Skip to content

Bump github.com/fluxcd/source-controller/api from 1.9.1 to 1.9.3#547

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fluxcd/source-controller/api-1.9.3
Open

Bump github.com/fluxcd/source-controller/api from 1.9.1 to 1.9.3#547
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fluxcd/source-controller/api-1.9.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/fluxcd/source-controller/api from 1.9.1 to 1.9.3.

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.3
  • ghcr.io/fluxcd/source-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.9.2

Changelog

v1.9.2 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.2
  • ghcr.io/fluxcd/source-controller:v1.9.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.3

Release date: 2026-07-13

This patch release fixes the HelmChart CRD description for .status.url, which was copy-pasted from Bucket and pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact.

Improvements:

  • Fix HelmChartStatus.URL doc-comment referencing BucketStatus #2110

1.9.2

Release date: 2026-07-07

This patch release disables Flux variable substitution on the source-controller CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. It also caches the registry authorization token during Notation verification, so the token is fetched once per verification instead of once per request, reducing token-endpoint traffic against the registry.

Fixes:

  • Disable variable substitution in CRDs #2103

Improvements:

  • Cache registry token during Notation verification #2105
Commits
  • ed61ebd Merge pull request #2111 from fluxcd/release-v1.9.3
  • 03a1208 Release v1.9.3
  • f1e431a Add changelog entry for v1.9.3
  • deec0f1 Merge pull request #2110 from fluxcd/backport-2109-to-release/v1.9.x
  • 048ce5c docs: regenerate API reference after doc-comment fix
  • 2b0b313 Fix HelmChartStatus.URL doc-comment referencing BucketStatus
  • 38cf78c Merge pull request #2107 from fluxcd/release-v1.9.2
  • 43ebe98 Release v1.9.2
  • a0439ef Add changelog entry for v1.9.2
  • c4adb7f Merge pull request #2105 from fluxcd/backport-2098-to-release/v1.9.x
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 13, 2026
Bumps [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) from 1.9.1 to 1.9.3.
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.1...v1.9.3)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/fluxcd/source-controller/api-1.9.3 branch from db3d638 to 529c596 Compare July 21, 2026 07:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants