From be8b57fb6eaf18e03c046c8872a48b429bce0984 Mon Sep 17 00:00:00 2001 From: andrii-codefresh Date: Fri, 10 Apr 2026 17:49:32 +0300 Subject: [PATCH 1/2] CVE-2026-34165, CVE-2026-25934, CVE-2026-33762 (github.com/go-git/go-git/v5) fix high vulnerabilities in glibc, dpkg --- charts/gitops-runtime/values.yaml | 4 ++-- installer-image/Dockerfile | 5 +++-- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml index 30a2b6cb..c24ea892 100644 --- a/charts/gitops-runtime/values.yaml +++ b/charts/gitops-runtime/values.yaml @@ -136,7 +136,7 @@ global: image: registry: quay.io repository: codefresh/cf-argocd-extras - tag: "3190219" + tag: "06801ec" nodeSelector: {} tolerations: [] affinity: {} @@ -679,7 +679,7 @@ argo-gateway: image: registry: quay.io repository: codefresh/cf-argocd-extras - tag: "3190219" + tag: "06801ec" nodeSelector: {} tolerations: [] affinity: {} diff --git a/installer-image/Dockerfile b/installer-image/Dockerfile index f35fe9f4..26a431a5 100644 --- a/installer-image/Dockerfile +++ b/installer-image/Dockerfile @@ -1,6 +1,7 @@ # syntax=docker/dockerfile:1 -FROM octopusdeploy/dhi-golang:1.25-debian13-dev AS build +# DHI source: https://hub.docker.com/repository/docker/octopusdeploy/dhi-golang/tags/1.25-debian13-dev +FROM octopusdeploy/dhi-golang:1.25-debian13-dev@sha256:b2c03c829a4df4f724712501d18321e46a2ac770377f0b6e2f383bc9d02b99d3 AS build ARG TARGETARCH ARG CF_CLI_VERSION=v1.0.2 RUN go install github.com/davidrjonas/semver-cli@latest \ @@ -9,7 +10,7 @@ ADD --unpack=true --chown=nonroot:nonroot --chmod=755 https://github.com/codefre # DHI source: https://hub.docker.com/repository/docker/octopusdeploy/dhi-debian-base/customizations/8106437942896324135 -FROM octopusdeploy/dhi-debian-base:trixie_cf-gitops-runtime-installer-debian13@sha256:e72836b4e4c408f04caf8ac6e34824d90e192b7cecedab9aeed647e14d0cd599 AS production +FROM octopusdeploy/dhi-debian-base:trixie_cf-gitops-runtime-installer-debian13@sha256:ab35aedc53ad95d3a95094d6f2c9d052c2cdb43b605ce1f9a4ea677911373b99 AS production ARG TARGETARCH COPY --from=build --chown=nonroot:nonroot --chmod=755 /tmp/cf/cf-linux-${TARGETARCH} /usr/local/bin/cf COPY --from=build --chown=nonroot:nonroot --chmod=755 /tmp/semver-cli /usr/local/bin/semver-cli From a0a84b844f30c0536e9e4c8ef06cc9113a51052b Mon Sep 17 00:00:00 2001 From: cf-ci-bot-v2 Date: Fri, 10 Apr 2026 14:53:59 +0000 Subject: [PATCH 2/2] CI Automatic commit - align Chart version --- charts/gitops-runtime/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/gitops-runtime/Chart.yaml b/charts/gitops-runtime/Chart.yaml index 1bfb67bb..95d9c59b 100644 --- a/charts/gitops-runtime/Chart.yaml +++ b/charts/gitops-runtime/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 appVersion: 0.2.3 description: A Helm chart for Codefresh gitops runtime name: gitops-runtime -version: 0.29.2 +version: 0.29.3 home: https://github.com/codefresh-io/gitops-runtime-helm icon: https://avatars1.githubusercontent.com/u/11412079?v=3 keywords: