|  | 
| 2 | 2 | 
 | 
| 3 | 3 | All notable changes to this project are documented in this file. | 
| 4 | 4 | 
 | 
|  | 5 | +## 1.6.0 | 
|  | 6 | + | 
|  | 7 | +**Release date:** 2025-05-27 | 
|  | 8 | + | 
|  | 9 | +This minor release promotes the OCIRepository API to GA, and comes with new features, | 
|  | 10 | +improvements and bug fixes. | 
|  | 11 | + | 
|  | 12 | +### OCIRepository | 
|  | 13 | + | 
|  | 14 | +The `OCIRepository` API has been promoted from `v1beta2` to `v1` (GA). | 
|  | 15 | +The `v1` API is backwards compatible with `v1beta2`. | 
|  | 16 | + | 
|  | 17 | +OCIRepository API now supports object-level workload identity by setting | 
|  | 18 | +`.spec.provider` to one of `aws`, `azure`, or `gcp`, and setting | 
|  | 19 | +`.spec.serviceAccountName` to the name of a service account in the same | 
|  | 20 | +namespace that has been configured with appropriate cloud permissions. | 
|  | 21 | +For this feature to work, the controller feature gate | 
|  | 22 | +`ObjectLevelWorkloadIdentity` must be enabled. See a complete guide | 
|  | 23 | +[here](https://fluxcd.io/flux/integrations/). | 
|  | 24 | + | 
|  | 25 | +OCIRepository API now caches registry credentials for cloud providers | 
|  | 26 | +by default. This behavior can be disabled or fine-tuned by adjusting the | 
|  | 27 | +token cache controller flags (see [docs](https://fluxcd.io/flux/components/source/options/)). | 
|  | 28 | +The token cache also exposes metrics that are documented | 
|  | 29 | +[here](https://fluxcd.io/flux/monitoring/metrics/#controller-metrics). | 
|  | 30 | + | 
|  | 31 | +### GitRepository | 
|  | 32 | + | 
|  | 33 | +GitRepository API now supports sparse checkout by setting a list | 
|  | 34 | +of directories in the `.spec.sparseCheckout` field. This allows | 
|  | 35 | +for optimizing the amount of data fetched from the Git repository. | 
|  | 36 | + | 
|  | 37 | +GitRepository API now supports mTLS authentication for HTTPS Git repositories | 
|  | 38 | +by setting the fields `tls.crt`, `tls.key`, and `ca.crt` in the `.data` field | 
|  | 39 | +of the referenced Secret in `.spec.secretRef`. | 
|  | 40 | + | 
|  | 41 | +GitRepository API now caches credentials for non-`generic` providers by default. | 
|  | 42 | +This behavior can be disabled or fine-tuned by adjusting the | 
|  | 43 | +token cache controller flags (see [docs](https://fluxcd.io/flux/components/source/options/)). | 
|  | 44 | +The token cache also exposes metrics that are documented | 
|  | 45 | +[here](https://fluxcd.io/flux/monitoring/metrics/#controller-metrics). | 
|  | 46 | + | 
|  | 47 | +### General updates | 
|  | 48 | + | 
|  | 49 | +In addition, the Kubernetes dependencies have been updated to v1.33 and | 
|  | 50 | +various other controller dependencies have been updated to their latest | 
|  | 51 | +version. The controller is now built with Go 1.24. | 
|  | 52 | + | 
|  | 53 | +Fixes: | 
|  | 54 | +- Downgrade `Masterminds/semver` to v3.3.0 | 
|  | 55 | +  [#1785](https://github.com/fluxcd/source-controller/pull/1785) | 
|  | 56 | + | 
|  | 57 | +Improvements: | 
|  | 58 | +- Promote OCIRepository API to v1 (GA) | 
|  | 59 | +  [#1794](https://github.com/fluxcd/source-controller/pull/1794) | 
|  | 60 | +- [RFC-0010] Introduce object-level workload identity for container registry APIs and cache credentials | 
|  | 61 | +  [#1790](https://github.com/fluxcd/source-controller/pull/1790) | 
|  | 62 | +  [#1802](https://github.com/fluxcd/source-controller/pull/1802) | 
|  | 63 | +  [#1811](https://github.com/fluxcd/source-controller/pull/1811) | 
|  | 64 | +- Implement Sparse Checkout for `GitRepository` | 
|  | 65 | +  [#1774](https://github.com/fluxcd/source-controller/pull/1774) | 
|  | 66 | +- Add Mutual TLS support to `GitRepository` | 
|  | 67 | +  [#1778](https://github.com/fluxcd/source-controller/pull/1778) | 
|  | 68 | +- Introduce token cache for `GitRepository` | 
|  | 69 | +  [#1745](https://github.com/fluxcd/source-controller/pull/1745) | 
|  | 70 | +  [#1788](https://github.com/fluxcd/source-controller/pull/1788) | 
|  | 71 | +  [#1789](https://github.com/fluxcd/source-controller/pull/1789) | 
|  | 72 | +- Build controller without CGO | 
|  | 73 | +  [#1725](https://github.com/fluxcd/source-controller/pull/1725) | 
|  | 74 | +- Various dependency updates | 
|  | 75 | +  [#1812](https://github.com/fluxcd/source-controller/pull/1812) | 
|  | 76 | +  [#1800](https://github.com/fluxcd/source-controller/pull/1800) | 
|  | 77 | +  [#1810](https://github.com/fluxcd/source-controller/pull/1810) | 
|  | 78 | +  [#1806](https://github.com/fluxcd/source-controller/pull/1806) | 
|  | 79 | +  [#1782](https://github.com/fluxcd/source-controller/pull/1782) | 
|  | 80 | +  [#1783](https://github.com/fluxcd/source-controller/pull/1783) | 
|  | 81 | +  [#1775](https://github.com/fluxcd/source-controller/pull/1775) | 
|  | 82 | +  [#1728](https://github.com/fluxcd/source-controller/pull/1728) | 
|  | 83 | +  [#1722](https://github.com/fluxcd/source-controller/pull/1722) | 
|  | 84 | + | 
| 5 | 85 | ## 1.5.0 | 
| 6 | 86 | 
 | 
| 7 | 87 | **Release date:** 2025-02-13 | 
|  | 
0 commit comments