✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates Components changelog, CLI changelog, and https://github.com/fluxcd/flux2/discussions/5572 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Updates fluxcd/pkg dependencies in CLI components. Updates fluxcd/pkg dependencies in CLI components. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Updates toolkit components in CLI. Updates toolkit components in CLI. Source: llm_adapter@2026-07-14 Confidence: low |
— |
| Bugfix | Medium |
Fixes regression where Kustomization with `openapi.path` URL fails to reconcile due to "failed to read OpenAPI schema". Fixes regression where Kustomization with `openapi.path` URL fails to reconcile due to "failed to read OpenAPI schema". Source: llm_adapter@2026-07-14 Confidence: low |
— |
| Bugfix | Low |
Corrects HelmChart CRD description for `.status.url` pointing to wrong artifact field. Corrects HelmChart CRD description for `.status.url` pointing to wrong artifact field. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Low |
Corrects ImageRepository CRD description for `.status.observedExclusionList` referencing wrong status field. Corrects ImageRepository CRD description for `.status.observedExclusionList` referencing wrong status field. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Low |
Removes stray Go struct declaration from ImageUpdateAutomation CRD description for `.status.observedSourceRevision`. Removes stray Go struct declaration from ImageUpdateAutomation CRD description for `.status.observedSourceRevision`. Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
Highlights
Flux v2.9.2 is a patch release. The main fix addresses a regression introduced in
v2.9.1 where a Kustomization with openapi.path pointing to a URL failed to
reconcile with failed to read OpenAPI schema. This release also corrects several
CRD field descriptions that contained inaccurate or leaked content. Users are
encouraged to upgrade for the best experience.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Fix a regression where a Kustomization with
openapi.pathpointing to a URL failed to reconcile withfailed to read OpenAPI schema(kustomize-controller) - Fix the
HelmChartCRD description for.status.url, which pointed users atBucketStatus.Artifactinstead ofHelmChartStatus.Artifact(source-controller) - Fix the
ImageRepositoryCRD description for.status.observedExclusionList, which referred tospec.lastScanResultinstead ofstatus.lastScanResult(image-reflector-controller) - Fix the
ImageUpdateAutomationCRD description for.status.observedSourceRevision, which had a stray Go struct declaration leaking into it (image-automation-controller)
Improvements:
- Update fluxcd/pkg dependencies
Components changelog
- source-controller v1.9.3
- kustomize-controller v1.9.3
- helm-controller v1.6.2
- notification-controller v1.9.2
- image-reflector-controller v1.2.3
- image-automation-controller v1.2.3
- source-watcher v2.2.2
CLI changelog
- Update fluxcd/pkg dependencies by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5984
- Update fluxcd/pkg dependencies by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5990
- Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5994
Full Changelog: https://github.com/fluxcd/flux2/compare/v2.9.1...v2.9.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About flux2
Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.
Related context
Related tools
Beta — feedback welcome: [email protected]