Release v1.7.4-est-1

CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project are documented in this file.
 
+## 1.7.4-est-1
+
+**Release date:** 2026-05-13
+
+This release is generated by EST, not by the Flux project
+
+This is an EST patch release to remediate CVE-2026-25934 and CVE-2026-22703
+
+Fixes:
+- Remediate CVE-2026-25934 CVE-2026-22703
+ [#1](https://github.com/Nordix/source-controller/pull/1)
+
 ## 1.7.4
 
 **Release date:** 2025-11-19

config/manager/kustomization.yaml

@@ -5,5 +5,5 @@ resources:
 - deployment.yaml
 images:
 - name: fluxcd/source-controller
-  newName: fluxcd/source-controller
-  newTag: v1.7.4
+  newName: registry.nordix.org/allies/source-controller
+  newTag: v1.7.4-est-1

go.mod

@@ -40,7 +40,7 @@ require (
 	github.com/fluxcd/pkg/tar v0.16.0
 	github.com/fluxcd/pkg/testserver v0.13.0
 	github.com/fluxcd/pkg/version v0.11.0
-	github.com/fluxcd/source-controller/api v1.7.4
+	github.com/fluxcd/source-controller/api v1.7.4-est-1
 	github.com/foxcpp/go-mockdns v1.1.0
 	github.com/go-git/go-billy/v5 v5.6.2
 	github.com/go-git/go-git/v5 v5.16.5