From 19f578ce25ad3a32e6716d3100346b3592cf7337 Mon Sep 17 00:00:00 2001 From: "codefresh-v2-pipelines[bot]" <109073600+codefresh-v2-pipelines[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 13:43:32 +0000 Subject: [PATCH 1/2] [gitops-operator]fix: security vulnerability CVE-2025-55190 --- charts/gitops-runtime/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml index ea3ff5790..38ce65847 100644 --- a/charts/gitops-runtime/values.yaml +++ b/charts/gitops-runtime/values.yaml @@ -728,7 +728,7 @@ gitops-operator: image: registry: quay.io repository: codefresh/codefresh-gitops-operator - tag: 58625b8 + tag: d6c93d9 env: GITOPS_OPERATOR_VERSION: 0.10.1 # hacky workaround, since our tags are no longer semver compliant serviceAccount: From 57f57846508cea85098ac92aaec5fbc697c2d877 Mon Sep 17 00:00:00 2001 From: Vasil Sudakou Date: Wed, 17 Sep 2025 17:27:41 +0300 Subject: [PATCH 2/2] fix: update chart description --- charts/gitops-runtime/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/gitops-runtime/Chart.yaml b/charts/gitops-runtime/Chart.yaml index 4f18e3a64..0730fdcd1 100644 --- a/charts/gitops-runtime/Chart.yaml +++ b/charts/gitops-runtime/Chart.yaml @@ -15,7 +15,7 @@ annotations: artifacthub.io/alternativeName: "codefresh-gitops-runtime" artifacthub.io/changes: |- - kind: security - description: 'chore: security fixes in tunnel-client, argo-events jetstreaming, runtime-installer' + description: 'fix: security vulnerability in codefresh-gitops-operator' dependencies: - name: argo-cd repository: https://codefresh-io.github.io/argo-helm