Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. Users are encouraged to upgrade for the best experience.
Disable Flux variable substitution on all Flux CRDs, preventing post-build substitution from corrupting CRD schemas that contain ${...} sequences (all controllers)
Update SOPS dependency to fix .ini file decryption (kustomize-controller)
Fix a dry-run error where applying a resource with a strategic merge patch could fail with <resource> is invalid (kustomize-controller)
Fix a breaking change in the in-memory Kustomization build (Flux CLI)
Improvements:
Cache the registry authorization token during Notation verification, so it is fetched once per verification instead of once per request (source-controller)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [fluxcd/flux2](https://github.com/fluxcd/flux2) | patch | `v2.9.0` → `v2.9.1` |
---
### Release Notes
<details>
<summary>fluxcd/flux2 (fluxcd/flux2)</summary>
### [`v2.9.1`](https://github.com/fluxcd/flux2/releases/tag/v2.9.1)
[Compare Source](https://github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1)
#### Highlights
Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with `kustomize.toolkit.fluxcd.io/substitute: disabled`, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain `${...}` sequences. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow the [Upgrade Procedure for Flux v2.7+](https://github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Disable Flux variable substitution on all Flux CRDs, preventing post-build substitution from corrupting CRD schemas that contain `${...}` sequences (all controllers)
- Update SOPS dependency to fix `.ini` file decryption (kustomize-controller)
- Fix a dry-run error where applying a resource with a strategic merge patch could fail with `<resource> is invalid` (kustomize-controller)
- Fix a breaking change in the in-memory Kustomization build (Flux CLI)
Improvements:
- Cache the registry authorization token during Notation verification, so it is fetched once per verification instead of once per request (source-controller)
- Update fluxcd/pkg dependencies
#### Components changelog
- source-controller [v1.9.2](https://github.com/fluxcd/source-controller/blob/v1.9.2/CHANGELOG.md)
- kustomize-controller [v1.9.2](https://github.com/fluxcd/kustomize-controller/blob/v1.9.2/CHANGELOG.md)
- helm-controller [v1.6.2](https://github.com/fluxcd/helm-controller/blob/v1.6.2/CHANGELOG.md)
- notification-controller [v1.9.2](https://github.com/fluxcd/notification-controller/blob/v1.9.2/CHANGELOG.md)
- image-reflector-controller [v1.2.2](https://github.com/fluxcd/image-reflector-controller/blob/v1.2.2/CHANGELOG.md)
- image-automation-controller [v1.2.2](https://github.com/fluxcd/image-automation-controller/blob/v1.2.2/CHANGELOG.md)
- source-watcher [v2.2.2](https://github.com/fluxcd/source-watcher/blob/v2.2.2/CHANGELOG.md)
#### CLI changelog
- \[release/v2.9.x] Fix breaking change in-memory kustomization build by [@​fluxcdbot](https://github.com/fluxcdbot) in [#​5971](https://github.com/fluxcd/flux2/pull/5971)
- Update fluxcd/pkg dependencies by [@​fluxcdbot](https://github.com/fluxcdbot) in [#​5977](https://github.com/fluxcd/flux2/pull/5977)
- Update toolkit components by [@​fluxcdbot](https://github.com/fluxcdbot) in [#​5979](https://github.com/fluxcd/flux2/pull/5979)
**Full Changelog**: <https://github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1NS4yIiwidGFyZ2V0QnJhbmNoIjoiZnJlc2gtc3RhcnQiLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v2.9.0→v2.9.1Release Notes
fluxcd/flux2 (fluxcd/flux2)
v2.9.1Compare Source
Highlights
Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with
kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain${...}sequences. Users are encouraged to upgrade for the best experience.ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
${...}sequences (all controllers).inifile decryption (kustomize-controller)<resource> is invalid(kustomize-controller)Improvements:
Components changelog
CLI changelog
Full Changelog: https://github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.