chore(deps): update dependency fluxcd/flux2 to v0.39.0 #16

Merged
renovator merged 1 commits from renovate/fluxcd-flux2-0.x into main 2023-02-02 17:34:32 +01:00
Member

This PR contains the following updates:

Package Update Change
fluxcd/flux2 minor v0.38.3 -> v0.39.0

Release Notes

fluxcd/flux2

v0.39.0

Compare Source

Highlights

Flux v0.39.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Starting with version, the Flux controllers come with SBOMs and SLSA Provenance Attestations embedded in their container images.

The Flux Terraform Provider has a new resource for bootstrapping Flux, without depending on third-party Terraform providers, that allows customising the controllers at install time. Users are encouraged to migrate to this new resources and provide feedback.

The Flux CLI is now included in Wolfi OS, the Linux (Un)distro designed for securing the software supply chain. The Chainguard team and Wolfi maintainers are shipping updates for the Flux package on a regular basis.

Features and improvements
  • Recreate immutable resources (e.g. Kubernetes Jobs) by annotating or labeling them with kustomize.toolkit.fluxcd.io/force: enabled.
  • Support for HTTPS bearer token authentication for Git repositories.
  • Improve memory usage by disabling the caching of Secret and ConfigMap resources in all controllers.
  • Better observability with progressive status updates for Sources (Git, OCI, Helm, S3 Buckets).
  • Allow extracting the OCI artifact SHA256 digest for Cosign with flux push artifact -o json.
  • Track CRDs managed by Flux, flux trace and flux tree will show which HelmRelease deployed which CRDs.
  • Allow the Flux GitHub Action to use a GitHub token when checking for updates to avoid rate limiting.
New documentation

