Skip to content

Bump github.com/fluxcd/source-controller/api from 1.7.0 to 1.7.2 - #366

Merged
bigkevmcd merged 1 commit into
mainfrom
dependabot/go_modules/github.com/fluxcd/source-controller/api-1.7.2
Oct 14, 2025
Merged

Bump github.com/fluxcd/source-controller/api from 1.7.0 to 1.7.2#366
bigkevmcd merged 1 commit into
mainfrom
dependabot/go_modules/github.com/fluxcd/source-controller/api-1.7.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2025

Copy link
Copy Markdown
Contributor

Bumps github.com/fluxcd/source-controller/api from 1.7.0 to 1.7.2.

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.7.2

Changelog

v1.7.2 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.7.2
  • ghcr.io/fluxcd/source-controller:v1.7.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.7.1

Changelog

v1.7.1 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.7.1
  • ghcr.io/fluxcd/source-controller:v1.7.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.7.2

Release date: 2025-10-08

This patch release comes with various dependency updates.

The controller is now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib: CVE-2025-58183, CVE-2025-58188 and many others. The full list of security fixes can be found here.

Improvements:

  • Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 #1908

1.7.1

Release date: 2025-10-06

This patch release comes with a fix for TLS certs handling in the HelmChart reconciler when auth credentials are not specified.

Fixes:

  • Fix HelmChart reconciler appending login options when they do not exist #1904

Improvements:

  • ci: Fix release workflow #1897
  • Point to OCIRepository in HelmRepository docs #1893
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 8, 2025
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/fluxcd/source-controller/api-1.7.2 branch from e500623 to c1b80d8 Compare October 11, 2025 16:27
Bumps [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) from 1.7.0 to 1.7.2.
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.7.0...v1.7.2)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/fluxcd/source-controller/api-1.7.2 branch from c1b80d8 to 1f2d24d Compare October 11, 2025 17:45
@bigkevmcd
bigkevmcd merged commit c84dd51 into main Oct 14, 2025
7 of 8 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/fluxcd/source-controller/api-1.7.2 branch October 14, 2025 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant