Flux v2.8.2
security++++~~~~~~~~~~~!
Changes
- Fix potential Denial of Service (DoS) during TLS handshakes (CVE-2026-27138) by building all controllers with Go 1.26.1security
- Source-controller v1.8.1changed
- Kustomize-controller v1.8.2changed
- Notification-controller v1.8.2changed
- Helm-controller v1.5.2changed
- Image-reflector-controller v1.1.1changed
- Image-automation-controller v1.1.1changed
- Source-watcher v2.1.1changed
- [release/v2.8.x] build(deps): bump the ci group across 1 directory with 11 updateschanged
- Update fluxcd/pkg dependencieschanged
- Update toolkit componentschanged
- Update fluxcd/pkg dependencieschanged
4 more lines
- Fix enqueuing new reconciliation requests for events on source Flux objects when they are already reconciling the revision present in the watch event (kustomize-controller, helm-controller)added
- Fix the Go templates bug of YAML separator --- getting concatenated to apiVersion: by updating to Helm 4.1.3 (helm-controller)added
- Fix canceled HelmReleases getting stuck when they don't have a retry strategy configured by introducing a new feature gate DefaultToRetryOnFailure that improves the experience when the CancelHealthCheckOnNewRevision is enabled (helm-controller)added
- Fix the auth scope for Azure Container Registry to use the ACR-specific scope (source-controller, image-reflector-controller)added
16 lines1 security4 added11 changedtyped from the source notes