Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps github.com/fluxcd/helm-controller/api from 1.2.0 to 1.4.0.

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.4.0

Changelog

v1.4.0 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.4.0
  • ghcr.io/fluxcd/helm-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.0-rc.1

This release candidate is meant for testing.

Container images

  • docker.io/fluxcd/helm-controller:v1.4.0-rc.1
  • ghcr.io/fluxcd/helm-controller:v1.4.0-rc.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.3.0

Changelog

v1.3.0 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.3.0
  • ghcr.io/fluxcd/helm-controller:v1.3.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.4.0

Release date: 2025-09-25

This minor release comes with various bug fixes and improvements.

⚠️ The v2beta1 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v2beta1.

The controller now supports ExternalArtifact Helm chart sources under the feature gate ExternalArtifact.

A new RetryOnFailure strategy has been added for automatic retries on Helm release failures.

Dependencies can now be evaluated using CEL expressions via the new readyExpr field, providing more flexible and powerful dependency readiness checks.

Support for workload identity authentication has been added for remote clusters. This is supported both at the controller and object levels. For object-level, enable the feature gate ObjectLevelWorkloadIdentity.

In addition, the Kubernetes dependencies have been updated to v1.34, Helm has been updated to v3.19 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.25.

Fixes:

  • Fix continuous drift due to unstable hashing of values #1267
  • Fix watch index conflict between HelmChart and OCIRepository kinds #1266
  • Fix requeue interval for SourceNotReady #1276

Improvements:

  • [RFC-0010] Add workload identity auth for remote clusters #1249
  • [RFC-0010] Support all Azure clouds for remote clusters #1262
  • [RFC-0010] Add multi-tenancy lockdown for kubeconfig #1284
  • [RFC-0010] Add object-level configuration validation #1286
  • [RFC-0012] Add ExternalArtifact feature gate and reconciliation support #1293
  • [RFC-0012] Add support for ExternalArtifact revision with digest #1296
  • Remove deprecated helm.toolkit.fluxcd.io/v2beta1 API group

... (truncated)

Commits
  • 3db605b Merge pull request #1311 from fluxcd/release-v1.4.0
  • 349a1c9 Release v1.4.0
  • 81cb78c Add changelog entry for v1.4.0
  • f716265 Merge pull request #1310 from fluxcd/fix-release
  • 60f04c9 Fix release workflow
  • a3bc6a3 Merge pull request #1309 from fluxcd/dependabot/github_actions/ci-e1f752511b
  • 54fd680 Bump fluxcd/gha-workflows from 0.3.0 to 0.4.0 in the ci group
  • 7ef5e6b Merge pull request #1307 from fluxcd/ci-improve
  • ca91a05 ci: Extract verify to Makefile
  • 82398b7 Merge pull request #1305 from fluxcd/fluxcd/gha-workflows
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) from 1.2.0 to 1.4.0.
- [Release notes](https://github.com/fluxcd/helm-controller/releases)
- [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/helm-controller@v1.2.0...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/helm-controller/api
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 29, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 29, 2025 19:29
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 29, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Superseded by #177.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/fluxcd/helm-controller/api-1.4.0 branch October 6, 2025 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant