Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 7, 2025

This PR contains the following updates:

Package Update Change
argoproj/argo-cd patch 2.14.20 -> 2.14.21
eksctl-io/eksctl minor 0.215.0 -> 0.220.0
fluxcd/flux2 patch 2.7.2 -> 2.7.5
hashicorp/terraform minor 1.13.3 -> 1.14.0
hatoo/oha minor 1.10.0 -> 1.12.0
helm/helm patch 3.19.0 -> 3.19.2
kubernetes/kubernetes patch 1.33.5 -> 1.33.6
mikefarah/yq minor 4.48.1 -> 4.49.2

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v2.14.21

Compare Source

[!IMPORTANT]
END OF LIFE NOTICE

This is the final release of the 2.14.x release series. As of November 4, 2025, this version has reached end of life and will no longer receive bug fixes or security updates.

Action Required: Please upgrade to a supported version (v3.0 or higher).

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.21/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.21/manifests/ha/install.yaml
Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog
Bug fixes
Dependency updates

Full Changelog: argoproj/argo-cd@v2.14.20...v2.14.21

eksctl-io/eksctl (eksctl-io/eksctl)

v0.220.0: eksctl 0.220.0

Compare Source

Release v0.220.0
🚀 Features
  • Add support for EKS Capability (#​8603)
Acknowledgments

The eksctl maintainers would like to sincerely thank @​punkwalker.

v0.219.0: eksctl 0.219.0

Compare Source

Release v0.219.0

💥 Breaking Changes

  • Make AL2023 be the default for all k8s version to handle AL2 deprecation (#​8593)

🚀 Features

🎯 Improvements

  • Make AL2023 be the default for all k8s version to handle AL2 deprecation (#​8593)

Acknowledgments

The eksctl maintainers would like to sincerely thank @​NicholasBlaskey.

v0.218.0: eksctl 0.218.0

Compare Source

Release v0.218.0

🚀 Features

  • Add support for ControlPlaneScalingConfig (#​8590)

🎯 Improvements

  • Enable termination protection by default for eksctl CFN stacks (#​8586)

Acknowledgments

The eksctl maintainers would like to sincerely thank @​NicholasBlaskey and @​abhay-krishna.

v0.217.0: eksctl 0.217.0

Compare Source

Release v0.217.0

🚀 Features

  • feat: Add enhanced node repair configuration support (#​8512)

🐛 Bug Fixes

  • Fix issue with upgrade policy not being applied (#​8577)

🧰 Maintenance

Acknowledgments

The eksctl maintainers would like to sincerely thank @​NicholasBlaskey, and @​sapphirew.

v0.216.0: eksctl 0.216.0

Compare Source

Release v0.216.0

🚀 Features

  • Add support for ap-southeast-6 (#​8544)
  • feat: add support for UpgradePolicy attribute in cluster creation (#​8534)

🎯 Improvements

  • Fix upgrade vpc-cni test relying on assumptions about vpc versions (#​8562)
  • Fix integration test by waiting 2 minutes for ebs update (#​8561)
  • Fix test failure for add-on waiting for ebs csi driver (#​8559)
  • For dns test, use an ECR busybox image (#​8560)
  • Don't check access entry length to fix failed intg test (#​8558)
  • Don't wait for metrics-server if its the only add-on (#​8552)
  • Migrate completly off V1 SDK to V2 SDK (#​8548)

🐛 Bug Fixes

  • Make update kube-proxy not use minimal images for >= 1.34 (#​8557)
  • Remove kubernetes.io/cluster/<clusterName> tag from EFA security group (#​8556)
  • Create EFA specific security group for self-managed node groups always (#​8554)
  • Make metrics server create after node groups so it can get scheduled … (#​8538)

🧰 Maintenance

  • Don't check access entry length to fix failed intg test (#​8558)
  • Update coredns (#​8537)
  • Migrate completly off V1 SDK to V2 SDK (#​8548)

Acknowledgments

The eksctl maintainers would like to sincerely thank @​NicholasBlaskey and @​guessi.

fluxcd/flux2 (fluxcd/flux2)

v2.7.5

Compare Source

Highlights

Flux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Fix HelmRelease history truncation when using the RetryOnFailure strategy.

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.4...v2.7.5

v2.7.4

Compare Source

Highlights

Flux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Add DisableConfigWatchers feature gate to all controllers for disabling the Secrets/ConfigMaps watchers
  • Fix Workload Identity for Azure China Cloud in all controllers
  • Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller
  • Skip secret decryption for remote kustomize patches in kustomize-controller
  • Improve post-build error reporting in kustomize-controller
  • Add ArtifactGenerator to aggregated RBAC roles

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.
Flux users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.3...v2.7.4

v2.7.3

Compare Source

Highlights

Flux v2.7.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

  • Restore SOCKS5 proxy support in all controllers
  • Fix status reporting of HelmReleases with RetryOnFailure strategy
  • Automated retries for ImagePolicies when no image tags are found in the database
  • Fix alerting for Telegram's message_thread_id
  • Allow running kustomize-controller and helm-controller on the same loopback interface as source-watcher

⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3. Users are advised to use Cosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.

Components changelog
CLI changelog

Full Changelog: fluxcd/flux2@v2.7.2...v2.7.3

hashicorp/terraform (hashicorp/terraform)

v1.14.0

Compare Source

1.14.0 (November 19, 2025)

NEW FEATURES:

  • List Resources: List resources can be defined in *.tfquery.hcl files and allow querying and filterting existing infrastructure.

  • A new Terraform command terraform query: Executes list operations against existing infrastructure and displays the results. The command can optionally generate configuration for importing results into Terraform.

  • A new GenerateResourceConfiguration RPC allows providers to create more precise configuration values during import. (#​37515)

  • New top-level Actions block: Actions are provider defined and meant to codify use cases outside the normal CRUD model in your Terraform configuration. Providers can define Actions like aws_lambda_invoke or aws_cloudfront_create_invalidation that do something imparative outside of Terraforms normal CRUD model. You can configure such a side-effect with an action block and have actions triggered through the lifecycle of a resource or through passing the -invoke CLI flag. (#​37553)

ENHANCEMENTS:

  • terraform test: expected diagnostics will be included in test output when running in verbose mode" (#​37362)

  • terraform test: ignore prevent_destroy attribute during when cleaning up tests" (#​37364)

  • terraform stacks command support for -help flag (#​37645)

  • query: support offline validation of query files via -query flag in the validate command (#​37671)

  • Updates to support the AWS European Sovereign Cloud (#​37721)

BUG FIXES:

  • Retrieve all workspace variables while doing a terraform import, include variables inherited from variable sets but not overwritten by the workspace. (#​37241)

  • Fix OSS backend proxy support by adding a proxy layer for OSS backend operations. Resolves #​36897. (#​36897)

  • console and test: return explicit diagnostics when referencing resources that were not included in the most recent operation. (#​37663)

  • query: generate unique resource identifiers for results of expanded list resources (#​37681)

  • The CLI now summarizes the number of actions invoked during terraform apply, matching the plan output. (#​37689)

  • Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#​37854)

  • query: improve error handling for missing identity schemas (#​37863)

UPGRADE NOTES:

  • The parallelism of Terraform operations within container runtimes may be reduced depending on the CPU bandwidth limit setting. (#​37436)

  • Building Terraform 1.14 requires macOS Monterey or later (due to being built on Go 1.25 which imposes these requirements) (#​37436)

Previous Releases

For information on prior major and minor releases, refer to their changelogs:

v1.13.5

Compare Source

1.13.5 (November 5, 2025)

BUG FIXES:

  • impure functions could cause templatefile to incorrectly fail consistency checks (#​37807)

  • Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#​37854)

v1.13.4

Compare Source

1.13.4 (October 15, 2025)

BUG FIXES:

  • Fix crash when showing a cloud plan without having a cloud backend (#​37751)
hatoo/oha (hatoo/oha)

v1.12.0

Compare Source

What's Changed

New Contributors

Full Changelog: hatoo/oha@v1.11.0...v1.12.0

v1.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: hatoo/oha@v1.10.0...v1.11.0

helm/helm (helm/helm)

v3.19.2: Helm v3.19.2

Compare Source

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.1: Helm v3.19.1

Compare Source

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.0.0 is the next major release and will be on November 12, 2025
  • 3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c2 (dependabot[bot])
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d (Benoit Tigeot)
  • Avoid "panic: interface conversion: interface {} is nil" 2f619be (Benoit Tigeot)
  • Fix helm pull untar dir check with repo urls 8112d47 (Luna Stadler)
  • Fix deprecation warning 5dff7ce (Benoit Tigeot)
  • chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d2 (dependabot[bot])
  • Add timeout flag to repo add and update flags a833710 (Reinhard Nägele)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81 (Dirk Müller)
kubernetes/kubernetes (kubernetes/kubernetes)

v1.33.6: Kubernetes v1.33.6

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

mikefarah/yq (mikefarah/yq)

v4.49.2

Compare Source

v4.49.1: - Security Flags and TOML fixes

Compare Source

  • Added --security flags to disable env and file ops #​2515
    • Fixing TOML ArrayTable parsing issues #​1758
    • Fixing parsing of escaped characters #​2506

v4.48.2

Compare Source


Configuration

📅 Schedule: Branch creation - Between day 7 and 14 of the month ( * * 7-14 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) November 7, 2025 23:47
@netlify
Copy link

netlify bot commented Nov 7, 2025

Deploy Preview for eks-workshop ready!

Name Link
🔨 Latest commit 9520cea
🔍 Latest deploy log https://app.netlify.com/projects/eks-workshop/deploys/692d603c4f6fa800088c6803
😎 Deploy Preview https://deploy-preview-1713--eks-workshop.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@renovate renovate bot force-pushed the renovate/ide-binaries branch 9 times, most recently from 71bfc35 to e08fbd2 Compare November 15, 2025 06:42
@renovate renovate bot force-pushed the renovate/ide-binaries branch 5 times, most recently from 9c779de to 8641d4c Compare November 25, 2025 02:06
@renovate renovate bot force-pushed the renovate/ide-binaries branch 3 times, most recently from 00dd673 to ed93fca Compare November 29, 2025 09:48
@renovate renovate bot force-pushed the renovate/ide-binaries branch from ed93fca to 9520cea Compare December 1, 2025 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants