feat(github-release): update flux group (minor) #253
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
🦙 MegaLinter status:
|
| Descriptor | Linter | Files | Fixed | Errors | Elapsed time |
|---|---|---|---|---|---|
| ✅ COPYPASTE | jscpd | yes | no | 1.19s | |
| ✅ REPOSITORY | git_diff | yes | no | 0.04s | |
| ✅ REPOSITORY | secretlint | yes | no | 1.76s | |
| prettier | 3 | 1 | 0.71s | ||
| ✅ YAML | yamllint | 3 | 0 | 0.36s |
See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff
MegaLinter is graciously provided by
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/flux
branch
from
0409108 to
4815ee3
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/flux
branch
2 times, most recently
from
633780f to
356e408
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/flux
branch
from
356e408 to
b836ef2
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/flux
branch
from
b836ef2 to
7ea1b7d
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/flux
branch
from
7ea1b7d to
591b39f
Compare
renovate
bot
force-pushed
the
renovate/flux
branch
from
591b39f to
56fe50e
Compare
renovate
bot
force-pushed
the
renovate/flux
branch
from
56fe50e to
1706b34
Compare
renovate
bot
force-pushed
the
renovate/flux
branch
from
1706b34 to
ccd167e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.1.2->v2.3.0v2.1.2->v2.3.02.0.48->2.1.3Release Notes
fluxcd/flux2 (fluxcd/flux2)
v2.3.0Compare Source
v2.2.3Compare Source
Highlights
Flux v2.2.3 is a patch release which comes with various fixes and improvements. Users are encouraged to upgrade for the best experience.
💡 For upgrading to Flux v2.2, please see the procedure documented in 2.2.0.
This release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.
All controllers are built with Go 1.21.6 using Alpine Linux 3.19.1 base image.
Fixes:
RolesandClusterRoleswith aggregated roles were continuous reconciled by kustomize-controller has been fixed.See the components changelog for a full list of bug fixes.
Components changelog
CLI Changelog
flux checkshould error on unrecognised argsflux statsshould error on unrecognised argsv2.2.2Compare Source
Highlights
Flux v2.2.2 is a patch release that addresses an issue with the label selector sharding functionality in the helm-controller. Users are encouraged to upgrade for the best experience.
💡 For upgrading to Flux v2.2, please see the procedure documented in 2.2.0.
Components changelog
CLI Changelog
v2.2.1Compare Source
Highlights
Flux v2.2.1 is a patch release that comes with fixes to API backwards compatibility.
Users are encouraged to upgrade for the best experience.
💡 For upgrading to Flux v2.2, please see the procedure documented in 2.2.0.
This version was tested with the latest Kubernetes release, and extends Flux support to Kubernetes v1.29.
The Helm SDK was updated to the latest version, v3.13.3.
Logging in kustomize-controller and helm-controller has been improved to provide faster feedback on any HTTP errors encountered while fetching artifacts from source-controller.
Components changelog
CLI Changelog
v2.2.0Compare Source
Highlights
Flux v2.2.0 is a feature release. Users are encouraged to upgrade for the best experience.
The Flux CLI and controllers have been updated to Kustomize v5.3.0 and Kubernetes v1.28.4.
Flux helm-controller's reconciliation model underwent a significant overhaul, addressing persistent issues such as the automatic recovery of releases stuck in a pending state. In addition, it improves the observability of the release status, and it introduces the ability to enable drift detection on a per-object basis. For more details on the helm-controller improvements, please see the Announcing Flux 2.2 GA blog post.
The Flux CLI can now be used to force or reset the reconciliation state of a
HelmReleasev2beta2 object usingflux reconcile hr --forceandflux reconcile hr --reset.Flux CLI comes with support for bootstrapping Gitea repositories and adds guardrails to
flux installandflux bootstrapto protect users from destructive operations. Theflux versionandflux checkcommands now print the Flux distribution version deployed on the cluster.The Flux alerting capabilities have been extended with NATS and Bitbucket Server & Data Center support.
Starting with this release, Flux minor versions are benchmark to measure the Mean Time To Production (MTTP). The results for this version can be found at
github.com/fluxcd/flux-benchmark.
❤️ Big thanks to all the Flux contributors that helped us with this release!
Kubernetes compatibility
This release is compatible with the following Kubernetes versions:
v1.26>= 1.26.0v1.27>= 1.27.1v1.28>= 1.28.0Note that Flux may work on older versions of Kubernetes e.g. 1.25, but we don't recommend running end-of-life versions in production nor do we offer support for these versions.
API changes
HelmRelease v2beta2
The HelmRelease kind was promoted from v2beta1 to v2beta2.
The v2beta2 API is backwards compatible with v2beta1, the v2beta1 API is deprecated and will be removed in a future release.
Deprecated fields:
.patchesStrategicMergeand.patchesJson6902Kustomize post-rendering fields have been deprecated in favor of.patches..status.lastAppliedRevisionand.status.lastReleaseRevisionfields have been deprecated in favor of.status.history..status.lastAttemptedValuesChecksumhas been deprecated in favor of.status.lastAttemptedConfigDigest.New fields:
.spec.driftDetection.modefield..spec.driftDetection.ignore.spec.test.filtersfield..status.historyfield. This includes any Helm test results when enabled..status.lastHandledForceAtand.status.lastHandledResetAtfields have been introduced to track the last time a force upgrade or reset was handled.Alert and Provider v1beta3
The Alert and Provider kinds were promoted from v1beta2 to v1beta3.
The v1beta3 API is backwards compatible with v1beta2, the
.statusfield was removed making the resources static objects. Any errors encountered while sending notifications are now recorded as Kubernetes Events associated with the Alert objects.Bucket v1beta2
A new field,
.spec.prefix, has been added to the Bucket API, which enables server-side filtering of files if the object's.spec.provideris set togeneric,awsorgcp.OCIRepository and HelmChart v1beta2
Two new fields,
.spec.verify.matchOIDCIdentity.issuerand.spec.verify.matchOIDCIdentity.subjecthave been added to the HelmChart and OCIRepository APIs. If the image has been keylessly signed via Cosign, these fields can be used to verify the OIDC issuer of the Fulcio certificate and theOIDC identity's subject respectively.
HelmRepository and ImageRepository v1beta2
A new boolean field,
.spec.insecure, has been introduced to theHelmRepository and ImageRepository APIs, which allows connecting to a non-TLS HTTP container registry. For HelmRepositories it is only considered if the object's
.spec.typeis set tooci.From this release onwards, HelmRepository objects of type OCI are treated as static objects, i.e. they have an empty status.
Upgrade procedure
Upgrade Flux from
v2.xtov2.2.0either by rerunning bootstrap or by using the Flux GitHub Action.To upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git:
apiVersion: helm.toolkit.fluxcd.io/v2beta2in the YAML files that containHelmReleasedefinitions.apiVersion: notification.toolkit.fluxcd.io/v1beta3in the YAML files that containAlertandProviderdefinitions.Bumping the APIs version in manifests can be done gradually. It is advised to not delay this procedure as the deprecated versions will be removed after 6 months.
New Documentation
Components changelog
CLI Changelog
flux reconcile hrcontext deadline exceedederrorflux installfrom overriding bootrapped clusterflux pullwork for OCI artifacts produced by other toolsminiflux/v2 (ghcr.io/miniflux/miniflux)
v2.1.3Compare Source
api:rand.Intn(math.MaxInt64)causes tests to fail on 32-bit architectures (userand.Int()instead)ci: usedocker/metadata-actioninstead of deprecated shell-scriptsdatabase: removeentries_feed_url_idxindex because entry URLs can exceeds btree index size limitfinder: find feeds from YouTube playlisthttp/response: add brotli compression supportintegration/matrix: fix function name in commentpackaging: specify container registry explicitly (e.g., Podman does not usedocker.ioby default)packaging: usemake minifluxinstead of duplicatinggo buildarguments (this leverages Go's PIE build mode)reader/fetcher: add brotli content encoding supportreader/processor: minimize feed entries HTML contentreader/rewrite: add a rule foroglaf.comstorage: changeGetReadTime()function to useentries_feed_id_hash_keyindexui: add seek and speed controls to media playerui: add tag entries pageui: fix JavaScript error when clicking on unread counterui: useFORCE_REFRESH_INTERVALconfig for category refreshgithub.jparrowsec.cn/tdewolff/minify/v2from2.20.19to2.20.20golang.org/x/netfrom0.22.0to0.24.0golang.org/x/termfrom0.18.0to0.19.0golang.org/x/oauth2from0.18.0to0.19.0github.jparrowsec.cn/yuin/goldmarkfrom1.7.0to1.7.1v2.1.2Compare Source
api: rewrite API integration tests without build tagsci: add basic ESLinter checksci: enable go-critic linter and fix various issues detectedci: fix JavaScript linter path in GitHub Actionscli: avoid misleading error message when creating an admin user automaticallyconfig: addFILTER_ENTRY_MAX_AGE_DAYSoptionconfig: bump the number of simultaneous workersconfig: renamePROXY_*options toMEDIA_PROXY_*config: usecrypto.GenerateRandomBytesinstead of doing it by handhttp/request: refactor conditions to be more idiomatichttp/response: remove legacyX-XSS-Protectionheaderintegration/rssbrige: fix rssbrige importintegration/shaarli: factorize the header+payload concatenation as dataintegration/shaarli: no need to base64-encode then remove the padding when we can simply encode without paddingintegration/shaarli: the JWT token was declared as using HS256 as algorithm, but was using HS512integration/webhook: add category title to request bodylocale: update Turkish translationsman page: sort config options in alphabetical ordermediaproxy: reduce the internal indentation ofProxifiedUrlby inverting some conditionsmediaproxy: simplify and refactor the packagemodel: replaceOptional{Int,Int64,Float64}with a generic functionOptionalNumber()model: use struct embedding forFeedCreationRequestFromSubscriptionDiscoveryto reduce code duplicationreader/atom: avoid debug message when the date is emptyreader/atom: changeif !a { a = } if !a {a = }constructs intoif !a { a = ; if !a {a = }}to reduce the number of comparisons and improve readabilityreader/atom: Move the population of the feed's entries into a new function, to make BuildFeed easier to understand/separate concerns/implementation detailsreader/atom: refactor Atom parser to use an adapterreader/atom: usesort+compactinstead ofcompact+sortto remove duplicatesreader/atom: when detecting the format, detect its version as wellreader/encoding: inline a one-liner functionreader/handler: fix force refresh featurereader/json: refactor JSON Feed parser to use an adapterreader/media: remove a superfluous error-check:strconv.ParseIntreturns0when passed an empty stringreader/media: simplify switch-case by moving a common condition above itreader/processor: compile block/keep regex only once per feedreader/rdf: refactor RDF parser to use an adapterreader/rewrite: inline some one-line functionsreader/rewrite: simplifyremoveClickbaitreader/rewrite: transform a free-standing function into a methodreader/rewrite: use a proper constant instead of a magic number inapplyFuncOnTextContentreader/rss: add support for<media:category>elementreader/rss: don't add empty tags to RSS itemsreader/rss: refactor RSS parser to use a default namespace to avoid some limitations of the Go XML parserreader/rss: refactor RSS Parser to use an adapterreader/rss: remove some duplicated code in RSS parserreader: ensure that enclosure URLs are always absolutereader: move iTunes and GooglePlay XML definitions to their own packagesreader: parse podcast categoriesreader: remove trailing space inSiteURLandFeedURLstorage: do not store empty tagsstorage: simplifyremoveDuplicates()to use asort+compactconstruct instead of doing it by hand with a hashmapstorage: Use plain strings concatenation instead of building an array and then joining ittimezone: make sure the tests pass when the timezone database is not installed on the hostui/css: alignmin-widthwith the othermin-widthvaluesui/css: fix regression: "Add to Home Screen" button is unreadableui/js: don't use lambdas to return a function, use directly the function insteadui/js: enable trusted-typesui/js: fix download button loading labelui/js: fix JavaScript error on the login page when the user not authenticatedui/js: inline one-line functionsui/js: inline somequerySelectorAllcallsui/js: reduce the scope of some variablesui/js: remove a hack for "Chrome 67 and earlier" since it was released in 2018ui/js: replaceDomHelper.findParentwith.closestui/js: replaceletwithconstui/js: simplifyDomHelper.getVisibleElementsby using afilterinstead of a loop with an indexui/js: use aSetinstead of an array in aKeyboardHandler's memberui/js: use some ternaries where it makes senseui/static: make use ofHashFromByteseverywhereui/static: set minifier ECMAScript versionui: add keyboard shortcuts for scrolling to top/bottom of the item listui: add media player control playback speedui: remove unused variables and improve JSON decoding insaveEnclosureProgression()validator: display an error message on edit feed page when the feed URL is not uniquegithub.jparrowsec.cn/coreos/go-oidc/v3from3.9.0to3.10.0github.jparrowsec.cn/go-webauthn/webauthnfrom0.10.1to0.10.2github.jparrowsec.cn/tdewolff/minify/v2from2.20.18to2.20.19google.golang.org/protobuffrom1.32.0to1.33.0v2.1.1Compare Source
Enterkey as a hotkey to open selected itemvideoelementposterattributeindex.xmlfeed.atomandfeed.rssare used by enterprise-scale/old-school gigantic CMS<title>elementsgit describeandrev-parsestderr: When building from a tarball instead of a cloned git repo, there would be twofatal: not a git repositoryerrors emitted even though the build succeeds. This is because of howVERSIONandCOMMITare set in the Makefile. This PR suppresses the stderr for these variable assignments.CGO_ENABLED=0forminifluxtargetstaticcheckandgolangci-lintinsteadgo.modand add.exesuffix to Windows binaryio.ReadSeekerinstead of anio.Readerto parse feedswwwstrings.Builderinstead of abytes.Bufferstrings.NewReaderinstead of abytes.NewBufferStringcontinueto make the code-flow more obviousinList, and put their parameters in the right orderisPixelTrackerisValidIframeSource, by extracting the hostname and comparing it directly, instead of using the full url and checking if it starts with multiple variations of the same one (//,http:,https://multiplied by/www.)slicesinstead of hand-rolled loopscollector/allocator involvements.
Readerinstead of copying to a buffer when parsing an Atom feedview.Newafter logging the user in: There is no need to do extra work like creating a session and its associated view until the user has been properly identified and as many possibly-failing sql request have been successfully rungenericProxyRewritershouldProxyfunction to reduce the copy-pasta.removeUnlikelyCandidates:.Notreturns a brand newSelection, copied element by elementEstimateReadingTime's speed by a factor 7whatlanggo.Detectis abysmally slow.usernamegeneration for the integration tests: No need to generate random numbers 10 times, generate a single big-enough one. A single int64 should be more than enoughArchiveEntriesandupdateEnclosureslineis positive since we're checking afterwards that it contains the=signdefer()in a loopstrings.ReplaceAllinstead ofstrings.Replace(…, -1)strings.EqualFoldinstead ofstrings.ToLower(…) ==.WriteString(instead of.Write([]byte(…%qinstead of"%s"internal/worker/worker.goread-onlyinternal/locale/plural.goinstead of an avalanche ofifformatFileSizeanddurationimplementationprinter.Printwhen possibleprinter.Printtointernal/locale/printer.go: No need to use variadic functions with string format interpolation to generate static stringsinternal/ui/view/view.go: No need to create the map item by item when we can create it in one goCountAllFeeds(): No need to build an empty map to then add more fields in it one by oneinternal/reader/subscription/finder.go:localizedErrorinFindSubscriptionsFromWellKnownURLsviaslogfile, if only for consistency's sake
subscriptionsslice when using an RSS-bridge,MarkCategoryAsReadinstead of a subqueryCleanOldUserSessions' query: No need for a subquery, filtering oncreated_atdirectly is enoughcleanupEntries' queryNOT (hash=ANY(%4))can be expressed ashash NOT IN $4ArchiveEntries's query for consistency's sake and replace the=ANYwith anINGetEntryIDsandGetReadTime's query for consistency's sakeWeeklyFeedEntryCount: No need for aBETWEEN: we want to filter on entries published in the last week, no need to express is as "entries published between now and last week", "entries published after last week" is enoughadd_image_titlegithub.jparrowsec.cn/google/uuiddependencies: Replace it with a hand-rolled implementation. Heck, an UUID isn't even a requirement according to Omnivore API docsinternal/reader/icon/finder.go:apple-touch-icon-precomposed.pngas a fallbackfaviconiconfirst, since it seems to be the most popular one. It used to be last, meaning that pages had to be parsed completely 4 times, instead of one now.findIconURLsFromHTMLDocumentinternal/reader/date/parser.go:Entrystruct to save some memorygolang.org/x/oauth2from0.17.0to0.18.0github.jparrowsec.cn/prometheus/client_golangfrom1.18.0to1.19.0github.jparrowsec.cn/tdewolff/minify/v2from2.20.16to2.20.18github.jparrowsec.cn/PuerkitoBio/goqueryfrom1.8.1to1.9.1golang.org/x/cryptofrom0.19.0to0.20.0github.jparrowsec.cn/go-jose/go-jose/v3from3.0.1to3.0.3v2.1.0Compare Source
FORCE_REFRESH_INTERVALconfig optionitem-meta-info-reading-timeCSS classadd_dynamic_iframerewrite functiondata-original-mostoadd_dynamic_imagerewrite candidatesAcceptheader when fetching feedssecurityContexterror in Kubernetes)typeattribute in OPML export as per OPML 2.0 specserror.unable_to_parse_feedarmhfarchitectureforattributedetailsandsummarywhen expandedalertrole to alert message elementh2heading to the article element so that the screen reader users can navigate the article through the heading levelaria-labelattribute for the article element for screen readersaltattribute in feeds list to prevent screen reader to announce it before entry titlesr-onlyCSS class for screen reader users (provides more context)navlandmark to page header linksgolang.org/x/termfrom0.16.0to0.17.0github.jparrowsec.cn/google/uuidfrom1.5.0to1.6.0github.jparrowsec.cn/yuin/goldmarkfrom1.6.0to1.7.0golang.org/x/oauth2from0.15.0to0.17.0github.jparrowsec.cn/tdewolff/minify/v2from2.20.10to2.20.12golang.org/x/termfrom0.15.0to0.16.0github.jparrowsec.cn/prometheus/client_golangfrom1.17.0to1.18.0github.jparrowsec.cn/tdewolff/minify/v2from2.20.9to2.20.16golang.org/x/cryptofrom0.16.0to0.19.0github.jparrowsec.cn/go-webauthn/webauthnfrom0.9.4to0.10.1golang.org/x/netfrom0.20.0to0.21.0v2.0.51Compare Source
iframe(avoidERR_BLOCKED_BY_RESPONSEerror)nb_jobsonly when number of jobs is larger than 0 in background schedulerPOLLING_SCHEDULER=entry_frequency)SCHEDULER_ROUND_ROBIN_MIN_INTERVALconfig optiongithub.jparrowsec.cn/google/uuidfrom1.4.0to1.5.0github.jparrowsec.cn/coreos/go-oidc/v3from3.7.0to3.9.0github.jparrowsec.cn/tdewolff/minify/v2from2.20.6to2.20.9github.jparrowsec.cn/go-webauthn/webauthnfrom0.8.6to0.9.4golang.org/x/oauth2from0.14.0to0.15.0v2.0.50Compare Source
user/{userID}/state/com.google/readis missing in categories section for read entriesExcludeTargetsinto consideration in feed stream handlerhide_globallyproperty defined for categories in/v1/entriesAPI endpointLocalizedErrorpackagesnext_check_atin the web ui and APIgithub-clianddocker-outside-of-dockerfeatures to devcontainergolang.org/x/*dependenciesgithub.jparrowsec.cn/gorilla/muxfrom1.8.0to1.8.1github.jparrowsec.cn/tdewolff/minify/v2from2.19.9to2.20.6github.jparrowsec.cn/yuin/goldmarkfrom1.5.6to1.6.0github.jparrowsec.cn/coreos/go-oidc/v3from3.6.0to3.7.0v2.0.49Compare Source
log/slogpackage. New config options available:LOG_FORMAT:jsonortextLOG_LEVEL:debug,info,warning, orerrorLOG_FILE:sdterr,stdout, or a file pathDEBUGoption is now deprecated in favor ofLOG_LEVEL/v1/versionPUT /v1/entriesto update entry title and content/v1/icons/{iconID}/v1/flush-historyto flush historyGET /v1/entriesendpointpublished_after,published_before,changed_afterandchanged_beforeoptions to/v1/entriesendpointcontribfolder (Bruno is an open source alternative to Postman/Insomnia)add_hn_links_using_hackandadd_hn_links_using_openerto open HN comments with iOS appsExpiresresponse headerPreferServerCipherSuitesTLS optiongithub.jparrowsec.cn/rylans/getlangwithgithub.jparrowsec.cn/abadojack/whatlanggobecausegetlangdoesn't seems to be updated anymoregithub.jparrowsec.cn/mccutchen/go-httpbin/v2from2.11.0to2.11.1golang.org/x/*dependenciesConfiguration
📅 Schedule: Branch creation - "before 6am" in timezone America/Detroit, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.