This release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.
All controllers are built with Go 1.21.6 using Alpine Linux 3.19.1 base image.
[!NOTE]
Due to breaking changes in Helm v3.14.0, the helm-controller version included in this patch release comes with Helm SDK v3.13.3.
A preview build of the helm-controller with the latest Helm SDK is available at helm-controller#879.
Fixes:
Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the kustomize-controller upgrade to Kustomize v5.3 and has been fixed in this patch release.
The regression due to which Roles and ClusterRoles with aggregated roles were continuous reconciled by kustomize-controller has been fixed.
Fix the Git revision displaying when notification-controller sends alerts to Grafana.
The HelmRelease status reporting has been improved by ensuring that the stale failure conditions get updated after failure recovery.
See the components changelog for a full list of bug fixes.
Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
This patch release comes with various bug fixes and improvements.
Reconciling empty directories and directories without Kubernetes manifests no
longer results in an error. This regressing bug was introduced with the
controller upgrade to Kustomize v5.3 and has been fixed in this patch release.
The regression due to which the namespaced objects without a namespace specified
resulted in not found error instead of namespace not specified has also been
fixed. And the regression due to which Roles and ClusterRoles were reconciled
over and over due to the normalization of Roles and ClusterRoles has also been
fixed.
In addition, the Kubernetes dependencies have been updated to v1.28.6. Various
other dependencies have also been updated to their latest version to patch
upstream CVEs.
Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.
Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.
Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).
Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.
Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.
Bumps the go group with 24 updates:
5.23.0
5.29.2
1.15.0
1.16.0
2.0.0-rc.3
2.2.3
0.18.1-0.20230706132206-211750e8915d
0.19.3
1.1.0
1.2.2
1.1.2
1.3.0
0.11.0
0.17.0
0.8.1
0.17.0
1.3.4
1.6.0
0.28.2
0.36.0
1.1.0
1.2.4
1.3.0
1.4.1
0.0.0-20230713123140-269aa4fb1338
0.4.0
0.9.0
0.11.1
0.4.0
0.5.0
0.4.1
0.6.0
0.16.1
0.18.1
0.7.0
0.7.1
0.11.0
0.12.2
0.2.0
0.4.0
0.15.0
0.16.0
0.0.0-20230726121419-3b25d923346b
0.0.0-20231127182322-b307cd553661
2.3.0
2.4.0
0.2.0
0.3.0
Updates
github.com/containers/image/v5
from 5.23.0 to 5.29.2Release notes
Sourced from github.com/containers/image/v5's releases.
... (truncated)
Commits
b799d82
[release-5.29] Bump to v5.29.26cbd4f4
[release-5.29] backport Docker Daemon fix #22602f0d9ae
Merge pull request #2262 from mtrmac/5.29-skopeo-reverseef8a7a5
Use a stable Skopeo branch for testing the stable c/image branchd8bbff8
Merge pull request #2253 from mtrmac/releasing-5.29.1540136f
Bump to v5.29.2-devf7fbc0a
Release 5.29.11b5932f
Merge pull request #2252 from mheon/backport_2209_52947bac8f
Add support for pushing image with unknown digest041e291
Merge pull request #2251 from mtrmac/5.29-dest-branchUpdates
github.com/fatih/color
from 1.15.0 to 1.16.0Release notes
Sourced from github.com/fatih/color's releases.
Commits
0f9779e
Merge pull request #213 from fatih/dependabot/go_modules/golang.org/x/sys-0.14.00c78604
Bump golang.org/x/sys from 0.13.0 to 0.14.096e0f73
Merge pull request #208 from fatih/dependabot/github_actions/actions/checkout-44c66e32
Bump actions/checkout from 3 to 42fb03d6
Merge pull request #202 from fatih/dependabot/github_actions/actions/setup-go-48ba7bbd
Bump actions/setup-go from 3 to 4e3f97f3
Merge pull request #209 from fatih/dependabot/go_modules/golang.org/x/sys-0.13.0e146575
Bump golang.org/x/sys from 0.10.0 to 0.13.0d2d7a5e
Merge pull request #212 from fatih/dependabot/go_modules/github.com/mattn/go-...f3e45da
Merge branch 'main' into dependabot/go_modules/github.com/mattn/go-isatty-0.0.20Updates
github.com/fluxcd/flux2/v2
from 2.0.0-rc.3 to 2.2.3Release notes
Sourced from github.com/fluxcd/flux2/v2's releases.
... (truncated)
Commits
5346846
Merge pull request #4591 from fluxcd/backport-4589-to-release/v2.2.x1feda85
Update dependenciese3cdb19
Merge pull request #4588 from fluxcd/backport-4583-to-release/v2.2.xcb0cf95
Update toolkit components81f8bf8
Merge pull request #4587 from fluxcd/backport-4585-to-release/v2.2.xaa4cad4
build(deps): bump the ci group with 3 updatesa3550cc
Merge pull request #4577 from fluxcd/backport-4554-to-release/v2.2.x384d472
build(deps): bump the ci group with 3 updatesaabdd28
Merge pull request #4576 from fluxcd/backport-4575-to-release/v2.2.x297c0f0
Update dependencies to Kubernetes v1.28.6Updates
github.com/fluxcd/go-git-providers
from 0.18.1-0.20230706132206-211750e8915d to 0.19.3Release notes
Sourced from github.com/fluxcd/go-git-providers's releases.
Commits
Updates
github.com/fluxcd/kustomize-controller/api
from 1.1.0 to 1.2.2Release notes
Sourced from github.com/fluxcd/kustomize-controller/api's releases.
... (truncated)
Changelog
Sourced from github.com/fluxcd/kustomize-controller/api's changelog.
... (truncated)
Commits
7a5ae11
Merge pull request #1077 from fluxcd/release-v1.2.2afb9e73
Release v1.2.2e5072d5
Add changelog entry for v1.2.2115614b
Merge pull request #1076 from fluxcd/backport-1075-to-release/v1.2.x00821eb
Update source-controller dependency151e55b
Merge pull request #1074 from fluxcd/backport-1072-to-release/v1.2.xc575ac2
build(deps): bump the go-deps group with 1 updatee75aa5f
Merge pull request #1070 from fluxcd/backport-1069-to-release/v1.2.xddeda85
build(deps): bump the ci group with 1 update04b1e54
Merge pull request #1068 from fluxcd/backport-1066-to-release/v1.2.xUpdates
github.com/fluxcd/pkg/apis/meta
from 1.1.2 to 1.3.0Commits
31388ce
Merge pull request #727 from fluxcd/distribution-up328eb42
Update OCI distribution to v3.0.0-alpha.17fabcd8
Merge pull request #684 from somtochiama/pull-static-file-ocia330445
fix options255f8fc
test for static archivef155227
refactor test8687514
implement pull static artifact4624208
Merge pull request #726 from fluxcd/deps-kube-v0.28.630da897
Update dependencies63e3e9c
Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956Updates
github.com/fluxcd/pkg/git
from 0.11.0 to 0.17.0Commits
31388ce
Merge pull request #727 from fluxcd/distribution-up328eb42
Update OCI distribution to v3.0.0-alpha.17fabcd8
Merge pull request #684 from somtochiama/pull-static-file-ocia330445
fix options255f8fc
test for static archivef155227
refactor test8687514
implement pull static artifact4624208
Merge pull request #726 from fluxcd/deps-kube-v0.28.630da897
Update dependencies63e3e9c
Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956Updates
github.com/fluxcd/pkg/git/gogit
from 0.8.1 to 0.17.0Commits
31388ce
Merge pull request #727 from fluxcd/distribution-up328eb42
Update OCI distribution to v3.0.0-alpha.17fabcd8
Merge pull request #684 from somtochiama/pull-static-file-ocia330445
fix options255f8fc
test for static archivef155227
refactor test8687514
implement pull static artifact4624208
Merge pull request #726 from fluxcd/deps-kube-v0.28.630da897
Update dependencies63e3e9c
Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956Updates
github.com/fluxcd/pkg/kustomize
from 1.3.4 to 1.6.0Commits
e5ca530
Merge pull request #728 from fluxcd/internal-depsac45fb6
Update internal dependencies31388ce
Merge pull request #727 from fluxcd/distribution-up328eb42
Update OCI distribution to v3.0.0-alpha.17fabcd8
Merge pull request #684 from somtochiama/pull-static-file-ocia330445
fix options255f8fc
test for static archivef155227
refactor test8687514
implement pull static artifact4624208
Merge pull request #726 from fluxcd/deps-kube-v0.28.6Updates
github.com/fluxcd/pkg/ssa
from 0.28.2 to 0.36.0Commits
e5ca530
Merge pull request #728 from fluxcd/internal-depsac45fb6
Update internal dependencies31388ce
Merge pull request #727 from fluxcd/distribution-up328eb42
Update OCI distribution to v3.0.0-alpha.17fabcd8
Merge pull request #684 from somtochiama/pull-static-file-ocia330445
fix options255f8fc
test for static archivef155227
refactor test8687514
implement pull static artifact4624208
Merge pull request #726 from fluxcd/deps-kube-v0.28.6Updates
github.com/fluxcd/source-controller/api
from 1.1.0 to 1.2.4Release notes
Sourced from github.com/fluxcd/source-controller/api's releases.
... (truncated)
Changelog
Sourced from github.com/fluxcd/source-controller/api's changelog.
... (truncated)
Commits
3f131a1
Merge pull request #1363 from fluxcd/release-v1.2.48fcdff7
Release v1.2.42a57324
Add changelog entry for v1.2.4a724e00
Merge pull request #1362 from fluxcd/backport-1361-to-release/v1.2.x6cf8879
build(deps): bump the go-deps group with 2 updatesfefee33
Merge pull request #1357 from fluxcd/backport-1355-to-release/v1.2.xe3834d3
build(deps): bump the ci group with 3 updatesd6d8699
Merge pull request #1353 from fluxcd/backport-1352-to-release/v1.2.x0efba9a
Update API to Kubernetes v1.28.41a892fc
build(deps): bump the go-deps group with 12 updatesUpdates
github.com/go-logr/logr
from 1.3.0 to 1.4.1Release notes
Sourced from github.com/go-logr/logr's releases.
Commits
dcdc3f2
slogr: fix unintended API break in v0.8.0 (#253)5d88f52
funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)177005d
build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0e7f489a
build(deps): bump github/codeql-action from 2.22.9 to 3.22.11cf56c3b
build(deps): bump actions/setup-go from 4 to 52ad296e
build(deps): bump github/codeql-action from 2.22.8 to 2.22.9d55b4e2
Merge pull request #241 from thockin/master98ee9d9
Clean up slog testing and restore coverageb228ba8
Break examples to new file6432877
Add benchmarks for slogSinkUpdates
github.com/mandelsoft/vfs
from 0.0.0-20230713123140-269aa4fb1338 to 0.4.0Release notes
Sourced from github.com/mandelsoft/vfs's releases.
Commits
Updates
github.com/open-component-model/git-controller
from 0.9.0 to 0.11.1Release notes
Sourced from github.com/open-component-model/git-controller's releases.