Skip to content

feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.3 - biohazard#3540

Open
tinfoild[bot] wants to merge 1 commit intomainfrom
renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x
Open

feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.3 - biohazard#3540
tinfoild[bot] wants to merge 1 commit intomainfrom
renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x

Conversation

@tinfoild
Copy link
Copy Markdown
Contributor

@tinfoild tinfoild bot commented Sep 30, 2025

This PR contains the following updates:

Package Update Change OpenSSF
ghcr.io/fluxcd/flux-manifests minor v2.6.4v2.8.3 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

fluxcd/flux2 (ghcr.io/fluxcd/flux-manifests)

v2.8.3

Compare Source

Highlights

Flux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix templating errors for charts that include --- in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)
Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.8.2...v2.8.3

v2.8.2

Compare Source

Highlights

Flux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)
  • Fix the Go templates bug of YAML separator --- getting concatenated to apiVersion: by updating to Helm 4.1.3 (helm-controller)
  • Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate DefaultToRetryOnFailure that improves the experience when the CancelHealthCheckOnNewRevision is enabled (helm-controller)
  • Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)
  • Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1
Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.8.1...v2.8.2

v2.8.1

Compare Source

Highlights

Flux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix Git commit status events being dropped for Kustomizations (notification-controller)
  • Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)
Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.8.0...v2.8.1

v2.8.0

Compare Source

Highlights

Flux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.8 GA blog post.

Overview of the new features:

  • Helm v4 support, including server-side apply and kstatus-based health checking (HelmRelease)
  • Readiness evaluation of Helm-managed objects with CEL expressions (HelmRelease)
  • Improved observability of Helm releases with inventory tracking in .status.inventory (HelmRelease)
  • Reduced the mean time to recovery of Flux-managed applications via CancelHealthCheckOnNewRevision feature gate (Kustomization, HelmRelease)
  • Support for commenting on Pull Requests directly from Flux notifications (Provider)
  • Custom SSA apply stages for ordering resource application in kustomize-controller (Kustomization)
  • Automatic GitHub App installation ID lookup from the repository owner (GitRepository, ImageUpdateAutomation, Provider)
  • Support for Cosign v3 for verifying OCI artifacts and container images (OCIRepository)
  • ArtifactGenerator support for extracting and modifying Helm charts (ArtifactGenerator)
  • Bypass cache when fetching source objects via DirectSourceFetch feature gate (Kustomization, HelmRelease, ArtifactGenerator)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version Minimum required
v1.33 >= 1.32.0
v1.34 >= 1.34.1
v1.35 >= 1.35.0

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs v1beta2 and v2beta2 (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from older versions of Flux to v2.8.

Components changelog
CLI changelog
New Contributors

Full Changelog: fluxcd/flux2@v2.7.0...v2.8.0

v2.7.5

Compare Source

Highlights

Flux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix HelmRelease history truncation when using the RetryOnFailure strategy.

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.4...v2.7.5

v2.7.4

Compare Source

Highlights

Flux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Add DisableConfigWatchers feature gate to all controllers for disabling the Secrets/ConfigMaps watchers
  • Fix Workload Identity for Azure China Cloud in all controllers
  • Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller
  • Skip secret decryption for remote kustomize patches in kustomize-controller
  • Improve post-build error reporting in kustomize-controller
  • Add ArtifactGenerator to aggregated RBAC roles

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.3...v2.7.4

v2.7.3

Compare Source

Highlights

Flux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Restore SOCKS5 proxy support in all controllers
  • Fix status reporting of HelmReleases with RetryOnFailure strategy
  • Automated retries for ImagePolicies when no image tags are found in the database
  • Fix alerting for Telegram's message_thread_id
  • Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.2...v2.7.3

v2.7.2

Compare Source

Highlights

Flux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

All Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the Go 1.25.2 release notes.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.1...v2.7.2

v2.7.1

Compare Source

Highlights

Flux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Improvements:

  • Extend flux migrate with support for migrating manifests in Git repositories to the latest API versions.
  • Add recommendations for configuring HelmReleases on production environments.

Fixes:

  • Fix flux migrate command to handle managed fields properly.
  • Fix self-signed TLS cert handling for public Helm repositories in source-controller.
  • Fix the default API versions used by receivers in notification-controller.
  • Fix redundant Ready condition patching in helm-controller.
  • Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.
Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.0...v2.7.1

v2.7.0

Compare Source

Highlights

Flux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.7 GA blog post.

Overview of the new features:

  • General availability release of the Image Automation APIs (ImagePolicy, ImageRepository, ImageUpdateAutomation)
  • Watch for changes in ConfigMaps and Secrets references (Kustomization, HelmRelease)
  • Support for remote cluster authentication using Workload Identity (Kustomization, HelmRelease)
  • Extend the readiness evaluation of dependencies with CEL expressions (Kustomization, HelmRelease)
  • Support for global SOPS Age decryption keys on single-tenant clusters (Kustomization)
  • Support for optional Kustomize components (Kustomization)
  • Introduce RetryOnFailure lifecycle management strategy (HelmRelease)
  • Support mTLS for sending alerts to external systems (Provider)
  • Object-level workload identity authentication (Bucket, Provider)
  • Support mTLS for GitHub App transport (GitRepository, ImageUpdateAutomation, Provider)
  • OpenTelemetry tracing for Kustomization and HelmRelease reconciliation (Provider)
  • Support for 3rd-party source controllers (ExternalArtifact)
  • Support for source composition and decomposition patterns (ArtifactGenerator)
  • CancelHealthCheckOnNewRevision feature gate (kustomize-controller)
  • GitSparseCheckout feature gate (image-automation-controller)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version Minimum required
v1.32 >= 1.32.0
v1.33 >= 1.33.0
v1.34 >= 1.34.1

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs v1beta1 and v2beta1 (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.

Unless you are using Flux Operator to deploy the Flux controllers, you must run the flux migrate command on clusters before upgrading.

For more details, please refer to the Flux v2.7 upgrade guide.

Components changelog
New Documentation
CLI changelog
New Contributors

Full Changelog: fluxcd/flux2@v2.6.0...v2.7.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@tinfoild
Copy link
Copy Markdown
Contributor Author

tinfoild bot commented Sep 30, 2025

kube/helmrelease/out00

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Sep 30, 2025

Deploying jjgadgets-biohazard with  Cloudflare Pages  Cloudflare Pages

Latest commit: 3afbfcb
Status: ✅  Deploy successful!
Preview URL: https://462eda43.jjgadgets-biohazard.pages.dev
Branch Preview URL: https://renovate-biohazard-ghcr-io-f.jjgadgets-biohazard.pages.dev

View logs

@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 226b2e6 to 9a1d9cd Compare October 1, 2025 10:07
@tinfoild
Copy link
Copy Markdown
Contributor Author

tinfoild bot commented Oct 1, 2025

kube/kustomization/out00

--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config OCIRepository: flux-system/flux-manifests

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config OCIRepository: flux-system/flux-manifests

@@ -7,9 +7,9 @@

     kustomize.toolkit.fluxcd.io/namespace: flux-system
   name: flux-manifests
   namespace: flux-system
 spec:
   interval: 10m
   ref:
-    tag: v2.6.4
+    tag: v2.8.2
   url: oci://ghcr.io/fluxcd/flux-manifests
 
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: flux-system/0-biohazard-config

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: flux-system/0-biohazard-config

@@ -400,13 +400,13 @@

       labelSelector: kustomization.flux.home.arpa/helmpatches notin (false)
       version: v1
   path: ./kube/clusters/biohazard/flux
   postBuild:
     substitute:
       CLUSTER_NAME: biohazard
-      FLUXCD_VERSION: v2.6.4
+      FLUXCD_VERSION: v2.8.2
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
     - kind: Secret
       name: biohazard-secrets

@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.0 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.1 - biohazard Oct 6, 2025
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch 2 times, most recently from b6f85a0 to 747f6f8 Compare October 7, 2025 12:12
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.1 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.2 - biohazard Oct 8, 2025
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch 2 times, most recently from 7d1d7f4 to eff6aae Compare October 13, 2025 12:11
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.2 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.3 - biohazard Oct 28, 2025
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch 2 times, most recently from 658f59d to 3645078 Compare October 31, 2025 09:09
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 3645078 to 6d8af89 Compare November 24, 2025 15:39
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.3 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.4 - biohazard Nov 24, 2025
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 6d8af89 to 579f859 Compare November 24, 2025 16:09
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.4 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.5 - biohazard Nov 27, 2025
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch 2 times, most recently from fa3b7f8 to 343dc71 Compare December 3, 2025 20:09
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 343dc71 to 3ba4884 Compare December 17, 2025 13:57
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 3ba4884 to 2425c23 Compare January 27, 2026 02:57
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.7.5 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.0 - biohazard Feb 24, 2026
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 2425c23 to f6c6e3a Compare February 24, 2026 13:40
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.0 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.1 - biohazard Feb 27, 2026
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from f6c6e3a to 74836e6 Compare February 27, 2026 13:30
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.1 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.2 - biohazard Mar 12, 2026
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 74836e6 to 2ebf268 Compare March 12, 2026 15:24
@tinfoild tinfoild bot changed the title feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.2 - biohazard feat(oci/flux-manifests): update v2.6.4 ➼ v2.8.3 - biohazard Mar 16, 2026
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 2ebf268 to 9be778c Compare March 16, 2026 14:45
@tinfoild tinfoild bot force-pushed the renovate/biohazard/ghcr.io-fluxcd-flux-manifests-2.x branch from 9be778c to 3afbfcb Compare March 23, 2026 03:13
@JJGadgets JJGadgets added wontfix This will not be worked on procrastination and removed wontfix This will not be worked on labels Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant