Skip to content

fix(deps): update aqua:fluxcd/flux2 ( 2.9.3 ➔ 2.9.4 ) - #1317

Open
mortyops[bot] wants to merge 1 commit into
mainfrom
renovate/aqua-fluxcd-flux2-2.x
Open

fix(deps): update aqua:fluxcd/flux2 ( 2.9.3 ➔ 2.9.4 )#1317
mortyops[bot] wants to merge 1 commit into
mainfrom
renovate/aqua-fluxcd-flux2-2.x

Conversation

@mortyops

@mortyops mortyops Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
aqua:fluxcd/flux2 tools patch 2.9.32.9.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

fluxcd/flux2 (aqua:fluxcd/flux2)

v2.9.4

Compare Source

Highlights

Flux v2.9.4 is a patch release that ships various fixes to the Flux controllers, covering source-watcher tarball extraction and glob expansion limits, the refspecs accepted by ImageUpdateAutomation, the HTTP request limits of the notification-controller servers, and Helm repository index loading, OCI chart digest pinning, Bucket error handling and GCS static authentication in source-controller. On the CLI side, flux migrate -f now supports migrating repositories to Flux 2.9. Users are encouraged to upgrade for the best experience.

Note that this release contains CRD schema changes for ArtifactGenerator and ImageUpdateAutomation; both CRDs must be updated along with the controllers.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Confine tarball extraction and bound glob expansion (source-watcher)
  • Disallow force-update and deletion via refspecs (image-automation-controller)
  • Unify HTTP server request limits (notification-controller)
  • Align Helm repository index loading with upstream Helm v4 (source-controller)
  • Improve error handling in Bucket reconciliation (source-controller)
  • Pin OCI chart verification by digest (source-controller)
  • Limit GCS static authentication to service account keys (source-controller)
  • Restrict the allow-webhooks network policy to the receiver port (flux CLI)

Improvements:

  • Add support for migrating repositories to 2.9 in flux migrate -f (flux CLI)
  • Update fluxcd/pkg dependencies, which align the ECR host detection with upstream (source-controller, image-reflector-controller, flux CLI)
  • Update Bitbucket Cloud receiver guidance (notification-controller)

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.9.3...v2.9.4


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@mortyops
mortyops Bot force-pushed the renovate/aqua-fluxcd-flux2-2.x branch 4 times, most recently from 4752cce to b0a89be Compare August 15, 2026 20:19
@mortyops
mortyops Bot force-pushed the renovate/aqua-fluxcd-flux2-2.x branch from b0a89be to d4edc7e Compare August 16, 2026 01:02
| datasource  | package      | from  | to    |
| ----------- | ------------ | ----- | ----- |
| github-tags | fluxcd/flux2 | 2.9.3 | 2.9.4 |
@mortyops
mortyops Bot force-pushed the renovate/aqua-fluxcd-flux2-2.x branch from d4edc7e to 04faabb Compare August 16, 2026 04:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants