Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Oct 6, 2025

This PR contains the following updates:

Package Change Age Confidence
github.com/fluxcd/flux2/v2 v2.7.0 -> v2.7.3 age confidence
github.com/fluxcd/kustomize-controller/api v1.7.0 -> v1.7.2 age confidence
github.com/fluxcd/source-controller/api v1.7.1 -> v1.7.3 age confidence

⚠️ This PR updates an API docstring, so you have to run make generate locally.


Release Notes

fluxcd/flux2 (github.com/fluxcd/flux2/v2)

v2.7.3

Compare Source

v2.7.2

Compare Source

Highlights

Flux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

All Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the Go 1.25.2 release notes.

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.7.1...v2.7.2

v2.7.1

Compare Source

Highlights

Flux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Improvements:

  • Extend flux migrate with support for migrating manifests in Git repositories to the latest API versions.
  • Add recommendations for configuring HelmReleases on production environments.

Fixes:

  • Fix flux migrate command to handle managed fields properly.
  • Fix self-signed TLS cert handling for public Helm repositories in source-controller.
  • Fix the default API versions used by receivers in notification-controller.
  • Fix redundant Ready condition patching in helm-controller.
  • Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.7.0...v2.7.1

fluxcd/kustomize-controller (github.com/fluxcd/kustomize-controller/api)

v1.7.2

Compare Source

Changelog

v1.7.2 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.7.2
  • ghcr.io/fluxcd/kustomize-controller:v1.7.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.7.1

Compare Source

Changelog

v1.7.1 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.7.1
  • ghcr.io/fluxcd/kustomize-controller:v1.7.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

fluxcd/source-controller (github.com/fluxcd/source-controller/api)

v1.7.3

Compare Source

Changelog

v1.7.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.7.3
  • ghcr.io/fluxcd/source-controller:v1.7.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.7.2

Compare Source

Changelog

v1.7.2 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.7.2
  • ghcr.io/fluxcd/source-controller:v1.7.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the kind/upgrade label Oct 6, 2025
@renovate renovate bot requested review from maboehm and timebertt October 6, 2025 16:35
@renovate renovate bot force-pushed the renovate/patch-fluxcd branch from 8c6092b to 56564e3 Compare October 8, 2025 17:42
@renovate renovate bot changed the title 🤖 Update module github.com/fluxcd/flux2/v2 to v2.7.1 🤖 Update fluxcd (patch) Oct 8, 2025
@renovate
Copy link
Author

renovate bot commented Oct 8, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/compute/metadata v0.8.0 -> v0.9.0
github.com/fluxcd/pkg/apis/kustomize v1.12.0 -> v1.13.0
github.com/fluxcd/pkg/kustomize v1.22.0 -> v1.23.0
github.com/fluxcd/pkg/tar v0.14.0 -> v0.15.0
github.com/prometheus/client_golang v1.23.0 -> v1.23.2
google.golang.org/genproto/googleapis/rpc v0.0.0-20250825161204-c5933d9347a5 -> v0.0.0-20251002232023-7c0ddcbb5797
google.golang.org/grpc v1.75.0 -> v1.75.1

@renovate renovate bot force-pushed the renovate/patch-fluxcd branch from 56564e3 to f2e1a5a Compare October 8, 2025 21:05
@renovate renovate bot force-pushed the renovate/patch-fluxcd branch 3 times, most recently from 4041438 to fecafbd Compare October 28, 2025 20:44
@maboehm
Copy link

maboehm commented Oct 29, 2025

/cc @timebertt
I had to generate

@maboehm maboehm enabled auto-merge (squash) October 29, 2025 12:51
maboehm
maboehm previously approved these changes Oct 29, 2025
@renovate
Copy link
Author

renovate bot commented Oct 30, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants