Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: FluxClear ×

Fluxv2.9.4CI/CD & App DeliveryAug 7, 2026

CHECK 3OTHER 8View full analysis

A maintenance release with correctness fixes that narrow some existing configuration constraints. It also adds CLI repository migration support and updates dependencies; no explicit security advisory or vulnerability is disclosed.

Check if affected (3)

breakingThe image-automation-controller refspec constraint
Applies if you configure refspecs.
The image-automation-controller disallows force updates and deletions through refspecs.
breakingGCS static authentication limited to service account keys
Applies if you configure GCS static authentication.
The source-controller limits GCS static authentication to service account keys.
breakingThe allow-webhooks network policy restriction
Applies if you configure allow-webhooks.
In release/v2.9.x, the allow-webhooks network policy is restricted to the receiver port.

Source ↗

Fluxv2.9.0CI/CD & App DeliveryJun 30, 2026

CHECK 1OTHER 56View full analysis

Flux v2.9.0 removes two deprecated API versions and adds CLI and controller capabilities across several Flux resources. It also changes supported Kubernetes versions, corrects defects, and updates project and third-party dependencies.

Check if affected (1)

breakingRemoval of deprecated Flux API versions
Applies if your CRDs use the image.toolkit.fluxcd.io/v1beta2 or notification.toolkit.fluxcd.io/v1beta2 APIs.
The Flux APIs image.toolkit.fluxcd.io/v1beta2 and notification.toolkit.fluxcd.io/v1beta2 have reached end of life and are removed from the CRDs in Flux v2.9.0.

Source ↗

Fluxv2.8.6CI/CD & App DeliveryApr 21, 2026

CHECK 1OTHER 6View full analysis

This is an operator-focused maintenance release with fixes and configuration constraints across controllers. It also adds a feature gate and updates dependency and toolkit components.

Check if affected (1)

breakingRequired audience field on the GCR Receiver secret
Applies if you configure the audience field on the GCR Receiver secret.
The audience field is required on the GCR Receiver secret in notification-controller. It will become mandatory in Flux v2.9.

Source ↗

Fluxv2.8.0CI/CD & App DeliveryFeb 24, 2026

CHECK 1OTHER 41View full analysis

Flux v2.8.0 expands capabilities across controllers, notifications, the CLI, and artifact handling while also including fixes and dependency updates. It removes the deprecated API versions v1beta2 and v2beta2 from CRDs and changes Kubernetes compatibility requirements, so users of those APIs or affected Kubernetes versions are the main audience.

Check if affected (1)

breakingThe Flux APIs v1beta2 and v2beta2, removed from CRDs
Applies if you use the Flux APIs v1beta2 or v2beta2 in CRDs.
The deprecated Flux APIs v1beta2 and v2beta2 have reached end of life and are removed from the CRDs in v2.8.0.

Source ↗

Browse by month