chore(deps): update fluxcd by renovate[bot] · Pull Request #1803 · immich-app/devtools

renovate · 2026-07-14T00:47:03Z

This PR contains the following updates:

Package	Type	Update	Change
flux-operator (source)		minor	`0.53.0` → `0.55.0`
flux2		minor	`2.8.8` → `2.9.2`
fluxcd/flux2	Kustomization	minor	`v2.8.8` → `v2.9.2`
ghcr.io/fluxcd/flux-cli		patch	`v2.9.0` → `v2.9.2`
ghcr.io/fluxcd/flux-manifests		digest	`8821ea0` → `c6598d2`

Release Notes

controlplaneio-fluxcd/flux-operator (flux-operator)

`v0.55.0`

Compare Source

What's Changed

web: Add OAuth2 autoLogin to skip login page by @Robert27 in #954
build(deps): bump the actions group with 2 updates by @dependabot[bot] in #950
Release v0.55.0 by @matheuscscp in #958

New Contributors

@Robert27 made their first contribution in #954

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.54.1...v0.55.0

`v0.54.1`

Compare Source

What's Changed

operator: fix skipping flux patch versions in the artifact by @matheuscscp in #948
Release v0.54.1 by @matheuscscp in #949

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.54.0...v0.54.1

`v0.54.0`

Compare Source

What's Changed

build(deps): bump the cli-tools group across 1 directory with 4 updates by @dependabot[bot] in #935
Include Flux plugins updates in make prep-release by @stefanprodan in #936
mcp: introduce debug tool log by @matheuscscp in #938
operator: fix electing versions beyond supported by @matheuscscp in #937
mcp: Add Flux plugins to docs index by @stefanprodan in #940
build(deps): bump the actions group across 1 directory with 11 updates by @dependabot[bot] in #943
Release v0.54.0 by @matheuscscp in #947

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.53.0...v0.54.0

fluxcd/flux2 (flux2)

`v2.9.2`

Compare Source

Highlights

Flux v2.9.2 is a patch release. The main fix addresses a regression introduced in
v2.9.1 where a Kustomization with openapi.path pointing to a URL failed to
reconcile with failed to read OpenAPI schema. This release also corrects several
CRD field descriptions that contained inaccurate or leaked content. Users are
encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix a regression where a Kustomization with openapi.path pointing to a URL failed to reconcile with failed to read OpenAPI schema (kustomize-controller)
Fix the HelmChart CRD description for .status.url, which pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact (source-controller)
Fix the ImageRepository CRD description for .status.observedExclusionList, which referred to spec.lastScanResult instead of status.lastScanResult (image-reflector-controller)
Fix the ImageUpdateAutomation CRD description for .status.observedSourceRevision, which had a stray Go struct declaration leaking into it (image-automation-controller)

Improvements:

Update fluxcd/pkg dependencies

Components changelog

source-controller v1.9.3
kustomize-controller v1.9.3
helm-controller v1.6.2
notification-controller v1.9.2
image-reflector-controller v1.2.3
image-automation-controller v1.2.3
source-watcher v2.2.2

CLI changelog

Update fluxcd/pkg dependencies by @fluxcdbot in #5984
Update fluxcd/pkg dependencies by @fluxcdbot in #5990
Update toolkit components by @fluxcdbot in #5994

Full Changelog: fluxcd/flux2@v2.9.1...v2.9.2

`v2.9.1`

Compare Source

Highlights

Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Disable Flux variable substitution on all Flux CRDs, preventing post-build substitution from corrupting CRD schemas that contain ${...} sequences (all controllers)
Update SOPS dependency to fix .ini file decryption (kustomize-controller)
Fix a dry-run error where applying a resource with a strategic merge patch could fail with <resource> is invalid (kustomize-controller)
Fix a breaking change in the in-memory Kustomization build (Flux CLI)

Improvements:

Cache the registry authorization token during Notation verification, so it is fetched once per verification instead of once per request (source-controller)
Update fluxcd/pkg dependencies

Components changelog

source-controller v1.9.2
kustomize-controller v1.9.2
helm-controller v1.6.2
notification-controller v1.9.2
image-reflector-controller v1.2.2
image-automation-controller v1.2.2
source-watcher v2.2.2

CLI changelog

[release/v2.9.x] Fix breaking change in-memory kustomization build by @fluxcdbot in #5971
Update fluxcd/pkg dependencies by @fluxcdbot in #5977
Update toolkit components by @fluxcdbot in #5979

Full Changelog: fluxcd/flux2@v2.9.0...v2.9.1

`v2.9.0`

Compare Source

Highlights

Flux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.9 GA blog post.

Overview of the new features:

Flux CLI Plugin System with the Mirror and Schema plugins (flux plugin)
Server-Side Apply field ignore rules for fine-grained drift control (Kustomization)
SOPS decryption with the Age post-quantum cipher (Kustomization)
Kubernetes Workload Identity authentication for OpenBao and Vault (Kustomization)
Helm post-render strategies, including chart hooks support (HelmRelease)
Literal mode for Helm values references mirroring helm --set-literal (HelmRelease)
Allow empty kind in CEL health check expressions (Kustomization, HelmRelease)
Git commit signing and verification with SSH keys (GitRepository, ImageUpdateAutomation)
AWS CodeCommit authentication using Workload Identity (GitRepository)
Custom Sigstore trusted root for keyless verification in air-gapped environments (OCIRepository)
Path pattern directory discovery for monorepos (ArtifactGenerator)
Secret-less, OIDC-secured webhook Receivers (Receiver)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
`v1.34`	`>= 1.34.1`
`v1.35`	`>= 1.35.0`
`v1.36`	`>= 1.36.0`

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs image.toolkit.fluxcd.io/v1beta2 and notification.toolkit.fluxcd.io/v1beta2
have reached end-of-life and have been removed from the CRDs.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from older versions of Flux to v2.9.

Components changelog

source-controller v1.9.1
kustomize-controller v1.9.1
notification-controller v1.9.1
helm-controller v1.6.1
image-reflector-controller v1.2.1
image-automation-controller v1.2.1
source-watcher v2.2.1

CLI changelog

Add backport label for Flux 2.8 by @matheuscscp in #5732
Remove no longer needed workaround for Flux 2.8 by @matheuscscp in #5733
Update toolkit components by @fluxcdbot in #5740
Add missing things to release notes template by @matheuscscp in #5743
ci: add top-level permissions to upgrade-fluxcd-pkg workflow by @gaganhr94 in #5763
build(deps): bump the ci group across 1 directory with 11 updates by @dependabot[bot] in #5764
Update fluxcd/pkg dependencies by @fluxcdbot in #5766
Update toolkit components by @fluxcdbot in #5769
Add target branch name to update branch by @matheuscscp in #5773
Fix/resume exit code by @Aman-Cool in #5701
Mark RFC 0010, 0011 and 0012 as implemented by @stefanprodan in #5776
Update toolkit components by @fluxcdbot in #5780
Add --resolve-symlinks flag to build and push artifact commands by @rohansood10 in #5724
fix: validate --source flag in create kustomization command by @gma1k in #5798
Update toolkit components by @fluxcdbot in #5821
Add --show-source to flux get ks and flux get hr by @rafaelperoco in #5828
Add flux create secret receiver command by @stefanprodan in #5835
fix: handle multiple symlinks to same target in build artifact by @Iam-Karan-Suresh in #5833
Add --in-memory-build to flux build ks and flux diff ks by @rycli in #5794
Migrate end-to-end test to latest cloud SDKs by @stefanprodan in #5840
docs: Add AI Coding Assistants Guidance by @stefanprodan in #5841
Add AI Agents guidance by @stefanprodan in #5847
[RFC-0013] Flux CLI Plugin System by @stefanprodan in #5795
Add --ignore-not-found to flux diff ks by @rycli in #5845
[RFC-0013] Implement plugin system by @stefanprodan in #5849
build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by @dependabot[bot] in #5853
Update toolkit components by @fluxcdbot in #5856
Add digest pinning support to flux plugin install by @Iam-Karan-Suresh in #5872
Add --ns-follows-kube-context global flag for using the kubeconfig context namespace by @jtyr in #5831
include source-watcher in install.yaml manifests by @tmmorin in #5881
Update toolkit components by @fluxcdbot in #5890
Update toolkit components by @fluxcdbot in #5903
Update fluxcd/pkg dependencies by @fluxcdbot in #5907
Validate Helm source URL schemes by @immanuwell in #5909
Introduce flux trigger receiver by @matheuscscp in #5908
refactor(api): migrate MakeDependsOn to shared apis/meta func by @vecil in #5912
Update to Kubernetes 1.36 and Go 1.26 by @stefanprodan in #5924
build(deps): bump the ci group across 1 directory with 19 updates by @dependabot[bot] in #5925
Run conformance tests for Kubernetes 1.36 by @stefanprodan in #5926
Add support for AWS CodeCommit to flux bootstrap git by @taraspos in #5868
Validate plugin binary path by @stefanprodan in #5927
Update fluxcd/pkg dependencies by @fluxcdbot in #5928
fix: preserve invalid metadata.labels in flux build ks by @raffis in #5906
build: target host arch for local builds/envtest by @stealthybox in #5932
build(deps): bump the ci group with 6 updates by @dependabot[bot] in #5938
Support specifing sparseCheckout in flux bootstrap by @piny940 in #5918
Update toolkit components by @fluxcdbot in #5944
Honor ks.spec.postBuild.substituteStrategy by @matheuscscp in #5945
Add DriftIgnoreRules support to flux diff kustomization by @dipti-pai in #5923
Allow signing commits using SSH key by @hiddeco in #5920
Update toolkit components by @fluxcdbot in #5950
Update fluxcd/pkg dependencies by @fluxcdbot in #5937
cmd: support type!=status in get --status-selector by @3uzbcqje in #5952
Fix flux get all --status-selector for empty results and notification resources by @matheuscscp in #5954
Upgrade go-git-providers to v0.27.0 by @matheuscscp in #5956
Fix using Receiver adapter for ArtifactGenerator by @matheuscscp in #5957
feat: Install Plugins alongside Flux setup in gh actions by @gat786 in #5955
Update fluxcd/pkg dependencies by @fluxcdbot in #5960
Add CLI support for OCIRepository.spec.layerSelector in flux create source oci by @dme86 in #5892
Update toolkit components by @fluxcdbot in #5963

New Contributors

@gaganhr94 made their first contribution in #5763
@rohansood10 made their first contribution in #5724
@gma1k made their first contribution in #5798
@rafaelperoco made their first contribution in #5828
@Iam-Karan-Suresh made their first contribution in #5833
@rycli made their first contribution in #5794
@jtyr made their first contribution in #5831
@tmmorin made their first contribution in #5881
@immanuwell made their first contribution in #5909
@vecil made their first contribution in #5912
@taraspos made their first contribution in #5868
@piny940 made their first contribution in #5918
@3uzbcqje made their first contribution in #5952
@gat786 made their first contribution in #5955
@dme86 made their first contribution in #5892

Full Changelog: fluxcd/flux2@v2.8.0...v2.9.0

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 9am on tuesday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-07-14T00:55:26Z

Terraform Plan

Shared

✅ 1password/account — No changes

✅ 1password/futo-account — No changes

✅ bunny/futo-account — No changes

✅ cloudflare/account — No changes

✅ cloudflare/api-keys — No changes

✅ cloudflare/futo-account — No changes

✅ cloudflare/futo-api-keys — No changes

✅ docker/org — No changes

⚠️

github/org — Plan: 0 to add, 4 to change, 0 to destroy.

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)
  # github_repository_collaborators.repo_collaborators["immich"] will be updated in-place
  ~ resource "github_repository_collaborators" "repo_collaborators" {
        id             = "455229168"
      ~ invitation_ids = {
          - "koen-futo"  = "286515056"
          - "martabal"   = "284848949"
          - "martyfuhry" = "284848968"
          - "matthinc"   = "284848954"
          - "sudoicezen" = "284848972"
        } -> (known after apply)
        # (2 unchanged attributes hidden)
      - user {
          - permission = "admin" -> null
          - username   = "alextran1502" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "bo0tzz" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "jrasm91" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "zackpollard" -> null
        }
      + user {
          + permission = "maintain"
          + username   = "alextran1502"
        }
      + user {
          + permission = "maintain"
          + username   = "bo0tzz"
        }
      + user {
          + permission = "maintain"
          + username   = "jrasm91"
        }
      + user {
          + permission = "maintain"
          + username   = "zackpollard"
        }
        # (59 unchanged blocks hidden)
    }
  # github_repository_collaborators.repo_collaborators["static-pages"] will be updated in-place
  ~ resource "github_repository_collaborators" "repo_collaborators" {
        id             = "822727374"
      ~ invitation_ids = {
          - "PixelJonas" = "284848947"
          - "fyfrey"     = "284848959"
          - "kennyfuto"  = "288622006"
          - "koen-futo"  = "286515046"
          - "martabal"   = "284848951"
          - "martyfuhry" = "284848969"
          - "matthinc"   = "284848955"
          - "orhan98"    = "315880176"
          - "sudoicezen" = "284848974"
        } -> (known after apply)
        # (2 unchanged attributes hidden)
      - user {
          - permission = "admin" -> null
          - username   = "alextran1502" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "bo0tzz" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "jrasm91" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "zackpollard" -> null
        }
      + user {
          + permission = "maintain"
          + username   = "alextran1502"
        }
      + user {
          + permission = "maintain"
          + username   = "bo0tzz"
        }
      + user {
          + permission = "maintain"
          + username   = "jrasm91"
        }
      + user {
          + permission = "maintain"
          + username   = "zackpollard"
        }
        # (58 unchanged blocks hidden)
    }
  # github_repository_collaborators.repo_collaborators["test-assets"] will be updated in-place
  ~ resource "github_repository_collaborators" "repo_collaborators" {
        id             = "697157116"
      ~ invitation_ids = {
          - "PixelJonas" = "284848946"
          - "fyfrey"     = "284848960"
          - "kennyfuto"  = "288622000"
          - "koen-futo"  = "286515048"
          - "martabal"   = "284848952"
          - "martyfuhry" = "284848970"
          - "matthinc"   = "284848956"
          - "orhan98"    = "315880175"
          - "staticdog"  = "320859393"
          - "sudoicezen" = "284848973"
        } -> (known after apply)
        # (2 unchanged attributes hidden)
      - user {
          - permission = "admin" -> null
          - username   = "alextran1502" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "bo0tzz" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "jrasm91" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "zackpollard" -> null
        }
      + user {
          + permission = "maintain"
          + username   = "alextran1502"
        }
      + user {
          + permission = "maintain"
          + username   = "bo0tzz"
        }
      + user {
          + permission = "maintain"
          + username   = "jrasm91"
        }
      + user {
          + permission = "maintain"
          + username   = "zackpollard"
        }
        # (58 unchanged blocks hidden)
    }
  # github_repository_collaborators.repo_collaborators["walkrs"] will be updated in-place
  ~ resource "github_repository_collaborators" "repo_collaborators" {
        id             = "1156754889"
      ~ invitation_ids = {
          - "C-Otto"          = "307331486"
          - "PixelJonas"      = "307331438"
          - "adamantike"      = "307331464"
          - "dahool"          = "307331471"
          - "ddshd"           = "307331444"
          - "fyfrey"          = "307331463"
          - "github-cli"      = "307331445"
          - "jbaez"           = "307331428"
          - "kennyfuto"       = "307331447"
          - "koen-futo"       = "307331458"
          - "martabal"        = "307331390"
          - "martyfuhry"      = "307331483"
          - "matthinc"        = "307331420"
          - "michelheusschen" = "307331480"
          - "midzelis"        = "309034718"
          - "orhan98"         = "315880173"
          - "samholton"       = "307331386"
          - "schuhbacca"      = "307331432"
          - "skatsubo"        = "307331414"
          - "staticdog"       = "320859390"
        } -> (known after apply)
        # (2 unchanged attributes hidden)
      - user {
          - permission = "admin" -> null
          - username   = "alextran1502" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "bo0tzz" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "jrasm91" -> null
        }
      - user {
          - permission = "admin" -> null
          - username   = "zackpollard" -> null
        }
      + user {
          + permission = "maintain"
          + username   = "alextran1502"
        }
      + user {
          + permission = "maintain"
          + username   = "bo0tzz"
        }
      + user {
          + permission = "maintain"
          + username   = "jrasm91"
        }
      + user {
          + permission = "maintain"
          + username   = "zackpollard"
        }
        # (58 unchanged blocks hidden)
    }
Plan: 0 to add, 4 to change, 0 to destroy.
╷
│ Warning: Argument is deprecated
│ 
│   with github_repository.repositories["walkrs"],
│   on repositories.tf line 173, in resource "github_repository" "repositories":
│  173:   vulnerability_alerts      = !each.value.archived
│ 
│ Use the github_repository_vulnerability_alerts resource instead. This field
│ will be removed in a future version.
│ 
│ (and 24 more similar warnings elsewhere)
╵
─────────────────────────────────────────────────────────────────────────────
Note: You didn't use the -out option to save this plan, so OpenTofu can't
guarantee to take exactly these actions if you run "tofu apply" now.

✅ github/secrets — No changes

✅ github/webhooks — No changes

✅ netbird/account — No changes

✅ zitadel/cloud — No changes

✅ zitadel/self-hosted — No changes

Scoped (dev)

✅ discord/community — No changes

✅ monitoring/grafana — No changes

✅ zitadel/customer — No changes

Scoped (prod)

✅ discord/community — No changes

✅ discord/futo — No changes

✅ monitoring/grafana — No changes

✅ zitadel/customer — No changes

Scoped (staging — zitadel customer)

✅ customer — No changes

renovate Bot added changelog:skip dependencies renovate labels Jul 14, 2026

renovate Bot requested a review from a team as a code owner July 14, 2026 00:47

bo0tzz approved these changes Jul 14, 2026

View reviewed changes

renovate Bot force-pushed the renovate/fluxcd branch 3 times, most recently from 06e7bb8 to 0d42af5 Compare July 17, 2026 10:23

chore(deps): update fluxcd

50e6d0c

renovate Bot force-pushed the renovate/fluxcd branch from 0d42af5 to 50e6d0c Compare July 18, 2026 16:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update fluxcd#1803

chore(deps): update fluxcd#1803
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/fluxcd

renovate Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.55.0

What's Changed

New Contributors

v0.54.1

What's Changed

v0.54.0

What's Changed

v2.9.2

Highlights

Components changelog

CLI changelog

v2.9.1

Highlights

Components changelog

CLI changelog

v2.9.0

Highlights

Kubernetes compatibility

OpenShift compatibility

Upgrade procedure

Components changelog

CLI changelog

New Contributors

Configuration

Uh oh!

github-actions Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan

Shared

Scoped (dev)

Scoped (prod)

Scoped (staging — zitadel customer)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jul 14, 2026 •

edited

Loading

`v0.55.0`

`v0.54.1`

`v0.54.0`

`v2.9.2`

`v2.9.1`

`v2.9.0`

github-actions Bot commented Jul 14, 2026 •

edited

Loading