{ "_class" : "hudson.model.FreeStyleBuild", "actions" : [ { "_class" : "hudson.model.CauseAction", "causes" : [ { "_class" : "com.cloudbees.jenkins.GitHubPushCause", "shortDescription" : "Started by GitHub push by ti-chi-bot[bot]" }, { "_class" : "com.cloudbees.jenkins.GitHubPushCause", "shortDescription" : "Started by GitHub push by ti-chi-bot[bot]" } ] }, { }, { "_class" : "jenkins.metrics.impl.TimeInQueueAction", "blockedDurationMillis" : 0, "blockedTimeMillis" : 0, "buildableDurationMillis" : 15267, "buildableTimeMillis" : 15267, "buildingDurationMillis" : 44667, "executingTimeMillis" : 44667, "executorUtilization" : 1.0, "subTaskCount" : 0, "waitingDurationMillis" : 8481, "waitingTimeMillis" : 8481 }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "origin/main" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1683, "buildResult" : null, "marked" : { "SHA1" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "branch" : [ { "SHA1" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "name" : "origin/main" } ] }, "revision" : { "SHA1" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "branch" : [ { "SHA1" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "name" : "origin/main" } ] } } }, "lastBuiltRevision" : { "SHA1" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "branch" : [ { "SHA1" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "name" : "origin/main" } ] }, "remoteUrls" : [ "https://github.com/PingCAP-QE/ci.git" ], "scmName" : "" }, { }, { }, { }, { }, { }, { }, { "_class" : "org.jenkinsci.plugins.displayurlapi.actions.RunDisplayAction" } ], "artifacts" : [ ], "building" : false, "description" : null, "displayName" : "#1683", "duration" : 44667, "estimatedDuration" : 61436, "executor" : null, "fullDisplayName" : "seed #1683", "id" : "1683", "inProgress" : false, "keepLog" : false, "number" : 1683, "queueId" : 3681424, "result" : "SUCCESS", "timestamp" : 1778573396394, "url" : "https://do.pingcap.net/jenkins/job/seed/1683/", "builtOn" : "default-6cbqx", "changeSet" : { "_class" : "hudson.plugins.git.GitChangeSetList", "items" : [ { "_class" : "hudson.plugins.git.GitChangeSet", "affectedPaths" : [ ], "commitId" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "timestamp" : 1778573367000, "author" : { "absoluteUrl" : "https://do.pingcap.net/jenkins/user/noreply", "fullName" : "noreply" }, "authorEmail" : "noreply@github.com", "comment" : "chore(deps): update ghcr.io/fluxcd/flux-cli docker tag to v2.8.6 (#4577)\u000a\u000a> ℹ️ **Note**\u000a> \u000a> This PR body was truncated due to platform limits.\u000a\u000aThis PR contains the following updates:\u000a\u000a| Package | Update | Change |\u000a|---|---|---|\u000a| [ghcr.io/fluxcd/flux-cli](https://redirect.github.com/fluxcd/flux2) |\u000aminor | `v2.2.3` → `v2.8.6` |\u000a\u000a---\u000a\u000a> [!WARNING]\u000a> Some dependencies could not be looked up. Check the [Dependency\u000aDashboard](../issues/1780) for more information.\u000a\u000a---\u000a\u000a### Release Notes\u000a\u000a
\u000afluxcd/flux2 (ghcr.io/fluxcd/flux-cli)\u000a\u000a###\u000a[`v2.8.6`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.6)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6)\u000a\u000a#### Highlights\u000a\u000aFlux v2.8.6 is a patch release that includes bug fixes and improvements\u000aacross helm-controller, image-automation-controller,\u000akustomize-controller, notification-controller, and source-controller.\u000aUsers are encouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix a post-renderer conflict between overlapping hooks and templates\u000a(helm-controller)\u000a- Ignore force replace when server-side apply is enabled\u000a(helm-controller)\u000a- Fix a regression where generic providers would not forward commit\u000astatus events (notification-controller)\u000a- Require the `audience` field on the GCR Receiver secret for tighter\u000averification — will become mandatory in Flux v2.9\u000a(notification-controller)\u000a\u000aImprovements:\u000a\u000a- Introduce the `MigrateAPIVersion` feature gate for migrating the API\u000aversion of resources in managed field entries (kustomize-controller)\u000a- Update go-git to v5.18.0 bringing performance improvements for Git\u000aoperations (source-controller, image-automation-controller)\u000a\u000a#### Components changelog\u000a\u000a- helm-controller\u000a[v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)\u000a- image-automation-controller\u000a[v1.1.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.2/CHANGELOG.md)\u000a- kustomize-controller\u000a[v1.8.4](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.4/CHANGELOG.md)\u000a- notification-controller\u000a[v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)\u000a- source-controller\u000a[v1.8.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.3/CHANGELOG.md)\u000a\u000a#### CLI changelog\u000a\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5857](https://redirect.github.com/fluxcd/flux2/pull/5857)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.8.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.5)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.8.4...v2.8.5)\u000a\u000a#### Highlights\u000a\u000aFlux v2.8.5 is a patch release that includes bug fixes and improvements\u000aacross kustomize-controller, source-controller, and\u000anotification-controller. Users are encouraged to upgrade for the best\u000aexperience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix a race condition where a cancelled reconciliation could leave\u000astale data in the cache, causing Kustomizations to get stuck\u000a(kustomize-controller)\u000a- Fix Azure Blob prefix option not being passed to the storage client\u000a(source-controller)\u000a\u000aImprovements:\u000a\u000a- Improve error message for encrypted SSH keys without password\u000a(source-controller)\u000a- Add optional `email` and `audience` fields to the GCR Receiver for\u000atighter verification (notification-controller)\u000a- Add provider manifest example for Azure Event Hub managed identity\u000aauthentication (notification-controller)\u000a\u000a#### Components changelog\u000a\u000a- kustomize-controller\u000a[v1.8.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.3/CHANGELOG.md)\u000a- source-controller\u000a[v1.8.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.2/CHANGELOG.md)\u000a- notification-controller\u000a[v1.8.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.3/CHANGELOG.md)\u000a\u000a#### CLI changelog\u000a\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5822](https://redirect.github.com/fluxcd/flux2/pull/5822)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.8.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.4)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.8.3...v2.8.4)\u000a\u000a#### Highlights\u000a\u000aFlux v2.8.4 is a patch release that includes fixes for the Flux CLI.\u000aUsers are encouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix `flux build ks` and `flux diff ks` on Windows\u000a- Fix `--source` flag validation in `create kustomization` command\u000a\u000a#### CLI changelog\u000a\u000a- Update fluxcd/pkg dependencies by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5796](https://redirect.github.com/fluxcd/flux2/pull/5796)\u000a- \\[release/v2.8.x] fix: validate --source flag in create kustomization\u000acommand by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5799](https://redirect.github.com/fluxcd/flux2/pull/5799)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.8.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.3)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.8.2...v2.8.3)\u000a\u000a##### Highlights\u000a\u000aFlux v2.8.3 is a patch release that fixes a regression in\u000ahelm-controller. Users are encouraged to upgrade for the best\u000aexperience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix templating errors for charts that include `---` in the content,\u000ae.g. YAML separators, embedded scripts, CAs inside ConfigMaps\u000a(helm-controller)\u000a\u000a##### Components changelog\u000a\u000a- helm-controller\u000a[v1.5.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.3/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- \\[release/v2.8.x] Add target branch name to update branch by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5774](https://redirect.github.com/fluxcd/flux2/pull/5774)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5779](https://redirect.github.com/fluxcd/flux2/pull/5779)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.8.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.2)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.8.1...v2.8.2)\u000a\u000a##### Highlights\u000a\u000aFlux v2.8.2 is a patch release that comes with various fixes. Users are\u000aencouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix enqueuing new reconciliation requests for events on source Flux\u000aobjects when they are already reconciling the revision present in the\u000awatch event (kustomize-controller, helm-controller)\u000a- Fix the Go templates bug of YAML separator `---` getting concatenated\u000ato `apiVersion:` by updating to Helm 4.1.3 (helm-controller)\u000a- Fix canceled HelmReleases getting stuck when they don't have a retry\u000astrategy configured by introducing a new feature gate\u000a`DefaultToRetryOnFailure` that improves the experience when the\u000a`CancelHealthCheckOnNewRevision` is enabled (helm-controller)\u000a- Fix the auth scope for Azure Container Registry to use the\u000aACR-specific scope (source-controller, image-reflector-controller)\u000a- Fix potential Denial of Service (DoS) during TLS handshakes\u000a(CVE-2026-27138) by building all controllers with Go 1.26.1\u000a\u000a##### Components changelog\u000a\u000a- source-controller\u000a[v1.8.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.1/CHANGELOG.md)\u000a- kustomize-controller\u000a[v1.8.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.2/CHANGELOG.md)\u000a- notification-controller\u000a[v1.8.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.2/CHANGELOG.md)\u000a- helm-controller\u000a[v1.5.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.2/CHANGELOG.md)\u000a- image-reflector-controller\u000a[v1.1.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.1/CHANGELOG.md)\u000a- image-automation-controller\u000a[v1.1.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.1/CHANGELOG.md)\u000a- source-watcher\u000a[v2.1.1](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.1/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- \\[release/v2.8.x] build(deps): bump the ci group across 1 directory\u000awith 11 updates by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5765](https://redirect.github.com/fluxcd/flux2/pull/5765)\u000a- Update fluxcd/pkg dependencies by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5767](https://redirect.github.com/fluxcd/flux2/pull/5767)\u000a- Update toolkit components by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5770](https://redirect.github.com/fluxcd/flux2/pull/5770)\u000a- Update fluxcd/pkg dependencies by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5771](https://redirect.github.com/fluxcd/flux2/pull/5771)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.8.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.1)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.8.0...v2.8.1)\u000a\u000a##### Highlights\u000a\u000aFlux v2.8.1 is a patch release that comes with various fixes. Users are\u000aencouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix Git commit status events being dropped for Kustomizations\u000a(notification-controller)\u000a- Fix health check for StatefulSets when the Pods are\u000aPending/Unschedulable during rollout (helm-controller,\u000akustomize-controller)\u000a\u000a##### Components changelog\u000a\u000a- kustomize-controller\u000a[v1.8.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.1/CHANGELOG.md)\u000a- notification-controller\u000a[v1.8.1](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.1/CHANGELOG.md)\u000a- helm-controller\u000a[v1.5.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.1/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- \\[release/v2.8.x] Remove no longer needed workaround for Flux 2.8 by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5735](https://redirect.github.com/fluxcd/flux2/pull/5735)\u000a- Update fluxcd/pkg dependencies by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5739](https://redirect.github.com/fluxcd/flux2/pull/5739)\u000a- \\[release/v2.8.x] Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5741](https://redirect.github.com/fluxcd/flux2/pull/5741)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.8.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.0)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.7.5...v2.8.0)\u000a\u000a##### Highlights\u000a\u000aFlux v2.8.0 is a feature release. Users are encouraged to upgrade for\u000athe best experience.\u000a\u000aFor a compressive overview of new features and API changes included in\u000athis release, please refer to the [Announcing Flux 2.8 GA blog\u000apost](https://fluxcd.io/blog/2026/02/flux-v2.8.0/).\u000a\u000aOverview of the new features:\u000a\u000a- Helm v4 support, including server-side apply and kstatus-based health\u000achecking (`HelmRelease`)\u000a- Readiness evaluation of Helm-managed objects with CEL expressions\u000a(`HelmRelease`)\u000a- Improved observability of Helm releases with inventory tracking in\u000a`.status.inventory` (`HelmRelease`)\u000a- Reduced the mean time to recovery of Flux-managed applications via\u000a`CancelHealthCheckOnNewRevision` feature gate (`Kustomization`,\u000a`HelmRelease`)\u000a- Support for commenting on Pull Requests directly from Flux\u000anotifications (`Provider`)\u000a- Custom SSA apply stages for ordering resource application in\u000akustomize-controller (`Kustomization`)\u000a- Automatic GitHub App installation ID lookup from the repository owner\u000a(`GitRepository`, `ImageUpdateAutomation`, `Provider`)\u000a- Support for Cosign v3 for verifying OCI artifacts and container images\u000a(`OCIRepository`)\u000a- ArtifactGenerator support for extracting and modifying Helm charts\u000a(`ArtifactGenerator`)\u000a- Bypass cache when fetching source objects via `DirectSourceFetch`\u000afeature gate (`Kustomization`, `HelmRelease`, `ArtifactGenerator`)\u000a\u000a❤️ Big thanks to all the Flux contributors that helped us with this\u000arelease!\u000a\u000a##### Kubernetes compatibility\u000a\u000aThis release is compatible with the following Kubernetes versions:\u000a\u000a| Kubernetes version | Minimum required |\u000a| ------------------ | ---------------- |\u000a| `v1.33` | `>= 1.32.0` |\u000a| `v1.34` | `>= 1.34.1` |\u000a| `v1.35` | `>= 1.35.0` |\u000a\u000a> \\[!NOTE]\u000a> Note that the Flux project offers support only for the latest three\u000aminor versions of Kubernetes.\u000a> Backwards compatibility with older versions of Kubernetes and\u000aOpenShift is offered by vendors such as\u000a> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that\u000aprovide enterprise support for Flux.\u000a\u000a##### OpenShift compatibility\u000a\u000aFlux can be installed on Red Hat OpenShift cluster directly from\u000aOperatorHub using [Flux\u000aOperator](https://operatorhub.io/operator/flux-operator). The operator\u000aallows the configuration of Flux multi-tenancy lockdown, network\u000apolicies, persistent storage, sharding, vertical scaling and the\u000asynchronization of the cluster state from Git repositories, OCI\u000aartifacts, and S3-compatible storage.\u000a\u000a##### Upgrade procedure\u000a\u000a:warning: The Flux APIs `v1beta2` and `v2beta2` (deprecated in 2024)\u000ahave reached end-of-life and have been removed from the CRDs.\u000a\u000aPlease follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from older versions of Flux to v2.8.\u000a\u000a##### Components changelog\u000a\u000a- source-controller\u000a[v1.8.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.0/CHANGELOG.md)\u000a- kustomize-controller\u000a[v1.8.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.0/CHANGELOG.md)\u000a- notification-controller\u000a[v1.8.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.0/CHANGELOG.md)\u000a- helm-controller\u000a[v1.5.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.0/CHANGELOG.md)\u000a- image-reflector-controller\u000a[v1.1.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.1.0/CHANGELOG.md)\u000a- image-automation-controller\u000a[v1.1.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.0/CHANGELOG.md)\u000a- source-watcher\u000a[v2.1.0](https://redirect.github.com/fluxcd/source-watcher/blob/v2.1.0/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- ci: Set `GITHUB_TOKEN` in the `release-flux-manifests` workflow by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5547](https://redirect.github.com/fluxcd/flux2/pull/5547)\u000a- Add backport label for Flux 2.7 by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5550](https://redirect.github.com/fluxcd/flux2/pull/5550)\u000a- build(deps): bump the ci group across 1 directory with 3 updates by\u000a[@​dependabot](https://redirect.github.com/dependabot)\\[bot] in\u000a[#​5548](https://redirect.github.com/fluxcd/flux2/pull/5548)\u000a- Fix `flux push artifact` not working with `--provider` by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5551](https://redirect.github.com/fluxcd/flux2/pull/5551)\u000a- Extend `flux migrate` to work with local files by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5554](https://redirect.github.com/fluxcd/flux2/pull/5554)\u000a- Improve `flux migrate` for live cluster migrations by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5558](https://redirect.github.com/fluxcd/flux2/pull/5558)\u000a- Fix `flux migrate -f` command to work with comments by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5560](https://redirect.github.com/fluxcd/flux2/pull/5560)\u000a- Add source-watcher to docs by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5562](https://redirect.github.com/fluxcd/flux2/pull/5562)\u000a- Fix `flux migrate -f` not considering kind comments by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5563](https://redirect.github.com/fluxcd/flux2/pull/5563)\u000a- refactor: convert `Kustomization` resource into unstructured map only\u000aonce during variable substitution by\u000a[@​ramasai1](https://redirect.github.com/ramasai1) in\u000a[#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5568](https://redirect.github.com/fluxcd/flux2/pull/5568)\u000a- Disable AUR publishing by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5570](https://redirect.github.com/fluxcd/flux2/pull/5570)\u000a- Fix manifest generation for `--storage-adv-addr` and `--events-addr`\u000aflags by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5574](https://redirect.github.com/fluxcd/flux2/pull/5574)\u000a- Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5576](https://redirect.github.com/fluxcd/flux2/pull/5576)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5578](https://redirect.github.com/fluxcd/flux2/pull/5578)\u000a- Restore GitHub PAT for backports by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5581](https://redirect.github.com/fluxcd/flux2/pull/5581)\u000a- \\[RFC-0012] Add command `flux get source external` by\u000a[@​dgunzy](https://redirect.github.com/dgunzy) in\u000a[#​5555](https://redirect.github.com/fluxcd/flux2/pull/5555)\u000a- fix: handle error when writing password prompt to stdout by\u000a[@​akshatsinha0](https://redirect.github.com/akshatsinha0) in\u000a[#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\u000a- Pin cosign to v2.6.1 by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5594](https://redirect.github.com/fluxcd/flux2/pull/5594)\u000a- \\[RFC-0012] Add command `flux export source external` by\u000a[@​dgunzy](https://redirect.github.com/dgunzy) in\u000a[#​5583](https://redirect.github.com/fluxcd/flux2/pull/5583)\u000a- Fix bootstrap e2e test for image policy by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5604](https://redirect.github.com/fluxcd/flux2/pull/5604)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5603](https://redirect.github.com/fluxcd/flux2/pull/5603)\u000a- fix: return accepted values for flags when calling Values.Type() by\u000a[@​jaxels10](https://redirect.github.com/jaxels10) in\u000a[#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\u000a- ci: Include source-watcher in the e2e test suite by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5614](https://redirect.github.com/fluxcd/flux2/pull/5614)\u000a- Add source.extensions.fluxcd.io group to aggregated RBAC roles by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5627](https://redirect.github.com/fluxcd/flux2/pull/5627)\u000a- Fix panic on reconcile with source of ExternalArtifact kind by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5630](https://redirect.github.com/fluxcd/flux2/pull/5630)\u000a- Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2 by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5633](https://redirect.github.com/fluxcd/flux2/pull/5633)\u000a- diff: report if object is skipped by\u000a[@​hown3d](https://redirect.github.com/hown3d) in\u000a[#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5639](https://redirect.github.com/fluxcd/flux2/pull/5639)\u000a- Allow option to skip tenant namespace creation by\u000a[@​anshuishere](https://redirect.github.com/anshuishere) in\u000a[#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5648](https://redirect.github.com/fluxcd/flux2/pull/5648)\u000a- fix:\u000a[#​5654](https://redirect.github.com/fluxcd/flux2/issues/5654) by\u000achecking if both --chart and --chart-ref are set by\u000a[@​jaxels10](https://redirect.github.com/jaxels10) in\u000a[#​5656](https://redirect.github.com/fluxcd/flux2/pull/5656)\u000a- Added retry logic with delays to the Flux CLI download by\u000a[@​ivan-munteanu](https://redirect.github.com/ivan-munteanu) in\u000a[#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\u000a- Run conformance tests for Kubernetes 1.35.0 by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5663](https://redirect.github.com/fluxcd/flux2/pull/5663)\u000a- fix: normalize path for Windows compatibility by\u000a[@​sibasispadhi](https://redirect.github.com/sibasispadhi) in\u000a[#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\u000a- Introduce support for looking up GH app installation ID by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5682](https://redirect.github.com/fluxcd/flux2/pull/5682)\u000a- Update dependencies to Kubernetes v1.35.0 by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5688](https://redirect.github.com/fluxcd/flux2/pull/5688)\u000a- Fix resume command logging success after reconciliation failure by\u000a[@​Aman-Cool](https://redirect.github.com/Aman-Cool) in\u000a[#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\u000a- Add 2.8 to supported versions for `flux migrate -f` by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5713](https://redirect.github.com/fluxcd/flux2/pull/5713)\u000a- Introduce workflow for bumping fluxcd/pkg deps by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5717](https://redirect.github.com/fluxcd/flux2/pull/5717)\u000a- Update fluxcd/pkg dependencies by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5719](https://redirect.github.com/fluxcd/flux2/pull/5719)\u000a- Fix event listing ignoring pagination token by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5721](https://redirect.github.com/fluxcd/flux2/pull/5721)\u000a- Build with Go 1.26 by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5723](https://redirect.github.com/fluxcd/flux2/pull/5723)\u000a- Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5722](https://redirect.github.com/fluxcd/flux2/pull/5722)\u000a- Update helm-controller to v1.5.0 by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5725](https://redirect.github.com/fluxcd/flux2/pull/5725)\u000a- build(deps): bump the ci group across 1 directory with 12 updates by\u000a[@​dependabot](https://redirect.github.com/dependabot)\\[bot] in\u000a[#​5720](https://redirect.github.com/fluxcd/flux2/pull/5720)\u000a- Fix bootstrap failure on Windows cross-drive paths by\u000a[@​veeceey](https://redirect.github.com/veeceey) in\u000a[#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\u000a- Dump debug info on e2e tests by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5729](https://redirect.github.com/fluxcd/flux2/pull/5729)\u000a- Set Kubernetes 1.33 as min supported version by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5730](https://redirect.github.com/fluxcd/flux2/pull/5730)\u000a- Update conformance tests to min Kubernetes 1.33 by\u000a[@​stefanprodan](https://redirect.github.com/stefanprodan) in\u000a[#​5731](https://redirect.github.com/fluxcd/flux2/pull/5731)\u000a\u000a##### New Contributors\u000a\u000a- [@​ramasai1](https://redirect.github.com/ramasai1) made their\u000afirst contribution in\u000a[#​5566](https://redirect.github.com/fluxcd/flux2/pull/5566)\u000a- [@​akshatsinha0](https://redirect.github.com/akshatsinha0) made\u000atheir first contribution in\u000a[#​5589](https://redirect.github.com/fluxcd/flux2/pull/5589)\u000a- [@​jaxels10](https://redirect.github.com/jaxels10) made their\u000afirst contribution in\u000a[#​5602](https://redirect.github.com/fluxcd/flux2/pull/5602)\u000a- [@​hown3d](https://redirect.github.com/hown3d) made their first\u000acontribution in\u000a[#​5625](https://redirect.github.com/fluxcd/flux2/pull/5625)\u000a- [@​anshuishere](https://redirect.github.com/anshuishere) made\u000atheir first contribution in\u000a[#​5597](https://redirect.github.com/fluxcd/flux2/pull/5597)\u000a- [@​ivan-munteanu](https://redirect.github.com/ivan-munteanu)\u000amade their first contribution in\u000a[#​5659](https://redirect.github.com/fluxcd/flux2/pull/5659)\u000a- [@​sibasispadhi](https://redirect.github.com/sibasispadhi) made\u000atheir first contribution in\u000a[#​5674](https://redirect.github.com/fluxcd/flux2/pull/5674)\u000a- [@​Aman-Cool](https://redirect.github.com/Aman-Cool) made their\u000afirst contribution in\u000a[#​5690](https://redirect.github.com/fluxcd/flux2/pull/5690)\u000a- [@​veeceey](https://redirect.github.com/veeceey) made their\u000afirst contribution in\u000a[#​5726](https://redirect.github.com/fluxcd/flux2/pull/5726)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.7.5`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.5)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.7.4...v2.7.5)\u000a\u000a##### Highlights\u000a\u000aFlux v2.7.5 is a patch release that comes with fixes to helm-controller.\u000aUsers are encouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Fix HelmRelease history truncation when using the `RetryOnFailure`\u000astrategy.\u000a\u000a:warning: Note that signature verification for OCI artifacts in\u000asource-controller is not compatible with Cosign v3.\u000aFlux users are advised to use [Cosign\u000av2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries)\u000afor signing Flux OCI artifacts and Helm charts, until support for Cosign\u000av3 is added in Flux v2.8.\u000a\u000a##### Components changelog\u000a\u000a- helm-controller\u000a[v1.4.5](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.5/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- \\[release/v2.7.x] Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5649](https://redirect.github.com/fluxcd/flux2/pull/5649)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.7.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.4)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.7.3...v2.7.4)\u000a\u000a##### Highlights\u000a\u000aFlux v2.7.4 is a patch release that comes with various fixes. Users are\u000aencouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Add `DisableConfigWatchers` feature gate to all controllers for\u000adisabling the Secrets/ConfigMaps watchers\u000a- Fix Workload Identity for Azure China Cloud in all controllers\u000a- Update Helm Go SDK to v3.19.2 fixing schema validation issues in\u000ahelm-controller\u000a- Skip secret decryption for remote kustomize patches in\u000akustomize-controller\u000a- Improve post-build error reporting in kustomize-controller\u000a- Add `ArtifactGenerator` to aggregated RBAC roles\u000a\u000a:warning: Note that signature verification for OCI artifacts in\u000asource-controller is not compatible with Cosign v3.\u000aFlux users are advised to use [Cosign\u000av2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries)\u000afor signing Flux OCI artifacts and Helm charts, until support for Cosign\u000av3 is added in Flux v2.8.\u000a\u000a##### Components changelog\u000a\u000a- source-controller\u000a[v1.7.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.4/CHANGELOG.md)\u000a- kustomize-controller\u000a[v1.7.3](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.3/CHANGELOG.md)\u000a- notification-controller\u000a[v1.7.5](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.5/CHANGELOG.md)\u000a- helm-controller\u000a[v1.4.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.4/CHANGELOG.md)\u000a- image-reflector-controller\u000a[v1.0.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.4/CHANGELOG.md)\u000a- image-automation-controller\u000a[v1.0.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.4/CHANGELOG.md)\u000a- source-watcher\u000a[v2.0.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.3/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- \\[release/v2.7.x] ci: Include source-watcher in the e2e test suite by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5615](https://redirect.github.com/fluxcd/flux2/pull/5615)\u000a- \\[release/v2.7.x] Add source.extensions.fluxcd.io group to aggregated\u000aRBAC roles by [@​fluxcdbot](https://redirect.github.com/fluxcdbot)\u000ain [#​5628](https://redirect.github.com/fluxcd/flux2/pull/5628)\u000a- \\[release/v2.7.x] Fix panic on reconcile with source of\u000aExternalArtifact kind by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5631](https://redirect.github.com/fluxcd/flux2/pull/5631)\u000a- \\[release/v2.7.x] Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to\u000a3.19.2 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5634](https://redirect.github.com/fluxcd/flux2/pull/5634)\u000a- \\[release/v2.7.x] diff: report if object is skipped by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5635](https://redirect.github.com/fluxcd/flux2/pull/5635)\u000a- \\[release/v2.7.x] Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5640](https://redirect.github.com/fluxcd/flux2/pull/5640)\u000a- \\[release/v2.7.x] Allow option to skip tenant namespace creation by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5642](https://redirect.github.com/fluxcd/flux2/pull/5642)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.7.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.3)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.7.2...v2.7.3)\u000a\u000a##### Highlights\u000a\u000aFlux v2.7.3 is a patch release that comes with various fixes. Users are\u000aencouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aFixes:\u000a\u000a- Restore SOCKS5 proxy support in all controllers\u000a- Fix status reporting of HelmReleases with `RetryOnFailure` strategy\u000a- Automated retries for ImagePolicies when no image tags are found in\u000athe database\u000a- Fix alerting for Telegram's `message_thread_id`\u000a- Allow running kustomize-controller and helm-controller on the same\u000aloopback interface as source-watcher\u000a\u000a:warning: Note that signature verification for OCI artifacts in\u000asource-controller is not compatible with Cosign v3. Users are advised to\u000ause [Cosign\u000av2.6](https://fluxcd.io/flux/flux-gh-action/#push-and-sign-kubernetes-manifests-to-container-registries)\u000afor signing Flux OCI artifacts and Helm charts, until support for Cosign\u000av3 is added in Flux v2.8.\u000a\u000a##### Components changelog\u000a\u000a- source-controller\u000a[v1.7.3](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.3/CHANGELOG.md)\u000a- kustomize-controller\u000a[v1.7.2](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.2/CHANGELOG.md)\u000a- notification-controller\u000a[v1.7.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.4/CHANGELOG.md)\u000a- helm-controller\u000a[v1.4.3](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.3/CHANGELOG.md)\u000a- image-reflector-controller\u000a[v1.0.3](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.3/CHANGELOG.md)\u000a- image-automation-controller\u000a[v1.0.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.3/CHANGELOG.md)\u000a\u000a##### CLI changelog\u000a\u000a- \\[release/v2.7.x] Pin cosign to v2.6.1 by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5595](https://redirect.github.com/fluxcd/flux2/pull/5595)\u000a- \\[release/v2.7.x] Update toolkit components by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5605](https://redirect.github.com/fluxcd/flux2/pull/5605)\u000a- \\[release/v2.7.x] fix: return accepted values for flags when calling\u000aValues.Type() by\u000a[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in\u000a[#​5606](https://redirect.github.com/fluxcd/flux2/pull/5606)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.7.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.2)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2)\u000a\u000a#### Highlights\u000a\u000aFlux v2.7.2 is a patch release that comes with security fixes. Users are\u000aencouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aAll Flux components are now built with Go 1.25.2 which includes fixes\u000afor vulnerabilities in the Go stdlib that could lead to denial of\u000aservice. The list of security fixes can be found in the [Go 1.25.2\u000arelease\u000anotes](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ).\u000a\u000a#### Components changelog\u000a\u000a- source-controller\u000a[v1.7.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.2/CHANGELOG.md)\u000a- kustomize-controller\u000a[v1.7.1](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.7.1/CHANGELOG.md)\u000a- notification-controller\u000a[v1.7.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.3/CHANGELOG.md)\u000a- helm-controller\u000a[v1.4.2](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.2/CHANGELOG.md)\u000a- image-reflector-controller\u000a[v1.0.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.0.2/CHANGELOG.md)\u000a- image-automation-controller\u000a[v1.0.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.0.2/CHANGELOG.md)\u000a- source-watcher\u000a[v2.0.2](https://redirect.github.com/fluxcd/source-watcher/blob/v2.0.2/CHANGELOG.md)\u000a\u000a#### CLI changelog\u000a\u000a- \\[release/v2.7.x] Fix manifest generation for `--storage-adv-addr` and\u000a`--events-addr` flags by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5575](https://redirect.github.com/fluxcd/flux2/pull/5575)\u000a- \\[release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go\u000a1.25.2 by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5577](https://redirect.github.com/fluxcd/flux2/pull/5577)\u000a- \\[release/v2.7.x] Update toolkit components by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5579](https://redirect.github.com/fluxcd/flux2/pull/5579)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.7.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.1)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.7.0...v2.7.1)\u000a\u000a#### Highlights\u000a\u000aFlux v2.7.1 is a patch release that comes with various improvements and\u000afixes. Users are encouraged to upgrade for the best experience.\u000a\u000aℹ️ Please follow the [Upgrade Procedure for Flux\u000av2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a\u000asmooth upgrade from Flux v2.6 to the latest version.\u000a\u000aImprovements:\u000a\u000a- Extend [flux migrate](https://fluxcd.io/flux/cmd/flux_migrate/) with\u000asupport for migrating manifests in Git repositories to the latest API\u000aversions.\u000a- Add\u000a[recommendations](https://fluxcd.io/flux/components/helm/helmreleases/#recommended-settings)\u000afor configuring HelmReleases on production environments.\u000a\u000aFixes:\u000a\u000a- Fix `flux migrate` command to handle managed fields properly.\u000a- Fix self-signed TLS cert handling for public Helm repositories in\u000asource-controller.\u000a- Fix the default API versions used by receivers in\u000anotification-controller.\u000a- Fix redundant `Ready` condition patching in helm-controller.\u000a- Fix workload identity configuration examples for kubeconfig in\u000ahelm-controller and kustomize-controller.\u000a\u000a#### Components changelog\u000a\u000a- source-controller\u000a[v1.7.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.7.1/CHANGELOG.md)\u000a- notification-controller\u000a[v1.7.2](https://redirect.github.com/fluxcd/notification-controller/blob/v1.7.2/CHANGELOG.md)\u000a- helm-controller\u000a[v1.4.1](https://redirect.github.com/fluxcd/helm-controller/blob/v1.4.1/CHANGELOG.md)\u000a\u000a#### CLI changelog\u000a\u000a- \\[release/v2.7.x] Backport CI fixes and updates by\u000a[@​matheuscscp](https://redirect.github.com/matheuscscp) in\u000a[#​5552](https://redirect.github.com/fluxcd/flux2/pull/5552)\u000a- \\[release/v2.7.x] Fix `flux push artifact` not working with\u000a`--provider` by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5553](https://redirect.github.com/fluxcd/flux2/pull/5553)\u000a- \\[release/v2.7.x] Extend `flux migrate` to work with local files by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5557](https://redirect.github.com/fluxcd/flux2/pull/5557)\u000a- \\[release/v2.7.x] Improve `flux migrate` for live cluster migrations\u000aby\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5559](https://redirect.github.com/fluxcd/flux2/pull/5559)\u000a- \\[release/v2.7.x] Fix `flux migrate -f` command to work with comments\u000aby\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5561](https://redirect.github.com/fluxcd/flux2/pull/5561)\u000a- \\[release/v2.7.x] Fix `flux migrate -f` not considering kind comments\u000aby\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5564](https://redirect.github.com/fluxcd/flux2/pull/5564)\u000a- \\[release/v2.7.x] Update toolkit components by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5569](https://redirect.github.com/fluxcd/flux2/pull/5569)\u000a- \\[release/v2.7.x] Disable AUR publishing by\u000a[@​github-actions](https://redirect.github.com/github-actions)\\[bot]\u000ain [#​5571](https://redirect.github.com/fluxcd/flux2/pull/5571)\u000a\u000a**Full Changelog**:\u000a\u000a\u000a###\u000a[`v2.7.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.7.0)\u000a\u000a[Compare\u000aSource](https://redirect.github.com/fluxcd/flux2/compare/v2.6.4...v2.7.0)\u000a\u000a#### Highlights\u000a\u000aFlux v2.7.0 is a feature release. Users are encouraged to upgrade for\u000athe best experience.\u000a\u000aFor a compressive overview of new features and API changes included in\u000athis release, please refer to the [Announcing Flux 2.7 GA blog\u000apost](https://fluxcd.io/blog/2025/09/flux-v2.7.0/).\u000a\u000aOverview of the new features:\u000a\u000a- General availability release of the Image Automation APIs\u000a(`ImagePolicy`, `ImageRepository`, `ImageUpdateAutomation`)\u000a- Watch for changes in ConfigMaps and Secrets references\u000a(`Kustomization`, `HelmRelease`)\u000a- Support for remote cluster authentication using Workload Identity\u000a(`Kustomization`, `HelmRelease`)\u000a- Extend the readiness evaluation of dependencies with CEL expressions\u000a(`Kustomization`, `HelmRelease`)\u000a- Support for global SOPS Age decryption keys on single-tenant clusters\u000a(`Kustomization`)\u000a- Support for optional Kustomize components (`Kustomization`)\u000a- Introduce `RetryOnFailure` lifecycle management strategy\u000a(`HelmRelease`)\u000a- Support mTLS for sending alerts to external systems (`Provider`)\u000a- Object-level workload identity authentication (`Bucket`, `Provider`)\u000a- Support mTLS for GitHub App transport (`GitRepository`,\u000a`ImageUpdateAutomation`, `Provider`)\u000a- OpenTelemetry tracing for `Kustomization` and `HelmRelease`\u000areconciliation (`Provider`)\u000a- Support for 3rd-party source controllers (`ExternalArtifact`)\u000a- Support for source composition and decomposition patterns\u000a(`ArtifactGenerator`)\u000a- `CancelHealthCheckOnNewRevision` feature gate (kustomize-controller)\u000a- `GitSparseCheckout` feature gate (image-automation-controller)\u000a\u000a❤️ Big thanks to all the Flux contributors that helped us with this\u000arelease!\u000a\u000a##### Kubernetes compatibility\u000a\u000aThis release is compatible with the following Kubernetes versions:\u000a\u000a| Kubernetes version | Minimum required |\u000a| ------------------ | ---------------- |\u000a| `v1.32` | `>= 1.32.0` |\u000a| `v1.33` | `>= 1.33.0` |\u000a| `v1.34` | `>= 1.34.1` |\u000a\u000a> \\[!NOTE]\u000a> Note that the Flux project offers support only for the latest three\u000aminor versions of Kubernetes.\u000a> Backwards compatibility with older versions of Kubernetes and\u000aOpenShift is offered by vendors such as\u000a> [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that\u000aprovide enterprise support for Flux.\u000a\u000a##### OpenShift compatibility\u000a\u000aFlux can be installed on Red Hat OpenShift cluster directly from\u000aOperatorHub using [Flux\u000aOperator](https://operatorhub.io/operator/flux-operator). The operator\u000aallows the configuration of Flux multi-tenancy lockdown, network\u000apolicies, persistent storage, sharding, vertical scaling and the\u000asynchronization of the cluster state from Git repositories, OCI\u000a", "date" : "2026-05-12 08:09:27 +0000", "id" : "10df3e85a0572d28a332f7d2af6bece5f22fbb5a", "msg" : "chore(deps): update ghcr.io/fluxcd/flux-cli docker tag to v2.8.6 (#4577)", "paths" : [ ] } ], "kind" : "git" }, "culprits" : [ { "absoluteUrl" : "https://do.pingcap.net/jenkins/user/noreply", "fullName" : "noreply" } ] }