Release v0.3.56 with Flux helm-controller v1.5.5 and source-controller v1.8.5 updates

[kishoregv]

Summary

Prepare a Kraan release that updates the bundled FluxCD components and chart artifacts to pick up the latest upstream fixes from helm-controller and source-controller.

Requested version: v0.3.56

Proposed updates

• Update github.com/fluxcd/helm-controller/api from v1.5.4 to v1.5.5.
• Update github.com/fluxcd/source-controller/api from v1.8.3 to v1.8.5.
• Update chart image tags:
  • gotk.helmController.image.tag: v1.5.5
  • gotk.sourceController.image.tag: v1.8.5
• Refresh embedded Flux chart CRD artifacts for the updated component versions.
• Update Kraan chart version and appVersion to v0.3.56.

Upstream Flux fixes included

helm-controller v1.5.5

• Adds a configurable HTTP timeout for artifact fetching to avoid stalled reconciliations.
• Fixes unbounded memory growth caused by repeatedly wrapping the Kubernetes client retry transport.
• Ignores non-CRD objects placed under chart crds/ directories.
• Fixes Helm test action behavior for release names longer than 53 characters.
• Moves back to upstream Helm v4.2.0.
• Updates Kubernetes, controller-runtime, cli-utils, and fluxcd/pkg dependencies.

Reference: https://github.com/fluxcd/helm-controller/releases/tag/v1.5.5

source-controller v1.8.4 and v1.8.5

• Updates go-git for security fixes, including CVE-2026-45022, CVE-2026-45571, and CVE-2026-45570.
• Hardens path handling in source reconcilers.
• Fixes Helm chart resolution for OCI tags that encode semver build metadata.
• Updates Helm to v4.2.0 to align with helm-controller.
• Updates Kubernetes, controller-runtime, cli-utils, and fluxcd/pkg dependencies.
• Includes support for GCP sovereign cloud artifact registries through dependency updates.

References:

• https://github.com/fluxcd/source-controller/releases/tag/v1.8.4
• https://github.com/fluxcd/source-controller/releases/tag/v1.8.5

Validation

Local validation completed on a clean worktree:

• make validate-versions passed.
• helm lint chart passed.
• helm template kraan chart --namespace gotk-system passed.
• go test ./... passed.

Notes

The source-controller CRDs appear to have no material schema changes between v1.8.3 and v1.8.5, but the chart artifact should still be refreshed so Kraan remains aligned with the upstream component versions.