fluxcd/flux2
### [`v2.0.0-rc.5`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.5)
[Compare Source](https://togithub.com/fluxcd/flux2/compare/v2.0.0-rc.4...v2.0.0-rc.5)
#### Highlights
This is the 5th release candidate of Flux v2.0 GA. Users are advised to upgrade from older versions to `v2.0.0-rc.5` as soon as possible.
Flux `v2.0.0-rc.5` addresses a regression that was introduced in `v2.0.0-rc.4`. This regression caused a disruption in the compatibility with Git servers utilizing v2 of the wire protocol, such as Azure Devops and AWS CodeCommit.
:bulb: For upgrading from v0.x, please see [the procedure documented in RC.1](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.1).
⚠️ Note that [`v2.0.0-rc.4`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.1) updated all components to use [Kustomize v5](https://togithub.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv5.0.0) and [controller-runtime v0.15](https://togithub.com/kubernetes-sigs/controller-runtime/releases/tag/v0.15.0), both of which contain breaking changes.
##### Fixes and improvements
- Fix support for Git v2 servers.
- Suppress misleading error message `[controller-runtime] log.SetLogger(...) was never called...` (CLI).
- Include both revision and token in event metadata, if present (helm-controller).
- Update source-controller to patch a vulnerability in Sigstore (CVE-2023-33199)
#### Components Changelog
- source-controller [v1.0.0-rc.5](https://togithub.com/fluxcd/source-controller/blob/v1.0.0-rc.5/CHANGELOG.md)
- image-automation-controller [v0.34.1](https://togithub.com/fluxcd/image-automation-controller/blob/v0.34.1/CHANGELOG.md)
- helm-controller [v0.34.1](https://togithub.com/fluxcd/helm-controller/blob/v0.34.1/CHANGELOG.md)
#### CLI Changelog
- PR [#3943](https://togithub.com/fluxcd/flux2/issues/3943) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components, and git/go-git to v0.12.0
- PR [#3940](https://togithub.com/fluxcd/flux2/issues/3940) - [@somtochiama](https://togithub.com/somtochiama) - Set controller runtime logger in Azure e2e tests
- PR [#3938](https://togithub.com/fluxcd/flux2/issues/3938) - [@aryan9600](https://togithub.com/aryan9600) - e2e: Run e2e Azure tests for PRs to main if tests or wofklow changes
- PR [#3932](https://togithub.com/fluxcd/flux2/issues/3932) - [@aryan9600](https://togithub.com/aryan9600) - Set `controller-runtime` logger to a null logger
### [`v2.0.0-rc.4`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.4)
[Compare Source](https://togithub.com/fluxcd/flux2/compare/v2.0.0-rc.3...v2.0.0-rc.4)
#### Highlights
This is the 4nd release candidate of Flux v2.0 GA. Users are advised to upgrade from older versions to `v2.0.0-rc.4` as soon as possible.
Flux v2.0.0-rc.4 comes with support for **Kustomize 5.0**, **Helm 3.12** and **Cosign 2.0**.
:bulb: For upgrading from v0.x, please see [the procedure documented in RC.1](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.1).
⚠️ Note that Kustomize v5 contains breaking changes, please consult their [changelog](https://togithub.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv5.0.0) for more details.
⚠️ The GitOps Toolkit and the Flux controllers have been updated to [controller-runtime v0.15](https://togithub.com/kubernetes-sigs/controller-runtime/releases/tag/v0.15.0) which contains breaking changes that could affect 3rd-party controllers that integrate with Flux.
##### Fixes and improvements
- Full support for Azure Workload Identity when connecting Flux to Azure Container Registry, Azure Blog Storage and Azure Key Vault.
- New command `flux reconcile source chart` for pulling Helm OCI charts on-demand from container registries (CLI).
- Retry OCI operations on network errors for `flux push artifact` (CLI).
- Support annotated Git tags with `.spec.ref.name` in `GitRepository` (source-controller).
- Fix pulling Helm OCI charts from ACR when using Azure OIDC (source-controller).
- Fix incorrect rate limiting for `HelmRelease` events (notification-controller).
- All components have been updated to patch vulnerabilities in Docker (CVE-2023-28840, CVE-2023-28841, CVE-2023-28842) and Sigstore (CVE-2023-30551).
#### Components changelog
- source-controller [v1.0.0-rc.4](https://togithub.com/fluxcd/source-controller/blob/v1.0.0-rc.4/CHANGELOG.md)
- kustomize-controller [v1.0.0-rc.4](https://togithub.com/fluxcd/kustomize-controller/blob/v1.0.0-rc.4/CHANGELOG.md)
- notification-controller [v1.0.0-rc.4](https://togithub.com/fluxcd/notification-controller/blob/v1.0.0-rc.4/CHANGELOG.md)
- helm-controller [v0.34.0](https://togithub.com/fluxcd/helm-controller/blob/v0.34.0/CHANGELOG.md)
- image-reflector-controller [v0.28.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.28.0/CHANGELOG.md)
- image-automation-controller [v0.34.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.34.0/CHANGELOG.md)
#### CLI Changelog
- PR [#3929](https://togithub.com/fluxcd/flux2/issues/3929) - [@stefanprodan](https://togithub.com/stefanprodan) - Update Git packages
- PR [#3928](https://togithub.com/fluxcd/flux2/issues/3928) - [@stefanprodan](https://togithub.com/stefanprodan) - Update kubectl to v1.27.2 in flux-cli image
- PR [#3927](https://togithub.com/fluxcd/flux2/issues/3927) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump github/codeql-action from 2.3.3 to 2.3.5
- PR [#3926](https://togithub.com/fluxcd/flux2/issues/3926) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump snyk/actions from [`8061827`](https://togithub.com/fluxcd/flux2/commit/806182742461562b67788a64410098c9d9b96adb) to [`b98d498`](https://togithub.com/fluxcd/flux2/commit/b98d498629f1c368650224d6d212bf7dfa89e4bf)
- PR [#3924](https://togithub.com/fluxcd/flux2/issues/3924) - [@hgranillo](https://togithub.com/hgranillo) - Fix break lines in create helmrelease and source
- PR [#3922](https://togithub.com/fluxcd/flux2/issues/3922) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components
- PR [#3918](https://togithub.com/fluxcd/flux2/issues/3918) - [@somtochiama](https://togithub.com/somtochiama) - Retry oci push operations
- PR [#3910](https://togithub.com/fluxcd/flux2/issues/3910) - [@stefanprodan](https://togithub.com/stefanprodan) - Update Kubernetes to v1.27 and Kustomize to v5.0
- PR [#3903](https://togithub.com/fluxcd/flux2/issues/3903) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5
- PR [#3902](https://togithub.com/fluxcd/flux2/issues/3902) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/setup-go from 4.0.0 to 4.0.1
- PR [#3901](https://togithub.com/fluxcd/flux2/issues/3901) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump helm/kind-action from 1.5.0 to 1.7.0
Configuration
📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v2.0.0-rc.3->v2.0.0-rc.5v2.0.0-rc.3->v2.0.0-rc.5Release Notes
fluxcd/flux2
### [`v2.0.0-rc.5`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.5) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v2.0.0-rc.4...v2.0.0-rc.5) #### Highlights This is the 5th release candidate of Flux v2.0 GA. Users are advised to upgrade from older versions to `v2.0.0-rc.5` as soon as possible. Flux `v2.0.0-rc.5` addresses a regression that was introduced in `v2.0.0-rc.4`. This regression caused a disruption in the compatibility with Git servers utilizing v2 of the wire protocol, such as Azure Devops and AWS CodeCommit. :bulb: For upgrading from v0.x, please see [the procedure documented in RC.1](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.1). ⚠️ Note that [`v2.0.0-rc.4`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.1) updated all components to use [Kustomize v5](https://togithub.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv5.0.0) and [controller-runtime v0.15](https://togithub.com/kubernetes-sigs/controller-runtime/releases/tag/v0.15.0), both of which contain breaking changes. ##### Fixes and improvements - Fix support for Git v2 servers. - Suppress misleading error message `[controller-runtime] log.SetLogger(...) was never called...` (CLI). - Include both revision and token in event metadata, if present (helm-controller). - Update source-controller to patch a vulnerability in Sigstore (CVE-2023-33199) #### Components Changelog - source-controller [v1.0.0-rc.5](https://togithub.com/fluxcd/source-controller/blob/v1.0.0-rc.5/CHANGELOG.md) - image-automation-controller [v0.34.1](https://togithub.com/fluxcd/image-automation-controller/blob/v0.34.1/CHANGELOG.md) - helm-controller [v0.34.1](https://togithub.com/fluxcd/helm-controller/blob/v0.34.1/CHANGELOG.md) #### CLI Changelog - PR [#3943](https://togithub.com/fluxcd/flux2/issues/3943) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components, and git/go-git to v0.12.0 - PR [#3940](https://togithub.com/fluxcd/flux2/issues/3940) - [@somtochiama](https://togithub.com/somtochiama) - Set controller runtime logger in Azure e2e tests - PR [#3938](https://togithub.com/fluxcd/flux2/issues/3938) - [@aryan9600](https://togithub.com/aryan9600) - e2e: Run e2e Azure tests for PRs to main if tests or wofklow changes - PR [#3932](https://togithub.com/fluxcd/flux2/issues/3932) - [@aryan9600](https://togithub.com/aryan9600) - Set `controller-runtime` logger to a null logger ### [`v2.0.0-rc.4`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.4) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v2.0.0-rc.3...v2.0.0-rc.4) #### Highlights This is the 4nd release candidate of Flux v2.0 GA. Users are advised to upgrade from older versions to `v2.0.0-rc.4` as soon as possible. Flux v2.0.0-rc.4 comes with support for **Kustomize 5.0**, **Helm 3.12** and **Cosign 2.0**. :bulb: For upgrading from v0.x, please see [the procedure documented in RC.1](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0-rc.1). ⚠️ Note that Kustomize v5 contains breaking changes, please consult their [changelog](https://togithub.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv5.0.0) for more details. ⚠️ The GitOps Toolkit and the Flux controllers have been updated to [controller-runtime v0.15](https://togithub.com/kubernetes-sigs/controller-runtime/releases/tag/v0.15.0) which contains breaking changes that could affect 3rd-party controllers that integrate with Flux. ##### Fixes and improvements - Full support for Azure Workload Identity when connecting Flux to Azure Container Registry, Azure Blog Storage and Azure Key Vault. - New command `flux reconcile source chart` for pulling Helm OCI charts on-demand from container registries (CLI). - Retry OCI operations on network errors for `flux push artifact` (CLI). - Support annotated Git tags with `.spec.ref.name` in `GitRepository` (source-controller). - Fix pulling Helm OCI charts from ACR when using Azure OIDC (source-controller). - Fix incorrect rate limiting for `HelmRelease` events (notification-controller). - All components have been updated to patch vulnerabilities in Docker (CVE-2023-28840, CVE-2023-28841, CVE-2023-28842) and Sigstore (CVE-2023-30551). #### Components changelog - source-controller [v1.0.0-rc.4](https://togithub.com/fluxcd/source-controller/blob/v1.0.0-rc.4/CHANGELOG.md) - kustomize-controller [v1.0.0-rc.4](https://togithub.com/fluxcd/kustomize-controller/blob/v1.0.0-rc.4/CHANGELOG.md) - notification-controller [v1.0.0-rc.4](https://togithub.com/fluxcd/notification-controller/blob/v1.0.0-rc.4/CHANGELOG.md) - helm-controller [v0.34.0](https://togithub.com/fluxcd/helm-controller/blob/v0.34.0/CHANGELOG.md) - image-reflector-controller [v0.28.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.28.0/CHANGELOG.md) - image-automation-controller [v0.34.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.34.0/CHANGELOG.md) #### CLI Changelog - PR [#3929](https://togithub.com/fluxcd/flux2/issues/3929) - [@stefanprodan](https://togithub.com/stefanprodan) - Update Git packages - PR [#3928](https://togithub.com/fluxcd/flux2/issues/3928) - [@stefanprodan](https://togithub.com/stefanprodan) - Update kubectl to v1.27.2 in flux-cli image - PR [#3927](https://togithub.com/fluxcd/flux2/issues/3927) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump github/codeql-action from 2.3.3 to 2.3.5 - PR [#3926](https://togithub.com/fluxcd/flux2/issues/3926) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump snyk/actions from [`8061827`](https://togithub.com/fluxcd/flux2/commit/806182742461562b67788a64410098c9d9b96adb) to [`b98d498`](https://togithub.com/fluxcd/flux2/commit/b98d498629f1c368650224d6d212bf7dfa89e4bf) - PR [#3924](https://togithub.com/fluxcd/flux2/issues/3924) - [@hgranillo](https://togithub.com/hgranillo) - Fix break lines in create helmrelease and source - PR [#3922](https://togithub.com/fluxcd/flux2/issues/3922) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#3918](https://togithub.com/fluxcd/flux2/issues/3918) - [@somtochiama](https://togithub.com/somtochiama) - Retry oci push operations - PR [#3910](https://togithub.com/fluxcd/flux2/issues/3910) - [@stefanprodan](https://togithub.com/stefanprodan) - Update Kubernetes to v1.27 and Kustomize to v5.0 - PR [#3903](https://togithub.com/fluxcd/flux2/issues/3903) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5 - PR [#3902](https://togithub.com/fluxcd/flux2/issues/3902) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 - PR [#3901](https://togithub.com/fluxcd/flux2/issues/3901) - [@dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump helm/kind-action from 1.5.0 to 1.7.0Configuration
📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.