Skip to content

chore(deps): update fluxcd/flux2 action to v2.8.7#2796

Merged
ocmbot[bot] merged 1 commit into
mainfrom
renovate/fluxcd-flux2-2.8.x
Jun 9, 2026
Merged

chore(deps): update fluxcd/flux2 action to v2.8.7#2796
ocmbot[bot] merged 1 commit into
mainfrom
renovate/fluxcd-flux2-2.8.x

Conversation

@ocmbot

@ocmbot ocmbot Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending OpenSSF
fluxcd/flux2 action patch v2.8.6v2.8.7 v2.8.8 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.8.7

Compare Source

Highlights

Flux v2.8.7 is a patch release that includes a bug fix in kustomize-controller, a CVE fix in source-controller and image-automation-controller via go-git v5.19.0, and dependency updates. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix management of objects annotated with kustomize.toolkit.fluxcd.io/ssa: IfNotPresent where non-namespaced resources were being deleted and recreated on each reconciliation (kustomize-controller)

Improvements:

  • Update go-git to v5.19.0 which fixes CVE-2026-45022 (source-controller, image-automation-controller)
  • Update fluxcd/pkg dependencies (source-controller, kustomize-controller, image-automation-controller)
Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.8.6...v2.8.7


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@ocmbot ocmbot Bot requested a review from a team as a code owner June 9, 2026 12:02
@ocmbot ocmbot Bot enabled auto-merge (squash) June 9, 2026 12:02
@github-actions github-actions Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. component/github-actions Changes on GitHub Actions or within `.github/` directory size/xs Extra small labels Jun 9, 2026
@netlify

netlify Bot commented Jun 9, 2026

Copy link
Copy Markdown

Deploy Preview for ocm-website canceled.

Name Link
🔨 Latest commit 721283b
🔍 Latest deploy log https://app.netlify.com/projects/ocm-website/deploys/6a2800c11edc0e0008d4445b

@netlify

netlify Bot commented Jun 9, 2026

Copy link
Copy Markdown

Deploy Preview for ocm-website canceled.

Name Link
🔨 Latest commit 879d25c
🔍 Latest deploy log https://app.netlify.com/projects/ocm-website/deploys/6a2818ab20b13000080528a6

@ocmbot ocmbot Bot force-pushed the renovate/fluxcd-flux2-2.8.x branch 2 times, most recently from a972076 to 183e5c6 Compare June 9, 2026 13:10
@ocmbot ocmbot Bot force-pushed the renovate/fluxcd-flux2-2.8.x branch from 183e5c6 to 879d25c Compare June 9, 2026 13:44
@ocmbot ocmbot Bot merged commit fa63068 into main Jun 9, 2026
30 checks passed
@ocmbot ocmbot Bot deleted the renovate/fluxcd-flux2-2.8.x branch June 9, 2026 14:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component/github-actions Changes on GitHub Actions or within `.github/` directory kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/xs Extra small

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants