feat(github-release): update aqua:fluxcd/flux2 ( 2.5.1 → 2.6.3 )

[renovate]

This PR contains the following updates:

Package	Update	Change
aqua:fluxcd/flux2	minor	2.5.1 -> 2.6.3

---

Release Notes

fluxcd/flux2 (aqua:fluxcd/flux2)

v2.6.3

Compare Source

Highlights

Flux v2.6.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

• Fix for rsa-sha2-512 and rsa-sha2-256 algorithms not being prioritized for ssh-rsa host keys in source-controller, image-automation-controller and Flux CLI bootstrap.

Components changelog

• source-controller v1.6.2
• image-automation-controller v0.41.2

CLI changed

• [release/v2.6.x] Update toolkit components by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5427

Full Changelog: fluxcd/flux2@v2.6.2...v2.6.3

v2.6.2

Compare Source

Highlights

Flux v2.6.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

• Fix authentication for flux push artifact --provider=azure on Azure DevOps runners.
• Fix OIDC authentication for Amazon ECR Public in source-controller and image-reflector-controller.
• Fix knownhosts key mismatch regression bug in the Flux CLI, source-controller and image-automation-controller.

Components changelog

• source-controller v1.6.1
• image-reflector-controller v0.35.2
• image-automation-controller v0.41.1

CLI changelog

• [release/v2.6.x] fix: Allow Azure CLI calls in flux push artifact --provider azure on DevOps runners by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5396
• [release/v2.6.x] Fix knownhosts key mismatch regression bug by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5405
• [release/v2.6.x] Update toolkit components by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5410

Full Changelog: fluxcd/flux2@v2.6.1...v2.6.2

v2.6.1

Compare Source

Highlights

Flux v2.6.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

• Fix a bug introduced in image-reflector-controller v0.35.0 that was causing spurious error events for policies during image repository reconciliation.
• Fix excessive logging in image-reflector-controller after a restart when the image tags cache is empty.

Components changelog

• image-reflector-controller v0.35.1

CLI changelog

• [release/v2.6.x] Update image-reflector-controller to v0.35.1 by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5382
• [release/v2.6.x] Add digest pinning to image automation testing by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5384

Full Changelog: fluxcd/flux2@v2.6.0...v2.6.1

v2.6.0

Compare Source

Highlights

Flux v2.6.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.6 GA blog post.

Overview of the new features:

• General availability release for the Flux OCI Artifacts APIs and flux artifact commands
• Support for OCI digests pinning (ImagePolicy, ImageUpdateAutomation)
• Object-level workload identity authentication (OCIRepository, ImageRepository, Kustomization, Alert Provider)
• Cache registry credentials for cloud providers (OCIRepository, ImageRepository)
• Git HTTP/S Mutual TLS authentication (GitRepository, ImageUpdateAutomation)
• Support for sparse checkout (GitRepository)
• Support for GitHub App authentication (Alert Provider)
• Support for managed Identity authentication to Azure Event Hub (Alert Provider)
• Customize the ID of the Git commit status with CEL expressions (Alert Provider)
• WaitForTermination deletion policy (Kustomization)
• DisableChartDigestTracking feature gate (HelmRelease)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
v1.31	>= 1.31.0
v1.32	>= 1.32.0
v1.33	>= 1.33.0

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator.
The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

Upgrade Flux from v2.5.0 to v2.6.0 by following the upgrade guide.

To upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git:

1. Set apiVersion: source.toolkit.fluxcd.io/v1 in the YAML files that contain OCIRepository definitions.
2. Add an annotation api.fluxcd.io/upgrade: "v2.6.0" to the OCIRepository resources. (this is not required if Flux Operator is used for upgrade)
3. Commit, push, and reconcile the API version changes.

Bumping the APIs version in manifests can be done gradually.
It is advised to not delay this procedure as the deprecated versions will be removed after 6 months.

Components changelog

• source-controller v1.6.0
• kustomize-controller v1.6.0
• notification-controller v1.6.0
• helm-controller v1.3.0
• image-reflector-controller v0.35.0
• image-automation-controller v0.41.0

New Documentation

• OCIRepository v1 specification
• AWS integrations
• Azure integrations
• GCP integrations

What's Changed

• fix: correct name on github app secret by @​NotAwar in https://github.com/fluxcd/flux2/pull/5202
• Update RFC 0008 and RFC 0009 milestones by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5141
• Update kustomize-controller to v1.5.1 by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5214
• Update backport labels for 2.5 by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5215
• Fix command debug hr not taking targetPath into account by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5227
• Remove redundant space. by @​laiminhtrung1997 in https://github.com/fluxcd/flux2/pull/5038
• ci: switch to goreleaser changelog generation by @​y-eight in https://github.com/fluxcd/flux2/pull/5284
• change: use the default ephemeral GITHUB_TOKEN instead of the static one by @​piontec in https://github.com/fluxcd/flux2/pull/5282
• add: OSSF scorecard configuration file - ignore false-positive by @​piontec in https://github.com/fluxcd/flux2/pull/5287
• build(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.3 by @​dependabot in https://github.com/fluxcd/flux2/pull/5295
• Allow to pull/push artifacts to insecure registries without TLS by @​mottetm in https://github.com/fluxcd/flux2/pull/5299
• [RFC-0010] Multi-Tenant Workload Identity by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5209
• flux diff: Reset target struct before decoding by @​maboehm in https://github.com/fluxcd/flux2/pull/5302
• fix: allow recursive dry-run over local sources by @​niveau0 in https://github.com/fluxcd/flux2/pull/5219
• Run conformance tests for Kubernetes 1.33.0 by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5318
• Update to Kubernetes 1.33.0 and Go 1.24.0 by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5323
• [RFC-0010] Remove EKS Pod Identity from the proposal by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5309
• [RFC-0010] Add RBAC for creating service account tokens by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5332
• Upgrade fluxcd/pkg auth, oci, git and git/gogit by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5333
• Fix exit code handling in get command by @​dgunzy in https://github.com/fluxcd/flux2/pull/5338
• build(deps): bump the ci group across 1 directory with 18 updates by @​dependabot in https://github.com/fluxcd/flux2/pull/5325
• Fix flux trace for HRs from OCIRepositorys by @​makkes in https://github.com/fluxcd/flux2/pull/5349
• Fix e2e workflow by @​makkes in https://github.com/fluxcd/flux2/pull/5351
• [RFC-0010] Update RFC to include opt-in feature gate by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5354
• [RFC-0010] Update RFC feature gate behavior by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5355
• Upgrade fluxcd/pkg packages by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5356
• Upgrade fluxcd/pkg packages by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5357
• Set Kubernetes 1.31 as min supported version by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5364
• Update dependencies by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5366
• Update toolkit components by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5368
• Promote artifact commands to stable by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5369
• Add --interval and --reflect-digest flags to flux create image policy by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5345
• Update CLI to OCIRepository v1 (GA) by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5371
• Update dependabot config by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5373
• Update toolkit components by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5370

New Contributors

• @​NotAwar made their first contribution in https://github.com/fluxcd/flux2/pull/5202
• @​laiminhtrung1997 made their first contribution in https://github.com/fluxcd/flux2/pull/5038
• @​y-eight made their first contribution in https://github.com/fluxcd/flux2/pull/5284
• @​piontec made their first contribution in https://github.com/fluxcd/flux2/pull/5282
• @​mottetm made their first contribution in https://github.com/fluxcd/flux2/pull/5299
• @​maboehm made their first contribution in https://github.com/fluxcd/flux2/pull/5302
• @​niveau0 made their first contribution in https://github.com/fluxcd/flux2/pull/5219
• @​dgunzy made their first contribution in https://github.com/fluxcd/flux2/pull/5338

Full Changelog: fluxcd/flux2@v2.5.0...v2.6.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.