all: children: controllers: hosts: controller: null zuul_unreachable: hosts: {} hosts: controller: ansible_connection: ssh ansible_host: 162.253.55.12 ansible_port: 22 ansible_python_interpreter: auto ansible_user: zuul cilium_helm_values: operator: replicas: 1 cilium_ipv4_cidr: 172.24.0.0/16 kube_vip_address: 172.17.0.100 kube_vip_interface: '{{ ansible_facts[''default_ipv4''].interface }}' kubernetes_hostname: '{{ ansible_facts[''default_ipv4''].address }}' kubernetes_version: 1.28.13 molecule_scenario: secretgen-controller nodepool: az: nova cloud: public external_id: 69d0c66b-db00-42c8-899a-7efd6f57e014 host_id: 46a3119b92b21b95fc3b5fbffd17c6ebf9fffaf9848b0a50b2d8d56a interface_ip: 162.253.55.12 label: ubuntu-noble node_properties: {} private_ipv4: 162.253.55.12 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.12 public_ipv6: 2604:e100:1:0:f816:3eff:fe3d:4222 region: ca-ymq-1 slot: null zuul_node: az: nova cloud: public external_id: 69d0c66b-db00-42c8-899a-7efd6f57e014 host_id: 46a3119b92b21b95fc3b5fbffd17c6ebf9fffaf9848b0a50b2d8d56a interface_ip: 162.253.55.12 label: ubuntu-noble node_properties: {} private_ipv4: 162.253.55.12 private_ipv6: null provider: yul1 public_ipv4: 162.253.55.12 public_ipv6: 2604:e100:1:0:f816:3eff:fe3d:4222 region: ca-ymq-1 slot: null uuid: null vars: cilium_helm_values: operator: replicas: 1 kubernetes_version: 1.28.13 molecule_scenario: secretgen-controller zuul: _inheritance_path: - '' - '' - '' - '' - '' ansible_version: '9' attempts: 1 branch: main build: 8548ad3311444b048da07ee0b75dacb4 build_refs: - branch: main change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.8.2\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.8.2` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n#### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n#### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n#### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n#### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F \ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\n- kustomize-controller [v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\n- notification-controller [v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\n- helm-controller [v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\n- image-reflector-controller [v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\n- image-automation-controller [v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Pin cosign to v2.6.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\n- \\[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\n\n**Full Changelog**: \n\n### [`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\n\n##### Highlights\n\nFlux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nAll Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the [Go 1.25.2 release notes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\n\n##### Components changelog\n\n- source-controller [v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\n- kustomize-controller [v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\n- helm-controller [v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\n- image-reflector-controller [v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\n- image-automation-controller [v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\n- source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\n- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\n\n**Full Changelog**: \n\n### [`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\n\n##### Highlights\n\nFlux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nImprovements:\n\n- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with support for migrating manifests in Git repositories to the latest API versions.\n- Add [recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings) for configuring HelmReleases on production environments.\n\nFixes:\n\n- Fix `flux migrate` command to handle managed fields properly.\n- Fix self-signed TLS cert handling for public Helm repositories in source-controller.\n- Fix the default API versions used by receivers in notification-controller.\n- Fix redundant `Ready` condition patching in helm-controller.\n- Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.\n\n##### Components changelog\n\n- source-controller [v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\n- helm-controller [v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Backport CI fixes and updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\n- \\[release/v2.7.x] Fix `flux push artifact` not working with `--provider` by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\n- \\[release/v2.7.x] Extend `flux migrate` to work with local files by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\n- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\n- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\n- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\n- \\[release/v2.7.x] Disable AUR publishing by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\n\n**Full Changelog**: \n\n### [`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\n\n#### Highlights\n\nFlux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.7 GA blog post](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\n\nOverview of the new features:\n\n- General availability release of the Image Automation APIs (`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\n- Watch for changes in ConfigMaps and Secrets references (`Kustomization`, `HelmRelease`)\n- Support for remote cluster authentication using Workload Identity (`Kustomization`, `HelmRelease`)\n- Extend the readiness evaluation of dependencies with CEL expressions (`Kustomization`, `HelmRelease`)\n- Support for global SOPS Age decryption keys on single-tenant clusters (`Kustomization`)\n- Support for optional Kustomize components (`Kustomization`)\n- Introduce `RetryOnFailure` lifecycle management strategy (`HelmRelease`)\n- Support mTLS for sending alerts to external systems (`Provider`)\n- Object-level workload identity authentication (`Bucket`, `Provider`)\n- Support mTLS for GitHub App transport (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- OpenTelemetry tracing for `Kustomization` and `HelmRelease` reconciliation (`Provider`)\n- Support for 3rd-party source controllers (`ExternalArtifact`)\n- Support for source composition and decomposition patterns (`ArtifactGenerator`)\n- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\n- `GitSparseCheckout` feature gate (image-automation-controller)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` \ | `>= 1.33.0` |\n| `v1.34` | `>= 1.34.1` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta1` and `v2beta1` (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.\n\nUnless you are using [Flux Operator](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) to deploy the Flux controllers, you must run the `flux migrate` command on clusters before upgrading.\n\nFor more details, please refer to the [Flux v2.7 upgrade guide](https://fluxcd.io/blog/2025/09/flux-v2.7.0/#upgrade-procedure).\n\n#### Components changelog\n\n- source-controller [v1.7.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.0/CHANGELOG.md)\n- kustomize-controller [v1.7.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.0/CHANGELOG.md)\n- notification-controller [v1.7.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.0/CHANGELOG.md) [v1.7.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.1/CHANGELOG.md)\n- helm-controller [v1.4.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.0/CHANGELOG.md)\n- image-reflector-controller [v1.0.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.1/CHANGELOG.md)\n- image-automation-controller [v1.0.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.1/CHANGELOG.md)\n- source-watcher [v2.0.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.0/CHANGELOG.md) [v2.0.1](https://redirect.github.com/fluxcd/source-watcher/blob/v1.0.1/CHANGELOG.md)\n\n##### New Documentation\n\n- [ImageRepository v1 specification](https://fluxcd.io/flux/components/image/imagerepositories)\n- [ImagePolicy v1 specification](https://fluxcd.io/flux/components/image/imagepolicies)\n- [ImageUpdateAutomation v1 specification](https://fluxcd.io/flux/components/image/imageupdateautomations)\n- [ExternalArtifact v1 specification](https://fluxcd.io/flux/components/source/externalartifacts)\n- [ArtifactGenerator v1beta1 specification](https://fluxcd.io/flux/components/source/artifactgenerators)\n\n#### CLI changelog\n\n- Add backport label for `v2.6.x` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5379](https://redirect.github.com/fluxcd/flux2/pull/5379)\n- Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5381](https://redirect.github.com/fluxcd/flux2/pull/5381)\n- Add digest pinning to image automation testing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5383](https://redirect.github.com/fluxcd/flux2/pull/5383)\n- correct small typo by [@​JIbald](https://redirect.github.com/JIbald) in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- Remove credentials sync manifests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5347](https://redirect.github.com/fluxcd/flux2/pull/5347)\n- Add sparse checkout to cli by [@​ba-work](https://redirect.github.com/ba-work) in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5390](https://redirect.github.com/fluxcd/flux2/pull/5390)\n- Fix `knownhosts key mismatch` regression bug by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5404](https://redirect.github.com/fluxcd/flux2/pull/5404)\n- refactor: Use `normalize.UnstructuredList` instead of `ssa.SetNativeKindsDefaults` by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- Make service-account name configurable in `flux create tenant` by [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5409](https://redirect.github.com/fluxcd/flux2/pull/5409)\n- refactor: cleanup GetArtifactRegistryCredentials error handling by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5418](https://redirect.github.com/fluxcd/flux2/pull/5418)\n- Promote image CLI commands to stable by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5421](https://redirect.github.com/fluxcd/flux2/pull/5421)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5426](https://redirect.github.com/fluxcd/flux2/pull/5426)\n- Bump pkg/ssa to v0.49.0 for CABundle validation fix by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5431](https://redirect.github.com/fluxcd/flux2/pull/5431)\n- \\[RFC-0010] Add workload identity support for remote clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5434](https://redirect.github.com/fluxcd/flux2/pull/5434)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5443](https://redirect.github.com/fluxcd/flux2/pull/5443)\n- Fix `flux push artifact` for insecure registries by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5449](https://redirect.github.com/fluxcd/flux2/pull/5449)\n- \\[RFC-0010] Add workload identity support for remote generic clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5452](https://redirect.github.com/fluxcd/flux2/pull/5452)\n- Fix `flux diff kustomization` ignore patterns by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5451](https://redirect.github.com/fluxcd/flux2/pull/5451)\n- Update dependencies to Kubernetes 1.33.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5453](https://redirect.github.com/fluxcd/flux2/pull/5453)\n- build(deps): bump the ci group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5435](https://redirect.github.com/fluxcd/flux2/pull/5435)\n- Upgrade fluxcd/pkg dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5455](https://redirect.github.com/fluxcd/flux2/pull/5455)\n- ci: Use GITHUB\\_TOKEN for API calls in update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5460](https://redirect.github.com/fluxcd/flux2/pull/5460)\n- manifests: Add `app.kubernetes.io/part-of: flux` label to controller pods by [@​pinkavaj](https://redirect.github.com/pinkavaj) in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- Migrate sourcesecret package to runtime/secrets APIs by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5462](https://redirect.github.com/fluxcd/flux2/pull/5462)\n- Implement `flux migrate` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5473](https://redirect.github.com/fluxcd/flux2/pull/5473)\n- \\[RFC-0007] Implementation history update by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5480](https://redirect.github.com/fluxcd/flux2/pull/5480)\n- Run conformance tests for Kubernetes 1.34.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5497](https://redirect.github.com/fluxcd/flux2/pull/5497)\n- Update to Kubernetes v1.34.0 and Go 1.25.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5499](https://redirect.github.com/fluxcd/flux2/pull/5499)\n- build(deps): bump the ci group across 1 directory with 10 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5500](https://redirect.github.com/fluxcd/flux2/pull/5500)\n- Allow the Go runtime to dynamically set `GOMAXPROCS` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5501](https://redirect.github.com/fluxcd/flux2/pull/5501)\n- fix(events): respect `--all-namespaces` flag by [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- \\[RFC-0011] OpenTelemetry Tracing by [@​adri1197](https://redirect.github.com/adri1197) in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- \\[RFC-0012] External Artifact API by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5292](https://redirect.github.com/fluxcd/flux2/pull/5292)\n- Add `--show-history` flag to `debug helmrelease` by [@​hawkaii](https://redirect.github.com/hawkaii) in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- Skip release candidates on updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5507](https://redirect.github.com/fluxcd/flux2/pull/5507)\n- ci: Align azure e2e tests secret names with fluxcd/pkg by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5508](https://redirect.github.com/fluxcd/flux2/pull/5508)\n- Update image-reflector-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5517](https://redirect.github.com/fluxcd/flux2/pull/5517)\n- Update source-controller to v1.7.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5518](https://redirect.github.com/fluxcd/flux2/pull/5518)\n- Add the source-watcher controller to the Flux distribution by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5519](https://redirect.github.com/fluxcd/flux2/pull/5519)\n- Add read-only commands for `ArtifactGenerator` kind by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5520](https://redirect.github.com/fluxcd/flux2/pull/5520)\n- ci: Add source-watcher to the update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5521](https://redirect.github.com/fluxcd/flux2/pull/5521)\n- Update image-automation-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5522](https://redirect.github.com/fluxcd/flux2/pull/5522)\n- Update image-reflector-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5525](https://redirect.github.com/fluxcd/flux2/pull/5525)\n- Implement `flux [reconcile|suspend|resume] image policy` commands by [@​lukas8219](https://redirect.github.com/lukas8219) in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- Handle `force: enabled` annotation in `flux diff ks` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5528](https://redirect.github.com/fluxcd/flux2/pull/5528)\n- ci: Refactor CI with `fluxcd/gha-workflows` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5529](https://redirect.github.com/fluxcd/flux2/pull/5529)\n- Remove `ArtifactGenerators` during uninstall by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5531](https://redirect.github.com/fluxcd/flux2/pull/5531)\n- Add support for `ExternalArtifact` to `flux trace` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5532](https://redirect.github.com/fluxcd/flux2/pull/5532)\n- Set Kubernetes 1.32 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5533](https://redirect.github.com/fluxcd/flux2/pull/5533)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5535](https://redirect.github.com/fluxcd/flux2/pull/5535)\n- Add support for custom storage namespace in HelmRelease creation by [@​prasad89](https://redirect.github.com/prasad89) in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5537](https://redirect.github.com/fluxcd/flux2/pull/5537)\n- ci: remove cron schedule from update by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5539](https://redirect.github.com/fluxcd/flux2/pull/5539)\n- Update source-watcher to v2.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5540](https://redirect.github.com/fluxcd/flux2/pull/5540)\n- Add `--show-history` flag to `debug kustomization` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5541](https://redirect.github.com/fluxcd/flux2/pull/5541)\n- Update image-automation-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5542](https://redirect.github.com/fluxcd/flux2/pull/5542)\n- `fluxcd/flux2/action`: Determine latest version without using GitHub API by [@​RussellAult](https://redirect.github.com/RussellAult) in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n#### New Contributors\n\n- [@​JIbald](https://redirect.github.com/JIbald) made their first contribution in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- [@​ba-work](https://redirect.github.com/ba-work) made their first contribution in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- [@​cappyzawa](https://redirect.github.com/cappyzawa) made their first contribution in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) made their first contribution in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- [@​pinkavaj](https://redirect.github.com/pinkavaj) made their first contribution in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) made their first contribution in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- [@​adri1197](https://redirect.github.com/adri1197) made their first contribution in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- [@​hawkaii](https://redirect.github.com/hawkaii) made their first contribution in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- [@​lukas8219](https://redirect.github.com/lukas8219) made their first contribution in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- [@​prasad89](https://redirect.github.com/prasad89) made their first contribution in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- [@​RussellAult](https://redirect.github.com/RussellAult) made their first contribution in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n**Full Changelog**: \n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 commit_id: 55819a84d336039e1f5bb77de731d0590c501c12 patchset: 55819a84d336039e1f5bb77de731d0590c501c12 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null buildset: 0f8e3b95f09c49baa51e626cc0659396 buildset_refs: - branch: main change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.8.2\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.8.2` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n#### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n#### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n#### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n#### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F \ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\n- kustomize-controller [v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\n- notification-controller [v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\n- helm-controller [v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\n- image-reflector-controller [v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\n- image-automation-controller [v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Pin cosign to v2.6.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\n- \\[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\n\n**Full Changelog**: \n\n### [`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\n\n##### Highlights\n\nFlux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nAll Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the [Go 1.25.2 release notes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\n\n##### Components changelog\n\n- source-controller [v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\n- kustomize-controller [v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\n- helm-controller [v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\n- image-reflector-controller [v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\n- image-automation-controller [v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\n- source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\n- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\n\n**Full Changelog**: \n\n### [`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\n\n##### Highlights\n\nFlux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nImprovements:\n\n- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with support for migrating manifests in Git repositories to the latest API versions.\n- Add [recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings) for configuring HelmReleases on production environments.\n\nFixes:\n\n- Fix `flux migrate` command to handle managed fields properly.\n- Fix self-signed TLS cert handling for public Helm repositories in source-controller.\n- Fix the default API versions used by receivers in notification-controller.\n- Fix redundant `Ready` condition patching in helm-controller.\n- Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.\n\n##### Components changelog\n\n- source-controller [v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\n- helm-controller [v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Backport CI fixes and updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\n- \\[release/v2.7.x] Fix `flux push artifact` not working with `--provider` by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\n- \\[release/v2.7.x] Extend `flux migrate` to work with local files by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\n- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\n- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\n- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\n- \\[release/v2.7.x] Disable AUR publishing by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\n\n**Full Changelog**: \n\n### [`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\n\n#### Highlights\n\nFlux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.7 GA blog post](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\n\nOverview of the new features:\n\n- General availability release of the Image Automation APIs (`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\n- Watch for changes in ConfigMaps and Secrets references (`Kustomization`, `HelmRelease`)\n- Support for remote cluster authentication using Workload Identity (`Kustomization`, `HelmRelease`)\n- Extend the readiness evaluation of dependencies with CEL expressions (`Kustomization`, `HelmRelease`)\n- Support for global SOPS Age decryption keys on single-tenant clusters (`Kustomization`)\n- Support for optional Kustomize components (`Kustomization`)\n- Introduce `RetryOnFailure` lifecycle management strategy (`HelmRelease`)\n- Support mTLS for sending alerts to external systems (`Provider`)\n- Object-level workload identity authentication (`Bucket`, `Provider`)\n- Support mTLS for GitHub App transport (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- OpenTelemetry tracing for `Kustomization` and `HelmRelease` reconciliation (`Provider`)\n- Support for 3rd-party source controllers (`ExternalArtifact`)\n- Support for source composition and decomposition patterns (`ArtifactGenerator`)\n- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\n- `GitSparseCheckout` feature gate (image-automation-controller)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` \ | `>= 1.33.0` |\n| `v1.34` | `>= 1.34.1` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta1` and `v2beta1` (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.\n\nUnless you are using [Flux Operator](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) to deploy the Flux controllers, you must run the `flux migrate` command on clusters before upgrading.\n\nFor more details, please refer to the [Flux v2.7 upgrade guide](https://fluxcd.io/blog/2025/09/flux-v2.7.0/#upgrade-procedure).\n\n#### Components changelog\n\n- source-controller [v1.7.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.0/CHANGELOG.md)\n- kustomize-controller [v1.7.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.0/CHANGELOG.md)\n- notification-controller [v1.7.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.0/CHANGELOG.md) [v1.7.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.1/CHANGELOG.md)\n- helm-controller [v1.4.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.0/CHANGELOG.md)\n- image-reflector-controller [v1.0.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.1/CHANGELOG.md)\n- image-automation-controller [v1.0.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.1/CHANGELOG.md)\n- source-watcher [v2.0.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.0/CHANGELOG.md) [v2.0.1](https://redirect.github.com/fluxcd/source-watcher/blob/v1.0.1/CHANGELOG.md)\n\n##### New Documentation\n\n- [ImageRepository v1 specification](https://fluxcd.io/flux/components/image/imagerepositories)\n- [ImagePolicy v1 specification](https://fluxcd.io/flux/components/image/imagepolicies)\n- [ImageUpdateAutomation v1 specification](https://fluxcd.io/flux/components/image/imageupdateautomations)\n- [ExternalArtifact v1 specification](https://fluxcd.io/flux/components/source/externalartifacts)\n- [ArtifactGenerator v1beta1 specification](https://fluxcd.io/flux/components/source/artifactgenerators)\n\n#### CLI changelog\n\n- Add backport label for `v2.6.x` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5379](https://redirect.github.com/fluxcd/flux2/pull/5379)\n- Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5381](https://redirect.github.com/fluxcd/flux2/pull/5381)\n- Add digest pinning to image automation testing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5383](https://redirect.github.com/fluxcd/flux2/pull/5383)\n- correct small typo by [@​JIbald](https://redirect.github.com/JIbald) in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- Remove credentials sync manifests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5347](https://redirect.github.com/fluxcd/flux2/pull/5347)\n- Add sparse checkout to cli by [@​ba-work](https://redirect.github.com/ba-work) in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5390](https://redirect.github.com/fluxcd/flux2/pull/5390)\n- Fix `knownhosts key mismatch` regression bug by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5404](https://redirect.github.com/fluxcd/flux2/pull/5404)\n- refactor: Use `normalize.UnstructuredList` instead of `ssa.SetNativeKindsDefaults` by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- Make service-account name configurable in `flux create tenant` by [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5409](https://redirect.github.com/fluxcd/flux2/pull/5409)\n- refactor: cleanup GetArtifactRegistryCredentials error handling by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5418](https://redirect.github.com/fluxcd/flux2/pull/5418)\n- Promote image CLI commands to stable by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5421](https://redirect.github.com/fluxcd/flux2/pull/5421)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5426](https://redirect.github.com/fluxcd/flux2/pull/5426)\n- Bump pkg/ssa to v0.49.0 for CABundle validation fix by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5431](https://redirect.github.com/fluxcd/flux2/pull/5431)\n- \\[RFC-0010] Add workload identity support for remote clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5434](https://redirect.github.com/fluxcd/flux2/pull/5434)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5443](https://redirect.github.com/fluxcd/flux2/pull/5443)\n- Fix `flux push artifact` for insecure registries by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5449](https://redirect.github.com/fluxcd/flux2/pull/5449)\n- \\[RFC-0010] Add workload identity support for remote generic clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5452](https://redirect.github.com/fluxcd/flux2/pull/5452)\n- Fix `flux diff kustomization` ignore patterns by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5451](https://redirect.github.com/fluxcd/flux2/pull/5451)\n- Update dependencies to Kubernetes 1.33.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5453](https://redirect.github.com/fluxcd/flux2/pull/5453)\n- build(deps): bump the ci group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5435](https://redirect.github.com/fluxcd/flux2/pull/5435)\n- Upgrade fluxcd/pkg dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5455](https://redirect.github.com/fluxcd/flux2/pull/5455)\n- ci: Use GITHUB\\_TOKEN for API calls in update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5460](https://redirect.github.com/fluxcd/flux2/pull/5460)\n- manifests: Add `app.kubernetes.io/part-of: flux` label to controller pods by [@​pinkavaj](https://redirect.github.com/pinkavaj) in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- Migrate sourcesecret package to runtime/secrets APIs by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5462](https://redirect.github.com/fluxcd/flux2/pull/5462)\n- Implement `flux migrate` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5473](https://redirect.github.com/fluxcd/flux2/pull/5473)\n- \\[RFC-0007] Implementation history update by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5480](https://redirect.github.com/fluxcd/flux2/pull/5480)\n- Run conformance tests for Kubernetes 1.34.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5497](https://redirect.github.com/fluxcd/flux2/pull/5497)\n- Update to Kubernetes v1.34.0 and Go 1.25.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5499](https://redirect.github.com/fluxcd/flux2/pull/5499)\n- build(deps): bump the ci group across 1 directory with 10 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5500](https://redirect.github.com/fluxcd/flux2/pull/5500)\n- Allow the Go runtime to dynamically set `GOMAXPROCS` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5501](https://redirect.github.com/fluxcd/flux2/pull/5501)\n- fix(events): respect `--all-namespaces` flag by [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- \\[RFC-0011] OpenTelemetry Tracing by [@​adri1197](https://redirect.github.com/adri1197) in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- \\[RFC-0012] External Artifact API by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5292](https://redirect.github.com/fluxcd/flux2/pull/5292)\n- Add `--show-history` flag to `debug helmrelease` by [@​hawkaii](https://redirect.github.com/hawkaii) in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- Skip release candidates on updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5507](https://redirect.github.com/fluxcd/flux2/pull/5507)\n- ci: Align azure e2e tests secret names with fluxcd/pkg by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5508](https://redirect.github.com/fluxcd/flux2/pull/5508)\n- Update image-reflector-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5517](https://redirect.github.com/fluxcd/flux2/pull/5517)\n- Update source-controller to v1.7.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5518](https://redirect.github.com/fluxcd/flux2/pull/5518)\n- Add the source-watcher controller to the Flux distribution by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5519](https://redirect.github.com/fluxcd/flux2/pull/5519)\n- Add read-only commands for `ArtifactGenerator` kind by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5520](https://redirect.github.com/fluxcd/flux2/pull/5520)\n- ci: Add source-watcher to the update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5521](https://redirect.github.com/fluxcd/flux2/pull/5521)\n- Update image-automation-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5522](https://redirect.github.com/fluxcd/flux2/pull/5522)\n- Update image-reflector-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5525](https://redirect.github.com/fluxcd/flux2/pull/5525)\n- Implement `flux [reconcile|suspend|resume] image policy` commands by [@​lukas8219](https://redirect.github.com/lukas8219) in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- Handle `force: enabled` annotation in `flux diff ks` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5528](https://redirect.github.com/fluxcd/flux2/pull/5528)\n- ci: Refactor CI with `fluxcd/gha-workflows` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5529](https://redirect.github.com/fluxcd/flux2/pull/5529)\n- Remove `ArtifactGenerators` during uninstall by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5531](https://redirect.github.com/fluxcd/flux2/pull/5531)\n- Add support for `ExternalArtifact` to `flux trace` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5532](https://redirect.github.com/fluxcd/flux2/pull/5532)\n- Set Kubernetes 1.32 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5533](https://redirect.github.com/fluxcd/flux2/pull/5533)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5535](https://redirect.github.com/fluxcd/flux2/pull/5535)\n- Add support for custom storage namespace in HelmRelease creation by [@​prasad89](https://redirect.github.com/prasad89) in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5537](https://redirect.github.com/fluxcd/flux2/pull/5537)\n- ci: remove cron schedule from update by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5539](https://redirect.github.com/fluxcd/flux2/pull/5539)\n- Update source-watcher to v2.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5540](https://redirect.github.com/fluxcd/flux2/pull/5540)\n- Add `--show-history` flag to `debug kustomization` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5541](https://redirect.github.com/fluxcd/flux2/pull/5541)\n- Update image-automation-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5542](https://redirect.github.com/fluxcd/flux2/pull/5542)\n- `fluxcd/flux2/action`: Determine latest version without using GitHub API by [@​RussellAult](https://redirect.github.com/RussellAult) in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n#### New Contributors\n\n- [@​JIbald](https://redirect.github.com/JIbald) made their first contribution in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- [@​ba-work](https://redirect.github.com/ba-work) made their first contribution in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- [@​cappyzawa](https://redirect.github.com/cappyzawa) made their first contribution in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) made their first contribution in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- [@​pinkavaj](https://redirect.github.com/pinkavaj) made their first contribution in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) made their first contribution in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- [@​adri1197](https://redirect.github.com/adri1197) made their first contribution in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- [@​hawkaii](https://redirect.github.com/hawkaii) made their first contribution in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- [@​lukas8219](https://redirect.github.com/lukas8219) made their first contribution in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- [@​prasad89](https://redirect.github.com/prasad89) made their first contribution in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- [@​RussellAult](https://redirect.github.com/RussellAult) made their first contribution in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n**Full Changelog**: \n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 commit_id: 55819a84d336039e1f5bb77de731d0590c501c12 patchset: 55819a84d336039e1f5bb77de731d0590c501c12 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.8.2\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.8.2` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n#### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n#### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n#### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n#### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\n- kustomize-controller [v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\n- notification-controller [v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\n- helm-controller [v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\n- image-reflector-controller [v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\n- image-automation-controller [v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Pin cosign to v2.6.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\n- \\[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\n\n**Full Changelog**: \n\n### [`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\n\n##### Highlights\n\nFlux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nAll Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the [Go 1.25.2 release notes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\n\n##### Components changelog\n\n- source-controller [v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\n- kustomize-controller [v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\n- helm-controller [v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\n- image-reflector-controller [v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\n- image-automation-controller [v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\n- source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\n- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\n\n**Full Changelog**: \n\n### [`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\n\n##### Highlights\n\nFlux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nImprovements:\n\n- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with support for migrating manifests in Git repositories to the latest API versions.\n- Add [recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings) for configuring HelmReleases on production environments.\n\nFixes:\n\n- Fix `flux migrate` command to handle managed fields properly.\n- Fix self-signed TLS cert handling for public Helm repositories in source-controller.\n- Fix the default API versions used by receivers in notification-controller.\n- Fix redundant `Ready` condition patching in helm-controller.\n- Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.\n\n##### Components changelog\n\n- source-controller [v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\n- helm-controller [v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Backport CI fixes and updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\n- \\[release/v2.7.x] Fix `flux push artifact` not working with `--provider` by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\n- \\[release/v2.7.x] Extend `flux migrate` to work with local files by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\n- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\n- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\n- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\n- \\[release/v2.7.x] Disable AUR publishing by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\n\n**Full Changelog**: \n\n### [`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\n\n#### Highlights\n\nFlux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.7 GA blog post](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\n\nOverview of the new features:\n\n- General availability release of the Image Automation APIs (`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\n- Watch for changes in ConfigMaps and Secrets references (`Kustomization`, `HelmRelease`)\n- Support for remote cluster authentication using Workload Identity (`Kustomization`, `HelmRelease`)\n- Extend the readiness evaluation of dependencies with CEL expressions (`Kustomization`, `HelmRelease`)\n- Support for global SOPS Age decryption keys on single-tenant clusters (`Kustomization`)\n- Support for optional Kustomize components (`Kustomization`)\n- Introduce `RetryOnFailure` lifecycle management strategy (`HelmRelease`)\n- Support mTLS for sending alerts to external systems (`Provider`)\n- Object-level workload identity authentication (`Bucket`, `Provider`)\n- Support mTLS for GitHub App transport (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- OpenTelemetry tracing for `Kustomization` and `HelmRelease` reconciliation (`Provider`)\n- Support for 3rd-party source controllers (`ExternalArtifact`)\n- Support for source composition and decomposition patterns (`ArtifactGenerator`)\n- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\n- `GitSparseCheckout` feature gate (image-automation-controller)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` \ | `>= 1.33.0` |\n| `v1.34` | `>= 1.34.1` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta1` and `v2beta1` (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.\n\nUnless you are using [Flux Operator](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) to deploy the Flux controllers, you must run the `flux migrate` command on clusters before upgrading.\n\nFor more details, please refer to the [Flux v2.7 upgrade guide](https://fluxcd.io/blog/2025/09/flux-v2.7.0/#upgrade-procedure).\n\n#### Components changelog\n\n- source-controller [v1.7.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.0/CHANGELOG.md)\n- kustomize-controller [v1.7.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.0/CHANGELOG.md)\n- notification-controller [v1.7.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.0/CHANGELOG.md) [v1.7.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.1/CHANGELOG.md)\n- helm-controller [v1.4.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.0/CHANGELOG.md)\n- image-reflector-controller [v1.0.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.1/CHANGELOG.md)\n- image-automation-controller [v1.0.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.1/CHANGELOG.md)\n- source-watcher [v2.0.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.0/CHANGELOG.md) [v2.0.1](https://redirect.github.com/fluxcd/source-watcher/blob/v1.0.1/CHANGELOG.md)\n\n##### New Documentation\n\n- [ImageRepository v1 specification](https://fluxcd.io/flux/components/image/imagerepositories)\n- [ImagePolicy v1 specification](https://fluxcd.io/flux/components/image/imagepolicies)\n- [ImageUpdateAutomation v1 specification](https://fluxcd.io/flux/components/image/imageupdateautomations)\n- [ExternalArtifact v1 specification](https://fluxcd.io/flux/components/source/externalartifacts)\n- [ArtifactGenerator v1beta1 specification](https://fluxcd.io/flux/components/source/artifactgenerators)\n\n#### CLI changelog\n\n- Add backport label for `v2.6.x` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5379](https://redirect.github.com/fluxcd/flux2/pull/5379)\n- Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5381](https://redirect.github.com/fluxcd/flux2/pull/5381)\n- Add digest pinning to image automation testing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5383](https://redirect.github.com/fluxcd/flux2/pull/5383)\n- correct small typo by [@​JIbald](https://redirect.github.com/JIbald) in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- Remove credentials sync manifests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5347](https://redirect.github.com/fluxcd/flux2/pull/5347)\n- Add sparse checkout to cli by [@​ba-work](https://redirect.github.com/ba-work) in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5390](https://redirect.github.com/fluxcd/flux2/pull/5390)\n- Fix `knownhosts key mismatch` regression bug by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5404](https://redirect.github.com/fluxcd/flux2/pull/5404)\n- refactor: Use `normalize.UnstructuredList` instead of `ssa.SetNativeKindsDefaults` by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- Make service-account name configurable in `flux create tenant` by [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5409](https://redirect.github.com/fluxcd/flux2/pull/5409)\n- refactor: cleanup GetArtifactRegistryCredentials error handling by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5418](https://redirect.github.com/fluxcd/flux2/pull/5418)\n- Promote image CLI commands to stable by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5421](https://redirect.github.com/fluxcd/flux2/pull/5421)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5426](https://redirect.github.com/fluxcd/flux2/pull/5426)\n- Bump pkg/ssa to v0.49.0 for CABundle validation fix by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5431](https://redirect.github.com/fluxcd/flux2/pull/5431)\n- \\[RFC-0010] Add workload identity support for remote clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5434](https://redirect.github.com/fluxcd/flux2/pull/5434)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5443](https://redirect.github.com/fluxcd/flux2/pull/5443)\n- Fix `flux push artifact` for insecure registries by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5449](https://redirect.github.com/fluxcd/flux2/pull/5449)\n- \\[RFC-0010] Add workload identity support for remote generic clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5452](https://redirect.github.com/fluxcd/flux2/pull/5452)\n- Fix `flux diff kustomization` ignore patterns by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5451](https://redirect.github.com/fluxcd/flux2/pull/5451)\n- Update dependencies to Kubernetes 1.33.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5453](https://redirect.github.com/fluxcd/flux2/pull/5453)\n- build(deps): bump the ci group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5435](https://redirect.github.com/fluxcd/flux2/pull/5435)\n- Upgrade fluxcd/pkg dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5455](https://redirect.github.com/fluxcd/flux2/pull/5455)\n- ci: Use GITHUB\\_TOKEN for API calls in update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5460](https://redirect.github.com/fluxcd/flux2/pull/5460)\n- manifests: Add `app.kubernetes.io/part-of: flux` label to controller pods by [@​pinkavaj](https://redirect.github.com/pinkavaj) in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- Migrate sourcesecret package to runtime/secrets APIs by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5462](https://redirect.github.com/fluxcd/flux2/pull/5462)\n- Implement `flux migrate` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5473](https://redirect.github.com/fluxcd/flux2/pull/5473)\n- \\[RFC-0007] Implementation history update by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5480](https://redirect.github.com/fluxcd/flux2/pull/5480)\n- Run conformance tests for Kubernetes 1.34.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5497](https://redirect.github.com/fluxcd/flux2/pull/5497)\n- Update to Kubernetes v1.34.0 and Go 1.25.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5499](https://redirect.github.com/fluxcd/flux2/pull/5499)\n- build(deps): bump the ci group across 1 directory with 10 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5500](https://redirect.github.com/fluxcd/flux2/pull/5500)\n- Allow the Go runtime to dynamically set `GOMAXPROCS` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5501](https://redirect.github.com/fluxcd/flux2/pull/5501)\n- fix(events): respect `--all-namespaces` flag by [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- \\[RFC-0011] OpenTelemetry Tracing by [@​adri1197](https://redirect.github.com/adri1197) in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- \\[RFC-0012] External Artifact API by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5292](https://redirect.github.com/fluxcd/flux2/pull/5292)\n- Add `--show-history` flag to `debug helmrelease` by [@​hawkaii](https://redirect.github.com/hawkaii) in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- Skip release candidates on updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5507](https://redirect.github.com/fluxcd/flux2/pull/5507)\n- ci: Align azure e2e tests secret names with fluxcd/pkg by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5508](https://redirect.github.com/fluxcd/flux2/pull/5508)\n- Update image-reflector-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5517](https://redirect.github.com/fluxcd/flux2/pull/5517)\n- Update source-controller to v1.7.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5518](https://redirect.github.com/fluxcd/flux2/pull/5518)\n- Add the source-watcher controller to the Flux distribution by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5519](https://redirect.github.com/fluxcd/flux2/pull/5519)\n- Add read-only commands for `ArtifactGenerator` kind by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5520](https://redirect.github.com/fluxcd/flux2/pull/5520)\n- ci: Add source-watcher to the update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5521](https://redirect.github.com/fluxcd/flux2/pull/5521)\n- Update image-automation-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5522](https://redirect.github.com/fluxcd/flux2/pull/5522)\n- Update image-reflector-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5525](https://redirect.github.com/fluxcd/flux2/pull/5525)\n- Implement `flux [reconcile|suspend|resume] image policy` commands by [@​lukas8219](https://redirect.github.com/lukas8219) in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- Handle `force: enabled` annotation in `flux diff ks` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5528](https://redirect.github.com/fluxcd/flux2/pull/5528)\n- ci: Refactor CI with `fluxcd/gha-workflows` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5529](https://redirect.github.com/fluxcd/flux2/pull/5529)\n- Remove `ArtifactGenerators` during uninstall by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5531](https://redirect.github.com/fluxcd/flux2/pull/5531)\n- Add support for `ExternalArtifact` to `flux trace` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5532](https://redirect.github.com/fluxcd/flux2/pull/5532)\n- Set Kubernetes 1.32 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5533](https://redirect.github.com/fluxcd/flux2/pull/5533)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5535](https://redirect.github.com/fluxcd/flux2/pull/5535)\n- Add support for custom storage namespace in HelmRelease creation by [@​prasad89](https://redirect.github.com/prasad89) in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5537](https://redirect.github.com/fluxcd/flux2/pull/5537)\n- ci: remove cron schedule from update by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5539](https://redirect.github.com/fluxcd/flux2/pull/5539)\n- Update source-watcher to v2.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5540](https://redirect.github.com/fluxcd/flux2/pull/5540)\n- Add `--show-history` flag to `debug kustomization` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5541](https://redirect.github.com/fluxcd/flux2/pull/5541)\n- Update image-automation-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5542](https://redirect.github.com/fluxcd/flux2/pull/5542)\n- `fluxcd/flux2/action`: Determine latest version without using GitHub API by [@​RussellAult](https://redirect.github.com/RussellAult) in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n#### New Contributors\n\n- [@​JIbald](https://redirect.github.com/JIbald) made their first contribution in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- [@​ba-work](https://redirect.github.com/ba-work) made their first contribution in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- [@​cappyzawa](https://redirect.github.com/cappyzawa) made their first contribution in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) made their first contribution in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- [@​pinkavaj](https://redirect.github.com/pinkavaj) made their first contribution in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) made their first contribution in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- [@​adri1197](https://redirect.github.com/adri1197) made their first contribution in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- [@​hawkaii](https://redirect.github.com/hawkaii) made their first contribution in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- [@​lukas8219](https://redirect.github.com/lukas8219) made their first contribution in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- [@​prasad89](https://redirect.github.com/prasad89) made their first contribution in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- [@​RussellAult](https://redirect.github.com/RussellAult) made their first contribution in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n**Full Changelog**: \n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 child_jobs: [] commit_id: 55819a84d336039e1f5bb77de731d0590c501c12 event_id: 9aab9780-1e36-11f1-9dfb-59a58a8f99c9 executor: hostname: 0a8996d2b663 inventory_file: /var/lib/zuul/builds/8548ad3311444b048da07ee0b75dacb4/ansible/inventory.yaml log_root: /var/lib/zuul/builds/8548ad3311444b048da07ee0b75dacb4/work/logs result_data_file: /var/lib/zuul/builds/8548ad3311444b048da07ee0b75dacb4/work/results.json src_root: /var/lib/zuul/builds/8548ad3311444b048da07ee0b75dacb4/work/src work_root: /var/lib/zuul/builds/8548ad3311444b048da07ee0b75dacb4/work include_vars: [] items: - branch: main change: '102' change_message: "chore(deps): update dependency fluxcd/flux2 to v2.8.2\n\nThis PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `2.6.4` \u2192 `2.8.2` |\n\n---\n\n### Release Notes\n\n
\nfluxcd/flux2 (fluxcd/flux2)\n\n### [`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\n\n#### Highlights\n\nFlux v2.8.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)\n- Fix the Go templates bug of YAML separator `---` getting concatenated to `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\n- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate `DefaultToRetryOnFailure` that improves the experience when the `CancelHealthCheckOnNewRevision` is enabled (helm-controller)\n- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)\n- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1\n\n#### Components changelog\n\n- source-controller [v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\n- kustomize-controller [v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\n- notification-controller [v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\n- helm-controller [v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\n- image-reflector-controller [v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\n- image-automation-controller [v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\n- source-watcher [v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updates by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\n- Update toolkit components by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\n\n**Full Changelog**: \n\n### [`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\n\n##### Highlights\n\nFlux v2.8.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix Git commit status events being dropped for Kustomizations (notification-controller)\n- Fix health check for StatefulSets when the Pods are Pending/Unschedulable during rollout (helm-controller, kustomize-controller)\n\n##### Components changelog\n\n- kustomize-controller [v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\n- notification-controller [v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\n- helm-controller [v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\n- \\[release/v2.8.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\n\n**Full Changelog**: \n\n### [`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\n\n##### Highlights\n\nFlux v2.8.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.8 GA blog post](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\n\nOverview of the new features:\n\n- Helm v4 support, including server-side apply and kstatus-based health checking (`HelmRelease`)\n- Readiness evaluation of Helm-managed objects with CEL expressions (`HelmRelease`)\n- Improved observability of Helm releases with inventory tracking in `.status.inventory` (`HelmRelease`)\n- Reduced the mean time to recovery of Flux-managed applications via `CancelHealthCheckOnNewRevision` feature gate (`Kustomization`, `HelmRelease`)\n- Support for commenting on Pull Requests directly from Flux notifications (`Provider`)\n- Custom SSA apply stages for ordering resource application in kustomize-controller (`Kustomization`)\n- Automatic GitHub App installation ID lookup from the repository owner (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- Support for Cosign v3 for verifying OCI artifacts and container images (`OCIRepository`)\n- ArtifactGenerator support for extracting and modifying Helm charts (`ArtifactGenerator`)\n- Bypass cache when fetching source objects via `DirectSourceFetch` feature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.33` | `>= 1.32.0` |\n| `v1.34` \ | `>= 1.34.1` |\n| `v1.35` | `>= 1.35.0` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n##### Upgrade procedure\n\n:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024) have reached end-of-life and have been removed from the CRDs.\n\nPlease follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from older versions of Flux to v2.8.\n\n##### Components changelog\n\n- source-controller [v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\n- kustomize-controller [v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\n- notification-controller [v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\n- helm-controller [v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\n- image-reflector-controller [v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\n- image-automation-controller [v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\n- source-watcher [v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\n\n##### CLI changelog\n\n- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\n- Add backport label for Flux 2.7 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\n- build(deps): bump the ci group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\n- Fix `flux push artifact` not working with `--provider` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\n- Extend `flux migrate` to work with local files by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\n- Improve `flux migrate` for live cluster migrations by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\n- Fix `flux migrate -f` command to work with comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\n- Add source-watcher to docs by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\n- Fix `flux migrate -f` not considering kind comments by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\n- refactor: convert `Kustomization` resource into unstructured map only once during variable substitution by [@​ramasai1](https://redirect.github.com/ramasai1) in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\n- Disable AUR publishing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\n- Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\n- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\n- Restore GitHub PAT for backports by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\n- \\[RFC-0012] Add command `flux get source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\n- fix: handle error when writing password prompt to stdout by [@​akshatsinha0](https://redirect.github.com/akshatsinha0) in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- Pin cosign to v2.6.1 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\n- \\[RFC-0012] Add command `flux export source external` by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\n- Fix bootstrap e2e test for image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\n- fix: return accepted values for flags when calling Values.Type() by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- ci: Include source-watcher in the e2e test suite by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\n- Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\n- Fix panic on reconcile with source of ExternalArtifact kind by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\n- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\n- diff: report if object is skipped by [@​hown3d](https://redirect.github.com/hown3d) in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\n- Allow option to skip tenant namespace creation by [@​anshuishere](https://redirect.github.com/anshuishere) in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\n- fix: [#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by checking if both --chart and --chart-ref are set by [@​jaxels10](https://redirect.github.com/jaxels10) in [#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\n- Added retry logic with delays to the Flux CLI download by [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- Run conformance tests for Kubernetes 1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\n- fix: normalize path for Windows compatibility by [@​sibasispadhi](https://redirect.github.com/sibasispadhi) in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- Introduce support for looking up GH app installation ID by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\n- Update dependencies to Kubernetes v1.35.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\n- Fix resume command logging success after reconciliation failure by [@​Aman-Cool](https://redirect.github.com/Aman-Cool) in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- Add 2.8 to supported versions for `flux migrate -f` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\n- Introduce workflow for bumping fluxcd/pkg deps by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\n- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\n- Fix event listing ignoring pagination token by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\n- Build with Go 1.26 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\n- Update helm-controller to v1.5.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\n- build(deps): bump the ci group across 1 directory with 12 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\n- Fix bootstrap failure on Windows cross-drive paths by [@​veeceey](https://redirect.github.com/veeceey) in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n- Dump debug info on e2e tests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\n- Set Kubernetes 1.33 as min supported version by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\n- Update conformance tests to min Kubernetes 1.33 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\n\n##### New Contributors\n\n- [@​ramasai1](https://redirect.github.com/ramasai1) made their first contribution in [#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\n- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made their first contribution in [#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\n- [@​jaxels10](https://redirect.github.com/jaxels10) made their first contribution in [#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\n- [@​hown3d](https://redirect.github.com/hown3d) made their first contribution in [#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\n- [@​anshuishere](https://redirect.github.com/anshuishere) made their first contribution in [#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\n- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) made their first contribution in [#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\n- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made their first contribution in [#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\n- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their first contribution in [#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\n- [@​veeceey](https://redirect.github.com/veeceey) made their first contribution in [#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\n\n**Full Changelog**: \n\n### [`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\n\n#### Highlights\n\nFlux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Fix HelmRelease history truncation when using the `RetryOnFailure` strategy.\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- helm-controller [v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\n\n**Full Changelog**: \n\n### [`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\n\n#### Highlights\n\nFlux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F \ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Add `DisableConfigWatchers` feature gate to all controllers for disabling the Secrets/ConfigMaps watchers\n- Fix Workload Identity for Azure China Cloud in all controllers\n- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller\n- Skip secret decryption for remote kustomize patches in kustomize-controller\n- Improve post-build error reporting in kustomize-controller\n- Add `ArtifactGenerator` to aggregated RBAC roles\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.\nFlux users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n#### Components changelog\n\n- source-controller [v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\n- kustomize-controller [v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\n- notification-controller [v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\n- helm-controller [v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\n- image-reflector-controller [v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\n- image-automation-controller [v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\n- source-watcher [v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\n\n#### CLI changelog\n\n- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\n- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated RBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\n- \\[release/v2.7.x] Fix panic on reconcile with source of ExternalArtifact kind by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\n- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\n- \\[release/v2.7.x] diff: report if object is skipped by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\n- \\[release/v2.7.x] Allow option to skip tenant namespace creation by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\n\n**Full Changelog**: \n\n### [`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\n\n##### Highlights\n\nFlux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nFixes:\n\n- Restore SOCKS5 proxy support in all controllers\n- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\n- Automated retries for ImagePolicies when no image tags are found in the database\n- Fix alerting for Telegram's `message_thread_id`\n- Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher\n\n:warning: Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use [Cosign v2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries) for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.\n\n##### Components changelog\n\n- source-controller [v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\n- kustomize-controller [v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\n- notification-controller [v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\n- helm-controller [v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\n- image-reflector-controller [v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\n- image-automation-controller [v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Pin cosign to v2.6.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\n- \\[release/v2.7.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\n- \\[release/v2.7.x] fix: return accepted values for flags when calling Values.Type() by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\n\n**Full Changelog**: \n\n### [`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\n\n##### Highlights\n\nFlux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nAll Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the [Go 1.25.2 release notes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\n\n##### Components changelog\n\n- source-controller [v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\n- kustomize-controller [v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\n- helm-controller [v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\n- image-reflector-controller [v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\n- image-automation-controller [v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\n- source-watcher [v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and `--events-addr` flags by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\n- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\n\n**Full Changelog**: \n\n### [`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\n\n##### Highlights\n\nFlux v2.7.1 is a patch release that comes with various improvements and fixes. Users are encouraged to upgrade for the best experience.\n\n\u2139\uFE0F Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.\n\nImprovements:\n\n- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with support for migrating manifests in Git repositories to the latest API versions.\n- Add [recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings) for configuring HelmReleases on production environments.\n\nFixes:\n\n- Fix `flux migrate` command to handle managed fields properly.\n- Fix self-signed TLS cert handling for public Helm repositories in source-controller.\n- Fix the default API versions used by receivers in notification-controller.\n- Fix redundant `Ready` condition patching in helm-controller.\n- Fix workload identity configuration examples for kubeconfig in helm-controller and kustomize-controller.\n\n##### Components changelog\n\n- source-controller [v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\n- notification-controller [v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\n- helm-controller [v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\n\n##### CLI changelog\n\n- \\[release/v2.7.x] Backport CI fixes and updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\n- \\[release/v2.7.x] Fix `flux push artifact` not working with `--provider` by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\n- \\[release/v2.7.x] Extend `flux migrate` to work with local files by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\n- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\n- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\n- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\n- \\[release/v2.7.x] Update toolkit components by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\n- \\[release/v2.7.x] Disable AUR publishing by [@​github-actions](https://redirect.github.com/github-actions)\\[bot] in [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\n\n**Full Changelog**: \n\n### [`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\n\n[Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\n\n#### Highlights\n\nFlux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.\n\nFor a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.7 GA blog post](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\n\nOverview of the new features:\n\n- General availability release of the Image Automation APIs (`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\n- Watch for changes in ConfigMaps and Secrets references (`Kustomization`, `HelmRelease`)\n- Support for remote cluster authentication using Workload Identity (`Kustomization`, `HelmRelease`)\n- Extend the readiness evaluation of dependencies with CEL expressions (`Kustomization`, `HelmRelease`)\n- Support for global SOPS Age decryption keys on single-tenant clusters (`Kustomization`)\n- Support for optional Kustomize components (`Kustomization`)\n- Introduce `RetryOnFailure` lifecycle management strategy (`HelmRelease`)\n- Support mTLS for sending alerts to external systems (`Provider`)\n- Object-level workload identity authentication (`Bucket`, `Provider`)\n- Support mTLS for GitHub App transport (`GitRepository`, `ImageUpdateAutomation`, `Provider`)\n- OpenTelemetry tracing for `Kustomization` and `HelmRelease` reconciliation (`Provider`)\n- Support for 3rd-party source controllers (`ExternalArtifact`)\n- Support for source composition and decomposition patterns (`ArtifactGenerator`)\n- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\n- `GitSparseCheckout` feature gate (image-automation-controller)\n\n\u2764\uFE0F Big thanks to all the Flux contributors that helped us with this release!\n\n##### Kubernetes compatibility\n\nThis release is compatible with the following Kubernetes versions:\n\n| Kubernetes version | Minimum required |\n| ------------------ | ---------------- |\n| `v1.32` | `>= 1.32.0` |\n| `v1.33` \ | `>= 1.33.0` |\n| `v1.34` | `>= 1.34.1` |\n\n> \\[!NOTE]\n> Note that the Flux project offers support only for the latest three minor versions of Kubernetes.\n> Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as\n> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux.\n\n##### OpenShift compatibility\n\nFlux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.\n\n#### Upgrade procedure\n\n:warning: The Flux APIs `v1beta1` and `v2beta1` (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.\n\nUnless you are using [Flux Operator](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) to deploy the Flux controllers, you must run the `flux migrate` command on clusters before upgrading.\n\nFor more details, please refer to the [Flux v2.7 upgrade guide](https://fluxcd.io/blog/2025/09/flux-v2.7.0/#upgrade-procedure).\n\n#### Components changelog\n\n- source-controller [v1.7.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.0/CHANGELOG.md)\n- kustomize-controller [v1.7.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.0/CHANGELOG.md)\n- notification-controller [v1.7.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.0/CHANGELOG.md) [v1.7.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.1/CHANGELOG.md)\n- helm-controller [v1.4.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.0/CHANGELOG.md)\n- image-reflector-controller [v1.0.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.1/CHANGELOG.md)\n- image-automation-controller [v1.0.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.0/CHANGELOG.md) [v1.0.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.1/CHANGELOG.md)\n- source-watcher [v2.0.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.0/CHANGELOG.md) [v2.0.1](https://redirect.github.com/fluxcd/source-watcher/blob/v1.0.1/CHANGELOG.md)\n\n##### New Documentation\n\n- [ImageRepository v1 specification](https://fluxcd.io/flux/components/image/imagerepositories)\n- [ImagePolicy v1 specification](https://fluxcd.io/flux/components/image/imagepolicies)\n- [ImageUpdateAutomation v1 specification](https://fluxcd.io/flux/components/image/imageupdateautomations)\n- [ExternalArtifact v1 specification](https://fluxcd.io/flux/components/source/externalartifacts)\n- [ArtifactGenerator v1beta1 specification](https://fluxcd.io/flux/components/source/artifactgenerators)\n\n#### CLI changelog\n\n- Add backport label for `v2.6.x` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5379](https://redirect.github.com/fluxcd/flux2/pull/5379)\n- Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5381](https://redirect.github.com/fluxcd/flux2/pull/5381)\n- Add digest pinning to image automation testing by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5383](https://redirect.github.com/fluxcd/flux2/pull/5383)\n- correct small typo by [@​JIbald](https://redirect.github.com/JIbald) in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- Remove credentials sync manifests by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5347](https://redirect.github.com/fluxcd/flux2/pull/5347)\n- Add sparse checkout to cli by [@​ba-work](https://redirect.github.com/ba-work) in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5390](https://redirect.github.com/fluxcd/flux2/pull/5390)\n- Fix `knownhosts key mismatch` regression bug by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5404](https://redirect.github.com/fluxcd/flux2/pull/5404)\n- refactor: Use `normalize.UnstructuredList` instead of `ssa.SetNativeKindsDefaults` by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- Make service-account name configurable in `flux create tenant` by [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5409](https://redirect.github.com/fluxcd/flux2/pull/5409)\n- refactor: cleanup GetArtifactRegistryCredentials error handling by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5418](https://redirect.github.com/fluxcd/flux2/pull/5418)\n- Promote image CLI commands to stable by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5421](https://redirect.github.com/fluxcd/flux2/pull/5421)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5426](https://redirect.github.com/fluxcd/flux2/pull/5426)\n- Bump pkg/ssa to v0.49.0 for CABundle validation fix by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5431](https://redirect.github.com/fluxcd/flux2/pull/5431)\n- \\[RFC-0010] Add workload identity support for remote clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5434](https://redirect.github.com/fluxcd/flux2/pull/5434)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5443](https://redirect.github.com/fluxcd/flux2/pull/5443)\n- Fix `flux push artifact` for insecure registries by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5449](https://redirect.github.com/fluxcd/flux2/pull/5449)\n- \\[RFC-0010] Add workload identity support for remote generic clusters by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5452](https://redirect.github.com/fluxcd/flux2/pull/5452)\n- Fix `flux diff kustomization` ignore patterns by [@​dgunzy](https://redirect.github.com/dgunzy) in [#​5451](https://redirect.github.com/fluxcd/flux2/pull/5451)\n- Update dependencies to Kubernetes 1.33.2 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5453](https://redirect.github.com/fluxcd/flux2/pull/5453)\n- build(deps): bump the ci group across 1 directory with 7 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5435](https://redirect.github.com/fluxcd/flux2/pull/5435)\n- Upgrade fluxcd/pkg dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5455](https://redirect.github.com/fluxcd/flux2/pull/5455)\n- ci: Use GITHUB\\_TOKEN for API calls in update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5460](https://redirect.github.com/fluxcd/flux2/pull/5460)\n- manifests: Add `app.kubernetes.io/part-of: flux` label to controller pods by [@​pinkavaj](https://redirect.github.com/pinkavaj) in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- Migrate sourcesecret package to runtime/secrets APIs by [@​cappyzawa](https://redirect.github.com/cappyzawa) in [#​5462](https://redirect.github.com/fluxcd/flux2/pull/5462)\n- Implement `flux migrate` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5473](https://redirect.github.com/fluxcd/flux2/pull/5473)\n- \\[RFC-0007] Implementation history update by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5480](https://redirect.github.com/fluxcd/flux2/pull/5480)\n- Run conformance tests for Kubernetes 1.34.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5497](https://redirect.github.com/fluxcd/flux2/pull/5497)\n- Update to Kubernetes v1.34.0 and Go 1.25.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5499](https://redirect.github.com/fluxcd/flux2/pull/5499)\n- build(deps): bump the ci group across 1 directory with 10 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5500](https://redirect.github.com/fluxcd/flux2/pull/5500)\n- Allow the Go runtime to dynamically set `GOMAXPROCS` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5501](https://redirect.github.com/fluxcd/flux2/pull/5501)\n- fix(events): respect `--all-namespaces` flag by [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- \\[RFC-0011] OpenTelemetry Tracing by [@​adri1197](https://redirect.github.com/adri1197) in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- \\[RFC-0012] External Artifact API by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5292](https://redirect.github.com/fluxcd/flux2/pull/5292)\n- Add `--show-history` flag to `debug helmrelease` by [@​hawkaii](https://redirect.github.com/hawkaii) in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- Skip release candidates on updates by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5507](https://redirect.github.com/fluxcd/flux2/pull/5507)\n- ci: Align azure e2e tests secret names with fluxcd/pkg by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5508](https://redirect.github.com/fluxcd/flux2/pull/5508)\n- Update image-reflector-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5517](https://redirect.github.com/fluxcd/flux2/pull/5517)\n- Update source-controller to v1.7.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5518](https://redirect.github.com/fluxcd/flux2/pull/5518)\n- Add the source-watcher controller to the Flux distribution by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5519](https://redirect.github.com/fluxcd/flux2/pull/5519)\n- Add read-only commands for `ArtifactGenerator` kind by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5520](https://redirect.github.com/fluxcd/flux2/pull/5520)\n- ci: Add source-watcher to the update workflow by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5521](https://redirect.github.com/fluxcd/flux2/pull/5521)\n- Update image-automation-controller to v1.0.0 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5522](https://redirect.github.com/fluxcd/flux2/pull/5522)\n- Update image-reflector-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5525](https://redirect.github.com/fluxcd/flux2/pull/5525)\n- Implement `flux [reconcile|suspend|resume] image policy` commands by [@​lukas8219](https://redirect.github.com/lukas8219) in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- Handle `force: enabled` annotation in `flux diff ks` command by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5528](https://redirect.github.com/fluxcd/flux2/pull/5528)\n- ci: Refactor CI with `fluxcd/gha-workflows` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5529](https://redirect.github.com/fluxcd/flux2/pull/5529)\n- Remove `ArtifactGenerators` during uninstall by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5531](https://redirect.github.com/fluxcd/flux2/pull/5531)\n- Add support for `ExternalArtifact` to `flux trace` by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5532](https://redirect.github.com/fluxcd/flux2/pull/5532)\n- Set Kubernetes 1.32 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​5533](https://redirect.github.com/fluxcd/flux2/pull/5533)\n- build(deps): bump the ci group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\\[bot] in [#​5535](https://redirect.github.com/fluxcd/flux2/pull/5535)\n- Add support for custom storage namespace in HelmRelease creation by [@​prasad89](https://redirect.github.com/prasad89) in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5537](https://redirect.github.com/fluxcd/flux2/pull/5537)\n- ci: remove cron schedule from update by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5539](https://redirect.github.com/fluxcd/flux2/pull/5539)\n- Update source-watcher to v2.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5540](https://redirect.github.com/fluxcd/flux2/pull/5540)\n- Add `--show-history` flag to `debug kustomization` by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [#​5541](https://redirect.github.com/fluxcd/flux2/pull/5541)\n- Update image-automation-controller to v1.0.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​5542](https://redirect.github.com/fluxcd/flux2/pull/5542)\n- `fluxcd/flux2/action`: Determine latest version without using GitHub API by [@​RussellAult](https://redirect.github.com/RussellAult) in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n#### New Contributors\n\n- [@​JIbald](https://redirect.github.com/JIbald) made their first contribution in [#​5388](https://redirect.github.com/fluxcd/flux2/pull/5388)\n- [@​ba-work](https://redirect.github.com/ba-work) made their first contribution in [#​5389](https://redirect.github.com/fluxcd/flux2/pull/5389)\n- [@​cappyzawa](https://redirect.github.com/cappyzawa) made their first contribution in [#​5407](https://redirect.github.com/fluxcd/flux2/pull/5407)\n- [@​reiSh6phoo9o](https://redirect.github.com/reiSh6phoo9o) made their first contribution in [#​5402](https://redirect.github.com/fluxcd/flux2/pull/5402)\n- [@​pinkavaj](https://redirect.github.com/pinkavaj) made their first contribution in [#​5440](https://redirect.github.com/fluxcd/flux2/pull/5440)\n- [@​mohiuddin-khan-shiam](https://redirect.github.com/mohiuddin-khan-shiam) made their first contribution in [#​5414](https://redirect.github.com/fluxcd/flux2/pull/5414)\n- [@​adri1197](https://redirect.github.com/adri1197) made their first contribution in [#​5321](https://redirect.github.com/fluxcd/flux2/pull/5321)\n- [@​hawkaii](https://redirect.github.com/hawkaii) made their first contribution in [#​5505](https://redirect.github.com/fluxcd/flux2/pull/5505)\n- [@​lukas8219](https://redirect.github.com/lukas8219) made their first contribution in [#​5492](https://redirect.github.com/fluxcd/flux2/pull/5492)\n- [@​prasad89](https://redirect.github.com/prasad89) made their first contribution in [#​5534](https://redirect.github.com/fluxcd/flux2/pull/5534)\n- [@​RussellAult](https://redirect.github.com/RussellAult) made their first contribution in [#​5509](https://redirect.github.com/fluxcd/flux2/pull/5509)\n\n**Full Changelog**: \n\n
\n\n---\n\n### Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/vexxhost/atmosphere.common).\n\n" change_url: https://github.com/vexxhost/atmosphere.common/pull/102 commit_id: 55819a84d336039e1f5bb77de731d0590c501c12 patchset: 55819a84d336039e1f5bb77de731d0590c501c12 project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common topic: null job: atmosphere-common-molecule-secretgen-controller jobtags: [] max_attempts: 3 message: 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 patchset: 55819a84d336039e1f5bb77de731d0590c501c12 pipeline: check playbook_context: playbook_projects: trusted/project_0/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 9052b5a7781b3346e4cffd452a54448cbff54d8b trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: c75fe6ef19c05b98349573c971950c51bbf24758 trusted/project_2/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_0/github.com/vexxhost/zuul-jobs: canonical_name: github.com/vexxhost/zuul-jobs checkout: main commit: a6e68243e02ef030ce5e75f8b67630880c475f33 untrusted/project_1/github.com/vexxhost/zuul-config: canonical_name: github.com/vexxhost/zuul-config checkout: main commit: 9052b5a7781b3346e4cffd452a54448cbff54d8b untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: c75fe6ef19c05b98349573c971950c51bbf24758 playbooks: - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/playbook_0/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_0/role_2/zuul-jobs/roles - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/post-logs.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/post_playbook_1/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/post_playbook_1/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/post_playbook_1/role_2/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles - checkout: main checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_2/zuul-jobs link_target: trusted/project_2/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_0/role_2/zuul-jobs/roles - path: untrusted/project_0/github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml roles: - checkout: master checkout_description: project default branch link_name: ansible/pre_playbook_1/role_1/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_1/role_1/zuul-jobs/roles - checkout: main checkout_description: playbook branch link_name: ansible/pre_playbook_1/role_2/zuul-jobs link_target: untrusted/project_0/github.com/vexxhost/zuul-jobs role_path: ansible/pre_playbook_1/role_2/zuul-jobs/roles post_review: false post_timeout: null pre_timeout: null project: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common name: vexxhost/atmosphere.common short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common projects: github.com/vexxhost/atmosphere.common: canonical_hostname: github.com canonical_name: github.com/vexxhost/atmosphere.common checkout: main checkout_description: zuul branch commit: 9acb55a83c1c624eb55a8bfaacbdb013a6e45b5e name: vexxhost/atmosphere.common required: false short_name: atmosphere.common src_dir: src/github.com/vexxhost/atmosphere.common ref: refs/pull/102/head resources: {} tenant: oss timeout: 1800 topic: null voting: true