chore(deps): bump the go group with 6 updates by dependabot[bot] · Pull Request #271 · open-component-model/ocm-e2e-framework

dependabot · 2026-07-19T06:23:32Z

Bumps the go group with 6 updates:

Package	From	To
github.com/fluxcd/flux2/v2	`2.9.1`	`2.9.2`
github.com/fluxcd/image-automation-controller/api	`1.2.2`	`1.2.3`
github.com/fluxcd/image-reflector-controller/api	`1.2.2`	`1.2.3`
github.com/fluxcd/kustomize-controller/api	`1.9.2`	`1.9.3`
github.com/fluxcd/source-controller/api	`1.9.2`	`1.9.3`
ocm.software/ocm	`0.45.0`	`0.46.0`

Updates github.com/fluxcd/flux2/v2 from 2.9.1 to 2.9.2

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.9.2

Highlights

Flux v2.9.2 is a patch release. The main fix addresses a regression introduced in v2.9.1 where a Kustomization with openapi.path pointing to a URL failed to reconcile with failed to read OpenAPI schema. This release also corrects several CRD field descriptions that contained inaccurate or leaked content. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

Fix a regression where a Kustomization with openapi.path pointing to a URL failed to reconcile with failed to read OpenAPI schema (kustomize-controller)

Fix the HelmChart CRD description for .status.url, which pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact (source-controller)

Fix the ImageRepository CRD description for .status.observedExclusionList, which referred to spec.lastScanResult instead of status.lastScanResult (image-reflector-controller)

Fix the ImageUpdateAutomation CRD description for .status.observedSourceRevision, which had a stray Go struct declaration leaking into it (image-automation-controller)

Improvements:

Update fluxcd/pkg dependencies

Components changelog

source-controller v1.9.3

kustomize-controller v1.9.3

helm-controller v1.6.2

notification-controller v1.9.2

image-reflector-controller v1.2.3

image-automation-controller v1.2.3

source-watcher v2.2.2

CLI changelog

Update fluxcd/pkg dependencies by @fluxcdbot in fluxcd/flux2#5984

Update fluxcd/pkg dependencies by @fluxcdbot in fluxcd/flux2#5990

Update toolkit components by @fluxcdbot in fluxcd/flux2#5994

Full Changelog: fluxcd/flux2@v2.9.1...v2.9.2

Commits

6a650db Merge pull request #5994 from fluxcd/update-components-release/v2.9.x
00b9632 Update toolkit components
dc8430c Merge pull request #5990 from fluxcd/update-pkg-deps/release/v2.9.x
c21de82 Update fluxcd/pkg dependencies
fa3c7b8 Merge pull request #5984 from fluxcd/update-pkg-deps/release/v2.9.x
de86a51 Update fluxcd/pkg dependencies
See full diff in compare view

Updates github.com/fluxcd/image-automation-controller/api from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/fluxcd/image-automation-controller/api's releases.

v1.2.3

Changelog

v1.2.3 changelog

Container images

docker.io/fluxcd/image-automation-controller:v1.2.3

ghcr.io/fluxcd/image-automation-controller:v1.2.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/image-automation-controller/api's changelog.

1.2.3

Release date: 2026-07-13

This patch release fixes the ImageUpdateAutomation CRD description for .status.observedSourceRevision, which had a stray Go struct declaration leaking into it.

Improvements:

Remove stray Go declaration from doc-comment #1073

Commits

ab81d58 Merge pull request #1074 from fluxcd/release-v1.2.3
b97663b Release v1.2.3
8d97fad Add changelog entry for v1.2.3
c7cd245 Merge pull request #1073 from fluxcd/backport-1072-to-release/v1.2.x
0d83197 docs: regenerate API reference after stray comment removal
394ae92 Remove stray Go declaration from doc-comment
See full diff in compare view

Updates github.com/fluxcd/image-reflector-controller/api from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/fluxcd/image-reflector-controller/api's releases.

v1.2.3

Changelog

v1.2.3 changelog

Container images

docker.io/fluxcd/image-reflector-controller:v1.2.3

ghcr.io/fluxcd/image-reflector-controller:v1.2.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/image-reflector-controller/api's changelog.

1.2.3

Release date: 2026-07-13

This patch release fixes the ImageRepository CRD description for .status.observedExclusionList, which referred to spec.lastScanResult instead of status.lastScanResult.

Improvements:

Fix ObservedExclusionList doc-comment field reference #919

Commits

1c67450 Merge pull request #920 from fluxcd/release-v1.2.3
eff1248 Release v1.2.3
bcb005f Add changelog entry for v1.2.3
95a974c Merge pull request #919 from fluxcd/backport-918-to-release/v1.2.x
dcb427e docs: regenerate API reference after doc-comment fix
a904ea0 Fix ObservedExclusionList doc-comment field reference
See full diff in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.9.2 to 1.9.3

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.9.3

Changelog

v1.9.3 changelog

Container images

docker.io/fluxcd/kustomize-controller:v1.9.3

ghcr.io/fluxcd/kustomize-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.9.3

Release date: 2026-07-13

This patch release fixes a regression introduced in v1.9.2 where a Kustomization with openapi.path pointing to a URL failed to reconcile with failed to read OpenAPI schema.

Fixes:

Update fluxcd/pkg dependencies #1703

Commits

65f69a8 Merge pull request #1710 from fluxcd/release-v1.9.3
5a91c68 Release v1.9.3
5c230f8 Add changelog entry for v1.9.3
a98b610 Merge pull request #1709 from fluxcd/backport-ci
579657f ci: parallelize e2e job to speed it up
29e8364 Merge pull request #1703 from fluxcd/update-pkg-deps/release/v1.9.x
dbecc76 Update fluxcd/pkg dependencies
See full diff in compare view

Updates github.com/fluxcd/source-controller/api from 1.9.2 to 1.9.3

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.3

Changelog

v1.9.3 changelog

Container images

docker.io/fluxcd/source-controller:v1.9.3

ghcr.io/fluxcd/source-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.3

Release date: 2026-07-13

This patch release fixes the HelmChart CRD description for .status.url, which was copy-pasted from Bucket and pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact.

Improvements:

Fix HelmChartStatus.URL doc-comment referencing BucketStatus #2110

Commits

ed61ebd Merge pull request #2111 from fluxcd/release-v1.9.3
03a1208 Release v1.9.3
f1e431a Add changelog entry for v1.9.3
deec0f1 Merge pull request #2110 from fluxcd/backport-2109-to-release/v1.9.x
048ce5c docs: regenerate API reference after doc-comment fix
2b0b313 Fix HelmChartStatus.URL doc-comment referencing BucketStatus
See full diff in compare view

Updates ocm.software/ocm from 0.45.0 to 0.46.0

Release notes

Sourced from ocm.software/ocm's releases.

v0.46.0

What's Changed

🚀 Features

feat: close persistent references held on a context by @Skarlso in open-component-model/ocm#1923

🐛 Bug Fixes

fix: incompatibilities between v1 and v2 by @frewilhelm in open-component-model/ocm#1992

⬆️ Dependencies

chore(deps): bump the go group with 12 updates by @dependabot[bot] in open-component-model/ocm#2012

chore(deps): bump the go group across 1 directory with 5 updates by @dependabot[bot] in open-component-model/ocm#2017

🧰 Maintenance

chore: bump VERSION to 0.46.0-dev by @ocmbot[bot] in open-component-model/ocm#2007

chore: add env-var gated repository-exist call by @frewilhelm in open-component-model/ocm#1996

chore(GHA): remove checkout action to fix #2014 by @frewilhelm in open-component-model/ocm#2015

Full Changelog: open-component-model/ocm@v0.45...v0.46.0

v0.46.0-rc.1

What's Changed

🚀 Features

feat: close persistent references held on a context by @Skarlso in open-component-model/ocm#1923

🐛 Bug Fixes

fix: incompatibilities between v1 and v2 by @frewilhelm in open-component-model/ocm#1992

⬆️ Dependencies

chore(deps): bump the go group with 12 updates by @dependabot[bot] in open-component-model/ocm#2012

chore(deps): bump the go group across 1 directory with 5 updates by @dependabot[bot] in open-component-model/ocm#2017

🧰 Maintenance

chore: bump VERSION to 0.46.0-dev by @ocmbot[bot] in open-component-model/ocm#2007

chore: add env-var gated repository-exist call by @frewilhelm in open-component-model/ocm#1996

chore(GHA): remove checkout action to fix #2014 by @frewilhelm in open-component-model/ocm#2015

Full Changelog: open-component-model/ocm@v0.45...v0.46.0

Commits

72c12b7 chore: update 'flake.nix' (#2020)
6b9657e feat: close persistent references held on a context (#1923)
b03e94a chore(deps): bump the go group with 5 updates (#2017)
a19bc32 chore(deps): bump the ci group with 3 updates (#2018)
1634092 fix: incompatibilities between v1 and v2 (#1992)
f79f2d5 chore(deps): bump the ci group with 2 updates (#2016)
4c7ef75 chore(GHA): remove checkout action to fix #2014 (#2015)
62bd7e2 chore: update 'flake.nix' (#2013)
0f3f42c chore(deps): bump the go group with 12 updates (#2012)
33589f8 chore: add env-var gated repository-exist call (#1996)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) | `2.9.1` | `2.9.2` | | [github.com/fluxcd/image-automation-controller/api](https://github.com/fluxcd/image-automation-controller) | `1.2.2` | `1.2.3` | | [github.com/fluxcd/image-reflector-controller/api](https://github.com/fluxcd/image-reflector-controller) | `1.2.2` | `1.2.3` | | [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.9.2` | `1.9.3` | | [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.9.2` | `1.9.3` | | [ocm.software/ocm](https://github.com/open-component-model/ocm) | `0.45.0` | `0.46.0` | Updates `github.com/fluxcd/flux2/v2` from 2.9.1 to 2.9.2 - [Release notes](https://github.com/fluxcd/flux2/releases) - [Commits](fluxcd/flux2@v2.9.1...v2.9.2) Updates `github.com/fluxcd/image-automation-controller/api` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/fluxcd/image-automation-controller/releases) - [Changelog](https://github.com/fluxcd/image-automation-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/image-automation-controller@v1.2.2...v1.2.3) Updates `github.com/fluxcd/image-reflector-controller/api` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/fluxcd/image-reflector-controller/releases) - [Changelog](https://github.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/image-reflector-controller@v1.2.2...v1.2.3) Updates `github.com/fluxcd/kustomize-controller/api` from 1.9.2 to 1.9.3 - [Release notes](https://github.com/fluxcd/kustomize-controller/releases) - [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/kustomize-controller@v1.9.2...v1.9.3) Updates `github.com/fluxcd/source-controller/api` from 1.9.2 to 1.9.3 - [Release notes](https://github.com/fluxcd/source-controller/releases) - [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/source-controller@v1.9.2...v1.9.3) Updates `ocm.software/ocm` from 0.45.0 to 0.46.0 - [Release notes](https://github.com/open-component-model/ocm/releases) - [Changelog](https://github.com/open-component-model/ocm/blob/main/RELEASE_PROCESS.md) - [Commits](open-component-model/ocm@v0.45...v0.46) --- updated-dependencies: - dependency-name: github.com/fluxcd/flux2/v2 dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fluxcd/image-automation-controller/api dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fluxcd/image-reflector-controller/api dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fluxcd/kustomize-controller/api dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fluxcd/source-controller/api dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: ocm.software/ocm dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Jul 19, 2026

dependabot Bot requested a review from a team as a code owner July 19, 2026 06:23

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Jul 19, 2026

frewilhelm approved these changes Jul 20, 2026

View reviewed changes

frewilhelm merged commit 52641ec into main Jul 20, 2026
5 checks passed

frewilhelm deleted the dependabot/go_modules/go-40eba27e30 branch July 20, 2026 06:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go group with 6 updates#271

chore(deps): bump the go group with 6 updates#271
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/go-40eba27e30

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026

v2.9.2

Highlights

Components changelog

CLI changelog

v1.2.3

Changelog

Container images

1.2.3

v1.2.3

Changelog

Container images

1.2.3

v1.9.3

Changelog

Container images

1.9.3

v1.9.3

Changelog

Container images

1.9.3

v0.46.0

What's Changed

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.46.0-rc.1

What's Changed

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant