Merge pull request #1766 from fluxcd/release-v1.9.6

Release v1.9.6

Author: matheuscscp

CHANGELOG.md

@@ -2,6 +2,29 @@
 
 All notable changes to this project are documented in this file.
 
+## 1.9.6
+
+**Release date:** 2026-10-01
+
+This patch release extends the SOPS decryption error redaction to
+`spec.postBuild.substituteFrom` values: when a substituted value is echoed back in
+a Kubernetes API validation error, it is now masked out of the Kustomization status
+conditions and events instead of leaking into them. It also adds the opt-in
+`DisableCommitStatusEvent` feature gate, which lets users disable the reconciliation
+success event that notification-controller turns into a Git commit status update.
+
+Fixes:
+- Extend SOPS redaction to postBuild substitutions
+  [#1741](https://github.com/fluxcd/kustomize-controller/pull/1741)
+- Update fluxcd/pkg dependencies
+  [#1761](https://github.com/fluxcd/kustomize-controller/pull/1761)
+
+Improvements:
+- Add feature gate to disable commit status event
+  [#1755](https://github.com/fluxcd/kustomize-controller/pull/1755)
+- docs: Add reference to flux-schema
+  [#1738](https://github.com/fluxcd/kustomize-controller/pull/1738)
+
 ## 1.9.5
 
 **Release date:** 2026-08-31

config/manager/kustomization.yaml

@@ -5,4 +5,4 @@ resources:
 images:
   - name: fluxcd/kustomize-controller
     newName: fluxcd/kustomize-controller
-    newTag: v1.9.5
+    newTag: v1.9.6

go.mod

@@ -19,7 +19,7 @@ require (
 	github.com/cyphar/filepath-securejoin v0.6.1
 	github.com/dimchansky/utfbom v1.1.1
 	github.com/fluxcd/cli-utils v1.2.3
-	github.com/fluxcd/kustomize-controller/api v1.9.5
+	github.com/fluxcd/kustomize-controller/api v1.9.6
 	github.com/fluxcd/pkg/apis/acl v0.10.0
 	github.com/fluxcd/pkg/apis/event v0.27.2
 	github.com/fluxcd/pkg/apis/kustomize v1.19.2