Update dependency fluxcd/flux2 to v0.36.0 (release-v1.19)

[23t-machine-user]

This PR contains the following updates:

Package	Update	Change
fluxcd/flux2	minor	v0.35.0 -> v0.36.0

---

Release Notes

fluxcd/flux2

v0.36.0

Compare Source

Highlights

Flux v0.36.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements

• Verify OCI Helm charts signed by Cosign (including keyless) with HelmChart.spec.verify.
• Allow publishing a single YAML file to OCI with flux push artifact <URL> --path=deploy/install.yaml.
• Detect changes to local files before pushing to OCI with flux diff artifact <URL> --path=<local files>.
• New Alert Provider type named generic-hmac for authenticating the webhook requests coming from notification-controller.
• The Kustomization.status.conditions have been aligned with Kubernetes standard conditions and kstatus.
• The kustomize-controller memory usage was reduced by 90% when performing artifact operations.

New documentation

• Guide: How to deploy Flagger with Flux using signed Helm charts and OCI artifacts
• FAQ: Should I be using Kustomize remote bases?
• FAQ: Should I be using Kustomize Helm chart plugin?

Components changelog

• source-controller v0.31.0
• kustomize-controller v0.30.0
• helm-controller v0.26.0
• notification-controller v0.28.0
• image-reflector-controller v0.22.1
• image-automation-controller v0.26.1

CLI Changelog

• PR #​3242 - @​stefanprodan - Update dependencies
• PR #​3237 - @​phillebaba - Move bootstrap package from internal to pkg
• PR #​3236 - @​stefanprodan - ci: Refactor GitHub workflows
• PR #​3232 - @​eddie-knight - Additional workflow permissions tweaks
• PR #​3231 - @​eddie-knight - Adjusted workflow permissions
• PR #​3229 - @​stefanprodan - RFC-0002: Add Cosign verification for Helm OCI charts
• PR #​3224 - @​developer-guy - Add diff artifact command
• PR #​3220 - @​stefanprodan - Only run e2e tests for Dependabot PRs
• PR #​3219 - @​dependabot[bot] - Bump github/codeql-action from 1 to 2
• PR #​3218 - @​dependabot[bot] - Bump peter-evans/create-pull-request from 3 to 4
• PR #​3217 - @​dependabot[bot] - Bump hashicorp/setup-terraform from 1 to 2.0.2
• PR #​3216 - @​stefanprodan - Enable Dependabot for GitHub Actions
• PR #​3214 - @​eddie-knight - Added ArtifactHub badge
• PR #​3213 - @​stefanprodan - Add FOSSA license scanning badge
• PR #​3198 - @​phillebaba - Add nop logger
• PR #​3197 - @​phillebaba - Move uninstall code to pkg
• PR #​3190 - @​developer-guy - Accept a file path as input for flux build|push artifact
• PR #​3187 - @​fluxcdbot - Update toolkit components
• PR #​3174 - @​phillebaba - Update libgit2 version in Azure e2e tests
• PR #​3162 - @​somtochiama - Update golden file for get source oci
• PR #​3161 - @​stefanprodan - Update RFC-0003 implementation history

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Renovate Bot.