Skip to content

chore(deps): bump the go group with 8 updates - #273

Merged
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/go-7f9eae7c8f
Jul 27, 2026
Merged

chore(deps): bump the go group with 8 updates#273
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/go-7f9eae7c8f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the go group with 8 updates:

Package From To
github.com/fluxcd/flux2/v2 2.9.2 2.9.3
github.com/fluxcd/helm-controller/api 1.6.2 1.6.3
github.com/fluxcd/kustomize-controller/api 1.9.3 1.9.4
k8s.io/api 0.36.2 0.36.3
k8s.io/apiextensions-apiserver 0.36.2 0.36.3
k8s.io/apimachinery 0.36.2 0.36.3
k8s.io/cli-runtime 0.36.2 0.36.3
k8s.io/client-go 0.36.2 0.36.3

Updates github.com/fluxcd/flux2/v2 from 2.9.2 to 2.9.3

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.9.3

Highlights

Flux v2.9.3 is a patch release. It fixes empty lines vanishing from rendered Helm chart manifests, HelmReleases being marked as tested when their Helm test hooks never ran, and spec.images entries that set only some image fields discarding the remaining fields already declared for the same image in the kustomization.yaml. The latter affects both kustomize-controller and the flux build|diff kustomization commands. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix empty lines vanishing from rendered chart manifests (helm-controller)
  • Fix HasBeenTested for all corner cases, where a release could be marked as tested although its Helm test hooks never ran (helm-controller)
  • Fix a spec.images entry setting only some of the image fields discarding the remaining fields already declared for the same image in the kustomization.yaml at spec.path, e.g. overriding only newName produced an untagged image reference (kustomize-controller, flux CLI)

Improvements:

  • Update fluxcd/pkg dependencies
  • Include source-watcher in the OCI flux-manifests artifact

Components changelog

CLI changelog

Full Changelog: fluxcd/flux2@v2.9.2...v2.9.3

Commits
  • 16602fa Merge pull request #6011 from fluxcd/update-components-release/v2.9.x
  • 62059b8 Update toolkit components
  • fe6d94c Merge pull request #6006 from fluxcd/update-pkg-deps/release/v2.9.x
  • 8d305b5 Update fluxcd/pkg dependencies
  • 282aee3 Merge pull request #5996 from fluxcd/backport-5995-to-release/v2.9.x
  • 9cd1567 Include source-watcher to oci flux-manifests
  • See full diff in compare view

Updates github.com/fluxcd/helm-controller/api from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.6.3

Changelog

v1.6.3 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.6.3
  • ghcr.io/fluxcd/helm-controller:v1.6.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.6.3

Release date: 2026-07-23

This patch release fixes empty lines vanishing from rendered chart manifests, and releases being marked as tested when their Helm test hooks never ran.

Fixes:

  • Fix vanishing empty lines #1545
  • Fix HasBeenTested for all corner cases #1548

Improvements:

  • ci: parallelize e2e job to speed it up #1543
Commits
  • 372c34e Merge pull request #1549 from fluxcd/release-v1.6.3
  • 15d0269 Release v1.6.3
  • bfbb68b Add changelog entry for v1.6.3
  • b5826d7 Merge pull request #1548 from fluxcd/backport-1547-to-release/v1.6.x
  • a700445 Fix HasBeenTested to return true only when all filtered test hooks were
  • 0b1279b Merge pull request #1545 from fluxcd/fix-1542
  • 4bd9db2 Fix vanishing empty lines
  • 2b81eb4 Merge pull request #1543 from fluxcd/backport-1528-to-release/v1.6.x
  • e2b2b6c Allow Git repo-based chart tests to run in e2e for fork PRs
  • 616832e Split e2e scripts into files
  • Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.9.4

Changelog

v1.9.4 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.9.4
  • ghcr.io/fluxcd/kustomize-controller:v1.9.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.9.4

Release date: 2026-07-23

This patch release fixes a spec.images entry that sets only some of the image fields discarding the remaining fields already declared for the same image in the kustomization.yaml at spec.path, e.g. overriding only newName produced an untagged image reference.

Fixes:

  • Update fluxcd/pkg dependencies #1714
Commits

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits
  • 3fde3c4 Update dependencies to v0.36.3 tag
  • 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.2 to 0.36.3

Commits
  • 2e78d6f Update dependencies to v0.36.3 tag
  • 4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • c8a9346 Add e2e test for setting maps and slices to null via SSA
  • b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits
  • 40bf4b2 Update dependencies to v0.36.3 tag
  • 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/cli-runtime from 0.36.2 to 0.36.3

Commits
  • a39fac4 Update dependencies to v0.36.3 tag
  • 88a785e Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1706906 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits
  • 44a8af2 Update dependencies to v0.36.3 tag
  • f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go group with 8 updates
2752944 
Bumps the go group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) | `2.9.2` | `2.9.3` |
| [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) | `1.6.2` | `1.6.3` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.9.3` | `1.9.4` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.2` | `0.36.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.2` | `0.36.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.36.2` | `0.36.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.2` | `0.36.3` |


Updates `github.com/fluxcd/flux2/v2` from 2.9.2 to 2.9.3
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Commits](fluxcd/flux2@v2.9.2...v2.9.3)

Updates `github.com/fluxcd/helm-controller/api` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/fluxcd/helm-controller/releases)
- [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/helm-controller@v1.6.2...v1.6.3)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.9.3...v1.9.4)

Updates `k8s.io/api` from 0.36.2 to 0.36.3
- [Commits](kubernetes/api@v0.36.2...v0.36.3)

Updates `k8s.io/apiextensions-apiserver` from 0.36.2 to 0.36.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.36.2...v0.36.3)

Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.3
- [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3)

Updates `k8s.io/cli-runtime` from 0.36.2 to 0.36.3
- [Commits](kubernetes/cli-runtime@v0.36.2...v0.36.3)

Updates `k8s.io/client-go` from 0.36.2 to 0.36.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.2...v0.36.3)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/flux2/v2
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/fluxcd/helm-controller/api
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Jul 26, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 26, 2026 06:23
@dependabot dependabot Bot added the kind/dependency dependency update, etc. label Jul 26, 2026
@frewilhelm
frewilhelm merged commit c78c2c3 into main Jul 27, 2026
5 checks passed
@frewilhelm
frewilhelm deleted the dependabot/go_modules/go-7f9eae7c8f branch July 27, 2026 06:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@frewilhelm frewilhelm frewilhelm approved these changes

Assignees

No one assigned

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@frewilhelm