chore(deps): update dependency fluxcd/flux2 to v2.9.1

[gzip-d]

This PR contains the following updates:

Package	Update	Change
fluxcd/flux2	patch	v2.9.0 → v2.9.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.9.1

Compare Source

Highlights

Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

• Disable Flux variable substitution on all Flux CRDs, preventing post-build substitution from corrupting CRD schemas that contain ${...} sequences (all controllers)
• Update SOPS dependency to fix .ini file decryption (kustomize-controller)
• Fix a dry-run error where applying a resource with a strategic merge patch could fail with <resource> is invalid (kustomize-controller)
• Fix a breaking change in the in-memory Kustomization build (Flux CLI)

Improvements:

• Cache the registry authorization token during Notation verification, so it is fetched once per verification instead of once per request (source-controller)
• Update fluxcd/pkg dependencies

Components changelog

• source-controller v1.9.2
• kustomize-controller v1.9.2
• helm-controller v1.6.2
• notification-controller v1.9.2
• image-reflector-controller v1.2.2
• image-automation-controller v1.2.2
• source-watcher v2.2.2

CLI changelog

• [release/v2.9.x] Fix breaking change in-memory kustomization build by @​fluxcdbot in #​5971
• Update fluxcd/pkg dependencies by @​fluxcdbot in #​5977
• Update toolkit components by @​fluxcdbot in #​5979

Full Changelog: fluxcd/flux2@v2.9.0...v2.9.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[gzip-d]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: clusters/comet/flux-system/gotk-components.yaml

Command failed: /bin/sh -c install-tool flux v2.9.1

File name: clusters/nebula/flux-system/gotk-components.yaml

Command failed: /bin/sh -c install-tool flux v2.9.1