all: children: controllers: hosts: controller: null zuul_unreachable: hosts: {} hosts: controller: ansible_connection: ssh ansible_host: 199.204.45.95 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_version: 1.28.13 molecule_install_collection_siblings: true molecule_scenario: secretgen-controller nodepool: az: nova cloud: public external_id: c1cca5fb-70ff-43fb-929e-52de29638a54 host_id: f65535b9871d01a5cee8ece1826b232b808f65cb7b3c2fb89f8c9325 interface_ip: 199.204.45.95 label: ubuntu-noble node_properties: {} private_ipv4: 199.204.45.95 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.95 public_ipv6: 2604:e100:1:0:f816:3eff:fe16:b6b5 region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: c1cca5fb-70ff-43fb-929e-52de29638a54 host_id: f65535b9871d01a5cee8ece1826b232b808f65cb7b3c2fb89f8c9325 interface_ip: 199.204.45.95 label: ubuntu-noble node_properties: {} private_ipv4: 199.204.45.95 private_ipv6: null provider: yul1 public_ipv4: 199.204.45.95 public_ipv6: 2604:e100:1:0:f816:3eff:fe16:b6b5 region: ca-ymq-1 slot: null uuid: null vars: cilium_helm_values: operator: replicas: 1 kubernetes_version: 1.28.13 molecule_install_collection_siblings: true molecule_scenario: secretgen-controller zuul: _inheritance_path: - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 6af247cf0f334067a11b000c82f38393 build_refs: - branch: main change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.9.3\n\n> \u2139\uFE0F **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.9.3` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.9.3`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n### [`v2.9.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2)\n\n##### Highlights\n\nFlux v2.9.2 is a patch release. The main fix addresses a regression introduced in\nv2.9.1 where a Kustomization with `openapi.path` pointing to a URL failed to\nreconcile with `failed to read OpenAPI schema`. This release also corrects several\nCRD field descriptions that contained inaccurate or leaked content. Users are\nencouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a regression where a Kustomization with `openapi.path` pointing to a URL failed to reconcile with `failed to read OpenAPI schema` (kustomize-controller)\n- Fix the `HelmChart` CRD description for `.status.url`, which pointed users at `BucketStatus.Artifact` instead of `HelmChartStatus.Artifact` (source-controller)\n- Fix the `ImageRepository` CRD description for `.status.observedExclusionList`, which referred to `spec.lastScanResult` instead of `status.lastScanResult` (image-reflector-controller)\n- Fix the `ImageUpdateAutomation` CRD description for `.status.observedSourceRevision`, which had a stray Go struct declaration leaking into it (image-automation-controller)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- source-controller [v1.9.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.3/CHANGELOG.md)\n- kustomize-controller [v1.9.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.3/CHANGELOG.md)\n- helm-controller [v1.6.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)\n- notification-controller [v1.9.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)\n- image-reflector-controller [v1.2.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.3/CHANGELOG.md)\n- image-automation-controller [v1.2.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.3/CHANGELOG.md)\n- source-watcher [v2.2.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5984](https://redirect.github.com/fluxcd/flux2/pull/5984)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5990](https://redirect.github.com/fluxcd/flux2/pull/5990)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5994](https://redirect.github.com/fluxcd/flux2/pull/5994)\n\n**Full Changelog**: \n\n### [`v2.9.1`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n### [`v2.9.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.8...v2.9.0)\n\n#### Highlights\n\nFlux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.9 GA blog post](https://fluxcd.io/blog/2026/06/flux-v2.9.0/).\n\nOverview of the new features:\n\n- Flux CLI Plugin System with the Mirror and Schema plugins (`flux plugin`)\n- Server-Side Apply field ignore rules for fine-grained drift control (`Kustomization`)\n- SOPS decryption with the Age post-quantum cipher (`Kustomization`)\n- Kubernetes Workload Identity authentication for OpenBao and Vault (`Kustomization`)\n- Helm post-render strategies, including chart hooks support (`HelmRelease`)\n- Literal mode for Helm values references mirroring `helm --set-literal` (`HelmRelease`)\n- Allow empty kind in CEL health check expressions (`Kustomization`, `HelmRelease`)\n- Git commit signing and verification with SSH keys (`GitRepository`, `ImageUpdateAutomation`)\n- AWS CodeCommit authentication using Workload Identity (`GitRepository`)\n- Custom Sigstore trusted root for keyless verification in air-gapped environments (`OCIRepository`)\n- Path pattern directory discovery for monorepos (`ArtifactGenerator`)\n- Secret-less, OIDC-secured webhook Receivers (`Receiver`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` \ | `>= 1.35.0` |\n| `v1.36` | `>= 1.36.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `image.toolkit.fluxcd.io/v1beta2` and `notification.toolkit.fluxcd.io/v1beta2`\nhave reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.9.\n\n#### Components changelog\n\n- source-controller [v1.9.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.1/CHANGELOG.md)\n- kustomize-controller [v1.9.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.1/CHANGELOG.md)\n- notification-controller [v1.9.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.1/CHANGELOG.md)\n- helm-controller [v1.6.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v1.2.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.1/CHANGELOG.md)\n- image-automation-controller [v1.2.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.1/CHANGELOG.md)\n- source-watcher [v2.2.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- Add backport label for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5732](https://redirect.github.com/fluxcd/flux2/pull/5732)\n- Remove no longer needed workaround for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5733](https://redirect.github.com/fluxcd/flux2/pull/5733)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5740](https://redirect.github.com/fluxcd/flux2/pull/5740)\n- Add missing things to release notes template by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5743](https://redirect.github.com/fluxcd/flux2/pull/5743)\n- ci: add top-level permissions to upgrade-fluxcd-pkg workflow by [@​gaganhr94](https://redirect.github.com/gaganhr94) in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- build(deps): bump the ci group across 1 directory with 11 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5764](https://redirect.github.com/fluxcd/flux2/pull/5764)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5766](https://redirect.github.com/fluxcd/flux2/pull/5766)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5769](https://redirect.github.com/fluxcd/flux2/pull/5769)\n- Add target branch name to update branch by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5773](https://redirect.github.com/fluxcd/flux2/pull/5773)\n- Fix/resume exit code by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5701](https://redirect.github.com/fluxcd/flux2/pull/5701)\n- Mark RFC 0010, 0011 and 0012 as implemented by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5776](https://redirect.github.com/fluxcd/flux2/pull/5776)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5780](https://redirect.github.com/fluxcd/flux2/pull/5780)\n- Add --resolve-symlinks flag to build and push artifact commands by [@​rohansood10](https://redirect.github.com/rohansood10) in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- fix: validate --source flag in create kustomization command by [@​gma1k](https://redirect.github.com/gma1k) in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5821](https://redirect.github.com/fluxcd/flux2/pull/5821)\n- Add `--show-source` to `flux get ks` and `flux get hr` by [@​rafaelperoco](https://redirect.github.com/rafaelperoco) in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- Add `flux create secret receiver` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5835](https://redirect.github.com/fluxcd/flux2/pull/5835)\n- fix: handle multiple symlinks to same target in build artifact by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- Add `--in-memory-build` to `flux build ks` and `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- Migrate end-to-end test to latest cloud SDKs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5840](https://redirect.github.com/fluxcd/flux2/pull/5840)\n- docs: Add AI Coding Assistants Guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5841](https://redirect.github.com/fluxcd/flux2/pull/5841)\n- Add AI Agents guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5847](https://redirect.github.com/fluxcd/flux2/pull/5847)\n- \\[RFC-0013] Flux CLI Plugin System by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5795](https://redirect.github.com/fluxcd/flux2/pull/5795)\n- Add `--ignore-not-found` to `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5845](https://redirect.github.com/fluxcd/flux2/pull/5845)\n- \\[RFC-0013] Implement plugin system by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5849](https://redirect.github.com/fluxcd/flux2/pull/5849)\n- build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5853](https://redirect.github.com/fluxcd/flux2/pull/5853)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5856](https://redirect.github.com/fluxcd/flux2/pull/5856)\n- Add digest pinning support to `flux plugin install` by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5872](https://redirect.github.com/fluxcd/flux2/pull/5872)\n- Add `--ns-follows-kube-context` global flag for using the kubeconfig context namespace by [@​jtyr](https://redirect.github.com/jtyr) in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- include source-watcher in install.yaml manifests by [@​tmmorin](https://redirect.github.com/tmmorin) in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5890](https://redirect.github.com/fluxcd/flux2/pull/5890)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5903](https://redirect.github.com/fluxcd/flux2/pull/5903)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5907](https://redirect.github.com/fluxcd/flux2/pull/5907)\n- Validate Helm source URL schemes by [@​immanuwell](https://redirect.github.com/immanuwell) in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- Introduce `flux trigger receiver` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5908](https://redirect.github.com/fluxcd/flux2/pull/5908)\n- refactor(api): migrate MakeDependsOn to shared apis/meta func by [@​vecil](https://redirect.github.com/vecil) in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- Update to Kubernetes 1.36 and Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5924](https://redirect.github.com/fluxcd/flux2/pull/5924)\n- build(deps): bump the ci group across 1 directory with 19 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5925](https://redirect.github.com/fluxcd/flux2/pull/5925)\n- Run conformance tests for Kubernetes 1.36 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5926](https://redirect.github.com/fluxcd/flux2/pull/5926)\n- Add support for AWS CodeCommit to `flux bootstrap git` by [@​taraspos](https://redirect.github.com/taraspos) in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- Validate plugin binary path by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5927](https://redirect.github.com/fluxcd/flux2/pull/5927)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5928](https://redirect.github.com/fluxcd/flux2/pull/5928)\n- fix: preserve invalid metadata.labels in `flux build ks` by [@​raffis](https://redirect.github.com/raffis) in [#​5906](https://redirect.github.com/fluxcd/flux2/pull/5906)\n- build: target host arch for local builds/envtest by [@​stealthybox](https://redirect.github.com/stealthybox) in [#​5932](https://redirect.github.com/fluxcd/flux2/pull/5932)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5938](https://redirect.github.com/fluxcd/flux2/pull/5938)\n- Support specifing sparseCheckout in flux bootstrap by [@​piny940](https://redirect.github.com/piny940) in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5944](https://redirect.github.com/fluxcd/flux2/pull/5944)\n- Honor `ks.spec.postBuild.substituteStrategy` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5945](https://redirect.github.com/fluxcd/flux2/pull/5945)\n- Add DriftIgnoreRules support to flux diff kustomization by [@​dipti-pai](https://redirect.github.com/dipti-pai) in [#​5923](https://redirect.github.com/fluxcd/flux2/pull/5923)\n- Allow signing commits using SSH key by [@​hiddeco](https://redirect.github.com/hiddeco) in [#​5920](https://redirect.github.com/fluxcd/flux2/pull/5920)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5950](https://redirect.github.com/fluxcd/flux2/pull/5950)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5937](https://redirect.github.com/fluxcd/flux2/pull/5937)\n- cmd: support `type!=status` in get --status-selector by [@​3uzbcqje](https://redirect.github.com/3uzbcqje) in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- Fix `flux get all --status-selector` for empty results and notification resources by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5954](https://redirect.github.com/fluxcd/flux2/pull/5954)\n- Upgrade go-git-providers to v0.27.0 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5956](https://redirect.github.com/fluxcd/flux2/pull/5956)\n- Fix using Receiver adapter for ArtifactGenerator by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5957](https://redirect.github.com/fluxcd/flux2/pull/5957)\n- feat: Install Plugins alongside Flux setup in gh actions by [@​gat786](https://redirect.github.com/gat786) in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5960](https://redirect.github.com/fluxcd/flux2/pull/5960)\n- Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by [@​dme86](https://redirect.github.com/dme86) in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5963](https://redirect.github.com/fluxcd/flux2/pull/5963)\n\n#### New Contributors\n\n- [@​gaganhr94](https://redirect.github.com/gaganhr94) made their first contribution in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- [@​rohansood10](https://redirect.github.com/rohansood10) made their first contribution in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- [@​gma1k](https://redirect.github.com/gma1k) made their first contribution in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- [@​rafaelperoco](https://redirect.github.com/rafaelperoco) made their first contribution in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) made their first contribution in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- [@​rycli](https://redirect.github.com/rycli) made their first contribution in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- [@​jtyr](https://redirect.github.com/jtyr) made their first contribution in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- [@​tmmorin](https://redirect.github.com/tmmorin) made their first contribution in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- [@​immanuwell](https://redirect.github.com/immanuwell) made their first contribution in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- [@​vecil](https://redirect.github.com/vecil) made their first contribution in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- [@​taraspos](https://redirect.github.com/taraspos) made their first contribution in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- [@​piny940](https://redirect.github.com/piny940) made their first contribution in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- [@​3uzbcqje](https://redirect.github.com/3uzbcqje) made their first contribution in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- [@​gat786](https://redirect.github.com/gat786) made their first contribution in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- [@​dme86](https://redirect.github.com/dme86) made their first contribution in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n\n**Full Changelog**: \n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n##### Highlights\n\nFlux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)\n- Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)\n- Stop force-applying non-CRD objects placed under a chart's `crds/` directory (helm-controller)\n- Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)\n- Improve path handling in the source reconcilers (source-controller)\n- Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)\n\nImprovements:\n\n- Update go-git to v5.19.1 which fixes [CVE-2026-45571](https://redirect.github.com/advisories/GHSA-crhj-59gh-8x96) and [CVE-2026-45570](https://redirect.github.com/advisories/GHSA-m7cr-m3pv-hgrp) (source-controller, image-automation-controller)\n- Move Helm back to upstream v4.2.0 (source-controller, helm-controller)\n- Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)\n- Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- helm-controller [v1.5.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.5/CHANGELOG.md)\n- image-automation-controller [v1.1.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.4/CHANGELOG.md)\n- image-reflector-controller [v1.1.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.2/CHANGELOG.md)\n- source-controller [v1.8.5](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5904](https://redirect.github.com/fluxcd/flux2/pull/5904)\n\n**Full Changelog**: \n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n##### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n##### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n##### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n##### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n##### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n##### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n##### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n##### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n##### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F \ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/sou\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 commit_id: 027c126e1262e178a6c6300c3932f8754feec736 patchset: 027c126e1262e178a6c6300c3932f8754feec736 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null buildset: f3b88482f9024e51a7d3b51cc2e17c60 buildset_refs: - branch: main change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.9.3\n\n> \u2139\uFE0F **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.9.3` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.9.3`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n### [`v2.9.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2)\n\n##### Highlights\n\nFlux v2.9.2 is a patch release. The main fix addresses a regression introduced in\nv2.9.1 where a Kustomization with `openapi.path` pointing to a URL failed to\nreconcile with `failed to read OpenAPI schema`. This release also corrects several\nCRD field descriptions that contained inaccurate or leaked content. Users are\nencouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a regression where a Kustomization with `openapi.path` pointing to a URL failed to reconcile with `failed to read OpenAPI schema` (kustomize-controller)\n- Fix the `HelmChart` CRD description for `.status.url`, which pointed users at `BucketStatus.Artifact` instead of `HelmChartStatus.Artifact` (source-controller)\n- Fix the `ImageRepository` CRD description for `.status.observedExclusionList`, which referred to `spec.lastScanResult` instead of `status.lastScanResult` (image-reflector-controller)\n- Fix the `ImageUpdateAutomation` CRD description for `.status.observedSourceRevision`, which had a stray Go struct declaration leaking into it (image-automation-controller)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- source-controller [v1.9.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.3/CHANGELOG.md)\n- kustomize-controller [v1.9.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.3/CHANGELOG.md)\n- helm-controller [v1.6.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)\n- notification-controller [v1.9.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)\n- image-reflector-controller [v1.2.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.3/CHANGELOG.md)\n- image-automation-controller [v1.2.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.3/CHANGELOG.md)\n- source-watcher [v2.2.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5984](https://redirect.github.com/fluxcd/flux2/pull/5984)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5990](https://redirect.github.com/fluxcd/flux2/pull/5990)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5994](https://redirect.github.com/fluxcd/flux2/pull/5994)\n\n**Full Changelog**: \n\n### [`v2.9.1`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n### [`v2.9.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.8...v2.9.0)\n\n#### Highlights\n\nFlux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.9 GA blog post](https://fluxcd.io/blog/2026/06/flux-v2.9.0/).\n\nOverview of the new features:\n\n- Flux CLI Plugin System with the Mirror and Schema plugins (`flux plugin`)\n- Server-Side Apply field ignore rules for fine-grained drift control (`Kustomization`)\n- SOPS decryption with the Age post-quantum cipher (`Kustomization`)\n- Kubernetes Workload Identity authentication for OpenBao and Vault (`Kustomization`)\n- Helm post-render strategies, including chart hooks support (`HelmRelease`)\n- Literal mode for Helm values references mirroring `helm --set-literal` (`HelmRelease`)\n- Allow empty kind in CEL health check expressions (`Kustomization`, `HelmRelease`)\n- Git commit signing and verification with SSH keys (`GitRepository`, `ImageUpdateAutomation`)\n- AWS CodeCommit authentication using Workload Identity (`GitRepository`)\n- Custom Sigstore trusted root for keyless verification in air-gapped environments (`OCIRepository`)\n- Path pattern directory discovery for monorepos (`ArtifactGenerator`)\n- Secret-less, OIDC-secured webhook Receivers (`Receiver`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` \ | `>= 1.35.0` |\n| `v1.36` | `>= 1.36.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `image.toolkit.fluxcd.io/v1beta2` and `notification.toolkit.fluxcd.io/v1beta2`\nhave reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.9.\n\n#### Components changelog\n\n- source-controller [v1.9.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.1/CHANGELOG.md)\n- kustomize-controller [v1.9.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.1/CHANGELOG.md)\n- notification-controller [v1.9.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.1/CHANGELOG.md)\n- helm-controller [v1.6.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v1.2.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.1/CHANGELOG.md)\n- image-automation-controller [v1.2.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.1/CHANGELOG.md)\n- source-watcher [v2.2.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- Add backport label for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5732](https://redirect.github.com/fluxcd/flux2/pull/5732)\n- Remove no longer needed workaround for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5733](https://redirect.github.com/fluxcd/flux2/pull/5733)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5740](https://redirect.github.com/fluxcd/flux2/pull/5740)\n- Add missing things to release notes template by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5743](https://redirect.github.com/fluxcd/flux2/pull/5743)\n- ci: add top-level permissions to upgrade-fluxcd-pkg workflow by [@​gaganhr94](https://redirect.github.com/gaganhr94) in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- build(deps): bump the ci group across 1 directory with 11 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5764](https://redirect.github.com/fluxcd/flux2/pull/5764)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5766](https://redirect.github.com/fluxcd/flux2/pull/5766)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5769](https://redirect.github.com/fluxcd/flux2/pull/5769)\n- Add target branch name to update branch by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5773](https://redirect.github.com/fluxcd/flux2/pull/5773)\n- Fix/resume exit code by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5701](https://redirect.github.com/fluxcd/flux2/pull/5701)\n- Mark RFC 0010, 0011 and 0012 as implemented by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5776](https://redirect.github.com/fluxcd/flux2/pull/5776)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5780](https://redirect.github.com/fluxcd/flux2/pull/5780)\n- Add --resolve-symlinks flag to build and push artifact commands by [@​rohansood10](https://redirect.github.com/rohansood10) in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- fix: validate --source flag in create kustomization command by [@​gma1k](https://redirect.github.com/gma1k) in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5821](https://redirect.github.com/fluxcd/flux2/pull/5821)\n- Add `--show-source` to `flux get ks` and `flux get hr` by [@​rafaelperoco](https://redirect.github.com/rafaelperoco) in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- Add `flux create secret receiver` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5835](https://redirect.github.com/fluxcd/flux2/pull/5835)\n- fix: handle multiple symlinks to same target in build artifact by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- Add `--in-memory-build` to `flux build ks` and `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- Migrate end-to-end test to latest cloud SDKs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5840](https://redirect.github.com/fluxcd/flux2/pull/5840)\n- docs: Add AI Coding Assistants Guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5841](https://redirect.github.com/fluxcd/flux2/pull/5841)\n- Add AI Agents guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5847](https://redirect.github.com/fluxcd/flux2/pull/5847)\n- \\[RFC-0013] Flux CLI Plugin System by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5795](https://redirect.github.com/fluxcd/flux2/pull/5795)\n- Add `--ignore-not-found` to `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5845](https://redirect.github.com/fluxcd/flux2/pull/5845)\n- \\[RFC-0013] Implement plugin system by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5849](https://redirect.github.com/fluxcd/flux2/pull/5849)\n- build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5853](https://redirect.github.com/fluxcd/flux2/pull/5853)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5856](https://redirect.github.com/fluxcd/flux2/pull/5856)\n- Add digest pinning support to `flux plugin install` by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5872](https://redirect.github.com/fluxcd/flux2/pull/5872)\n- Add `--ns-follows-kube-context` global flag for using the kubeconfig context namespace by [@​jtyr](https://redirect.github.com/jtyr) in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- include source-watcher in install.yaml manifests by [@​tmmorin](https://redirect.github.com/tmmorin) in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5890](https://redirect.github.com/fluxcd/flux2/pull/5890)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5903](https://redirect.github.com/fluxcd/flux2/pull/5903)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5907](https://redirect.github.com/fluxcd/flux2/pull/5907)\n- Validate Helm source URL schemes by [@​immanuwell](https://redirect.github.com/immanuwell) in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- Introduce `flux trigger receiver` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5908](https://redirect.github.com/fluxcd/flux2/pull/5908)\n- refactor(api): migrate MakeDependsOn to shared apis/meta func by [@​vecil](https://redirect.github.com/vecil) in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- Update to Kubernetes 1.36 and Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5924](https://redirect.github.com/fluxcd/flux2/pull/5924)\n- build(deps): bump the ci group across 1 directory with 19 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5925](https://redirect.github.com/fluxcd/flux2/pull/5925)\n- Run conformance tests for Kubernetes 1.36 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5926](https://redirect.github.com/fluxcd/flux2/pull/5926)\n- Add support for AWS CodeCommit to `flux bootstrap git` by [@​taraspos](https://redirect.github.com/taraspos) in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- Validate plugin binary path by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5927](https://redirect.github.com/fluxcd/flux2/pull/5927)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5928](https://redirect.github.com/fluxcd/flux2/pull/5928)\n- fix: preserve invalid metadata.labels in `flux build ks` by [@​raffis](https://redirect.github.com/raffis) in [#​5906](https://redirect.github.com/fluxcd/flux2/pull/5906)\n- build: target host arch for local builds/envtest by [@​stealthybox](https://redirect.github.com/stealthybox) in [#​5932](https://redirect.github.com/fluxcd/flux2/pull/5932)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5938](https://redirect.github.com/fluxcd/flux2/pull/5938)\n- Support specifing sparseCheckout in flux bootstrap by [@​piny940](https://redirect.github.com/piny940) in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5944](https://redirect.github.com/fluxcd/flux2/pull/5944)\n- Honor `ks.spec.postBuild.substituteStrategy` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5945](https://redirect.github.com/fluxcd/flux2/pull/5945)\n- Add DriftIgnoreRules support to flux diff kustomization by [@​dipti-pai](https://redirect.github.com/dipti-pai) in [#​5923](https://redirect.github.com/fluxcd/flux2/pull/5923)\n- Allow signing commits using SSH key by [@​hiddeco](https://redirect.github.com/hiddeco) in [#​5920](https://redirect.github.com/fluxcd/flux2/pull/5920)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5950](https://redirect.github.com/fluxcd/flux2/pull/5950)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5937](https://redirect.github.com/fluxcd/flux2/pull/5937)\n- cmd: support `type!=status` in get --status-selector by [@​3uzbcqje](https://redirect.github.com/3uzbcqje) in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- Fix `flux get all --status-selector` for empty results and notification resources by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5954](https://redirect.github.com/fluxcd/flux2/pull/5954)\n- Upgrade go-git-providers to v0.27.0 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5956](https://redirect.github.com/fluxcd/flux2/pull/5956)\n- Fix using Receiver adapter for ArtifactGenerator by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5957](https://redirect.github.com/fluxcd/flux2/pull/5957)\n- feat: Install Plugins alongside Flux setup in gh actions by [@​gat786](https://redirect.github.com/gat786) in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5960](https://redirect.github.com/fluxcd/flux2/pull/5960)\n- Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by [@​dme86](https://redirect.github.com/dme86) in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5963](https://redirect.github.com/fluxcd/flux2/pull/5963)\n\n#### New Contributors\n\n- [@​gaganhr94](https://redirect.github.com/gaganhr94) made their first contribution in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- [@​rohansood10](https://redirect.github.com/rohansood10) made their first contribution in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- [@​gma1k](https://redirect.github.com/gma1k) made their first contribution in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- [@​rafaelperoco](https://redirect.github.com/rafaelperoco) made their first contribution in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) made their first contribution in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- [@​rycli](https://redirect.github.com/rycli) made their first contribution in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- [@​jtyr](https://redirect.github.com/jtyr) made their first contribution in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- [@​tmmorin](https://redirect.github.com/tmmorin) made their first contribution in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- [@​immanuwell](https://redirect.github.com/immanuwell) made their first contribution in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- [@​vecil](https://redirect.github.com/vecil) made their first contribution in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- [@​taraspos](https://redirect.github.com/taraspos) made their first contribution in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- [@​piny940](https://redirect.github.com/piny940) made their first contribution in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- [@​3uzbcqje](https://redirect.github.com/3uzbcqje) made their first contribution in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- [@​gat786](https://redirect.github.com/gat786) made their first contribution in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- [@​dme86](https://redirect.github.com/dme86) made their first contribution in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n\n**Full Changelog**: \n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n##### Highlights\n\nFlux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)\n- Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)\n- Stop force-applying non-CRD objects placed under a chart's `crds/` directory (helm-controller)\n- Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)\n- Improve path handling in the source reconcilers (source-controller)\n- Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)\n\nImprovements:\n\n- Update go-git to v5.19.1 which fixes [CVE-2026-45571](https://redirect.github.com/advisories/GHSA-crhj-59gh-8x96) and [CVE-2026-45570](https://redirect.github.com/advisories/GHSA-m7cr-m3pv-hgrp) (source-controller, image-automation-controller)\n- Move Helm back to upstream v4.2.0 (source-controller, helm-controller)\n- Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)\n- Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- helm-controller [v1.5.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.5/CHANGELOG.md)\n- image-automation-controller [v1.1.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.4/CHANGELOG.md)\n- image-reflector-controller [v1.1.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.2/CHANGELOG.md)\n- source-controller [v1.8.5](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5904](https://redirect.github.com/fluxcd/flux2/pull/5904)\n\n**Full Changelog**: \n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n##### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n##### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n##### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n##### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n##### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n##### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n##### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n##### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n##### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F \ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/sou\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 commit_id: 027c126e1262e178a6c6300c3932f8754feec736 patchset: 027c126e1262e178a6c6300c3932f8754feec736 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.9.3\n\n> \u2139\uFE0F **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.9.3` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.9.3`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n### [`v2.9.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2)\n\n##### Highlights\n\nFlux v2.9.2 is a patch release. The main fix addresses a regression introduced in\nv2.9.1 where a Kustomization with `openapi.path` pointing to a URL failed to\nreconcile with `failed to read OpenAPI schema`. This release also corrects several\nCRD field descriptions that contained inaccurate or leaked content. Users are\nencouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a regression where a Kustomization with `openapi.path` pointing to a URL failed to reconcile with `failed to read OpenAPI schema` (kustomize-controller)\n- Fix the `HelmChart` CRD description for `.status.url`, which pointed users at `BucketStatus.Artifact` instead of `HelmChartStatus.Artifact` (source-controller)\n- Fix the `ImageRepository` CRD description for `.status.observedExclusionList`, which referred to `spec.lastScanResult` instead of `status.lastScanResult` (image-reflector-controller)\n- Fix the `ImageUpdateAutomation` CRD description for `.status.observedSourceRevision`, which had a stray Go struct declaration leaking into it (image-automation-controller)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- source-controller [v1.9.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.3/CHANGELOG.md)\n- kustomize-controller [v1.9.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.3/CHANGELOG.md)\n- helm-controller [v1.6.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)\n- notification-controller [v1.9.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)\n- image-reflector-controller [v1.2.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.3/CHANGELOG.md)\n- image-automation-controller [v1.2.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.3/CHANGELOG.md)\n- source-watcher [v2.2.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5984](https://redirect.github.com/fluxcd/flux2/pull/5984)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5990](https://redirect.github.com/fluxcd/flux2/pull/5990)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5994](https://redirect.github.com/fluxcd/flux2/pull/5994)\n\n**Full Changelog**: \n\n### [`v2.9.1`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n### [`v2.9.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.8...v2.9.0)\n\n#### Highlights\n\nFlux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.9 GA blog post](https://fluxcd.io/blog/2026/06/flux-v2.9.0/).\n\nOverview of the new features:\n\n- Flux CLI Plugin System with the Mirror and Schema plugins (`flux plugin`)\n- Server-Side Apply field ignore rules for fine-grained drift control (`Kustomization`)\n- SOPS decryption with the Age post-quantum cipher (`Kustomization`)\n- Kubernetes Workload Identity authentication for OpenBao and Vault (`Kustomization`)\n- Helm post-render strategies, including chart hooks support (`HelmRelease`)\n- Literal mode for Helm values references mirroring `helm --set-literal` (`HelmRelease`)\n- Allow empty kind in CEL health check expressions (`Kustomization`, `HelmRelease`)\n- Git commit signing and verification with SSH keys (`GitRepository`, `ImageUpdateAutomation`)\n- AWS CodeCommit authentication using Workload Identity (`GitRepository`)\n- Custom Sigstore trusted root for keyless verification in air-gapped environments (`OCIRepository`)\n- Path pattern directory discovery for monorepos (`ArtifactGenerator`)\n- Secret-less, OIDC-secured webhook Receivers (`Receiver`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` \ | `>= 1.35.0` |\n| `v1.36` | `>= 1.36.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `image.toolkit.fluxcd.io/v1beta2` and `notification.toolkit.fluxcd.io/v1beta2`\nhave reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.9.\n\n#### Components changelog\n\n- source-controller [v1.9.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.1/CHANGELOG.md)\n- kustomize-controller [v1.9.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.1/CHANGELOG.md)\n- notification-controller [v1.9.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.1/CHANGELOG.md)\n- helm-controller [v1.6.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v1.2.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.1/CHANGELOG.md)\n- image-automation-controller [v1.2.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.1/CHANGELOG.md)\n- source-watcher [v2.2.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- Add backport label for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5732](https://redirect.github.com/fluxcd/flux2/pull/5732)\n- Remove no longer needed workaround for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5733](https://redirect.github.com/fluxcd/flux2/pull/5733)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5740](https://redirect.github.com/fluxcd/flux2/pull/5740)\n- Add missing things to release notes template by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5743](https://redirect.github.com/fluxcd/flux2/pull/5743)\n- ci: add top-level permissions to upgrade-fluxcd-pkg workflow by [@​gaganhr94](https://redirect.github.com/gaganhr94) in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- build(deps): bump the ci group across 1 directory with 11 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5764](https://redirect.github.com/fluxcd/flux2/pull/5764)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5766](https://redirect.github.com/fluxcd/flux2/pull/5766)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5769](https://redirect.github.com/fluxcd/flux2/pull/5769)\n- Add target branch name to update branch by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5773](https://redirect.github.com/fluxcd/flux2/pull/5773)\n- Fix/resume exit code by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5701](https://redirect.github.com/fluxcd/flux2/pull/5701)\n- Mark RFC 0010, 0011 and 0012 as implemented by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5776](https://redirect.github.com/fluxcd/flux2/pull/5776)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5780](https://redirect.github.com/fluxcd/flux2/pull/5780)\n- Add --resolve-symlinks flag to build and push artifact commands by [@​rohansood10](https://redirect.github.com/rohansood10) in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- fix: validate --source flag in create kustomization command by [@​gma1k](https://redirect.github.com/gma1k) in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5821](https://redirect.github.com/fluxcd/flux2/pull/5821)\n- Add `--show-source` to `flux get ks` and `flux get hr` by [@​rafaelperoco](https://redirect.github.com/rafaelperoco) in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- Add `flux create secret receiver` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5835](https://redirect.github.com/fluxcd/flux2/pull/5835)\n- fix: handle multiple symlinks to same target in build artifact by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- Add `--in-memory-build` to `flux build ks` and `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- Migrate end-to-end test to latest cloud SDKs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5840](https://redirect.github.com/fluxcd/flux2/pull/5840)\n- docs: Add AI Coding Assistants Guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5841](https://redirect.github.com/fluxcd/flux2/pull/5841)\n- Add AI Agents guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5847](https://redirect.github.com/fluxcd/flux2/pull/5847)\n- \\[RFC-0013] Flux CLI Plugin System by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5795](https://redirect.github.com/fluxcd/flux2/pull/5795)\n- Add `--ignore-not-found` to `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5845](https://redirect.github.com/fluxcd/flux2/pull/5845)\n- \\[RFC-0013] Implement plugin system by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5849](https://redirect.github.com/fluxcd/flux2/pull/5849)\n- build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5853](https://redirect.github.com/fluxcd/flux2/pull/5853)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5856](https://redirect.github.com/fluxcd/flux2/pull/5856)\n- Add digest pinning support to `flux plugin install` by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5872](https://redirect.github.com/fluxcd/flux2/pull/5872)\n- Add `--ns-follows-kube-context` global flag for using the kubeconfig context namespace by [@​jtyr](https://redirect.github.com/jtyr) in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- include source-watcher in install.yaml manifests by [@​tmmorin](https://redirect.github.com/tmmorin) in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5890](https://redirect.github.com/fluxcd/flux2/pull/5890)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5903](https://redirect.github.com/fluxcd/flux2/pull/5903)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5907](https://redirect.github.com/fluxcd/flux2/pull/5907)\n- Validate Helm source URL schemes by [@​immanuwell](https://redirect.github.com/immanuwell) in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- Introduce `flux trigger receiver` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5908](https://redirect.github.com/fluxcd/flux2/pull/5908)\n- refactor(api): migrate MakeDependsOn to shared apis/meta func by [@​vecil](https://redirect.github.com/vecil) in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- Update to Kubernetes 1.36 and Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5924](https://redirect.github.com/fluxcd/flux2/pull/5924)\n- build(deps): bump the ci group across 1 directory with 19 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5925](https://redirect.github.com/fluxcd/flux2/pull/5925)\n- Run conformance tests for Kubernetes 1.36 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5926](https://redirect.github.com/fluxcd/flux2/pull/5926)\n- Add support for AWS CodeCommit to `flux bootstrap git` by [@​taraspos](https://redirect.github.com/taraspos) in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- Validate plugin binary path by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5927](https://redirect.github.com/fluxcd/flux2/pull/5927)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5928](https://redirect.github.com/fluxcd/flux2/pull/5928)\n- fix: preserve invalid metadata.labels in `flux build ks` by [@​raffis](https://redirect.github.com/raffis) in [#​5906](https://redirect.github.com/fluxcd/flux2/pull/5906)\n- build: target host arch for local builds/envtest by [@​stealthybox](https://redirect.github.com/stealthybox) in [#​5932](https://redirect.github.com/fluxcd/flux2/pull/5932)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5938](https://redirect.github.com/fluxcd/flux2/pull/5938)\n- Support specifing sparseCheckout in flux bootstrap by [@​piny940](https://redirect.github.com/piny940) in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5944](https://redirect.github.com/fluxcd/flux2/pull/5944)\n- Honor `ks.spec.postBuild.substituteStrategy` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5945](https://redirect.github.com/fluxcd/flux2/pull/5945)\n- Add DriftIgnoreRules support to flux diff kustomization by [@​dipti-pai](https://redirect.github.com/dipti-pai) in [#​5923](https://redirect.github.com/fluxcd/flux2/pull/5923)\n- Allow signing commits using SSH key by [@​hiddeco](https://redirect.github.com/hiddeco) in [#​5920](https://redirect.github.com/fluxcd/flux2/pull/5920)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5950](https://redirect.github.com/fluxcd/flux2/pull/5950)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5937](https://redirect.github.com/fluxcd/flux2/pull/5937)\n- cmd: support `type!=status` in get --status-selector by [@​3uzbcqje](https://redirect.github.com/3uzbcqje) in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- Fix `flux get all --status-selector` for empty results and notification resources by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5954](https://redirect.github.com/fluxcd/flux2/pull/5954)\n- Upgrade go-git-providers to v0.27.0 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5956](https://redirect.github.com/fluxcd/flux2/pull/5956)\n- Fix using Receiver adapter for ArtifactGenerator by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5957](https://redirect.github.com/fluxcd/flux2/pull/5957)\n- feat: Install Plugins alongside Flux setup in gh actions by [@​gat786](https://redirect.github.com/gat786) in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5960](https://redirect.github.com/fluxcd/flux2/pull/5960)\n- Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by [@​dme86](https://redirect.github.com/dme86) in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5963](https://redirect.github.com/fluxcd/flux2/pull/5963)\n\n#### New Contributors\n\n- [@​gaganhr94](https://redirect.github.com/gaganhr94) made their first contribution in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- [@​rohansood10](https://redirect.github.com/rohansood10) made their first contribution in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- [@​gma1k](https://redirect.github.com/gma1k) made their first contribution in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- [@​rafaelperoco](https://redirect.github.com/rafaelperoco) made their first contribution in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) made their first contribution in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- [@​rycli](https://redirect.github.com/rycli) made their first contribution in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- [@​jtyr](https://redirect.github.com/jtyr) made their first contribution in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- [@​tmmorin](https://redirect.github.com/tmmorin) made their first contribution in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- [@​immanuwell](https://redirect.github.com/immanuwell) made their first contribution in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- [@​vecil](https://redirect.github.com/vecil) made their first contribution in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- [@​taraspos](https://redirect.github.com/taraspos) made their first contribution in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- [@​piny940](https://redirect.github.com/piny940) made their first contribution in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- [@​3uzbcqje](https://redirect.github.com/3uzbcqje) made their first contribution in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- [@​gat786](https://redirect.github.com/gat786) made their first contribution in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- [@​dme86](https://redirect.github.com/dme86) made their first contribution in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n\n**Full Changelog**: \n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n##### Highlights\n\nFlux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)\n- Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)\n- Stop force-applying non-CRD objects placed under a chart's `crds/` directory (helm-controller)\n- Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)\n- Improve path handling in the source reconcilers (source-controller)\n- Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)\n\nImprovements:\n\n- Update go-git to v5.19.1 which fixes [CVE-2026-45571](https://redirect.github.com/advisories/GHSA-crhj-59gh-8x96) and [CVE-2026-45570](https://redirect.github.com/advisories/GHSA-m7cr-m3pv-hgrp) (source-controller, image-automation-controller)\n- Move Helm back to upstream v4.2.0 (source-controller, helm-controller)\n- Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)\n- Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- helm-controller [v1.5.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.5/CHANGELOG.md)\n- image-automation-controller [v1.1.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.4/CHANGELOG.md)\n- image-reflector-controller [v1.1.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.2/CHANGELOG.md)\n- source-controller [v1.8.5](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5904](https://redirect.github.com/fluxcd/flux2/pull/5904)\n\n**Full Changelog**: \n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n##### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n##### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n##### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n##### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n##### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n##### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n##### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n##### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n##### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/sou\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 child_jobs: [] commit_id: 027c126e1262e178a6c6300c3932f8754feec736 event_id: 1f055f30-86be-11f1-9686-a83007aab839 executor: hostname: 2d72f0692154 inventory_file: /var/lib/zuul/builds/6af247cf0f334067a11b000c82f38393/ansible/inventory.yaml log_root: /var/lib/zuul/builds/6af247cf0f334067a11b000c82f38393/work/logs result_data_file: /var/lib/zuul/builds/6af247cf0f334067a11b000c82f38393/work/results.json src_root: /var/lib/zuul/builds/6af247cf0f334067a11b000c82f38393/work/src work_root: /var/lib/zuul/builds/6af247cf0f334067a11b000c82f38393/work include_vars: [] items: - branch: main change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.9.3\n\n> \u2139\uFE0F **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.9.3` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.9.3`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.2...v2.9.3)\n\n### [`v2.9.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2)\n\n##### Highlights\n\nFlux v2.9.2 is a patch release. The main fix addresses a regression introduced in\nv2.9.1 where a Kustomization with `openapi.path` pointing to a URL failed to\nreconcile with `failed to read OpenAPI schema`. This release also corrects several\nCRD field descriptions that contained inaccurate or leaked content. Users are\nencouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a regression where a Kustomization with `openapi.path` pointing to a URL failed to reconcile with `failed to read OpenAPI schema` (kustomize-controller)\n- Fix the `HelmChart` CRD description for `.status.url`, which pointed users at `BucketStatus.Artifact` instead of `HelmChartStatus.Artifact` (source-controller)\n- Fix the `ImageRepository` CRD description for `.status.observedExclusionList`, which referred to `spec.lastScanResult` instead of `status.lastScanResult` (image-reflector-controller)\n- Fix the `ImageUpdateAutomation` CRD description for `.status.observedSourceRevision`, which had a stray Go struct declaration leaking into it (image-automation-controller)\n\nImprovements:\n\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- source-controller [v1.9.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.3/CHANGELOG.md)\n- kustomize-controller [v1.9.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.3/CHANGELOG.md)\n- helm-controller [v1.6.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)\n- notification-controller [v1.9.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)\n- image-reflector-controller [v1.2.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.3/CHANGELOG.md)\n- image-automation-controller [v1.2.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.3/CHANGELOG.md)\n- source-watcher [v2.2.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5984](https://redirect.github.com/fluxcd/flux2/pull/5984)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5990](https://redirect.github.com/fluxcd/flux2/pull/5990)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5994](https://redirect.github.com/fluxcd/flux2/pull/5994)\n\n**Full Changelog**: \n\n### [`v2.9.1`](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)\n\n### [`v2.9.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.8...v2.9.0)\n\n#### Highlights\n\nFlux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.9 GA blog post](https://fluxcd.io/blog/2026/06/flux-v2.9.0/).\n\nOverview of the new features:\n\n- Flux CLI Plugin System with the Mirror and Schema plugins (`flux plugin`)\n- Server-Side Apply field ignore rules for fine-grained drift control (`Kustomization`)\n- SOPS decryption with the Age post-quantum cipher (`Kustomization`)\n- Kubernetes Workload Identity authentication for OpenBao and Vault (`Kustomization`)\n- Helm post-render strategies, including chart hooks support (`HelmRelease`)\n- Literal mode for Helm values references mirroring `helm --set-literal` (`HelmRelease`)\n- Allow empty kind in CEL health check expressions (`Kustomization`, `HelmRelease`)\n- Git commit signing and verification with SSH keys (`GitRepository`, `ImageUpdateAutomation`)\n- AWS CodeCommit authentication using Workload Identity (`GitRepository`)\n- Custom Sigstore trusted root for keyless verification in air-gapped environments (`OCIRepository`)\n- Path pattern directory discovery for monorepos (`ArtifactGenerator`)\n- Secret-less, OIDC-secured webhook Receivers (`Receiver`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.34` | `>= 1.34.1` |\n| `v1.35` \ | `>= 1.35.0` |\n| `v1.36` | `>= 1.36.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `image.toolkit.fluxcd.io/v1beta2` and `notification.toolkit.fluxcd.io/v1beta2`\nhave reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.9.\n\n#### Components changelog\n\n- source-controller [v1.9.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.1/CHANGELOG.md)\n- kustomize-controller [v1.9.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.9.1/CHANGELOG.md)\n- notification-controller [v1.9.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.1/CHANGELOG.md)\n- helm-controller [v1.6.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.6.1/CHANGELOG.md)\n- image-reflector-controller [v1.2.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.1/CHANGELOG.md)\n- image-automation-controller [v1.2.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.1/CHANGELOG.md)\n- source-watcher [v2.2.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- Add backport label for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5732](https://redirect.github.com/fluxcd/flux2/pull/5732)\n- Remove no longer needed workaround for Flux 2.8 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5733](https://redirect.github.com/fluxcd/flux2/pull/5733)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5740](https://redirect.github.com/fluxcd/flux2/pull/5740)\n- Add missing things to release notes template by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5743](https://redirect.github.com/fluxcd/flux2/pull/5743)\n- ci: add top-level permissions to upgrade-fluxcd-pkg workflow by [@​gaganhr94](https://redirect.github.com/gaganhr94) in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- build(deps): bump the ci group across 1 directory with 11 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5764](https://redirect.github.com/fluxcd/flux2/pull/5764)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5766](https://redirect.github.com/fluxcd/flux2/pull/5766)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5769](https://redirect.github.com/fluxcd/flux2/pull/5769)\n- Add target branch name to update branch by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5773](https://redirect.github.com/fluxcd/flux2/pull/5773)\n- Fix/resume exit code by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5701](https://redirect.github.com/fluxcd/flux2/pull/5701)\n- Mark RFC 0010, 0011 and 0012 as implemented by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5776](https://redirect.github.com/fluxcd/flux2/pull/5776)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5780](https://redirect.github.com/fluxcd/flux2/pull/5780)\n- Add --resolve-symlinks flag to build and push artifact commands by [@​rohansood10](https://redirect.github.com/rohansood10) in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- fix: validate --source flag in create kustomization command by [@​gma1k](https://redirect.github.com/gma1k) in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5821](https://redirect.github.com/fluxcd/flux2/pull/5821)\n- Add `--show-source` to `flux get ks` and `flux get hr` by [@​rafaelperoco](https://redirect.github.com/rafaelperoco) in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- Add `flux create secret receiver` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5835](https://redirect.github.com/fluxcd/flux2/pull/5835)\n- fix: handle multiple symlinks to same target in build artifact by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- Add `--in-memory-build` to `flux build ks` and `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- Migrate end-to-end test to latest cloud SDKs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5840](https://redirect.github.com/fluxcd/flux2/pull/5840)\n- docs: Add AI Coding Assistants Guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5841](https://redirect.github.com/fluxcd/flux2/pull/5841)\n- Add AI Agents guidance by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5847](https://redirect.github.com/fluxcd/flux2/pull/5847)\n- \\[RFC-0013] Flux CLI Plugin System by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5795](https://redirect.github.com/fluxcd/flux2/pull/5795)\n- Add `--ignore-not-found` to `flux diff ks` by [@​rycli](https://redirect.github.com/rycli) in [#​5845](https://redirect.github.com/fluxcd/flux2/pull/5845)\n- \\[RFC-0013] Implement plugin system by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5849](https://redirect.github.com/fluxcd/flux2/pull/5849)\n- build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5853](https://redirect.github.com/fluxcd/flux2/pull/5853)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5856](https://redirect.github.com/fluxcd/flux2/pull/5856)\n- Add digest pinning support to `flux plugin install` by [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) in [#​5872](https://redirect.github.com/fluxcd/flux2/pull/5872)\n- Add `--ns-follows-kube-context` global flag for using the kubeconfig context namespace by [@​jtyr](https://redirect.github.com/jtyr) in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- include source-watcher in install.yaml manifests by [@​tmmorin](https://redirect.github.com/tmmorin) in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5890](https://redirect.github.com/fluxcd/flux2/pull/5890)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5903](https://redirect.github.com/fluxcd/flux2/pull/5903)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5907](https://redirect.github.com/fluxcd/flux2/pull/5907)\n- Validate Helm source URL schemes by [@​immanuwell](https://redirect.github.com/immanuwell) in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- Introduce `flux trigger receiver` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5908](https://redirect.github.com/fluxcd/flux2/pull/5908)\n- refactor(api): migrate MakeDependsOn to shared apis/meta func by [@​vecil](https://redirect.github.com/vecil) in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- Update to Kubernetes 1.36 and Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5924](https://redirect.github.com/fluxcd/flux2/pull/5924)\n- build(deps): bump the ci group across 1 directory with 19 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5925](https://redirect.github.com/fluxcd/flux2/pull/5925)\n- Run conformance tests for Kubernetes 1.36 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5926](https://redirect.github.com/fluxcd/flux2/pull/5926)\n- Add support for AWS CodeCommit to `flux bootstrap git` by [@​taraspos](https://redirect.github.com/taraspos) in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- Validate plugin binary path by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5927](https://redirect.github.com/fluxcd/flux2/pull/5927)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5928](https://redirect.github.com/fluxcd/flux2/pull/5928)\n- fix: preserve invalid metadata.labels in `flux build ks` by [@​raffis](https://redirect.github.com/raffis) in [#​5906](https://redirect.github.com/fluxcd/flux2/pull/5906)\n- build: target host arch for local builds/envtest by [@​stealthybox](https://redirect.github.com/stealthybox) in [#​5932](https://redirect.github.com/fluxcd/flux2/pull/5932)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5938](https://redirect.github.com/fluxcd/flux2/pull/5938)\n- Support specifing sparseCheckout in flux bootstrap by [@​piny940](https://redirect.github.com/piny940) in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5944](https://redirect.github.com/fluxcd/flux2/pull/5944)\n- Honor `ks.spec.postBuild.substituteStrategy` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5945](https://redirect.github.com/fluxcd/flux2/pull/5945)\n- Add DriftIgnoreRules support to flux diff kustomization by [@​dipti-pai](https://redirect.github.com/dipti-pai) in [#​5923](https://redirect.github.com/fluxcd/flux2/pull/5923)\n- Allow signing commits using SSH key by [@​hiddeco](https://redirect.github.com/hiddeco) in [#​5920](https://redirect.github.com/fluxcd/flux2/pull/5920)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5950](https://redirect.github.com/fluxcd/flux2/pull/5950)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5937](https://redirect.github.com/fluxcd/flux2/pull/5937)\n- cmd: support `type!=status` in get --status-selector by [@​3uzbcqje](https://redirect.github.com/3uzbcqje) in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- Fix `flux get all --status-selector` for empty results and notification resources by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5954](https://redirect.github.com/fluxcd/flux2/pull/5954)\n- Upgrade go-git-providers to v0.27.0 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5956](https://redirect.github.com/fluxcd/flux2/pull/5956)\n- Fix using Receiver adapter for ArtifactGenerator by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5957](https://redirect.github.com/fluxcd/flux2/pull/5957)\n- feat: Install Plugins alongside Flux setup in gh actions by [@​gat786](https://redirect.github.com/gat786) in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5960](https://redirect.github.com/fluxcd/flux2/pull/5960)\n- Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by [@​dme86](https://redirect.github.com/dme86) in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5963](https://redirect.github.com/fluxcd/flux2/pull/5963)\n\n#### New Contributors\n\n- [@​gaganhr94](https://redirect.github.com/gaganhr94) made their first contribution in [#​5763](https://redirect.github.com/fluxcd/flux2/pull/5763)\n- [@​rohansood10](https://redirect.github.com/rohansood10) made their first contribution in [#​5724](https://redirect.github.com/fluxcd/flux2/pull/5724)\n- [@​gma1k](https://redirect.github.com/gma1k) made their first contribution in [#​5798](https://redirect.github.com/fluxcd/flux2/pull/5798)\n- [@​rafaelperoco](https://redirect.github.com/rafaelperoco) made their first contribution in [#​5828](https://redirect.github.com/fluxcd/flux2/pull/5828)\n- [@​Iam-Karan-Suresh](https://redirect.github.com/Iam-Karan-Suresh) made their first contribution in [#​5833](https://redirect.github.com/fluxcd/flux2/pull/5833)\n- [@​rycli](https://redirect.github.com/rycli) made their first contribution in [#​5794](https://redirect.github.com/fluxcd/flux2/pull/5794)\n- [@​jtyr](https://redirect.github.com/jtyr) made their first contribution in [#​5831](https://redirect.github.com/fluxcd/flux2/pull/5831)\n- [@​tmmorin](https://redirect.github.com/tmmorin) made their first contribution in [#​5881](https://redirect.github.com/fluxcd/flux2/pull/5881)\n- [@​immanuwell](https://redirect.github.com/immanuwell) made their first contribution in [#​5909](https://redirect.github.com/fluxcd/flux2/pull/5909)\n- [@​vecil](https://redirect.github.com/vecil) made their first contribution in [#​5912](https://redirect.github.com/fluxcd/flux2/pull/5912)\n- [@​taraspos](https://redirect.github.com/taraspos) made their first contribution in [#​5868](https://redirect.github.com/fluxcd/flux2/pull/5868)\n- [@​piny940](https://redirect.github.com/piny940) made their first contribution in [#​5918](https://redirect.github.com/fluxcd/flux2/pull/5918)\n- [@​3uzbcqje](https://redirect.github.com/3uzbcqje) made their first contribution in [#​5952](https://redirect.github.com/fluxcd/flux2/pull/5952)\n- [@​gat786](https://redirect.github.com/gat786) made their first contribution in [#​5955](https://redirect.github.com/fluxcd/flux2/pull/5955)\n- [@​dme86](https://redirect.github.com/dme86) made their first contribution in [#​5892](https://redirect.github.com/fluxcd/flux2/pull/5892)\n\n**Full Changelog**: \n\n### [`v2.8.8`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.8)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.7...v2.8.8)\n\n##### Highlights\n\nFlux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add a configurable HTTP timeout for artifact fetching, preventing fetches that could block indefinitely and stall reconciliations (helm-controller)\n- Fix unbounded memory growth caused by a Kubernetes client transport retry wrapper accumulating on every reconcile (helm-controller)\n- Stop force-applying non-CRD objects placed under a chart's `crds/` directory (helm-controller)\n- Fix the Helm test action failing to find releases with names longer than 53 characters (helm-controller)\n- Improve path handling in the source reconcilers (source-controller)\n- Support Helm semver build-metadata encoding in OCIRepository tags (source-controller)\n\nImprovements:\n\n- Update go-git to v5.19.1 which fixes [CVE-2026-45571](https://redirect.github.com/advisories/GHSA-crhj-59gh-8x96) and [CVE-2026-45570](https://redirect.github.com/advisories/GHSA-m7cr-m3pv-hgrp) (source-controller, image-automation-controller)\n- Move Helm back to upstream v4.2.0 (source-controller, helm-controller)\n- Add support for GCP sovereign cloud artifact registries (source-controller, image-reflector-controller)\n- Upgrade Kubernetes to 1.36.1 (source-controller, helm-controller)\n- Update fluxcd/pkg dependencies\n\n##### Components changelog\n\n- helm-controller [v1.5.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.5/CHANGELOG.md)\n- image-automation-controller [v1.1.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.4/CHANGELOG.md)\n- image-reflector-controller [v1.1.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.2/CHANGELOG.md)\n- source-controller [v1.8.5](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5904](https://redirect.github.com/fluxcd/flux2/pull/5904)\n\n**Full Changelog**: \n\n### [`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)\n\n##### Highlights\n\nFlux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix management of objects annotated with `kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)\n\nImprovements:\n\n- Update go-git to v5.19.0 which fixes [CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp) (source-controller, image-automation-controller)\n- Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)\n- kustomize-controller [v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)\n\n**Full Changelog**: \n\n### [`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\n\n##### Highlights\n\nFlux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)\n- Ignore force replace when server-side apply is enabled (helm-controller)\n- Fix a regression where generic providers would not forward commit status events (notification-controller)\n- Require the `audience` field on the GCR Receiver secret for tighter verification \u2014 will become mandatory in Flux v2.9 (notification-controller)\n\nImprovements:\n\n- Introduce the `MigrateAPIVersion` feature gate for migrating the API version of resources in managed field entries (kustomize-controller)\n- Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\n- image-automation-controller [v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\n- kustomize-controller [v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\n- notification-controller [v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\n- source-controller [v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\n\n**Full Changelog**: \n\n### [`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\n\n##### Highlights\n\nFlux v2.8.5 is a patch release that includes bug fixes and improvements across kustomize-controller, source-controller, and notification-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix a race condition where a cancelled reconciliation could leave stale data in the cache, causing Kustomizations to get stuck (kustomize-controller)\n- Fix Azure Blob prefix option not being passed to the storage client (source-controller)\n\nImprovements:\n\n- Improve error message for encrypted SSH keys without password (source-controller)\n- Add optional `email` and `audience` fields to the GCR Receiver for tighter verification (notification-controller)\n- Add provider manifest example for Azure Event Hub managed identity authentication (notification-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\n- source-controller [v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\n\n**Full Changelog**: \n\n### [`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\n\n##### Highlights\n\nFlux v2.8.4 is a patch release that includes fixes for the Flux CLI. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix `flux build ks` and `flux diff ks` on Windows\n- Fix `--source` flag validation in `create kustomization` command\n\n##### CLI changelog\n\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\n- \\[release/v2.8.x] fix: validate --source flag in create kustomization command by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\n\n**Full Changelog**: \n\n### [`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\n\n##### Highlights\n\nFlux v2.8.3 is a patch release that fixes a regression in helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix templating errors for charts that include `---` in the content, e.g. YAML separators, embedded scripts, CAs inside ConfigMaps (helm-controller)\n\n##### Components changelog\n\n- helm-controller [v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Add target branch name to update branch by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\n\n**Full Changelog**: \n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n##### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n##### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n##### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n##### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F \ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/sou\n\n> \u2702 **Note**\n> \n> PR body was truncated to here.\n\n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: (UTC)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 commit_id: 027c126e1262e178a6c6300c3932f8754feec736 patchset: 027c126e1262e178a6c6300c3932f8754feec736 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null job: atmosphere-common-molecule-secretgen-controller jobtags: [] max_attempts: 3 message: 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 patchset: 027c126e1262e178a6c6300c3932f8754feec736 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 0ed6d780cbe575683f1d14d6e57182b854f8db3d trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: c286bf94224b5660b8e49e9a058289e61062a9a0 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 298983cd1253e6833abdb49d87d912527e0e6597 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 0ed6d780cbe575683f1d14d6e57182b854f8db3d untrusted/project_3/github.com/vexxhost/atmosphere.common: canonical_name: github.com/vexxhost/atmosphere.common checkout: main commit: 0d1ab977eb11da286cf3b3de26c265495ddf94b4 untrusted/project_4/opendev.org/openstack/openstack-helm: canonical_name: opendev.org/openstack/openstack-helm checkout: master commit: d03bc24f0e272224375fc85f325e4540833ffac1 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: untrusted/project_3/github.com/vexxhost/atmosphere.common/test-playbooks/molecule/post.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/post_playbook_0/role_0/atmosphere.common link_target: untrusted/project_3/github.com/vexxhost/atmosphere.common role_path: ansible/post_playbook_0/role_0/atmosphere.common/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/post_playbook_0/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_4/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_2/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_2/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_2/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_2/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles - path: untrusted/project_3/github.com/vexxhost/atmosphere.common/test-playbooks/molecule/pre.yml roles: - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_2/role_0/atmosphere.common link_target: untrusted/project_3/github.com/vexxhost/atmosphere.common role_path: ansible/pre_playbook_2/role_0/atmosphere.common/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_1/openstack-helm link_target: untrusted/project_4/opendev.org/openstack/openstack-helm role_path: ansible/pre_playbook_2/role_1/openstack-helm/roles - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_2/role_3/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_2/role_3/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_2/role_4/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_2/role_4/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common projects: github.com/vexxhost/atmosphere.common: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common checkout: main checkout_description: zuul branch commit: 0d1ab977eb11da286cf3b3de26c265495ddf94b4 name: vexxhost/atmosphere.common required: false short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common ref: refs/pull/102/head resources: {} tenant: oss timeout: 1800 topic: null voting: true