From 65f102be42c7cf3da702a6f103df00570d2373bb Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Wed, 9 Jul 2025 08:31:19 +0000 Subject: [PATCH 1/2] flux-source-controller/1.6.2-r1: fix GHSA-557j-xg8c-q2mm --- flux-source-controller.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/flux-source-controller.yaml b/flux-source-controller.yaml index 33db673c06b..713c5c981be 100644 --- a/flux-source-controller.yaml +++ b/flux-source-controller.yaml @@ -1,7 +1,7 @@ package: name: flux-source-controller version: "1.6.2" - epoch: 1 + epoch: 2 description: The GitOps Toolkit source management component copyright: - license: Apache-2.0 @@ -38,6 +38,7 @@ pipeline: deps: |- oras.land/oras-go@v1.2.6 github.com/go-viper/mapstructure/v2@v2.3.0 + helm.sh/helm/v3@v3.18.4 - runs: | mkdir -p "${{targets.destdir}}"/usr/bin From 28f109b19432acec8d5e78bccca1f1d62ae34a57 Mon Sep 17 00:00:00 2001 From: David Negreira Date: Thu, 10 Jul 2025 10:30:07 +0200 Subject: [PATCH 2/2] Remove unnecessary bump Signed-off-by: David Negreira --- flux-source-controller.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/flux-source-controller.yaml b/flux-source-controller.yaml index 713c5c981be..dfa3231c004 100644 --- a/flux-source-controller.yaml +++ b/flux-source-controller.yaml @@ -36,7 +36,6 @@ pipeline: - uses: go/bump with: deps: |- - oras.land/oras-go@v1.2.6 github.com/go-viper/mapstructure/v2@v2.3.0 helm.sh/helm/v3@v3.18.4