Skip to content

Bump the flux-deps group across 1 directory with 5 updates - #363

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/flux-deps-3ac9aa28de
Open

Bump the flux-deps group across 1 directory with 5 updates#363
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/flux-deps-3ac9aa28de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the flux-deps group with 5 updates in the / directory:

Package From To
github.com/fluxcd/pkg/apis/event 0.27.0 0.28.0
github.com/fluxcd/pkg/apis/meta 1.30.0 1.31.0
github.com/fluxcd/pkg/artifact 0.18.0 0.20.0
github.com/fluxcd/pkg/runtime 0.110.0 0.111.0
github.com/fluxcd/source-controller/api 1.9.0 1.9.4

Updates github.com/fluxcd/pkg/apis/event from 0.27.0 to 0.28.0

Commits
  • 00782ed Merge pull request #917 from fluxcd/test-auth-providers
  • 3976c50 [RFC-0010] Add tests for auth providers
  • 182841a Merge pull request #916 from fluxcd/cache-op-label
  • 1e41450 Introduce operation label for cache event metric
  • aa3cde9 Merge pull request #909 from fluxcd/auth-azure
  • 9e0e8bc [RFC-0010] Add azure auth library
  • 7eae091 Merge pull request #908 from fluxcd/auth-gcp
  • 9f68942 Merge pull request #907 from fluxcd/auth-aws
  • bb7cb58 Merge pull request #906 from fluxcd/auth-core
  • 45fbfee [RFC-0010] Add gcp auth library
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.30.0 to 1.31.0

Commits
  • b98e2b0 Merge pull request #1251 from fluxcd/release-main
  • 2dfcb7c Prepare for release
  • dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
  • 2d00796 Upgrade kubernetes to 1.36.2
  • 827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
  • be6d462 Upgrade go-git-providers and go-github
  • 023a357 Merge pull request #1248 from fluxcd/label-2.9
  • 7e8856d Add backport label for Flux 2.9
  • ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
  • 2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/artifact from 0.18.0 to 0.20.0

Commits
  • be8df7e Merge pull request #801 from fluxcd/k8s-1.31
  • 76035f8 Update Helm to v3.15.4
  • 3f5cf4c Build with Go 1.23
  • 4b90241 Update dependencies to Kubernetes v1.31.0
  • 0e61a3b Merge pull request #799 from fluxcd/dependabot/github_actions/ci-9f4b007c5b
  • 6bf4bad build(deps): bump the ci group with 4 updates
  • 968f190 Merge pull request #795 from fluxcd/dependabot/github_actions/ci-8fa51b1870
  • bce8cab build(deps): bump the ci group across 1 directory with 8 updates
  • 7d033c1 Merge pull request #798 from fluxcd/cleanup-aws-nuke
  • e98ccfa workflow: Set aws-nuke region for cleanup
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.110.0 to 0.111.0

Commits
  • b98e2b0 Merge pull request #1251 from fluxcd/release-main
  • 2dfcb7c Prepare for release
  • dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
  • 2d00796 Upgrade kubernetes to 1.36.2
  • 827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
  • be6d462 Upgrade go-git-providers and go-github
  • 023a357 Merge pull request #1248 from fluxcd/label-2.9
  • 7e8856d Add backport label for Flux 2.9
  • ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
  • 2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
  • Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.9.0 to 1.9.4

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.4

Changelog

v1.9.4 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.4
  • ghcr.io/fluxcd/source-controller:v1.9.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.3
  • ghcr.io/fluxcd/source-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.9.2

Changelog

v1.9.2 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.2
  • ghcr.io/fluxcd/source-controller:v1.9.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.9.1

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.4

Release date: 2026-08-07

This patch release aligns Helm repository index loading with upstream Helm v4 by skipping empty entries, improves the error handling in the Bucket reconciler for optional fields in Azure responses, resolves OCI Helm charts by digest so that verification and download operate on the same content, and limits GCS static authentication to secrets holding service account keys. It also updates the fluxcd/pkg dependencies, which align the ECR host detection with upstream.

Fixes:

  • Align index loading with upstream Helm v4 #2121
  • Improve error handling in Bucket reconciliation #2123
  • Pin OCI chart verification by digest #2125
  • Limit GCS static authentication to service account keys #2130

Improvements:

  • Update fluxcd/pkg dependencies #2131

1.9.3

Release date: 2026-07-13

This patch release fixes the HelmChart CRD description for .status.url, which was copy-pasted from Bucket and pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact.

Improvements:

  • Fix HelmChartStatus.URL doc-comment referencing BucketStatus #2110

1.9.2

Release date: 2026-07-07

This patch release disables Flux variable substitution on the source-controller CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. It also caches the registry authorization token during Notation verification, so the token is fetched once per verification instead of once per request, reducing token-endpoint traffic against the registry.

Fixes:

... (truncated)

Commits
  • 6b10a9e Merge pull request #2132 from fluxcd/release-v1.9.4
  • 5e277c3 Release v1.9.4
  • d687f6d Add changelog entry for v1.9.4
  • 9dbb071 Merge pull request #2131 from fluxcd/update-pkg-deps/release/v1.9.x
  • f20cec3 Update fluxcd/pkg dependencies
  • aaae31a Merge pull request #2130 from fluxcd/backport-2126-to-release/v1.9.x
  • 66b3951 fix: restrict GCS static auth to SA keys
  • 6b6b3ee Merge pull request #2125 from fluxcd/backport-2124-to-release/v1.9.x
  • 2a7329f fix: pin OCI chart verification by digest
  • cd41ce8 Merge pull request #2123 from fluxcd/backport-2122-to-release/v1.9.x
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Jul 1, 2026
@dependabot dependabot Bot changed the title Bump the flux-deps group with 5 updates Bump the flux-deps group across 1 directory with 5 updates Aug 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/flux-deps-3ac9aa28de branch from 066e80a to c341959 Compare August 1, 2026 03:03
Bumps the flux-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.27.0` | `0.28.0` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.30.0` | `1.31.0` |
| [github.com/fluxcd/pkg/artifact](https://github.com/fluxcd/pkg) | `0.18.0` | `0.20.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.110.0` | `0.111.0` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.9.0` | `1.9.4` |



Updates `github.com/fluxcd/pkg/apis/event` from 0.27.0 to 0.28.0
- [Commits](fluxcd/pkg@git/v0.27.0...git/v0.28.0)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.30.0 to 1.31.0
- [Commits](fluxcd/pkg@apis/meta/v1.30.0...apis/meta/v1.31.0)

Updates `github.com/fluxcd/pkg/artifact` from 0.18.0 to 0.20.0
- [Commits](fluxcd/pkg@git/v0.18.0...git/v0.20.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.110.0 to 0.111.0
- [Commits](fluxcd/pkg@runtime/v0.110.0...runtime/v0.111.0)

Updates `github.com/fluxcd/source-controller/api` from 1.9.0 to 1.9.4
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.0...v1.9.4)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flux-deps
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flux-deps
- dependency-name: github.com/fluxcd/pkg/artifact
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flux-deps
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.111.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: flux-deps
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: flux-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/flux-deps-3ac9aa28de branch from c341959 to 7b17c9a Compare September 1, 2026 03:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants