chore(deps): update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/k8s-deployment-tools docker tag to v2.7.2

This MR contains the following updates:

Package	Type	Update	Change
registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/k8s-deployment-tools	image	patch	v2.7.0 -> v2.7.2
registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/k8s-deployment-tools	image	patch	2.7.0 -> v2.7.2

View the Renovate pipeline for this MR

---

Release Notes

fluxcd/flux2 (registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/k8s-deployment-tools)

v2.7.2

Compare Source

Highlights

Flux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

All Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the Go 1.25.2 release notes.

Components changelog

• source-controller v1.7.2
• kustomize-controller v1.7.1
• notification-controller v1.7.3
• helm-controller v1.4.2
• image-reflector-controller v1.0.2
• image-automation-controller v1.0.2
• source-watcher v2.0.2

CLI changelog

• [release/v2.7.x] Fix manifest generation for --storage-adv-addr and --events-addr flags by @​github-actions[bot] in #​5575
• [release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by @​github-actions[bot] in #​5577
• [release/v2.7.x] Update toolkit components by @​github-actions[bot] in #​5579

Full Changelog: https://github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2

v2.7.2

Compare Source

Highlights

Flux v2.7.2 is a patch release that comes with security fixes. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

All Flux components are now built with Go 1.25.2 which includes fixes for vulnerabilities in the Go stdlib that could lead to denial of service. The list of security fixes can be found in the Go 1.25.2 release notes.

Components changelog

• source-controller v1.7.2
• kustomize-controller v1.7.1
• notification-controller v1.7.3
• helm-controller v1.4.2
• image-reflector-controller v1.0.2
• image-automation-controller v1.0.2
• source-watcher v2.0.2

CLI changelog

• [release/v2.7.x] Fix manifest generation for --storage-adv-addr and --events-addr flags by @​github-actions[bot] in #​5575
• [release/v2.7.x] Update dependencies to Kubernetes v1.34.1 and Go 1.25.2 by @​github-actions[bot] in #​5577
• [release/v2.7.x] Update toolkit components by @​github-actions[bot] in #​5579

Full Changelog: https://github.com/fluxcd/flux2/compare/v2.7.1...v2.7.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.