Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026

Bumps github.com/fluxcd/flux2/v2 from 2.7.3 to 2.7.5.

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.7.5

Highlights

Flux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix HelmRelease history truncation when using the RetryOnFailure strategy.

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.7.4...v2.7.5

v2.7.4

Highlights

Flux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Add DisableConfigWatchers feature gate to all controllers for disabling the Secrets/ConfigMaps watchers
  • Fix Workload Identity for Azure China Cloud in all controllers
  • Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller
  • Skip secret decryption for remote kustomize patches in kustomize-controller
  • Improve post-build error reporting in kustomize-controller
  • Add ArtifactGenerator to aggregated RBAC roles

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog

... (truncated)

Commits
  • 8454b02 Merge pull request #5649 from fluxcd/backport-5648-to-release/v2.7.x
  • 931f101 Update toolkit components
  • 06ed49d Merge pull request #5642 from fluxcd/backport-5597-to-release/v2.7.x
  • 6021981 Allow option to skip tenant namespace creation
  • 4b7d46e Merge pull request #5640 from fluxcd/backport-5639-to-release/v2.7.x
  • e8c8704 Update toolkit components
  • abd603e Merge pull request #5635 from fluxcd/backport-5625-to-release/v2.7.x
  • 83d426c diff: report if object is skipped
  • 48e77c8 Merge pull request #5634 from fluxcd/backport-5633-to-release/v2.7.x
  • 01fbe37 Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) from 2.7.3 to 2.7.5.
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Commits](fluxcd/flux2@v2.7.3...v2.7.5)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/flux2/v2
  dependency-version: 2.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added applications/reloader dependencies Pull requests that update a dependency file ok-to-test Signals mergebot that CI checks are ready to be kicked off ready-for-review labels Feb 9, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2026

Assignees

The following users could not be added as assignees: mesosphere/kommander. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added ok-to-test Signals mergebot that CI checks are ready to be kicked off dependencies Pull requests that update a dependency file applications/reloader labels Feb 9, 2026
@github-actions github-actions bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Feb 9, 2026
@coveralls
Copy link

Pull Request Test Coverage Report for Build 21815109273

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 33.945%

Totals Coverage Status
Change from base Build 21686811002: 0.0%
Covered Lines: 111
Relevant Lines: 327

💛 - Coveralls

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

applications/reloader dependencies Pull requests that update a dependency file ok-to-test Signals mergebot that CI checks are ready to be kicked off ready-for-review size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant