Merge pull request #390 from fluxcd/release-v0.15.1

Release v0.15.1

CHANGELOG.md

@@ -2,6 +2,27 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.15.1
+
+**Release date:** 2021-06-18
+
+This prerelease updates the Helm dependency to `v3.6.1`, this update
+is a security update and ensures credentials are only passed to the
+defined URL in a `HelmRelease`.
+
+**Note:** there have been reports from the Helm user community that
+this new behavior may cause issues with Helm repository providers
+like Artifactory. If this happens to be a problem for you, the
+behavior can be disabled by setting `PassCredentials` in the
+`HelmRepositorySpec`.
+
+For more details, see:
+https://github.com/helm/helm/security/advisories/GHSA-56hp-xqp3-w2jf
+
+Improvements:
+* Update Helm to v3.6.1
+  [#388](https://github.com/fluxcd/source-controller/pull/388)
+
 ## 0.15.0
 
 **Release date:** 2021-06-17

config/manager/kustomization.yaml

@@ -6,4 +6,4 @@ resources:
 images:
 - name: fluxcd/source-controller
   newName: fluxcd/source-controller
-  newTag: v0.15.0
+  newTag: v0.15.1

go.mod

@@ -17,7 +17,7 @@ require (
 	github.com/fluxcd/pkg/ssh v0.1.0
 	github.com/fluxcd/pkg/untar v0.1.0
 	github.com/fluxcd/pkg/version v0.1.0
-	github.com/fluxcd/source-controller/api v0.15.0
+	github.com/fluxcd/source-controller/api v0.15.1
 	github.com/go-git/go-billy/v5 v5.3.1
 	github.com/go-git/go-git/v5 v5.4.2
 	github.com/go-logr/logr v0.4.0