluxcd/flux2/pull/5302](https://redirect.github.com/fluxcd/flux2/pull/5302)\n- [@​niveau0](https://redirect.github.com/niveau0) made their first contribution in [https://github.com/fluxcd/flux2/pull/5219](https://redirect.github.com/fluxcd/flux2/pull/5219)\n- [@​dgunzy](https://redirect.github.com/dgunzy) made their first contribution in [https://github.com/fluxcd/flux2/pull/5338](https://redirect.github.com/fluxcd/flux2/pull/5338)\n\n**Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.5.0...v2.6.0\n\n</details>\n\n---\n\n### Configuration\n\n\ud83d\udcc5 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).\n\n\ud83d\udea6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267b **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\ud83d\udd15 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/MTRNord/cluster).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4zMy42IiwidXBkYXRlZEluVmVyIjoiNDEuMTcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->\n", 16 "comments": [], 17 "review_comments": [] 18 }