Skip to content

Bump github.com/fluxcd/source-controller/api from 1.9.3 to 1.9.4 - #561

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fluxcd/source-controller/api-1.9.4
Open

Bump github.com/fluxcd/source-controller/api from 1.9.3 to 1.9.4#561
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/fluxcd/source-controller/api-1.9.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/fluxcd/source-controller/api from 1.9.3 to 1.9.4.

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.4

Changelog

v1.9.4 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.4
  • ghcr.io/fluxcd/source-controller:v1.9.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.4

Release date: 2026-08-07

This patch release aligns Helm repository index loading with upstream Helm v4 by skipping empty entries, improves the error handling in the Bucket reconciler for optional fields in Azure responses, resolves OCI Helm charts by digest so that verification and download operate on the same content, and limits GCS static authentication to secrets holding service account keys. It also updates the fluxcd/pkg dependencies, which align the ECR host detection with upstream.

Fixes:

  • Align index loading with upstream Helm v4 #2121
  • Improve error handling in Bucket reconciliation #2123
  • Pin OCI chart verification by digest #2125
  • Limit GCS static authentication to service account keys #2130

Improvements:

  • Update fluxcd/pkg dependencies #2131
Commits
  • 6b10a9e Merge pull request #2132 from fluxcd/release-v1.9.4
  • 5e277c3 Release v1.9.4
  • d687f6d Add changelog entry for v1.9.4
  • 9dbb071 Merge pull request #2131 from fluxcd/update-pkg-deps/release/v1.9.x
  • f20cec3 Update fluxcd/pkg dependencies
  • aaae31a Merge pull request #2130 from fluxcd/backport-2126-to-release/v1.9.x
  • 66b3951 fix: restrict GCS static auth to SA keys
  • 6b6b3ee Merge pull request #2125 from fluxcd/backport-2124-to-release/v1.9.x
  • 2a7329f fix: pin OCI chart verification by digest
  • cd41ce8 Merge pull request #2123 from fluxcd/backport-2122-to-release/v1.9.x
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) from 1.9.3 to 1.9.4.
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.3...v1.9.4)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants