Skip to content

Conversation

@Sawangg
Copy link
Owner

@Sawangg Sawangg commented Oct 28, 2025

This PR contains the following updates:

Package Update Change OpenSSF
fluxcd/flux2 patch v2.7.2 -> v2.7.5 OpenSSF Scorecard

Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.7.5

Compare Source

Highlights

Flux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix HelmRelease history truncation when using the RetryOnFailure strategy.

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.7.4...v2.7.5

v2.7.4

Compare Source

Highlights

Flux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Add DisableConfigWatchers feature gate to all controllers for disabling the Secrets/ConfigMaps watchers
  • Fix Workload Identity for Azure China Cloud in all controllers
  • Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller
  • Skip secret decryption for remote kustomize patches in kustomize-controller
  • Improve post-build error reporting in kustomize-controller
  • Add ArtifactGenerator to aggregated RBAC roles

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.7.3...v2.7.4

v2.7.3

Compare Source

Highlights

Flux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Restore SOCKS5 proxy support in all controllers
  • Fix status reporting of HelmReleases with RetryOnFailure strategy
  • Automated retries for ImagePolicies when no image tags are found in the database
  • Fix alerting for Telegram's message_thread_id
  • Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.7.2...v2.7.3


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@Sawangg Sawangg added cluster: prod dependencies Upgrade or removal of dependencies labels Oct 28, 2025
@Sawangg Sawangg force-pushed the renovate/prod-fluxcd-flux2-2.x branch from 5437813 to 6afe137 Compare November 24, 2025 16:09
@Sawangg Sawangg changed the title chore(deps): update dependency fluxcd/flux2 to v2.7.3 chore(deps): update dependency fluxcd/flux2 to v2.7.4 Nov 24, 2025
@Sawangg Sawangg force-pushed the renovate/prod-fluxcd-flux2-2.x branch from 6afe137 to e152ed6 Compare November 27, 2025 12:00
@Sawangg Sawangg changed the title chore(deps): update dependency fluxcd/flux2 to v2.7.4 chore(deps): update dependency fluxcd/flux2 to v2.7.5 Nov 27, 2025
@Sawangg Sawangg force-pushed the renovate/prod-fluxcd-flux2-2.x branch 24 times, most recently from 1346418 to a8d67be Compare December 3, 2025 22:04
@Sawangg Sawangg force-pushed the renovate/prod-fluxcd-flux2-2.x branch 23 times, most recently from ba2d20c to a0d5045 Compare December 9, 2025 15:04
@Sawangg Sawangg force-pushed the renovate/prod-fluxcd-flux2-2.x branch 5 times, most recently from 575b9ec to abc32ee Compare December 15, 2025 02:05
@Sawangg Sawangg force-pushed the renovate/prod-fluxcd-flux2-2.x branch from abc32ee to df8a913 Compare December 16, 2025 05:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cluster: prod dependencies Upgrade or removal of dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants