Started by GitHub push by ti-chi-bot[bot]Started by GitHub push by ti-chi-bot[bot]00205442054440391403911.0074647464170212ec49d219be5284d11e1c4e10bf2fd04b13325a12ec49d219be5284d11e1c4e10bf2fd04b13325aorigin/main12ec49d219be5284d11e1c4e10bf2fd04b13325a12ec49d219be5284d11e1c4e10bf2fd04b13325aorigin/main12ec49d219be5284d11e1c4e10bf2fd04b13325a12ec49d219be5284d11e1c4e10bf2fd04b13325aorigin/mainhttps://github.com/PingCAP-QE/ci.gitfalse#17024039153346seed #17021702falsefalse17023684878SUCCESS1779272422359https://do.pingcap.net/jenkins/job/seed/1702/default-3p7ws- prow-jobs/pingcap-qe/ci/presubmits.yamlprow-jobs/ti-community-infra/configs/presubmits.yaml12ec49d219be5284d11e1c4e10bf2fd04b13325a1779272390000https://do.pingcap.net/jenkins/user/noreplynoreplynoreply@github.comchore(deps): update ghcr.io/fluxcd/flux-cli docker tag to v2.8.7 (#4590)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/fluxcd/flux-cli](https://redirect.github.com/fluxcd/flux2) |
patch | `v2.8.6` â `v2.8.7` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/1780) for more information.
---
### Release Notes
<details>
<summary>fluxcd/flux2 (ghcr.io/fluxcd/flux-cli)</summary>
###
[`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)
[Compare
Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)
#### Highlights
Flux v2.8.7 is a patch release that includes a bug fix in
kustomize-controller, a CVE fix in source-controller and
image-automation-controller via go-git v5.19.0, and dependency updates.
Users are encouraged to upgrade for the best experience.
âšī¸ Please follow the [Upgrade Procedure for Flux
v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a
smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Fix management of objects annotated with
`kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced
resources were being deleted and recreated on each reconciliation
(kustomize-controller)
Improvements:
- Update go-git to v5.19.0 which fixes
[CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp)
(source-controller, image-automation-controller)
- Update fluxcd/pkg dependencies (source-controller,
kustomize-controller, image-automation-controller)
#### Components changelog
- helm-controller
[v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)
- image-automation-controller
[v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)
- kustomize-controller
[v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)
- notification-controller
[v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)
- source-controller
[v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)
#### CLI changelog
- Update toolkit components by
[@​fluxcdbot](https://redirect.github.com/fluxcdbot) in
[#​5891](https://redirect.github.com/fluxcd/flux2/pull/5891)
**Full Changelog**:
<https://github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7>
</details>
---
### Configuration
đ
**Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
đĻ **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
âģ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
đ **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PingCAP-QE/ci).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzkuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-20 10:19:50 +000012ec49d219be5284d11e1c4e10bf2fd04b13325achore(deps): update ghcr.io/fluxcd/flux-cli docker tag to v2.8.7 (#4590)editprow-jobs/ti-community-infra/configs/presubmits.yamleditprow-jobs/pingcap-qe/ci/presubmits.yaml
githttps://do.pingcap.net/jenkins/user/noreplynoreply