| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| provenance.intoto.jsonl | 2026-08-31 | 25.3 kB | |
| crd-schemas.tar.gz | 2026-08-31 | 81.9 kB | |
| flux_2.9.5_checksums.txt | 2026-08-31 | 1.2 kB | |
| flux_2.9.5_checksums.txt.pem | 2026-08-31 | 3.2 kB | |
| flux_2.9.5_checksums.txt.sig | 2026-08-31 | 96 Bytes | |
| flux_2.9.5_darwin_amd64.tar.gz | 2026-08-31 | 25.3 MB | |
| flux_2.9.5_darwin_arm64.tar.gz | 2026-08-31 | 23.3 MB | |
| flux_2.9.5_linux_amd64.tar.gz | 2026-08-31 | 24.7 MB | |
| flux_2.9.5_linux_arm64.tar.gz | 2026-08-31 | 22.2 MB | |
| flux_2.9.5_linux_arm.tar.gz | 2026-08-31 | 23.2 MB | |
| flux_2.9.5_sbom.spdx.json | 2026-08-31 | 1.1 MB | |
| flux_2.9.5_source_code.tar.gz | 2026-08-31 | 1.4 MB | |
| flux_2.9.5_windows_386.zip | 2026-08-31 | 24.2 MB | |
| flux_2.9.5_windows_amd64.zip | 2026-08-31 | 25.4 MB | |
| flux_2.9.5_windows_arm64.zip | 2026-08-31 | 22.4 MB | |
| install.yaml | 2026-08-31 | 341.7 kB | |
| manifests.tar.gz | 2026-08-31 | 48.0 kB | |
| README.md | 2026-08-31 | 2.9 kB | |
| v2.9.5 source code.tar.gz | 2026-08-31 | 1.4 MB | |
| v2.9.5 source code.zip | 2026-08-31 | 1.9 MB | |
| Totals: 20 Items | 197.1 MB | 3 | |
Highlights
Flux v2.9.5 is a patch release that moves helm-controller and source-controller back to upstream Helm, now at v4.2.4, dropping the temporary Flux fork. It hardens the handling of kubeconfig Secrets in helm-controller and kustomize-controller, which now reject kubeconfigs referencing files on the local filesystem and require credentials and certificates to be embedded inline. It also stops kustomize-controller from leaving behind the temporary directories of a previous process that exited without running its cleanup, and fixes a crash in post-build substitution where a substring expression with a negative length, e.g. ${VAR:2:-1}, panicked instead of counting back from the end of the string like Bash does. Across all controllers and the CLI, the fluxcd/pkg dependencies have been updated, bringing Kubernetes to 1.36.4. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Validate kubeconfigs from
.spec.kubeConfigSecrets, rejecting local file references incertificate-authority,tokenFile,client-certificateandclient-key; credentials and certificates must be embedded inline (helm-controller, kustomize-controller) - Purge temporary directories at startup (kustomize-controller)
- Fix panic on negative-length substring expressions in post-build substitution (kustomize-controller, flux CLI)
Improvements:
- Move back to upstream Helm v4.2.4, dropping the Flux fork (helm-controller, source-controller)
- Update fluxcd/pkg dependencies, which bring Kubernetes to 1.36.4 (all controllers, flux CLI)
Components changelog
- source-controller v1.9.5
- source-watcher v2.2.4
- kustomize-controller v1.9.5
- helm-controller v1.6.4
- notification-controller v1.9.4
- image-reflector-controller v1.2.5
- image-automation-controller v1.2.5
CLI changelog
- Update fluxcd/pkg dependencies by @fluxcdbot in https://github.com/fluxcd/flux2/pull/6046
- Update fluxcd/pkg dependencies by @fluxcdbot in https://github.com/fluxcd/flux2/pull/6048
- Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/6049
Full Changelog: https://github.com/fluxcd/flux2/compare/v2.9.4...v2.9.5