Components changelog

CLI Changelog


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [fluxcd/flux2](https://github.com/fluxcd/flux2) | minor | `v0.38.3` -> `v0.39.0` | --- ### Release Notes <details> <summary>fluxcd/flux2</summary> ### [`v0.39.0`](https://github.com/fluxcd/flux2/releases/tag/v0.39.0) [Compare Source](https://github.com/fluxcd/flux2/compare/v0.38.3...v0.39.0) #### Highlights Flux v0.39.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. Starting with version, the Flux controllers come with [SBOMs and SLSA Provenance Attestations](https://fluxcd.io/flux/security/) embedded in their container images. The [Flux Terraform Provider](https://github.com/fluxcd/terraform-provider-flux) has a new resource for bootstrapping Flux, without depending on third-party Terraform providers, that allows customising the controllers at install time. Users are encouraged to migrate to this new resources and provide feedback. The Flux CLI is now included in [Wolfi OS](https://github.com/wolfi-dev/os), the Linux (Un)distro designed for securing the software supply chain. The Chainguard team and Wolfi maintainers are shipping updates for the Flux package on a regular basis. ##### Features and improvements - Recreate immutable resources (e.g. Kubernetes Jobs) by annotating or labeling them with `kustomize.toolkit.fluxcd.io/force: enabled`. - Support for HTTPS bearer token authentication for Git repositories. - Improve memory usage by disabling the caching of Secret and ConfigMap resources in all controllers. - Better observability with progressive status updates for Sources (Git, OCI, Helm, S3 Buckets). - Allow extracting the OCI artifact SHA256 digest for Cosign with `flux push artifact -o json`. - Track CRDs managed by Flux, `flux trace` and `flux tree` will show which HelmRelease deployed which CRDs. - Allow the Flux GitHub Action to use a GitHub token when checking for updates to avoid rate limiting. ##### New documentation - Security: [Software Bill of Materials](https://fluxcd.io/flux/security/#software-bill-of-materials) - Security: [SLSA Provenance Attestations](https://fluxcd.io/flux/security/#slsa-provenance-attestations) - Security: [Scanning Flux images for CVEs](https://fluxcd.io/flux/security/#scanning-for-cves) #### Components changelog - source-controller [v0.34.0](https://github.com/fluxcd/source-controller/blob/v0.34.0/CHANGELOG.md) - kustomize-controller [v0.33.0](https://github.com/fluxcd/kustomize-controller/blob/v0.33.0/CHANGELOG.md) - helm-controller [v0.29.0](https://github.com/fluxcd/helm-controller/blob/v0.29.0/CHANGELOG.md) - notification-controller [v0.31.0](https://github.com/fluxcd/notification-controller/blob/v0.31.0/CHANGELOG.md) - image-reflector-controller [v0.24.0](https://github.com/fluxcd/image-reflector-controller/blob/v0.24.0/CHANGELOG.md) - image-automation-controller [v0.29.0](https://github.com/fluxcd/image-automation-controller/blob/v0.29.0/CHANGELOG.md) #### CLI Changelog - PR [#&#8203;3550](https://github.com/fluxcd/flux2/issues/3550) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - flux tree: Set CRDs GroupKind in output - PR [#&#8203;3549](https://github.com/fluxcd/flux2/issues/3549) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - flux tree: Track CRDs managed by HelmReleases - PR [#&#8203;3545](https://github.com/fluxcd/flux2/issues/3545) - [@&#8203;fluxcdbot](https://github.com/fluxcdbot) - Update toolkit components - PR [#&#8203;3542](https://github.com/fluxcd/flux2/issues/3542) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - flux tree: Add namespaces to objects reconciled from HRs - PR [#&#8203;3540](https://github.com/fluxcd/flux2/issues/3540) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Add json/yaml output to flux push artifact - PR [#&#8203;3537](https://github.com/fluxcd/flux2/issues/3537) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Update dependencies to Kubernetes v1.26.1 - PR [#&#8203;3532](https://github.com/fluxcd/flux2/issues/3532) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Update Alpine to v3.17 and kubectl to v1.26.1 in flux-cli image - PR [#&#8203;3531](https://github.com/fluxcd/flux2/issues/3531) - [@&#8203;makkes](https://github.com/makkes) - fix misleading messaging when using `-A` flag - PR [#&#8203;3529](https://github.com/fluxcd/flux2/issues/3529) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 - PR [#&#8203;3526](https://github.com/fluxcd/flux2/issues/3526) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Bump anchore/sbom-action from 0.13.1 to 0.13.3 - PR [#&#8203;3525](https://github.com/fluxcd/flux2/issues/3525) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Bump github/codeql-action from 2.1.38 to 2.2.1 - PR [#&#8203;3524](https://github.com/fluxcd/flux2/issues/3524) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 - PR [#&#8203;3517](https://github.com/fluxcd/flux2/issues/3517) - [@&#8203;jooooel](https://github.com/jooooel) - Fix broken GitHub Action and handle case where VERSION is provided as an input - PR [#&#8203;3507](https://github.com/fluxcd/flux2/issues/3507) - [@&#8203;thezanke](https://github.com/thezanke) - Update prometheus-community helm repo due to the suspension of OCI builds - PR [#&#8203;3501](https://github.com/fluxcd/flux2/issues/3501) - [@&#8203;kingdonb](https://github.com/kingdonb) - Add GITHUB_TOKEN to Flux GitHub Action - PR [#&#8203;3488](https://github.com/fluxcd/flux2/issues/3488) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Bump snyk/actions from [`1cc9026`](https://github.com/fluxcd/flux2/commit/1cc9026f51d822442cb4b872d8d7ead8cc69a018) to [`e25b2e6`](https://github.com/fluxcd/flux2/commit/e25b2e6f5658d1bb7a6671b113260f13134cc3af) - PR [#&#8203;3487](https://github.com/fluxcd/flux2/issues/3487) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Bump actions/cache from 3.2.2 to 3.2.3 - PR [#&#8203;3486](https://github.com/fluxcd/flux2/issues/3486) - [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Bump github/codeql-action from 2.1.37 to 2.1.38 - PR [#&#8203;3477](https://github.com/fluxcd/flux2/issues/3477) - [@&#8203;raffis](https://github.com/raffis) - fix(install-script): support $GITHUB_TOKEN </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMTguMiIsInVwZGF0ZWRJblZlciI6IjM0LjExOC4yIn0=-->
renovator added 1 commit 2023-02-02 17:04:25 +01:00
chore(deps): update dependency fluxcd/flux2 to v0.39.0
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
112993b25e
renovator merged commit 112993b25e into main 2023-02-02 17:34:32 +01:00
Sign in to join this conversation.
No reviewers
No Label
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: container/kube-tools#16
No description provided.