Flux v2.9.4 released on 07-08-2026
Flux v2.9.4 is out now. It delivers targeted fixes across Flux controllers and the CLI, tightens image automation safety, and contains CRD schema changes for ArtifactGenerator and ImageUpdateAutomation that must be updated together with the controllers.
See the Flux project on GitHub for the full changelog and upgrade guidance: https://github.com/fluxcd/flux2/compare/v2.9.3…v2.9.4 and follow the Upgrade Procedure for Flux v2.7+ when moving from v2.6: https://github.com/fluxcd/flux2/discussions/5572
What’s in this release
- CRD schema changes for ArtifactGenerator and ImageUpdateAutomation — CRDs must be updated alongside the controllers.
- Source-controller and source-watcher fixes: confined tarball extraction and bounded glob expansion, Helm repository index loading aligned with Helm v4, OCI chart verification pinned by digest, improved Bucket reconciliation error handling, and restricted GCS static authentication.
- Image automation safety tightened by disallowing force-update and deletion via refspecs; CLI adds support for migrating repositories to Flux 2.9 via
flux migrate -f, and theallow-webhooksnetwork policy is restricted to the receiver port.
Upgrade notes
- Update the ArtifactGenerator and ImageUpdateAutomation CRDs together with their controllers to avoid schema mismatches; follow the Flux v2.7+ upgrade procedure for upgrades from v2.6: https://github.com/fluxcd/flux2/discussions/5572
- If you need to roll back, ensure controller and CRD versions remain compatible to avoid reconciliation errors.
Share your experience with the upgrade or report any issues on the Flux GitHub repositories — feedback helps catch regressions and improve stability.
