| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| provenance.intoto.jsonl | 2026-08-07 | 25.1 kB | |
| crd-schemas.tar.gz | 2026-08-07 | 79.9 kB | |
| flux_2.9.4_checksums.txt | 2026-08-07 | 1.2 kB | |
| flux_2.9.4_checksums.txt.pem | 2026-08-07 | 3.2 kB | |
| flux_2.9.4_checksums.txt.sig | 2026-08-07 | 96 Bytes | |
| flux_2.9.4_darwin_amd64.tar.gz | 2026-08-07 | 25.3 MB | |
| flux_2.9.4_darwin_arm64.tar.gz | 2026-08-07 | 23.3 MB | |
| flux_2.9.4_linux_amd64.tar.gz | 2026-08-07 | 24.8 MB | |
| flux_2.9.4_linux_arm64.tar.gz | 2026-08-07 | 22.2 MB | |
| flux_2.9.4_linux_arm.tar.gz | 2026-08-07 | 23.3 MB | |
| flux_2.9.4_sbom.spdx.json | 2026-08-07 | 1.1 MB | |
| flux_2.9.4_source_code.tar.gz | 2026-08-07 | 1.4 MB | |
| flux_2.9.4_windows_386.zip | 2026-08-07 | 24.2 MB | |
| flux_2.9.4_windows_amd64.zip | 2026-08-07 | 25.4 MB | |
| flux_2.9.4_windows_arm64.zip | 2026-08-07 | 22.4 MB | |
| install.yaml | 2026-08-07 | 341.7 kB | |
| manifests.tar.gz | 2026-08-07 | 48.0 kB | |
| README.md | 2026-08-07 | 2.9 kB | |
| v2.9.4 source code.tar.gz | 2026-08-07 | 1.4 MB | |
| v2.9.4 source code.zip | 2026-08-07 | 1.9 MB | |
| Totals: 20 Items | 197.3 MB | 2 | |
Highlights
Flux v2.9.4 is a patch release that ships various fixes to the Flux controllers, covering source-watcher tarball extraction and glob expansion limits, the refspecs accepted by ImageUpdateAutomation, the HTTP request limits of the notification-controller servers, and Helm repository index loading, OCI chart digest pinning, Bucket error handling and GCS static authentication in source-controller. On the CLI side, flux migrate -f now supports migrating repositories to Flux 2.9. Users are encouraged to upgrade for the best experience.
Note that this release contains CRD schema changes for ArtifactGenerator and ImageUpdateAutomation; both CRDs must be updated along with the controllers.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Confine tarball extraction and bound glob expansion (source-watcher)
- Disallow force-update and deletion via refspecs (image-automation-controller)
- Unify HTTP server request limits (notification-controller)
- Align Helm repository index loading with upstream Helm v4 (source-controller)
- Improve error handling in
Bucketreconciliation (source-controller) - Pin OCI chart verification by digest (source-controller)
- Limit GCS static authentication to service account keys (source-controller)
- Restrict the
allow-webhooksnetwork policy to the receiver port (flux CLI)
Improvements:
- Add support for migrating repositories to 2.9 in
flux migrate -f(flux CLI) - Update fluxcd/pkg dependencies, which align the ECR host detection with upstream (source-controller, image-reflector-controller, flux CLI)
- Update Bitbucket Cloud receiver guidance (notification-controller)
Components changelog
- source-controller v1.9.4
- source-watcher v2.2.3
- notification-controller v1.9.3
- image-reflector-controller v1.2.4
- image-automation-controller v1.2.4
CLI changelog
- [release/v2.9.x] Add support for 2.9 in
migrate -fby @fluxcdbot in https://github.com/fluxcd/flux2/pull/6021 - Update fluxcd/pkg dependencies by @fluxcdbot in https://github.com/fluxcd/flux2/pull/6026
- [release/v2.9.x] fix: restrict
allow-webhooksnetpol to receiver port by @fluxcdbot in https://github.com/fluxcd/flux2/pull/6029 - Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/6031
Full Changelog: https://github.com/fluxcd/flux2/compare/v2.9.3...v2.9.4