chore(deps): bump the go group with 7 updates (#153)

Bumps the go group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) |
`2.5.1` | `2.6.0` |
|
[github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller)
| `1.2.0` | `1.3.0` |
|
[github.com/fluxcd/image-automation-controller/api](https://github.com/fluxcd/image-automation-controller)
| `0.40.0` | `0.41.0` |
|
[github.com/fluxcd/image-reflector-controller/api](https://github.com/fluxcd/image-reflector-controller)
| `0.34.0` | `0.35.0` |
|
[github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller)
| `1.5.1` | `1.6.0` |
|
[github.com/fluxcd/notification-controller/api](https://github.com/fluxcd/notification-controller)
| `1.5.0` | `1.6.0` |
|
[github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller)
| `1.5.0` | `1.6.0` |

Updates `github.com/fluxcd/flux2/v2` from 2.5.1 to 2.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/flux2/releases">github.com/fluxcd/flux2/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.6.0</h2>
<h2>Highlights</h2>
<p>Flux v2.6.0 is a feature release. Users are encouraged to upgrade for
the best experience.</p>
<p>For a compressive overview of new features and API changes included
in this release, please refer to the <a
href="https://fluxcd.io/blog/2025/05/flux-v2.6.0/">Announcing Flux 2.6
GA blog post</a>.</p>
<p>Overview of the new features:</p>
<ul>
<li>General availability release for the Flux OCI Artifacts APIs and
<code>flux artifact</code> commands</li>
<li>Support for OCI digests pinning (ImagePolicy,
ImageUpdateAutomation)</li>
<li>Object-level workload identity authentication (OCIRepository,
ImageRepository, Kustomization, Alert Provider)</li>
<li>Cache registry credentials for cloud providers (OCIRepository,
ImageRepository)</li>
<li>Git HTTP/S Mutual TLS authentication (GitRepository,
ImageUpdateAutomation)</li>
<li>Support for sparse checkout (GitRepository)</li>
<li>Support for GitHub App authentication (Alert Provider)</li>
<li>Support for managed Identity authentication to Azure Event Hub
(Alert Provider)</li>
<li>Customize the ID of the Git commit status with CEL expressions
(Alert Provider)</li>
<li><code>WaitForTermination</code> deletion policy (Kustomization)</li>
<li><code>DisableChartDigestTracking</code> feature gate
(HelmRelease)</li>
</ul>
<p>❤️ Big thanks to all the Flux contributors that helped us with this
release!</p>
<h3>Kubernetes compatibility</h3>
<p>This release is compatible with the following Kubernetes
versions:</p>
<table>
<thead>
<tr>
<th>Kubernetes version</th>
<th>Minimum required</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>v1.31</code></td>
<td><code>&gt;= 1.31.0</code></td>
</tr>
<tr>
<td><code>v1.32</code></td>
<td><code>&gt;= 1.32.0</code></td>
</tr>
<tr>
<td><code>v1.33</code></td>
<td><code>&gt;= 1.33.0</code></td>
</tr>
</tbody>
</table>
<blockquote>
<p>[!NOTE]
Note that the Flux project offers support only for the latest three
minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift
is offered by vendors such as
<a
href="https://control-plane.io/enterprise-for-flux-cd/">ControlPlane</a>
that provide enterprise support for Flux.</p>
</blockquote>
<h3>OpenShift compatibility</h3>
<p>Flux can be installed on Red Hat OpenShift cluster directly from
OperatorHub using <a
href="https://operatorhub.io/operator/flux-operator">Flux Operator</a>.
The operator allows the configuration of Flux multi-tenancy lockdown,
network policies, persistent storage, sharding, vertical scaling and the
synchronization of the cluster state from Git repositories, OCI
artifacts, and S3-compatible storage.</p>
<h2>Upgrade procedure</h2>
<p>Upgrade Flux from <code>v2.5.0</code> to <code>v2.6.0</code> by
following the <a
href="https://fluxcd.io/flux/installation/upgrade/">upgrade
guide</a>.</p>
<p>To upgrade the APIs, make sure the new CRDs and controllers are
deployed, and then change the manifests in Git:</p>
<ol>
<li>Set <code>apiVersion: source.toolkit.fluxcd.io/v1</code> in the YAML
files that contain <code>OCIRepository</code> definitions.</li>
</ol>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/flux2/commit/4c66d375454b5841cc816e7728e8ae684cf70dc3"><code>4c66d37</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5370">#5370</a>
from fluxcd/update-components</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/481c3c6e1e1c7056f0d1907ea39f22eee0c53473"><code>481c3c6</code></a>
Update toolkit components</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/1d1d96b4895115aa1bb092f7bb3de6611681ebae"><code>1d1d96b</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5373">#5373</a>
from fluxcd/dependabot-up</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/0b972771fdcdd8cf290f16398fb0c09cd2ad128d"><code>0b97277</code></a>
Update dependabot config</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/650732109e1cef23fdf753e8caeb4efea984fe10"><code>6507321</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5371">#5371</a>
from fluxcd/oci-ga</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/79fed691cafed9022fc37242e498cf108a0a1725"><code>79fed69</code></a>
Update CLI to OCIRepository v1 (GA)</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/b37ba736fa58c33cab5941971ea182b43187c3c2"><code>b37ba73</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5345">#5345</a>
from fluxcd/store-digests</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/65766ff4fca96857e51d23427425a3fbead87403"><code>65766ff</code></a>
Add --interval and --reflect-digest flags to flux create image
policy</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/19d9b87c62d7891f9a6c6a977f20250280773995"><code>19d9b87</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/flux2/issues/5369">#5369</a>
from fluxcd/oci-commands</li>
<li><a
href="https://github.com/fluxcd/flux2/commit/d82ec5a211159f0c291b2322f1a0d1356440d6ed"><code>d82ec5a</code></a>
Promote artifact commands to stable</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/flux2/compare/v2.5.1...v2.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/helm-controller/api` from 1.2.0 to 1.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/helm-controller/releases">github.com/fluxcd/helm-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.0</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/helm-controller/blob/v1.3.0/CHANGELOG.md">v1.3.0
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/helm-controller:v1.3.0</code></li>
<li><code>ghcr.io/fluxcd/helm-controller:v1.3.0</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md">github.com/fluxcd/helm-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.3.0</h2>
<p><strong>Release date:</strong> 2025-05-28</p>
<p>This minor release comes with various bug fixes and improvements.</p>
<p>The controller now supports the
<code>DisableChartDigestTracking</code> feature gate,
which allows disabling appending the digest of OCI Helm charts to the
chart version. This is useful for charts that do not follow Helm's
recommendation of using the app version instead of the chart version
as a label in the manifests.</p>
<p>In addition, the Kubernetes dependencies have been updated to v1.33,
Helm has
been updated to v3.17.3 and various other controller dependencies have
been
updated to their latest version. The controller is now built with Go
1.24.</p>
<p>Fixes:</p>
<ul>
<li>Fix returning wrong error value in Kubernetes HTTP client
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1188">#1188</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Add <code>DisableChartDigestTracking</code> feature gate
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1212">#1212</a></li>
<li>Various dependency updates
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1227">#1227</a>
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1221">#1221</a>
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1220">#1220</a>
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1218">#1218</a>
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1206">#1206</a>
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1209">#1209</a>
<a
href="https://redirect.github.com/fluxcd/helm-controller/pull/1204">#1204</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/e47f47f1282d1c66b180be7a386f5afbe3f5ae26"><code>e47f47f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1229">#1229</a>
from fluxcd/release-v1.3.0</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/aa70ca3df97f561bb8ad196e604cb41a206edf69"><code>aa70ca3</code></a>
Release v1.3.0</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/483f166c6a0533ab7cde121fed568f9a6e53935e"><code>483f166</code></a>
Add changelog entry for v1.3.0</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/b6d8e39ccc827d088d02ba7c303908099aed74da"><code>b6d8e39</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1227">#1227</a>
from fluxcd/oci-ga</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/034ea18c4bf8d049d9f60522e3d64318becd1d02"><code>034ea18</code></a>
Update controller to OCIRepository v1 (GA)</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/ff69170036b7dbc58f6ac43c6af92a5772a12850"><code>ff69170</code></a>
Update dependencies</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/b2e904652c193f6478e7ad41c6ba6e8100164748"><code>b2e9046</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1221">#1221</a>
from fluxcd/dependabot/github_actions/ci-5eaca88b60</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/4653af40673c59be46ad415ac5b4de88a7bd7d31"><code>4653af4</code></a>
Bump the ci group across 1 directory with 3 updates</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/68883e40fbb0ca84770af27bf32a6007a0bf78a9"><code>68883e4</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/helm-controller/issues/1220">#1220</a>
from fluxcd/upgrade-deps</li>
<li><a
href="https://github.com/fluxcd/helm-controller/commit/95e69b5d4c0913cd8f98ba9e6daf5fef576fb56e"><code>95e69b5</code></a>
Upgrade fluxcd/pkg packages</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/helm-controller/compare/v1.2.0...v1.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/image-automation-controller/api` from 0.40.0
to 0.41.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-automation-controller/releases">github.com/fluxcd/image-automation-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v0.41.0</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/image-automation-controller/blob/v0.41.0/CHANGELOG.md">v0.41.0
changelog</a></p>
<h2>Container images</h2>
<ul>

<li><code>docker.io/fluxcd/image-automation-controller:v0.41.0</code></li>
<li><code>ghcr.io/fluxcd/image-automation-controller:v0.41.0</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-automation-controller/blob/main/CHANGELOG.md">github.com/fluxcd/image-automation-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>0.41.0</h2>
<p><strong>Release date:</strong> 2025-05-28</p>
<p>This prerelease comes with support for updating image digests, for
configuring mTLS with HTTPS Git repositories, and with caching Git
provider access tokens.</p>
<p>ImagePolicy API now supports reflecting image digests in-cluster. By
integrating with this feature the ImageUpdateAutomation API can now
update image digests in YAML manifests. See this
<a
href="https://fluxcd.io/flux/guides/image-update/#digest-pinning">guide</a>
for more details.</p>
<p>The controller now caches Git provider access tokens by default.
This behavior can be disabled or fine-tuned by adjusting the
token cache controller flags (see
<a
href="https://fluxcd.io/flux/components/image/options/#image-automation-flags">docs</a>).
The token cache also exposes metrics that are documented
<a
href="https://fluxcd.io/flux/monitoring/metrics/#controller-metrics">here</a>.</p>
<p>For configuring mTLS with HTTPS Git repositories see the
GitRepository
<a
href="https://fluxcd.io/flux/components/source/gitrepositories/#secret-reference">docs</a>.</p>
<p>In addition, the Kubernetes dependencies have been updated to v1.33
and various other controller dependencies have been updated to their
latest
version. The controller is now built with Go 1.24.</p>
<p>Fixes:</p>
<ul>
<li>Fix tag parsing logic misinterpreting host:port registry url
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/893">#893</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>Update digest of latest image
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/902">#902</a></li>
<li>Introduce token cache for Git provider access tokens
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/861">#861</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/895">#895</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/897">#897</a></li>
<li>Add support for mutual TLS to Git HTTP/S operations
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/886">#886</a></li>
<li>Support for all recognized Kustomize config file names
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/864">#864</a></li>
<li>Various dependency updates
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/916">#916</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/908">#908</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/900">#900</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/896">#896</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/898">#898</a>
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/891">#891</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/b4ad41bef5979d855e306832d4c4ac2f57e35a44"><code>b4ad41b</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/917">#917</a>
from fluxcd/release-v0.41.0</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/b09cceb8b9c95aac5f792c440125301bf0a937f6"><code>b09cceb</code></a>
Release v0.41.0</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/4f207d51081c90a416cb102d6220863c93094ce0"><code>4f207d5</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/916">#916</a>
from fluxcd/update-sc</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/e5ae4097be74f408afa270b8982e7fdbaa62b20f"><code>e5ae409</code></a>
Update dependencies</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/48b16c2e510e8c51ce80839162e18bd95bda5797"><code>48b16c2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/902">#902</a>
from fluxcd/update-digests</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/806d41081ad3663ad316ce947e006230e6d28d35"><code>806d410</code></a>
Update digest of latest image</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/4addc4e215e07484b8650991d26e4b5802989a2a"><code>4addc4e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/908">#908</a>
from fluxcd/dependabot/github_actions/ci-773070ff14</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/82f08530f847905c7c504dc12b810046ef19c393"><code>82f0853</code></a>
Bump the ci group across 1 directory with 4 updates</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/f7387ccbefe26174c760a866699e2bd1fd6f8dbb"><code>f7387cc</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/913">#913</a>
from fluxcd/rfc-0010-docs</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/3d434f0fe7aac52474f036497c0fc3f76c6cde25"><code>3d434f0</code></a>
[RFC-0010] Link workload identity docs to complete guide</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/image-automation-controller/compare/v0.40.0...v0.41.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/image-reflector-controller/api` from 0.34.0
to 0.35.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-reflector-controller/releases">github.com/fluxcd/image-reflector-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v0.35.0</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/image-reflector-controller/blob/v0.35.0/CHANGELOG.md">v0.35.0
changelog</a></p>
<h2>Container images</h2>
<ul>

<li><code>docker.io/fluxcd/image-reflector-controller:v0.35.0</code></li>
<li><code>ghcr.io/fluxcd/image-reflector-controller:v0.35.0</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md">github.com/fluxcd/image-reflector-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>0.35.0</h2>
<p><strong>Release date:</strong> 2025-05-27</p>
<p>This prerelease comes with support for object-level workload identity
and image digest reflection.</p>
<h3>ImageRepository</h3>
<p>ImageRepository API now supports object-level workload identity by
setting
<code>.spec.provider</code> to one of <code>aws</code>,
<code>azure</code>, or <code>gcp</code>, and setting
<code>.spec.serviceAccountName</code> to the name of a service account
in the same
namespace that has been configured with appropriate cloud permissions.
For this feature to work, the controller feature gate
<code>ObjectLevelWorkloadIdentity</code> must be enabled. See a complete
guide
<a href="https://fluxcd.io/flux/integrations/">here</a>.</p>
<p>ImageRepository API now caches registry credentials for cloud
providers
by default. This behavior can be disabled or fine-tuned by adjusting the
token cache controller flags (see
<a
href="https://fluxcd.io/flux/components/image/options/#image-reflector-flags">docs</a>).
The token cache also exposes metrics that are documented
<a
href="https://fluxcd.io/flux/monitoring/metrics/#controller-metrics">here</a>.</p>
<h3>ImagePolicy</h3>
<p>ImagePolicy API now supports configuring a digest reflection policy
through the field <code>.spec.digestReflectionPolicy</code>. This allows
users
to configure the controller to reflect the digest of the latest image
tag in the status of the ImagePolicy resource. See this
<a
href="https://fluxcd.io/flux/guides/image-update/#digest-pinning">guide</a>
for more details.</p>
<h3>General updates</h3>
<p>The controller now collects the garbage from BadgerDB, the database
where it stores image tags. The interval is 10 minutes by default,
but it can be disabled or fine-tuned, see
<a
href="https://fluxcd.io/flux/components/image/options/#image-reflector-flags">docs</a>.</p>
<p>In addition, the Kubernetes dependencies have been updated to v1.33
and various other controller dependencies have been updated to their
latest
version. The controller is now built with Go 1.24.</p>
<p>Fixes:</p>
<ul>
<li>Downgrade <code>Masterminds/semver</code> to v3.3.0
<a
href="https://redirect.github.com/fluxcd/image-reflector-controller/pull/761">#761</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>[RFC-0010] Introduce object-level workload identity and cache
credentials</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/832b91d905e3869c8cc20c05d45ccd597e72b81e"><code>832b91d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/768">#768</a>
from fluxcd/release-v0.35.0</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/dc7b08c9696431ea944f8e88cef57c11f569970b"><code>dc7b08c</code></a>
Release v0.35.0</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/e9e24265c554aa57146e9d0c259b785806aca5d5"><code>e9e2426</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/767">#767</a>
from fluxcd/dependabot/github_actions/ci-a39aa48eed</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/88d864b85082ff62aaf405ebfc3cbba3034ea66b"><code>88d864b</code></a>
Bump the ci group with 18 updates</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/c5a592b075c5c1bdab0a3532155cc65373802a4b"><code>c5a592b</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/766">#766</a>
from fluxcd/rfc-0010-docs</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/3e212d2f68840988ceb6a27d818f4c15f88ce837"><code>3e212d2</code></a>
[RFC-0010] Link workload identity docs to complete guide</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/6275ee05c6f9abf4f983a2c2c60f62272afea141"><code>6275ee0</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/765">#765</a>
from fluxcd/upgrade-deps</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/8eea66d756065e202a31ae944155f76148f0c723"><code>8eea66d</code></a>
Update dependencies</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/c491302105cd7eea635246442f645482c9928f34"><code>c491302</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/757">#757</a>
from stealthybox/gc-channel</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/8ec426fca25ec8e42a5c6045e368e942c9d38110"><code>8ec426f</code></a>
Implement BadgerGC with controller runtime</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/image-reflector-controller/compare/v0.34.0...v0.35.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/kustomize-controller/api` from 1.5.1 to 1.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/releases">github.com/fluxcd/kustomize-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.0</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/kustomize-controller/blob/v1.6.0/CHANGELOG.md">v1.6.0
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/kustomize-controller:v1.6.0</code></li>
<li><code>ghcr.io/fluxcd/kustomize-controller:v1.6.0</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md">github.com/fluxcd/kustomize-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.0</h2>
<p><strong>Release date:</strong> 2025-05-28</p>
<p>This minor release comes with various bug fixes and improvements.</p>
<p>Kustomization API now supports object-level workload identity by
setting
<code>.spec.decryption.serviceAccountName</code> to the name of a
service account
in the same namespace that has been configured with appropriate cloud
permissions. For this feature to work, the controller feature gate
<code>ObjectLevelWorkloadIdentity</code> must be enabled. See a complete
guide
<a href="https://fluxcd.io/flux/integrations/">here</a>.</p>
<p>Kustomization API now supports the value
<code>WaitForTermination</code> for the
<code>.spec.deletionPolicy</code> field. This instructs the controller
to wait for the
deletion of all resources managed by the Kustomization before allowing
the
Kustomization itself to be deleted. See docs
<a
href="https://fluxcd.io/flux/components/kustomize/kustomizations/#deletion-policy">here</a>.</p>
<p>In addition, the Kubernetes dependencies have been updated to v1.33
and
various other controller dependencies have been updated to their latest
version.
The controller is now built with Go 1.24.</p>
<p>Fixes:</p>
<ul>
<li>Fix performance regression due to using client without cache
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1436">#1436</a></li>
<li>Fix secret value showing up in logs
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1372">#1372</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>[RFC-0010] Introduce KMS provider decryption with service account
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1426">#1426</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1449">#1449</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1456">#1456</a></li>
<li>Add <code>WaitForTermination</code> option to DeletionPolicy
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1444">#1444</a></li>
<li>Skip emitting events for suspended Kustomizations
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1396">#1396</a></li>
<li>Various dependency updates
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1458">#1458</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1448">#1448</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1433">#1433</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1435">#1435</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1429">#1429</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1414">#1414</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1410">#1410</a>
<a
href="https://redirect.github.com/fluxcd/kustomize-controller/pull/1401">#1401</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/f54038e15d1bf861e7028757fb6e7a336471a54c"><code>f54038e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1460">#1460</a>
from fluxcd/release-v1.6.0</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/6efc3ebe0a4656e45e66529efa6a69a54ed0908c"><code>6efc3eb</code></a>
Release v1.6.0</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/9eb8ca73ca811175ab2bdc02f28e1a233cade136"><code>9eb8ca7</code></a>
Add changelog entry for v1.6.0</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/24e54da3cf5b05dcdfa0596a07a90618d3c2dd18"><code>24e54da</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1458">#1458</a>
from fluxcd/oci-ga</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/ff76a9198731eab343d86d23857fb9ca6cfea101"><code>ff76a91</code></a>
Update controller to OCIRepository v1 (GA)</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/f2db6a2db6a6ac91b57addf227fc5a0beb7ca28c"><code>f2db6a2</code></a>
Update dependencies</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/ada569f859151189ddf36b6c85105c114a5ef17e"><code>ada569f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1448">#1448</a>
from fluxcd/dependabot/github_actions/ci-b758b462f2</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/1d32962c17cba06fffa0947f452659c149e37018"><code>1d32962</code></a>
Bump the ci group across 1 directory with 4 updates</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/e537b99a17dfdcab2c89ce6dcf6dc44192db7a02"><code>e537b99</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/kustomize-controller/issues/1456">#1456</a>
from fluxcd/rfc-0010-docs</li>
<li><a
href="https://github.com/fluxcd/kustomize-controller/commit/8303b0854d28118a1d7bb6e76751033dd8e54faf"><code>8303b08</code></a>
[RFC-0010] Link workload identity docs to complete guide</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/kustomize-controller/compare/v1.5.1...v1.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/notification-controller/api` from 1.5.0 to
1.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/notification-controller/releases">github.com/fluxcd/notification-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.0</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/notification-controller/blob/v1.6.0/CHANGELOG.md">v1.6.0
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/notification-controller:v1.6.0</code></li>
<li><code>ghcr.io/fluxcd/notification-controller:v1.6.0</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/notification-controller/blob/main/CHANGELOG.md">github.com/fluxcd/notification-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.0</h2>
<p><strong>Release date:</strong> 2025-05-27</p>
<p>This minor release comes with various bug fixes and improvements.</p>
<h3>Provider</h3>
<p>The <code>azureeventhub</code> provider now supports workload
identity both
at the controller and object levels. For object level, the
<code>.spec.serviceAccountName</code> field can be set to the name of a
service account in the same namespace that was configured with
a Managed Identity.
For object level to work, the controller feature gate
<code>ObjectLevelWorkloadIdentity</code> must be enabled. See a complete
guide
<a href="https://fluxcd.io/flux/integrations/azure/">here</a>.</p>
<p>The <code>github</code> and <code>githubdispatch</code> providers now
support authenticating
with a GitHub App. See docs
<a
href="https://fluxcd.io/flux/components/notification/providers/#github">here</a>
and
<a
href="https://fluxcd.io/flux/components/notification/providers/#github-dispatch">here</a>.</p>
<p>For commit status providers it is now possible to define a custom
status string by defining a CEL expression in the
<code>.spec.commitStatusExpr</code>
field. The variables <code>event</code>, <code>alert</code> and
<code>provider</code> are available
for the CEL expression. See
<a
href="https://fluxcd.io/flux/components/notification/providers/#custom-commit-status-messages">docs</a>.</p>
<h3>General updates</h3>
<p>In addition, the Kubernetes dependencies have been updated to v1.33
and
various other controller dependencies have been updated to their latest
version. The controller is now built with Go 1.24.</p>
<p>Fixes:</p>
<ul>
<li>Fix Slack chat.postMessage error handling
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1086">#1086</a></li>
<li>Fix pass 'certPool' to Gitea client on creation
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1084">#1084</a></li>
<li>CrossNamespaceObjectReference: Fix MaxLength validation to
kubernetes max size of 253
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1108">#1108</a></li>
<li>Sanitize proxy error logging
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1093">#1093</a></li>
</ul>
<p>Improvements:</p>
<ul>
<li>[RFC-0010] Workload Identity support for <code>azureeventhub</code>
provider
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1106">#1106</a>
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1116">#1116</a>
<a
href="https://redirect.github.com/fluxcd/notification-controller/pull/1120">#1120</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/3a6de1fcef16947f8abe6fc589bc02977663931e"><code>3a6de1f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1121">#1121</a>
from fluxcd/release-v1.6.0</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/a52f071bb932ca77d297ee59e561d4543d7e0815"><code>a52f071</code></a>
Release v1.6.0</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/0e0e912182e19cbfa11062fa8b2f30148ebdc62a"><code>0e0e912</code></a>
Add changelog entry for v1.6.0</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/7383fe8be5aa86cb603ee2deb17fb80d802feec5"><code>7383fe8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1108">#1108</a>
from larhauga/fix-crossnamespaceobjectref-maxlength</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/2284a0db5a3323f9559240aa00b8d0fab761ac10"><code>2284a0d</code></a>
CrossNamespaceObjectReference: Fix MaxLength validation to kubernetes
max siz...</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/d32f5e26cc6a396f07f29c3f6e92e4e19fee5e26"><code>d32f5e2</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1101">#1101</a>
from fluxcd/dependabot/github_actions/ci-4c7c75f92f</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/b416d684796a0e78a65f5d04ee3fcac328633ff1"><code>b416d68</code></a>
build(deps): bump the ci group across 1 directory with 14 updates</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/3842f0c471fd0b3478ac5be2229264e6dfcbd1da"><code>3842f0c</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1120">#1120</a>
from fluxcd/rfc-0010-docs</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/f2e23408077df9075953bd94e108bcf09ffa6260"><code>f2e2340</code></a>
[RFC-0010] Link workload identity docs to complete guide</li>
<li><a
href="https://github.com/fluxcd/notification-controller/commit/01dfe1208a0b32469b64af9c9f0382f0a4bf3af1"><code>01dfe12</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/notification-controller/issues/1119">#1119</a>
from fluxcd/upgrade-deps</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/notification-controller/compare/v1.5.0...v1.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/source-controller/api` from 1.5.0 to 1.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/source-controller/releases">github.com/fluxcd/source-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.0</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/source-controller/blob/v1.6.0/CHANGELOG.md">v1.6.0
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/source-controller:v1.6.0</code></li>
<li><code>ghcr.io/fluxcd/source-controller:v1.6.0</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md">github.com/fluxcd/source-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.0</h2>
<p><strong>Release date:</strong> 2025-05-27</p>
<p>This minor release promotes the OCIRepository API to GA, and comes
with new features,
improvements and bug fixes.</p>
<h3>OCIRepository</h3>
<p>The <code>OCIRepository</code> API has been promoted from
<code>v1beta2</code> to <code>v1</code> (GA).
The <code>v1</code> API is backwards compatible with
<code>v1beta2</code>.</p>
<p>OCIRepository API now supports object-level workload identity by
setting
<code>.spec.provider</code> to one of <code>aws</code>,
<code>azure</code>, or <code>gcp</code>, and setting
<code>.spec.serviceAccountName</code> to the name of a service account
in the same
namespace that has been configured with appropriate cloud permissions.
For this feature to work, the controller feature gate
<code>ObjectLevelWorkloadIdentity</code> must be enabled. See a complete
guide
<a href="https://fluxcd.io/flux/integrations/">here</a>.</p>
<p>OCIRepository API now caches registry credentials for cloud providers
by default. This behavior can be disabled or fine-tuned by adjusting the
token cache controller flags (see <a
href="https://fluxcd.io/flux/components/source/options/">docs</a>).
The token cache also exposes metrics that are documented
<a
href="https://fluxcd.io/flux/monitoring/metrics/#controller-metrics">here</a>.</p>
<h3>GitRepository</h3>
<p>GitRepository API now supports sparse checkout by setting a list
of directories in the <code>.spec.sparseCheckout</code> field. This
allows
for optimizing the amount of data fetched from the Git repository.</p>
<p>GitRepository API now supports mTLS authentication for HTTPS Git
repositories
by setting the fields <code>tls.crt</code>, <code>tls.key</code>, and
<code>ca.crt</code> in the <code>.data</code> field
of the referenced Secret in <code>.spec.secretRef</code>.</p>
<p>GitRepository API now caches credentials for non-<code>generic</code>
providers by default.
This behavior can be disabled or fine-tuned by adjusting the
token cache controller flags (see <a
href="https://fluxcd.io/flux/components/source/options/">docs</a>).
The token cache also exposes metrics that are documented
<a
href="https://fluxcd.io/flux/monitoring/metrics/#controller-metrics">here</a>.</p>
<h3>General updates</h3>
<p>In addition, the Kubernetes dependencies have been updated to v1.33
and
various other controller dependencies have been updated to their latest
version. The controller is now built with Go 1.24.</p>
<p>Fixes:</p>
<ul>
<li>Downgrade <code>Masterminds/semver</code> to v3.3.0</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/source-controller/commit/83cb98615d31294f19766cb08e649635503bf951"><code>83cb986</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1813">#1813</a>
from fluxcd/release-v1.6.0</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/465741e97a4e6c234c602b5c8b62322c9f10633e"><code>465741e</code></a>
Release v1.6.0</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/ac4afb3779d9787e2afe700a5dedabe3fe230d22"><code>ac4afb3</code></a>
Add changelog entry for v1.6.0</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/359d50d77e61886587089f00f8a84dce5e697318"><code>359d50d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1811">#1811</a>
from fluxcd/rfc-0010-docs</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/d5552220a579b0461f7559cce143ad86dc879132"><code>d555222</code></a>
[RFC-0010] Link workload identity docs to complete guide</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/fdc84c7efab772ed0107016ab4405b3dbfd28fc2"><code>fdc84c7</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1812">#1812</a>
from fluxcd/containerd-v1.7.27</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/71aa99e9347428f44d22c2f8a1f311566d358760"><code>71aa99e</code></a>
Fix flaky test</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/36e0d0dfca0c36b6be312c65ab8e3b2d78de1795"><code>36e0d0d</code></a>
Update containerd v1.7.27</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/e98b89a5a0d9eb5478587aa4977aac54105e63f8"><code>e98b89a</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1794">#1794</a>
from fluxcd/ocirepository-v1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/aadaf1c0aaf621eb9402a97401810e9f06b63942"><code>aadaf1c</code></a>
Remove deprecated status fields from OCIRepository v1</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/source-controller/compare/v1.5.0...v1.6.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -12,17 +12,17 @@ replace github.com/texttheater/golang-levenshtein => github.com/texttheater/gola
 require (
 	code.gitea.io/sdk/gitea v0.21.0
 	github.com/fluxcd/cli-utils v0.36.0-flux.13
-	github.com/fluxcd/flux2/v2 v2.5.1
-	github.com/fluxcd/helm-controller/api v1.2.0
-	github.com/fluxcd/image-automation-controller/api v0.40.0
-	github.com/fluxcd/image-reflector-controller/api v0.34.0
-	github.com/fluxcd/kustomize-controller/api v1.5.1
-	github.com/fluxcd/notification-controller/api v1.5.0
+	github.com/fluxcd/flux2/v2 v2.6.0
+	github.com/fluxcd/helm-controller/api v1.3.0
+	github.com/fluxcd/image-automation-controller/api v0.41.0
+	github.com/fluxcd/image-reflector-controller/api v0.35.0
+	github.com/fluxcd/kustomize-controller/api v1.6.0
+	github.com/fluxcd/notification-controller/api v1.6.0
 	github.com/fluxcd/pkg/apis/meta v1.12.0
 	github.com/fluxcd/pkg/runtime v0.60.0
 	github.com/fluxcd/pkg/ssa v0.48.0
 	github.com/fluxcd/pkg/version v0.7.0
-	github.com/fluxcd/source-controller/api v1.5.0
+	github.com/fluxcd/source-controller/api v1.6.0
 	github.com/open-component-model/git-controller v0.12.1
 	github.com/open-component-model/ocm-controller v0.26.1
 	github.com/open-component-model/replication-controller v0.13.1
@@ -60,7 +60,7 @@ require (
 	github.com/MakeNowJust/heredoc v1.0.0 // indirect
 	github.com/Masterminds/semver/v3 v3.3.1 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/ProtonMail/go-crypto v1.1.6 // indirect
+	github.com/ProtonMail/go-crypto v1.2.0 // indirect
 	github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
 	github.com/a8m/envsubst v1.4.3 // indirect
 	github.com/alecthomas/participle/v2 v2.1.4 // indirect
@@ -97,7 +97,7 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sts v1.33.19 // indirect
-	github.com/aws/smithy-go v1.22.2 // indirect
+	github.com/aws/smithy-go v1.22.3 // indirect
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.9.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect
@@ -143,7 +143,7 @@ require (
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/elliotchance/orderedmap v1.8.0 // indirect
-	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
+	github.com/emicklei/go-restful/v3 v3.12.2 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/evanphx/json-patch v5.9.0+incompatible // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
@@ -152,11 +152,11 @@ require (
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fluxcd/pkg/apis/acl v0.7.0 // indirect
 	github.com/fluxcd/pkg/apis/kustomize v1.10.0 // indirect
-	github.com/fluxcd/pkg/kustomize v1.17.0 // indirect
+	github.com/fluxcd/pkg/kustomize v1.18.0 // indirect
 	github.com/fluxcd/pkg/tar v0.12.0 // indirect
-	github.com/fsnotify/fsnotify v1.8.0 // indirect
+	github.com/fsnotify/fsnotify v1.9.0 // indirect
 	github.com/fvbommel/sortorder v1.1.0 // indirect
-	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
+	github.com/fxamacker/cbor/v2 v2.8.0 // indirect
 	github.com/ghodss/yaml v1.0.0 // indirect
 	github.com/go-chi/chi v4.1.2+incompatible // indirect
 	github.com/go-errors/errors v1.5.1 // indirect
@@ -170,7 +170,7 @@ require (
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-openapi/analysis v0.23.0 // indirect
 	github.com/go-openapi/errors v0.22.1 // indirect
-	github.com/go-openapi/jsonpointer v0.21.0 // indirect
+	github.com/go-openapi/jsonpointer v0.21.1 // indirect
 	github.com/go-openapi/jsonreference v0.21.0 // indirect
 	github.com/go-openapi/loads v0.22.0 // indirect
 	github.com/go-openapi/runtime v0.28.0 // indirect
@@ -272,9 +272,9 @@ require (
 	github.com/pjbgf/sha1cd v0.3.2 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/prometheus/client_golang v1.22.0 // indirect
-	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.62.0 // indirect
-	github.com/prometheus/procfs v0.15.1 // indirect
+	github.com/prometheus/client_model v0.6.2 // indirect
+	github.com/prometheus/common v0.63.0 // indirect
+	github.com/prometheus/procfs v0.16.1 // indirect
 	github.com/redis/go-redis/v9 v9.7.3 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
@@ -325,7 +325,7 @@ require (
 	github.com/xlab/treeprint v1.2.0 // indirect
 	github.com/yuin/gopher-lua v1.1.1 // indirect
 	github.com/zeebo/errs v1.4.0 // indirect
-	gitlab.com/gitlab-org/api/client-go v0.127.0 // indirect
+	gitlab.com/gitlab-org/api/client-go v0.128.0 // indirect
 	go.mongodb.org/mongo-driver v1.17.1 // indirect
 	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect
@@ -375,5 +375,5 @@ require (
 	sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
 	sigs.k8s.io/release-utils v0.11.1 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.7.0 // indirect
 )