Skip to content
This repository was archived by the owner on Jul 10, 2026. It is now read-only.

chore(deps): bump fluxcd/flux2/action from 2.8.8 to 2.9.0 - #369

Merged
botantler-1[bot] merged 1 commit into
mainfrom
dependabot/github_actions/fluxcd/flux2/action-2.9.0
Jul 8, 2026
Merged

botantler-1[bot] merged 1 commit into
mainfrom
dependabot/github_actions/fluxcd/flux2/action-2.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps fluxcd/flux2/action from 2.8.8 to 2.9.0.

Release notes

Sourced from fluxcd/flux2/action's releases.

v2.9.0

Highlights

Flux v2.9.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.9 GA blog post.

Overview of the new features:

  • Flux CLI Plugin System with the Mirror and Schema plugins (flux plugin)
  • Server-Side Apply field ignore rules for fine-grained drift control (Kustomization)
  • SOPS decryption with the Age post-quantum cipher (Kustomization)
  • Kubernetes Workload Identity authentication for OpenBao and Vault (Kustomization)
  • Helm post-render strategies, including chart hooks support (HelmRelease)
  • Literal mode for Helm values references mirroring helm --set-literal (HelmRelease)
  • Allow empty kind in CEL health check expressions (Kustomization, HelmRelease)
  • Git commit signing and verification with SSH keys (GitRepository, ImageUpdateAutomation)
  • AWS CodeCommit authentication using Workload Identity (GitRepository)
  • Custom Sigstore trusted root for keyless verification in air-gapped environments (OCIRepository)
  • Path pattern directory discovery for monorepos (ArtifactGenerator)
  • Secret-less, OIDC-secured webhook Receivers (Receiver)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version Minimum required
v1.34 >= 1.34.1
v1.35 >= 1.35.0
v1.36 >= 1.36.0

[!NOTE] Note that the Flux project offers support only for the latest three minor versions of Kubernetes. Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs image.toolkit.fluxcd.io/v1beta2 and notification.toolkit.fluxcd.io/v1beta2 have reached end-of-life and have been removed from the CRDs.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from older versions of Flux to v2.9.

... (truncated)

Commits
  • dcc7def Merge pull request #5963 from fluxcd/update-components-main
  • dcf8165 Update toolkit components
  • 3cacae3 Merge pull request #5892 from dme86/feat/oci-layer-selector
  • 5df7951 Use single OCI layer selector flag
  • efc030f Merge pull request #5960 from fluxcd/update-pkg-deps/release/v2.9.x
  • 31c6ba3 Update fluxcd/pkg dependencies
  • 03af1c5 Merge pull request #5955 from gat786/test-plugin-install
  • ca5347f Improve docs for plugins action installation
  • 4b7e9ee Add docs and tests for plugins setup
  • bbf064e Remove unneeded step env var
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fluxcd/flux2/action](https://github.com/fluxcd/flux2) from 2.8.8 to 2.9.0.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Commits](fluxcd/flux2@1fd61a0...dcc7def)

---
updated-dependencies:
- dependency-name: fluxcd/flux2/action
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@botantler-1
botantler-1 Bot enabled auto-merge (squash) July 8, 2026 16:37
@botantler-1
botantler-1 Bot merged commit 73d654f into main Jul 8, 2026
51 checks passed
@botantler-1
botantler-1 Bot deleted the dependabot/github_actions/fluxcd/flux2/action-2.9.0 branch July 8, 2026 16:42
@github-project-automation github-project-automation Bot moved this from 🫴 Ready to ✅ Done in 🌊 Project Board Jul 8, 2026
@botantler-1

botantler-1 Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 5.6.7 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@botantler-1 botantler-1 Bot added the released label Jul 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

0 participants