Skip to content

chore(deps): bump the go group with 6 updates - #997

Merged
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/go-00cd4525e8
Sep 7, 2026
Merged

chore(deps): bump the go group with 6 updates#997
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/go-00cd4525e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the go group with 6 updates:

Package From To
github.com/fluxcd/helm-controller/api 1.6.3 1.6.4
github.com/fluxcd/kustomize-controller/api 1.9.4 1.9.5
github.com/fluxcd/pkg/kustomize 1.39.0 1.40.0
github.com/fluxcd/pkg/runtime 0.111.0 0.112.0
github.com/fluxcd/source-controller/api 1.9.4 1.9.5
github.com/onsi/gomega 1.42.1 1.43.0

Updates github.com/fluxcd/helm-controller/api from 1.6.3 to 1.6.4

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.6.4

Changelog

v1.6.4 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.6.4
  • ghcr.io/fluxcd/helm-controller:v1.6.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.6.4

Release date: 2026-08-31

This patch release hardens the handling of HelmRelease kubeconfig Secrets: kubeconfigs referencing local files are now rejected, credentials and certificates must be embedded inline. It also moves the controller back to upstream Helm, now at v4.2.4, dropping the temporary Flux fork, and updates Kubernetes to 1.36.4.

Fixes:

  • Validate HelmRelease kubeconfigs #1572

Improvements:

  • Move v1.6 back to upstream helm #1565
  • Update fluxcd/pkg dependencies #1567 #1568
Commits
  • 561379c Merge pull request #1573 from fluxcd/release-v1.6.4
  • 70d5012 Release v1.6.4
  • 82439e2 Add changelog entry for v1.6.4
  • 8ddb4fc Validate HelmRelease kubeconfigs
  • 01b3ef3 Merge pull request #1568 from fluxcd/update-pkg-deps/release/v1.6.x
  • 7b0f616 Update fluxcd/pkg dependencies
  • 91841e2 Merge pull request #1567 from fluxcd/update-pkg-deps/release/v1.6.x
  • 7eac2c0 Update fluxcd/pkg dependencies
  • 4293c5d Merge pull request #1565 from fluxcd/back-to-upstream
  • 9cfd993 Move v1.6 back to upstream helm
  • See full diff in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.9.4 to 1.9.5

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.9.5

Changelog

v1.9.5 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.9.5
  • ghcr.io/fluxcd/kustomize-controller:v1.9.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.9.5

Release date: 2026-08-31

This patch release stops the controller from leaving behind the temporary directories of a previous process that exited without running its cleanup, and fixes a crash in post-build substitution: a substring expression with a negative length, e.g. ${VAR:2:-1}, panicked instead of counting back from the end of the string like Bash does. In addition, the kubeconfigs read from .spec.kubeConfig Secrets are now required to be self-contained: credentials and certificates must be embedded inline (token, client-certificate-data, client-key-data, certificate-authority-data), and entries referencing files on the local filesystem are rejected. The fluxcd/pkg updates also bring Kubernetes to 1.36.4.

Fixes:

  • fix: purge tmp dirs at startup #1730
  • Update fluxcd/pkg dependencies #1727 #1728
Commits
  • d5d5d2b Merge pull request #1732 from fluxcd/release-v1.9.5
  • cf08b62 Release v1.9.5
  • f5c2bce Add changelog entry for v1.9.5
  • 0a95b77 Merge pull request #1730 from fluxcd/backport-1729-to-release/v1.9.x
  • 49e8acd fix: purge tmp dirs at startup
  • d537949 Merge pull request #1728 from fluxcd/update-pkg-deps/release/v1.9.x
  • e0b4d11 Update fluxcd/pkg dependencies
  • cbe2504 Merge pull request #1727 from fluxcd/update-pkg-deps/release/v1.9.x
  • ab3bbb7 Update fluxcd/pkg dependencies
  • See full diff in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.39.0 to 1.40.0

Commits
  • 992c220 Merge pull request #1283 from fluxcd/release-main
  • a26a27b Prepare for release
  • 6864165 Merge pull request #1275 from arpitjain099/fix/envsubst-negative-substr-length
  • d051a03 envsubst: support a negative substring length instead of panicking
  • 1d136f7 Merge pull request #1285 from fluxcd/backport
  • 271b023 Update backport workflow to use v0.14.0
  • c41b16d Merge pull request #1281 from fluxcd/kubeconfig-file-refs
  • e2ee0ac runtime/client: Reject file references in kubeconfigs
  • dfc427c Merge pull request #1274 from fluxcd/fix-e2e-azure
  • a20ff3a Fix Azure e2e tests after new major version with breaking changes
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.111.0 to 0.112.0

Commits
  • 992c220 Merge pull request #1283 from fluxcd/release-main
  • a26a27b Prepare for release
  • 6864165 Merge pull request #1275 from arpitjain099/fix/envsubst-negative-substr-length
  • d051a03 envsubst: support a negative substring length instead of panicking
  • 1d136f7 Merge pull request #1285 from fluxcd/backport
  • 271b023 Update backport workflow to use v0.14.0
  • c41b16d Merge pull request #1281 from fluxcd/kubeconfig-file-refs
  • e2ee0ac runtime/client: Reject file references in kubeconfigs
  • dfc427c Merge pull request #1274 from fluxcd/fix-e2e-azure
  • a20ff3a Fix Azure e2e tests after new major version with breaking changes
  • Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.9.4 to 1.9.5

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.5

Changelog

v1.9.5 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.5
  • ghcr.io/fluxcd/source-controller:v1.9.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.5

Release date: 2026-08-31

This patch release upgrades Helm to v4.2.4 to stay in sync with helm-controller 1.6, which moved back from the Flux fork of Helm to upstream. It also updates the fluxcd/pkg dependencies, which bring Kubernetes to 1.36.4.

Improvements:

  • Upgrade helm to 4.2.4 (sync with HC 1.6) #2140
  • Update fluxcd/pkg dependencies #2141 #2142
Commits
  • 53194ad Merge pull request #2143 from fluxcd/release-v1.9.5
  • 4a608b1 Release v1.9.5
  • 801a3c5 Add changelog entry for v1.9.5
  • 70c8429 Merge pull request #2142 from fluxcd/update-pkg-deps/release/v1.9.x
  • e786718 Update fluxcd/pkg dependencies
  • efab76c Merge pull request #2141 from fluxcd/update-pkg-deps/release/v1.9.x
  • 91c4921 Update fluxcd/pkg dependencies
  • 06b08ea Merge pull request #2140 from fluxcd/helm-4.2.4
  • edcbbcf Upgrade helm to 4.2.4 (sync with HC 1.6)
  • See full diff in compare view

Updates github.com/onsi/gomega from 1.42.1 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go group with 6 updates
445617b 
Bumps the go group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) | `1.6.3` | `1.6.4` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.9.4` | `1.9.5` |
| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.39.0` | `1.40.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.111.0` | `0.112.0` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.9.4` | `1.9.5` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` |


Updates `github.com/fluxcd/helm-controller/api` from 1.6.3 to 1.6.4
- [Release notes](https://github.com/fluxcd/helm-controller/releases)
- [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/helm-controller@v1.6.3...v1.6.4)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.9.4 to 1.9.5
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.9.4...v1.9.5)

Updates `github.com/fluxcd/pkg/kustomize` from 1.39.0 to 1.40.0
- [Commits](fluxcd/pkg@kustomize/v1.39.0...kustomize/v1.40.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.111.0 to 0.112.0
- [Commits](fluxcd/pkg@runtime/v0.111.0...runtime/v0.112.0)

Updates `github.com/fluxcd/source-controller/api` from 1.9.4 to 1.9.5
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.4...v1.9.5)

Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.42.1...v1.43.0)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/helm-controller/api
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.112.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Sep 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 6, 2026 15:03
@dependabot dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Sep 6, 2026
@frewilhelm
frewilhelm enabled auto-merge (squash) September 7, 2026 07:47
@frewilhelm
frewilhelm merged commit aecaf03 into main Sep 7, 2026
9 checks passed
@frewilhelm
frewilhelm deleted the dependabot/go_modules/go-00cd4525e8 branch September 7, 2026 07:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@frewilhelm frewilhelm frewilhelm approved these changes

Assignees

No one assigned

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@frewilhelm