Skip to content

fix(deps): update flux group ( v2.8.0 → v2.8.8 )#2842

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-flux
Open

fix(deps): update flux group ( v2.8.0 → v2.8.8 )#2842
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-flux

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 1, 2026

This PR contains the following updates:

Package Type Update Change
fluxcd/flux2 Kustomization patch v2.8.0v2.8.8
ghcr.io/fluxcd/flux-manifests patch v2.8.0v2.8.8

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.8.8

Compare Source

v2.8.7

Compare Source

Highlights

Flux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix management of objects annotated with kustomize.toolkit.fluxcd.io/ssa: IfNotPresent where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)

Improvements:

  • Update go-git to v5.19.0 which fixes CVE-2026-45022 (source-controller, image-automation-controller)
  • Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.6...v2.8.7

v2.8.6

Compare Source

Highlights

Flux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)
  • Ignore force replace when server-side apply is enabled (helm-controller)
  • Fix a regression where generic providers would not forward commit status events (notification-controller)
  • Require the audience field on the GCR Receiver secret for tighter verification — will become mandatory in Flux v2.9 (notification-controller)

Improvements:

  • Introduce the MigrateAPIVersion feature gate for migrating the API version of resources in managed field entries (kustomize-controller)
  • Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.5...v2.8.6

v2.8.5

Compare Source

Highlights

Flux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)
  • Fix Azure Blob prefix option not being passed to the storage client (source-controller)

Improvements:

  • Improve error message for encrypted SSH keys without password (source-controller)
  • Add optional email and audience fields to the GCR Receiver for tighter verification (notification-controller)
  • Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.4...v2.8.5

v2.8.4

Compare Source

Highlights

Flux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix flux build ks and flux diff ks on Windows
  • Fix --source flag validation in create kustomization command

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.3...v2.8.4

v2.8.3

Compare Source

Highlights

Flux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix templating errors for charts that include --- in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.2...v2.8.3

v2.8.2

Compare Source

Highlights

Flux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)
  • Fix the Go templates bug of YAML separator --- getting concatenated to apiVersion: by updating to Helm 4.1.3 (helm-controller)
  • Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate DefaultToRetryOnFailure that improves the experience when the CancelHealthCheckOnNewRevision is enabled (helm-controller)
  • Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)
  • Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.1...v2.8.2

v2.8.1

Compare Source

Highlights

Flux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix Git commit status events being dropped for Kustomizations (notification-controller)
  • Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.8.0...v2.8.1


Configuration

📅 Schedule: (in timezone Europe/Moscow)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@mglants-bot
Copy link
Copy Markdown

mglants-bot Bot commented Mar 1, 2026

--- kubernetes/subterra/flux Kustomization: flux-system/cluster OCIRepository: flux-system/flux-manifests

+++ kubernetes/subterra/flux Kustomization: flux-system/cluster OCIRepository: flux-system/flux-manifests

@@ -7,9 +7,9 @@

     kustomize.toolkit.fluxcd.io/namespace: flux-system
   name: flux-manifests
   namespace: flux-system
 spec:
   interval: 10m
   ref:
-    tag: v2.8.0
+    tag: v2.8.8
   url: oci://ghcr.io/fluxcd/flux-manifests

@mglants-bot
Copy link
Copy Markdown

mglants-bot Bot commented Mar 1, 2026

--- kubernetes/berries/flux Kustomization: flux-system/cluster OCIRepository: flux-system/flux-manifests

+++ kubernetes/berries/flux Kustomization: flux-system/cluster OCIRepository: flux-system/flux-manifests

@@ -7,9 +7,9 @@

     kustomize.toolkit.fluxcd.io/namespace: flux-system
   name: flux-manifests
   namespace: flux-system
 spec:
   interval: 10m
   ref:
-    tag: v2.8.0
+    tag: v2.8.8
   url: oci://ghcr.io/fluxcd/flux-manifests

@renovate renovate Bot force-pushed the renovate/patch-flux branch from 83b6f8f to 8dec598 Compare March 12, 2026 17:57
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.1 ) (patch) fix(deps): update flux group ( v2.8.0 → v2.8.2 ) (patch) Mar 12, 2026
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.2 ) (patch) fix(deps): update flux group ( v2.8.0 → v2.8.3 ) (patch) Mar 16, 2026
@renovate renovate Bot force-pushed the renovate/patch-flux branch from 8dec598 to 7a99f9f Compare March 16, 2026 14:36
@renovate renovate Bot force-pushed the renovate/patch-flux branch from 7a99f9f to 368144f Compare April 7, 2026 17:24
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.3 ) (patch) fix(deps): update flux group ( v2.8.0 → v2.8.4 ) (patch) Apr 7, 2026
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.4 ) (patch) fix(deps): update flux group ( v2.8.0 → v2.8.5 ) (patch) Apr 7, 2026
@renovate renovate Bot force-pushed the renovate/patch-flux branch from 368144f to 19c71db Compare April 7, 2026 21:30
@renovate renovate Bot force-pushed the renovate/patch-flux branch from 19c71db to 1b83da7 Compare April 21, 2026 13:29
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.5 ) (patch) fix(deps): update flux group ( v2.8.0 → v2.8.6 ) (patch) Apr 21, 2026
@renovate renovate Bot force-pushed the renovate/patch-flux branch from 1b83da7 to 6b95d30 Compare April 29, 2026 11:06
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.6 ) (patch) fix(deps): update flux group ( v2.8.0 → v2.8.7 ) May 12, 2026
@renovate renovate Bot force-pushed the renovate/patch-flux branch 2 times, most recently from 09d4533 to 3e26fac Compare May 18, 2026 19:50
@renovate renovate Bot force-pushed the renovate/patch-flux branch from 3e26fac to de09f19 Compare May 20, 2026 12:57
@renovate renovate Bot changed the title fix(deps): update flux group ( v2.8.0 → v2.8.7 ) fix(deps): update flux group ( v2.8.0 → v2.8.8 ) May 20, 2026
| datasource  | package                       | from   | to     |
| ----------- | ----------------------------- | ------ | ------ |
| github-tags | fluxcd/flux2                  | v2.8.0 | v2.8.8 |
| docker      | ghcr.io/fluxcd/flux-manifests | v2.8.0 | v2.8.8 |
@renovate renovate Bot force-pushed the renovate/patch-flux branch from de09f19 to fc3ecc6 Compare May 28, 2026 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants