From 21dceef219e174a8b6c9bb1424cffd4e0bf43e72 Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 01:11:13 +0400 Subject: [PATCH 01/12] fix(internal-gateway): bump for security fixes --- charts/codefresh/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 8186fc904..8d65a9d32 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -33,7 +33,7 @@ dependencies: version: 0.18.1 - name: internal-gateway repository: oci://quay.io/codefresh/charts - version: 0.11.0 + version: 0.12.3 condition: internal-gateway.enabled - name: consul version: 11.4.32 From 0215c7295aeef5d0b3ee4454e4167cef410d50cd Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 10:58:27 +0400 Subject: [PATCH 02/12] fix(argo-platform): bump for security fixes --- charts/codefresh/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 8d65a9d32..1209f3c2a 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -240,7 +240,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: argo-platform.enabled - name: argo-platform - version: 1.4073.10-onprem-4997ac8 + version: 1.4073.10-onprem-1c4292b repository: oci://quay.io/codefresh/charts condition: argo-platform.enabled - name: argo-hub-platform From 6c1ee561ce30e10ca3b110a96b1c3e22316838b2 Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 13:15:31 +0400 Subject: [PATCH 03/12] fix(curl): bump for security fixes --- charts/codefresh/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/codefresh/values.yaml b/charts/codefresh/values.yaml index b377f4280..283cd4379 100644 --- a/charts/codefresh/values.yaml +++ b/charts/codefresh/values.yaml @@ -861,7 +861,7 @@ cfsign: image: registry: us-docker.pkg.dev/codefresh-inc/public-gcr-io repository: codefresh/curl - tag: 8.17.0 + tag: 8.20.0 affinity: {} nodeSelector: {} podSecurityContext: {} @@ -1311,7 +1311,7 @@ builder: image: registry: us-docker.pkg.dev/codefresh-inc/public-gcr-io repository: codefresh/curl - tag: 8.17.0 + tag: 8.20.0 container: image: registry: quay.io From e712f92fe9d823cdf51e33052ad013f48124ddfe Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 14:08:59 +0400 Subject: [PATCH 04/12] fix(cf-platform-analytics): bump for security fixes --- charts/codefresh/Chart.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 1209f3c2a..50143c406 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -231,12 +231,12 @@ dependencies: condition: hermes.enabled - name: cf-platform-analytics alias: cf-platform-analytics-platform - version: 0.53.8-onprem-aadc0bb + version: 0.53.9-onprem-7104ca5 repository: oci://quay.io/codefresh/charts condition: argo-platform.enabled - name: cf-platform-analytics alias: cf-platform-analytics-etlstarter - version: 0.53.8-onprem-aadc0bb + version: 0.53.9-onprem-7104ca5 repository: oci://quay.io/codefresh/charts condition: argo-platform.enabled - name: argo-platform From 3279f3437b3d4ec1cf320dc3fde41cb311cdad75 Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 15:15:25 +0400 Subject: [PATCH 05/12] fix(hermes): bump for security fixes --- charts/codefresh/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 50143c406..0cf5122f5 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -218,7 +218,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: helm-repo-manager.enabled - name: hermes - version: 0.22.10-onprem-db513d1 + version: 0.22.11-onprem-10611bd repository: oci://quay.io/codefresh/charts condition: hermes.enabled - name: nomios From 40608f6a879ee794af17da18d5bed1f10739706e Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 15:26:27 +0400 Subject: [PATCH 06/12] fix(nomios): bump for security fixes --- charts/codefresh/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 0cf5122f5..85cd8e222 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -222,7 +222,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: hermes.enabled - name: nomios - version: 0.11.18-onprem-c56997d + version: 0.11.19-onprem-0e21875 repository: oci://quay.io/codefresh/charts condition: hermes.enabled - name: cronus From 7bb2fd9f1d21d8d7b526d38c911f2a3e91cd8079 Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 16:21:10 +0400 Subject: [PATCH 07/12] fix(gitops-dashboard-manager): bump for security fixes --- charts/codefresh/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 85cd8e222..68f63450d 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -104,7 +104,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: pipeline-manager.enabled - name: gitops-dashboard-manager - version: 1.16.11-onprem-56a26ac + version: 1.16.12-onprem-d8aa1ec repository: oci://quay.io/codefresh/charts condition: gitops-dashboard-manager.enabled - name: cfapi From 1d8b0f0f3ed7486dca753fcfef131104f154ba35 Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 16:55:10 +0400 Subject: [PATCH 08/12] fix(cf-deploy-kubernetes): bump for security fixes --- charts/codefresh/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/values.yaml b/charts/codefresh/values.yaml index 283cd4379..9315f59b3 100644 --- a/charts/codefresh/values.yaml +++ b/charts/codefresh/values.yaml @@ -543,7 +543,7 @@ runtimeImages: ENGINE_IMAGE: quay.io/codefresh/engine:3.2.14@sha256:739ee01e0aa22270c9f6a0f3cca733548b6be5a158fcfa3c4de1227dc696cfcc FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.13@sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.3.12@sha256:b820e97c9f40ee6dd6616168deeb90d6b2e969a9c0cd13ce4843692d8676676c - KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:18.0.1@sha256:b48c83479464e7d5b1fc0e46c7a310557823b5908f0024a5146086ab40e33706 + KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:18.0.2@sha256:a9642f66c7696367b43f2931bab6f647f9f91262e194609e64a19ea362a7c873 PIPELINE_DEBUGGER_IMAGE: quay.io/codefresh/cf-debugger:1.3.14@sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7 TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.15.2@sha256:f5ee6af6eda9476ef044703211ed00622db06bf74b1a74cbb97f2f847cb903a9 CR_6177_FIXER: docker.io/library/alpine:3.23 From 42390d4872317a21c5bac5789b1dd0bbe6ac4f20 Mon Sep 17 00:00:00 2001 From: Alina Date: Wed, 24 Jun 2026 16:18:29 +0300 Subject: [PATCH 09/12] update versions --- charts/codefresh/Chart.yaml | 10 +++++----- charts/codefresh/values.yaml | 8 ++++---- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 85cd8e222..656bda662 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -92,7 +92,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: cfsign.enabled - name: tasker-kubernetes - version: 1.28.12-onprem-e19d891 + version: 1.28.13-onprem-6546827 repository: oci://quay.io/codefresh/charts condition: tasker-kubernetes.enabled - name: context-manager @@ -100,7 +100,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: context-manager.enabled - name: pipeline-manager - version: 4.1.8-onprem-bc05059 + version: 4.1.9-onprem-4183d71 repository: oci://quay.io/codefresh/charts condition: pipeline-manager.enabled - name: gitops-dashboard-manager @@ -202,7 +202,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: cfui.enabled - name: k8s-monitor - version: 4.11.27-onprem-834be86 + version: 4.11.28-onprem-0314e70 repository: oci://quay.io/codefresh/charts condition: k8s-monitor.enabled - name: runtime-environment-manager @@ -210,7 +210,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: runtime-environment-manager.enabled - name: cf-broadcaster - version: 1.15.9-onprem-cf9132d + version: 1.15.10-onprem-46297d5 repository: oci://quay.io/codefresh/charts condition: cf-broadcaster.enabled - name: helm-repo-manager @@ -244,7 +244,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: argo-platform.enabled - name: argo-hub-platform - version: 0.1.38 + version: 0.1.41 repository: oci://quay.io/codefresh/charts condition: argo-platform.enabled - name: cf-oidc-provider diff --git a/charts/codefresh/values.yaml b/charts/codefresh/values.yaml index 283cd4379..dd7925924 100644 --- a/charts/codefresh/values.yaml +++ b/charts/codefresh/values.yaml @@ -535,14 +535,14 @@ postgresqlCleanJob: # @default -- See below runtimeImages: COMPOSE_IMAGE: quay.io/codefresh/compose:v5.1.4-1.6.6@sha256:62085a63c8452b1d3208c002051e89685499ff8372524b9ffaca4a3ef9b534c0 - CONTAINER_LOGGER_IMAGE: quay.io/codefresh/cf-container-logger:2.0.17@sha256:abef98caa641c974c59862307568d3436ab7d2ceb858a5d1c5e86b0764dc19eb + CONTAINER_LOGGER_IMAGE: quay.io/codefresh/cf-container-logger:2.0.24@sha256:6bd1cbb669b9e7b4c7bde98dc17d31f5b1d8373f981b7878d03dad17e4a7bc4b DIND_IMAGE: quay.io/codefresh/dind:29.5.3-3.0.17@sha256:a12a681c80cb619d5ea557f5873401eecae742bf108833cc8c69feabf8668e0f - DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.6.2@sha256:c50dc2797b7795314dfe1102494b3c474a5d463ed276a05b7ebfd4419451be45 + DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.6.4@sha256:616e8e173cd19eaa74c8c02bbcfa0514c95c2bf6ff9bc3838d1f35de499ff682 DOCKER_PULLER_IMAGE: quay.io/codefresh/cf-docker-puller:8.0.28@sha256:332cbc021029c1e8dccd7e90ce47832a2066b67ed4fc4c94e072b267ab44d72b - DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.27@sha256:c31fb1facbccbcc4f48b669f168acc96cd695dfbabb5dea7b95af24a4b29aef2 + DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.28@sha256:bea268ff4ba2132eec30cc3239334e847199be439fa0873b8b8ab21e6cc65a5f ENGINE_IMAGE: quay.io/codefresh/engine:3.2.14@sha256:739ee01e0aa22270c9f6a0f3cca733548b6be5a158fcfa3c4de1227dc696cfcc FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.13@sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf - GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.3.12@sha256:b820e97c9f40ee6dd6616168deeb90d6b2e969a9c0cd13ce4843692d8676676c + GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.3.13@sha256:d5eae428c4896847795202036645a90fdad5f2f68a3eb08bf8ca7e65e450b5ed KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:18.0.1@sha256:b48c83479464e7d5b1fc0e46c7a310557823b5908f0024a5146086ab40e33706 PIPELINE_DEBUGGER_IMAGE: quay.io/codefresh/cf-debugger:1.3.14@sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7 TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.15.2@sha256:f5ee6af6eda9476ef044703211ed00622db06bf74b1a74cbb97f2f847cb903a9 From 75bec9cc1d1f07897f5920185ae8148437902343 Mon Sep 17 00:00:00 2001 From: Alina Date: Wed, 24 Jun 2026 16:59:18 +0300 Subject: [PATCH 10/12] update runtime image --- charts/codefresh/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/values.yaml b/charts/codefresh/values.yaml index b31e5c956..e8b746eb0 100644 --- a/charts/codefresh/values.yaml +++ b/charts/codefresh/values.yaml @@ -545,7 +545,7 @@ runtimeImages: KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:18.0.2@sha256:a9642f66c7696367b43f2931bab6f647f9f91262e194609e64a19ea362a7c873 GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.3.13@sha256:d5eae428c4896847795202036645a90fdad5f2f68a3eb08bf8ca7e65e450b5ed PIPELINE_DEBUGGER_IMAGE: quay.io/codefresh/cf-debugger:1.3.14@sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7 - TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.15.2@sha256:f5ee6af6eda9476ef044703211ed00622db06bf74b1a74cbb97f2f847cb903a9 + TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.15.3@sha256:fc40fba6d9983b4360ba6ed02d7bf6ae8b7e9ee6c2f61649c165b120b174ca6d CR_6177_FIXER: docker.io/library/alpine:3.23 GC_BUILDER_IMAGE: docker.io/library/alpine:3.23 From 23e50f5983bf7a72c58ca6affdedf2e4c7e8b1bd Mon Sep 17 00:00:00 2001 From: Alina Date: Wed, 24 Jun 2026 18:59:29 +0300 Subject: [PATCH 11/12] update engine runtime image --- charts/codefresh/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/values.yaml b/charts/codefresh/values.yaml index e8b746eb0..cdb7d913e 100644 --- a/charts/codefresh/values.yaml +++ b/charts/codefresh/values.yaml @@ -540,7 +540,7 @@ runtimeImages: DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.6.4@sha256:616e8e173cd19eaa74c8c02bbcfa0514c95c2bf6ff9bc3838d1f35de499ff682 DOCKER_PULLER_IMAGE: quay.io/codefresh/cf-docker-puller:8.0.28@sha256:332cbc021029c1e8dccd7e90ce47832a2066b67ed4fc4c94e072b267ab44d72b DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.28@sha256:bea268ff4ba2132eec30cc3239334e847199be439fa0873b8b8ab21e6cc65a5f - ENGINE_IMAGE: quay.io/codefresh/engine:3.2.14@sha256:739ee01e0aa22270c9f6a0f3cca733548b6be5a158fcfa3c4de1227dc696cfcc + ENGINE_IMAGE: quay.io/codefresh/engine:3.2.20@sha256:fdb39ce04f713d970cf947368b5a1ee82a48b2071a2515966efb81ae6a6e621c FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.13@sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:18.0.2@sha256:a9642f66c7696367b43f2931bab6f647f9f91262e194609e64a19ea362a7c873 GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.3.13@sha256:d5eae428c4896847795202036645a90fdad5f2f68a3eb08bf8ca7e65e450b5ed From dafd518de530565cc8f0d278b923348c1a10375d Mon Sep 17 00:00:00 2001 From: Vasil Sudakov Date: Wed, 24 Jun 2026 20:03:03 +0400 Subject: [PATCH 12/12] fix: update kube-integration --- charts/codefresh/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/codefresh/Chart.yaml b/charts/codefresh/Chart.yaml index 706809670..2345f4af7 100644 --- a/charts/codefresh/Chart.yaml +++ b/charts/codefresh/Chart.yaml @@ -80,7 +80,7 @@ dependencies: repository: oci://quay.io/codefresh/charts condition: cluster-providers.enabled - name: kube-integration - version: 1.33.12-onprem-a49cb39 + version: 1.33.13-onprem-dde68ae repository: oci://quay.io/codefresh/charts condition: kube-integration.enabled - name: charts-manager