feat(container): update ghcr.io/controlplaneio-fluxcd/charts/flux-instance ( 0.33.0 → 0.48.0 )

[stimpy-bot]

This PR contains the following updates:

Package	Update	Change
ghcr.io/controlplaneio-fluxcd/charts/flux-instance (source)	minor	0.33.0 → 0.48.0

---

Release Notes

controlplaneio-fluxcd/flux-operator (ghcr.io/controlplaneio-fluxcd/charts/flux-instance)

v0.48.0

Compare Source

What's Changed

• cli: Add migrate command for managed fields API version by @​stefanprodan in #​823
• cli: Add migrate owner command to clean up stale managed fields by @​stefanprodan in #​824
• rset: Watch external references from checksumFrom by @​matheuscscp in #​826
• rset: Introduce checksumFrom for triggering rollout restarts by @​stefanprodan in #​825
• rset: Watch convertKubeConfigFrom Secrets by @​matheuscscp in #​827
• rset: Add includeEmptyProviders option to Permute inputStrategy by @​jtyr in #​828
• build(deps): bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​829
• Release v0.48.0 by @​matheuscscp in #​830

New Contributors

• @​jtyr made their first contribution in #​828

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.47.0...v0.48.0

v0.47.0

Compare Source

What's Changed

• build(deps): bump fluxcd/flux2 from 2.8.4 to 2.8.5 in the actions group by @​dependabot[bot] in #​808
• cmd: Implement distro mirror command by @​stefanprodan in #​811
• fix: YAML multi-document splitting in provider file parser by @​bugbuilder in #​810
• ci: Attest release assets on GitHub by @​stefanprodan in #​812
• Migrate Terraform to the Flux Operator bootstrap module by @​matheuscscp in #​814
• docs: Add AI Contribution Policy by @​stefanprodan in #​816
• build(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @​dependabot[bot] in #​817
• Update dependencies by @​stefanprodan in #​818
• ci: Build Web UI in a dedicated job on release by @​stefanprodan in #​819
• Release v0.47.0 by @​stefanprodan in #​820
• ci: Fix attestation subject checksums by @​stefanprodan in #​821

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.46.0...v0.47.0

v0.46.0

Compare Source

What's Changed

• Fix typos in documentation by @​archy-rock3t-cloud in #​780
• Update Go version requirements in docs by @​archy-rock3t-cloud in #​781
• Add unit tests for FluxGroupFor by @​archy-rock3t-cloud in #​782
• build(deps): bump picomatch in /web by @​dependabot[bot] in #​778
• ci: exclude node_modules from golangci scanners by @​stefanprodan in #​785
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /web by @​dependabot[bot] in #​770
• operator: support kubeconfig key and custom keys in convertKubeConfigFrom by @​matheuscscp in #​786
• Add unit tests for ValidateAndApplyWorkloadIdentityConfig by @​archy-rock3t-cloud in #​787
• mcp: Use safe type assertions for Helm history entries by @​archy-rock3t-cloud in #​783
• mcp: update FluxOCIRepositoryKind version to v1 by @​matheuscscp in #​791
• Fix .PHONY declaration for cli-ci-build target by @​archy-rock3t-cloud in #​789
• Add unit tests for FluxInstance methods by @​archy-rock3t-cloud in #​793
• Add unit tests for ResourceSet methods by @​archy-rock3t-cloud in #​794
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in #​798
• operator: fix ResourceSets and FluxInstance getting stuck due to health check cancellation by @​matheuscscp in #​801
• build(deps-dev): bump vite from 7.3.1 to 7.3.2 in /web by @​dependabot[bot] in #​802
• build(deps): bump the actions group across 1 directory with 5 updates by @​dependabot[bot] in #​805
• Release v0.46.0 by @​matheuscscp in #​807

New Contributors

• @​archy-rock3t-cloud made their first contribution in #​780

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.45.1...v0.46.0

v0.45.1

Compare Source

What's Changed

• build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 by @​dependabot[bot] in #​768
• build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1 by @​dependabot[bot] in #​769
• build(deps): bump fluxcd/flux2 from 2.8.2 to 2.8.3 in the actions group by @​dependabot[bot] in #​767
• Release v0.45.1 by @​stefanprodan in #​771

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.45.0...v0.45.1

v0.45.0

Compare Source

This version comes with support for Flux v2.8.3

What's Changed

• cmd: add command to generate Flux Web-auth secret by @​Iam-Karan-Suresh in #​706
• Link namespace filtering warning and docs to each other by @​matheuscscp in #​761
• Build preview image on push to tags by @​matheuscscp in #​762
• web: make namespace filtering docs link work on the whole text by @​matheuscscp in #​763
• web: Display aggregated values in the HelmRelease dashboard by @​stefanprodan in #​765
• Release v0.45.0 by @​stefanprodan in #​766

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.44.0...v0.45.0

v0.44.0

Compare Source

This version comes with support for Flux v2.8.2

What's Changed

• mcp: update go-sdk to v1.4.0 by @​stefanprodan in #​732
• build(deps-dev): bump minimatch from 3.1.2 to 3.1.5 in /web by @​dependabot[bot] in #​734
• mcp: add support for retrieving previous container logs by @​stefanprodan in #​736
• web: limit request body size by @​stefanprodan in #​737
• cli: Expose license key verification functions by @​matheuscscp in #​744
• cmd: Return error string without quotes by @​matheuscscp in #​745
• web: support auth URL params for oauth2 by @​matheuscscp in #​739
• build(deps): bump the actions group across 1 directory with 7 updates by @​dependabot[bot] in #​746
• cmd: Add cosign verification to install command by @​stefanprodan in #​747
• cmd: add commands for managing AI skills by @​stefanprodan in #​751
• olm: pin the image on digest for the UBI variant by @​stefanprodan in #​755
• build(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​752
• ci: sign images with cosign v3 by @​stefanprodan in #​756
• build(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​757
• Update github.com/fluxcd/pkg dependencies by @​stefanprodan in #​758
• Release v0.44.0 by @​stefanprodan in #​759

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.43.0...v0.44.0

v0.43.0

Compare Source

This version comes with support for Flux v2.8.1

What's Changed

• cli: make all patch instace tests work offline by @​matheuscscp in #​715
• docs: Fix Multi-Cluster tool names by @​DanHam in #​714
• operator: Add ExternalService ResourceSetInputProvider by @​dgunzy in #​713
• docs: Use Flux CLI commands in guides by @​stefanprodan in #​721
• build(deps): bump the actions group across 1 directory with 5 updates by @​dependabot[bot] in #​722
• build(deps): bump rollup from 4.55.1 to 4.59.0 in /web by @​dependabot[bot] in #​723
• cli: add --distribution-artifact flag to build instance by @​stefanprodan in #​724
• operator: Add insecure: true to ResourceSetInputProvider OCIArtifactTag. by @​dgunzy in #​725
• cli: use HelmRelease inventory for Flux 2.8+ by @​stefanprodan in #​728
• cli: add GitHub App support to install command by @​stefanprodan in #​729
• Release v0.43.0 by @​stefanprodan in #​730

New Contributors

• @​DanHam made their first contribution in #​714

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.42.1...v0.43.0

v0.42.1

Compare Source

This version comes with support for Flux v2.8.0

What's Changed

• Build CLI and MCP with Go 1.26 by @​stefanprodan in #​711
• Release v0.42.1 by @​stefanprodan in #​712

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.42.0...v0.42.1

v0.41.1

Compare Source

What's Changed

• web: fix wrong RBAC check for restarting workloads by @​matheuscscp in #​678
• docs: add Web UI actions guide by @​stefanprodan in #​680
• docs: add flux-operator CLI to install guide by @​stefanprodan in #​681
• Release v0.41.1 by @​stefanprodan in #​683

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.41.0...v0.41.1

v0.41.0

Compare Source

What's Changed

• olm: update docs links to https://fluxoperator.dev by @​stefanprodan in #​620
• web: improve oidc logs by @​matheuscscp in #​621
• web: track web session start by @​matheuscscp in #​623
• Use SSA custom stage for Role resources by @​matheuscscp in #​625
• build(deps): bump the actions group across 1 directory with 3 updates by @​dependabot[bot] in #​626
• Update dependencies to Kubernetes v1.35.0 by @​stefanprodan in #​627
• Update the docs structure in contributing guide by @​stefanprodan in #​633
• web: implement strict validation of config fields by @​matheuscscp in #​634
• web: allow empty fields in config by @​matheuscscp in #​635
• operator: Fix instance deletion race conditions in tests by @​stefanprodan in #​636
• feat(cli): add command to generate Flux Web config secret by @​Iam-Karan-Suresh in #​631
• Extract the WebConfig types to the API package by @​stefanprodan in #​637
• cli: Add metadata flags to create secret web-config by @​stefanprodan in #​640
• web: document namespace filtering by @​stefanprodan in #​647
• operator: fix leader election default by @​stefanprodan in #​646
• web: conditionally display the sync link in the cluster dashboard by @​stefanprodan in #​645
• Add web roles to flux-operator install manifests by @​stefanprodan in #​648
• web: improve history timeline view by @​stefanprodan in #​649
• operator: convert Cluster API kubeconfig Secret to ConfigMap for workload identity by @​Iam-Karan-Suresh in #​641
• web: implement download action for source artifacts by @​stefanprodan in #​650
• web: implement download action for ArtifactGenerator by @​stefanprodan in #​651
• web: extend workload views with CronJob support by @​stefanprodan in #​654
• web: implement Rollout Restart action for workloads by @​stefanprodan in #​659
• web: enable audit for download actions by @​stefanprodan in #​663
• operator: Add Gitea ResourceSetInputProvider for Gitea / Forgejo by @​dgunzy in #​653
• operator: consolidate RSIP api docs regarding change requests by @​matheuscscp in #​664
• web: implement Run Job action for CronJobs by @​stefanprodan in #​665
• web: implement Delete action for Pods by @​stefanprodan in #​667
• web: treat DependencyNotReady as progressing by @​stefanprodan in #​669
• operator: fix forced CRD migration on Flux minor upgrade by @​Aman-Cool in #​671
• Upgrade fluxcd/pkg dependencies by @​matheuscscp in #​672
• build(deps): bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​673
• Release v0.41.0 by @​stefanprodan in #​675

New Contributors

• @​Iam-Karan-Suresh made their first contribution in #​631
• @​dgunzy made their first contribution in #​653
• @​Aman-Cool made their first contribution in #​671

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.40.0...v0.41.0

v0.40.0

Compare Source

Security Advisory

• CVE-2026-23990 - Web UI Impersonation Bypass via Empty OIDC Claims

What's Changed

• ci: Set GITHUB_TOKEN to avoid rate limits in tests by @​stefanprodan in #​603
• operator: introduce support for looking up GH app installation ID by @​matheuscscp in #​601
• docs: fix YAML formatting for web SSO guides by @​matheuscscp in #​604
• web: strict validation for RBAC impersonation by @​matheuscscp in #​610
• web: return provider info for auth debugging by @​matheuscscp in #​611
• web: add user profile page with identity information by @​stefanprodan in #​615
• web: add faster polling when actions are in flight by @​stefanprodan in #​616
• web: track the user who suspended a resource by @​stefanprodan in #​617
• Release v0.40.0 by @​stefanprodan in #​619

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.39.0...v0.40.0

v0.39.0

Compare Source

What's Changed

• web: introduce flags for watching config by @​matheuscscp in #​543
• web: fix comment in auth config by @​matheuscscp in #​556
• web: improve navigation to resource dashboard by @​stefanprodan in #​554
• ci: Run unit and e2e tests on dedicated runners by @​stefanprodan in #​558
• web: add audit events to actions by @​matheuscscp in #​561
• web: Implement action bar in the resource dashboard by @​stefanprodan in #​560
• mcp: upgrade sdk to v1.2.0 by @​matheuscscp in #​564
• web: make kubeclient config safe for mutations by @​matheuscscp in #​570
• operator: cancel health checks on requeue by @​matheuscscp in #​462
• web: add guide for olm configuration by @​matheuscscp in #​569
• web: filter stats in cluster dashboard based on RBAC by @​matheuscscp in #​571
• web: add script for load testing by @​stefanprodan in #​573
• ci: Build and push preview images by @​stefanprodan in #​574
• Update dependencies by @​stefanprodan in #​577
• Upgrade fluxcd/pkg/runtime to v0.94.0 by @​matheuscscp in #​579
• web: switch user actions to RBAC by @​matheuscscp in #​581
• operator: remove --disable-wait-interruption and DISABLE_WAIT_INTERRUPTION by @​matheuscscp in #​583
• web: document standard roles for UI access by @​stefanprodan in #​584
• api: make suspended state override the ready status by @​stefanprodan in #​588
• web: add warning panel for limited access by @​stefanprodan in #​589
• cli: Add JSON support to flux-operator export commands by @​stefanprodan in #​590
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​591
• web: implement cookie chunking for large OIDC tokens by @​stefanprodan in #​586
• operator: add leader election flags by @​stefanprodan in #​592
• olm: Extend compatibility to OpenShift v4.20 by @​stefanprodan in #​593
• operator: allow specifying field managers to override by @​stefanprodan in #​595
• web: fix RBAC display on no permissions warning by @​matheuscscp in #​598
• web: add guide for Microsoft Entra SSO by @​matheuscscp in #​599
• Release v0.39.0 by @​stefanprodan in #​602

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.38.1...v0.39.0

v0.38.1

Compare Source

What's Changed

• web: fix report cache concurrent writes by @​matheuscscp in #​549
• Release v0.38.1 by @​stefanprodan in #​550

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.38.0...v0.38.1

v0.37.1

Compare Source

What's Changed

• web: improve resource permission errors by @​matheuscscp in #​530
• web: Fix reconciler history navigation by @​stefanprodan in #​532
• cli: introduce command for debugging web ui cookies by @​matheuscscp in #​533
• Run e2e tests for Kubernetes v1.35.0 by @​stefanprodan in #​535
• web: Add SSO with Keycloak guide by @​stefanprodan in #​536
• Release v0.37.1 by @​stefanprodan in #​537

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.37.0...v0.37.1

v0.37.0

Compare Source

What's Changed

• Fix broken link in dev docs by @​matheuscscp in #​510
• Introduce Flux Status Page web UI by @​stefanprodan in #​488
• build(deps-dev): bump glob from 10.4.5 to 10.5.0 in /web by @​dependabot[bot] in #​511
• build(deps): bump the actions group with 8 updates by @​dependabot[bot] in #​512
• Add support for GitLab Environments to ResourceSetInputProvider by @​marvin-roesch in #​501
• feat(rsip): populate slugs for GitLab-provided inputs by @​marvin-roesch in #​513
• Add user guides by @​stefanprodan in #​516
• build(deps): bump anchore/sbom-action from 0.20.10 to 0.20.11 in the actions group by @​dependabot[bot] in #​514
• Add logo assets and banner by @​stefanprodan in #​517
• web: Apply Flux Operator branding to the Status Page UI by @​stefanprodan in #​521
• docs(resourcesets): add guide for GitLab Environment based ResourceSets by @​marvin-roesch in #​522
• web: introduce authentication (anonymous and OIDC) by @​matheuscscp in #​519
• web: cache oidc provider by @​matheuscscp in #​524
• web: Add Ingress and SSO guides by @​stefanprodan in #​523
• Release v0.37.0 by @​stefanprodan in #​528
• ci: Add runner cleanup action by @​stefanprodan in #​529

New Contributors

• @​marvin-roesch made their first contribution in #​501

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.36.0...v0.37.0

v0.36.0

Compare Source

What's Changed

• operator: Introduce distroless-fips variant by @​matheuscscp in #​507
• build(deps): bump the actions group across 1 directory with 3 updates by @​dependabot[bot] in #​504
• Release v0.36.0 by @​stefanprodan in #​508

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.35.0...v0.36.0

v0.35.0

Compare Source

What's Changed

• build(deps): bump the actions group across 1 directory with 8 updates by @​dependabot[bot] in #​500
• Release v0.35.0 (includes Flux v2.7.5) by @​stefanprodan in #​502

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.34.0...v0.35.0

v0.34.0

Compare Source

What's Changed

• build(deps): bump fluxcd/flux2 from 2.7.2 to 2.7.3 in the actions group by @​dependabot[bot] in #​482
• mcp: Add ArtifactGenerator API docs to search_flux_docs tool by @​stefanprodan in #​483
• fix(cli): correct typo in create sops command by @​pascaliske in #​484
• mcp: Offline full-text search for docs by @​stefanprodan in #​490
• Update Kubernetes dependencies to 1.34.2 by @​stefanprodan in #​498
• Release v0.34.0 by @​stefanprodan in #​499

New Contributors

• @​pascaliske made their first contribution in #​484

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.33.0...v0.34.0

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.