Flux 1.25.4

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.25.4 (2022-08-30)

This release includes a base image upgrade to the Alpine 3.15.6 upstream that mitigates a number of CVE issues detected from the base image.

We've removed the telemetry collection in accordance with the CNCF's published policies against default telemetry. Some deprecation notices are now emitted by the installer, please upgrade to Flux v2 or open an issue if you are blocked.

Go dependencies have been upgraded as well.

Maintenance and documentation

• Update dependencies fluxcd/flux#3639
• Add deprecation warnings to Helm Chart and fluxctl fluxcd/flux#3638
• Remove telemetry fluxcd/flux#3636

Thanks

Thanks to @kingdonb, @stefanprodan, and @pjbgf for their contributions to this release.

Flux 1.25.3

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.25.3 (2022-07-27)

This release includes a base image upgrade to the Alpine 3.15.5 upstream
that mitigates a number of CVE issues detected from the base image.

Go dependencies have been upgraded as well. This release has no code changes.

Maintenance and documentation

• snap: update go requirement fluxcd/flux#3624
• Update dependencies fluxcd/flux#3623
• Update module github.com/prometheus/client_golang to v1.12.2 fluxcd/flux#3620

Thanks

Thanks to @dholbach, @kingdonb and @pjbgf for their contributions to this release.

Flux 1.25.2

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.25.2 (2022-05-26)

This patch release reverts a deprecation induced during an upgrade of OpenSSH. A regression affected Azure DevOps, and Google Cloud Source Repositories users.

Fixes

• Regression: Allow RSA signatures using SHA-1 hash algorithm fluxcd/flux#3614

Thanks

Thanks to @mskcode, @dimbleby, @julienduchesne and @pjbgf for their contributions to this release.

Flux 1.25.1

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.25.1 (2022-05-03)

This release includes a base image upgrade to the Alpine 3.15.4 upstream that mitigates a number of CVE issues detected from the base image.

Go dependencies have been upgraded as well. This release has no code changes.

Maintenance and documentation

• Update dependencies fluxcd/flux#3605

Thanks

Thanks to @pjbgf for their contributions to this release.

Flux 1.25.0

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.25.0 (2022-03-30)

This release includes a base image upgrade to the Alpine 3.15.3 upstream that mitigates a number of CVE issues detected from the base image.

We also upgraded the CircleCI build machinery to address an EOL notice on the Ubuntu 16.04 images that we had been using prior, so Flux v1 maintenance activities can continue uninterrupted after May 31, 2022.

Go dependencies have been upgraded as well. This release has no code changes.

Maintenance and documentation

• Update dependencies fluxcd/flux#3597
• Required upgrade for circleci fluxcd/flux#3596
• Update README with flux v2/migration instructions fluxcd/flux#3593

Thanks

Thanks to @dholbach, @stefanprodan, and @kingdonb for their contributions to this release.

Flux 1.24.3

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.24.3 (2021-11-24)

This release includes the new host keys for GitHub, changes effective on November 16, that could be important for users of Flux.

This release also includes a base image upgrade to the Alpine 3.14.3 upstream that mitigates low and medium severity CVE warnings from the base image.

Fixes

• Add fingerprints for new github.com host keys fluxcd/flux#3571

Thanks

Thanks to @kingdonb, @stefanprodan, @squaremo, and @hiddeco for their contributions to this release.

Flux 1.24.2

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.24.2 (2021-11-02)

This release updates the behavior of the dynamic client logger to eliminate the needless emission of some especially noisy and unhelpful deprecation warnings.

This release also includes a base image upgrade of the Alpine 3.14.2 upstream that mitigates several CVE warnings from dependencies like nettle and libcurl.

Fixes

• Suppress deprecation warnings fluxcd/flux#3558

Thanks

Thanks to @dimbleby, @squaremo, @hiddeco, and @kingdonb for their contributions to this release.

Flux 1.24.1

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.24.1 (2021-09-09)

This release fixes an issue when Docker Hub rate limit is not properly handled by Flux daemon as rate limiting. Docker Hub sends its rate limit warnings as an error that does not include the expected "429" Too Many Requests status code.

This release also includes a base image upgrade to Alpine 3.14.2 that mitigates several CVE scan warnings in the base image related to openssl and libgcrypt.

(A first attempt to publish this release on 2021-09-08 failed due to issues with github-release, so it was re-tagged on 2021-09-09 with changes to the CI job that resolved the issue.)

Fixes

• Adding Docker Hub rate limit condition message fluxcd/flux#3543

Maintenance and documentation

• Add CodeQL Security Scanning fluxcd/flux#3446
• Upgrade alpine:3.14.1 to alpine:3.14.2 fluxcd/flux#3545

Thanks

Thanks to @fdpeiter and @kingdonb for their contributions to this release.

Flux 1.24.0

Flux v1 is in maintenance mode

All users are encouraged to migrate to Flux v2 or begin planning their migration, and to continue filing issues if migrations are blocked.

1.24.0 (2021-08-20)

This minor release addresses some error cases that may be encountered when an AWS ECR repo is used together with Image Update Automation, but the AWS API for Instance Metadata is unavailable, or when it has been purposefully blocked.

This release also includes an update to the release version of Memcached, which is a patch release.

With this release, @kingdonb is officially recognized as a maintainer of Flux. 🎈🎉🎂🎊🎈

Fixes

• Skip AWS Metadata API pre-flight check when regions are passed via config fluxcd/flux#3485
• Reset sync errors on successful sync fluxcd/flux#3156

Maintenance and documentation

• Update kubernetes go client (@ 0.21.3), update Golang to 1.16.7, other go mod updates fluxcd/flux#3538
• Bump go.mozilla.org/sops/v3 from 3.6.1 to 3.7.1 fluxcd/flux#3514
• Upgrade base image to alpine-3.14.1 fluxcd/flux#3532
• Update CI pipelines to test on Kubernetes 1.22.0 fluxcd/flux#3530
• Add GitHub issue template fluxcd/flux#3527
• Update links to calendar and resources fluxcd/flux#3534
• Update youtube playlist fluxcd/flux#3531

Thanks

Thanks to @squaremo, @stefanprodan, @dependabot[bot], @dholbach, @pbn4, @pierluigilenoci, @evq, @kingdonb, @osela and @schizoid90 for their contributions to this release.

Flux 1.23.2

This patch release addresses some error cases that may be encountered when an AWS ECR repo is used together with Image Update Automation, but the AWS API for Instance Metadata is unavailable, or when it has been purposefully blocked.

Update: Due to an error that occurred during the release process, the PR for this fix was not included in the release. The CHANGELOG is currently in error. This will be fixed in the next release.

Fixes

• Skip AWS Metadata API pre-flight check when regions are passed via config fluxcd/flux#3485

Edit: Watch for updates on this issue to track the progress: fluxcd/flux#3015: Unable to fetch tags from ECR

Thanks

Thanks to @hiddeco, @evq, @squaremo, @pbn4, @admssa, @renanqts, @jclynny, @sureshamk, @jayvie, and @gonzalobarbitta for their contributions to this release.