fix(cf-argocd-extras): security fix, bump image tag to ace3860 by alina-codefresh · Pull Request #1226 · codefresh-io/gitops-runtime-helm

alina-codefresh · 2026-06-26T09:22:30Z

Why

https://linear.app/octopus/issue/CFS-13738/ready-for-release-codefreshcf-argocd-extrasc545381

Notes

* chore: fix various security vulnerabilities in cap-app-proxy * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.0 release * v0.2.3 (0.29.0) * Update Chart.yaml and changelog for 0.29.0 release * update artifacthub.io/changes --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: andrii-codefresh <andrii@codefresh.io> Co-authored-by: vadim-kharin-codefresh <vadim.kharin@codefresh.io>

* chore: fix various security vulnerabilities in argo-workflows * update alpine/kubectl to 1.35.3

* Update Chart.yaml and changelog for 0.29.1 release --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Vadim Kharin <vadim.kharin@codefresh.io>

* chore: Fix various security vulnerabilities in argo-workflows * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* fix: security fixes codefresh-gitops-operator CVE-2026-33186 CVE-2026-31892 CVE-2026-28229 cf-argocd-extras CVE-2026-33186 cap-app-proxy crypto/tls CVE-2025-68121 path-to-regexp CVE-2026-4867 node-forge CVE-2026-33896 CVE-2026-33895 CVE-2026-33894 CVE-2026-33891 picomatch CVE-2026-33671 CVE-2026-33672 gitops-runtime-installer (cli-v2) CVE-2026-33186 CVE-2026-24051 (cherry picked from commit bdce2fe)

* CVE-2026-34165, CVE-2026-25934, CVE-2026-33762 (github.com/go-git/go-git/v5) fix high vulnerabilities in glibc, dpkg * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.3 release --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: andrii-codefresh <andrii@codefresh.io>

…6) (#1165) (#1166) * chore: Apply CVE fixes on new main (tip of stable/0.26) (#1165) * [gitops-operator]chore: Apply CVE fixes on new main (tip of stable/0.26) * re-enable component test * update restrictedgitsources crd --------- Co-authored-by: codefresh-v2-pipelines[bot] <109073600+codefresh-v2-pipelines[bot]@users.noreply.github.com> Co-authored-by: scme0 <scott.merchant@octopus.com> * trigger * trigger * CI Automatic commit - align Chart version --------- Co-authored-by: codefresh-v2-pipelines[bot] <109073600+codefresh-v2-pipelines[bot]@users.noreply.github.com> Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.4 release * Update Chart.yaml with security fix description --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Scott Merchant <scott.merchant@octopus.com>

* chore: Update cap-app-proxy to 1.4081.0 * CI Automatic commit - align Chart version * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.4 release * add extra change to artifacthub changes annotation * update changelog * Update charts/gitops-runtime/Chart.yaml Co-authored-by: Zhenya Tikhonov <masontikhonov@gmail.com> * update artifacthub.io/changes annotation as per review comments. --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: scme0 <scott.merchant@octopus.com> Co-authored-by: Vadim Kharin <vadim.kharin@codefresh.io> Co-authored-by: Zhenya Tikhonov <masontikhonov@gmail.com>

Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* chore: update cap-app-proxy to 1.4085.0 * helm-docs

Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* docs: document ArgoCD compatibility Co-authored-by: Copilot <copilot@github.com> * docs: regenerate Readme * doc: fix TOC Co-authored-by: Copilot <copilot@github.com> * CI Automatic commit - align Chart version --------- Co-authored-by: Copilot <copilot@github.com> Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.7 release * ci: update release notes * Update Chart.yaml and changelog for 0.29.7 release * update changelog * update changelog * update changelog --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Zhenya Tikhonov <masontikhonov@gmail.com> Co-authored-by: vadim-kharin-codefresh <vadim.kharin@codefresh.io>

* upgrade argo-cd * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.8 release * prepare release notes; update docs * empty * empty * revert docs * add docs * update docs * empty --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: alinashklyar <alina.shklyar@codefresh.io>

* chore: fix various security vulnerabilities * CI Automatic commit - align Chart version * update cap-app-proxy to 1.4091.0 --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.9 release * update changelog * update changelog --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Vadim Kharin <vadim.kharin@codefresh.io>

* fix(cap-app-proxy): support arbitrary user IDs on OpenShift * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

* Update Chart.yaml and changelog for 0.29.10 release * chore: update release notes & docs * chore: trigger pipelines * chore: update docs * chore: trigger pipelines --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Vasil Sudakou <vasil.sudakov@codefresh.io>

…s, cap-app-proxy, cf-argocd-extras, codefresh-gitops-operator, gitops-runtime-installer (#1206) * chore: fix various security vulnerabilities in argo-workflows, cap-app-proxy, cf-argocd-extras, codefresh-gitops-operator, gitops-runtime-installer * update argocd to v3.3.10 * update Chart.yaml

* Update Chart.yaml and changelog for 0.29.11 release * empty * empty * Update Chart.yaml and changelog for 0.29.11 release * Update Chart.yaml and changelog for 0.29.11 release * Update Chart.yaml and changelog for 0.29.11 release * Update Chart.yaml and changelog for 0.29.11 release * Update Chart.yaml and changelog for 0.29.11 release * update changelog * update changelog * update changelog --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Mikhail Klimko <mikhail.klimko@octopus.com> Co-authored-by: mikhail-klimko <mikhail.klimko@codefresh.io> Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com> Co-authored-by: vadim-kharin-codefresh <vadim.kharin@codefresh.io>

* fix: security vulnerabilities in gitops-runtime-installer * CI Automatic commit - align Chart version * fix(argo-workflows): security vulnerabilities * empty * empty * delete component-test --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com> Co-authored-by: alinashklyar <alina.shklyar@codefresh.io>

* Update Chart.yaml and changelog for 0.29.12 release * update release notes * remove accidental changes --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com> Co-authored-by: alinashklyar <alina.shklyar@codefresh.io>

* feat: add httproute template (#1211) * CI Automatic commit - align Chart version --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com>

* fix(cf-argocd-extras): security fix, bump image tag to "71b7e7c" * CI Automatic commit - align Chart version --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com>

* Update Chart.yaml and changelog for 0.29.14 release * chore: update docs --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com> Co-authored-by: Vasil Sudakou <vasil.sudakov@codefresh.io>

…-proxy, codefresh-gitops-operator, csdp-image-enrichers (#1220) * chore: fix various security vulnerabilities for cap-app-proxy, csdp-image-enrichers * chore: fix various security vulnerabilities for codefresh-gitops-operator, argo-gateway

* Update Chart.yaml and changelog for 0.29.15 release * update docs * update changelog --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com> Co-authored-by: vadim-kharin-codefresh <vadim.kharin@codefresh.io>

* fix(internal-router): bump nginx-unprivileged for security fix * chore: refresh docs * CI Automatic commit - align Chart version * fix(alpine/kubectl): bump kubectl to fix security vulnerabilities * fix(codefresh-tunnel-client): bump to fix security vulnerabilities * chore: trigger pipelines --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com>

* Update Chart.yaml and changelog for 0.29.16 release * chore: update release notes --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com> Co-authored-by: Vasil Sudakou <vasil.sudakov@codefresh.io>

vadim-kharin-codefresh and others added 30 commits March 24, 2026 12:22

chore: fix various security vulnerabilities in cap-app-proxy (#1140)

79ed094

* chore: fix various security vulnerabilities in cap-app-proxy * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

chore: fix various security vulnerabilities in argo-workflows (#1144)

1bf134e

* chore: fix various security vulnerabilities in argo-workflows * update alpine/kubectl to 1.35.3

chore: align Chart version (#1147)

6f6c73a

prepare-version(0.29.1): prepare chart content for release (#1148)

bafdcaf

* Update Chart.yaml and changelog for 0.29.1 release --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Vadim Kharin <vadim.kharin@codefresh.io>

chore: Fix various security vulnerabilities in argo-workflows (#1149)

89dff79

* chore: Fix various security vulnerabilities in argo-workflows * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

update argocd to 3.3.6, dex to 2.45.1 (#1155)

2804e15

prepare-version(0.29.2): prepare chart content for release (#1151)

5ae9cf8

chore: security fix (#1163)

54100a4

* CVE-2026-34165, CVE-2026-25934, CVE-2026-33762 (github.com/go-git/go-git/v5) fix high vulnerabilities in glibc, dpkg * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

prepare-version(0.29.3): prepare chart content for release (#1164)

d499a7d

* Update Chart.yaml and changelog for 0.29.3 release --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: andrii-codefresh <andrii@codefresh.io>

chore: Update cap-app-proxy to 1.4081.0 with non-root user (#1159)

6389ef6

* chore: Update cap-app-proxy to 1.4081.0 * CI Automatic commit - align Chart version * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

chore: bump image tags to 1.1.26-main of enrichers (#1173)

ace2bc5

Update Chart.yaml and changelog for 0.29.5 release (#1175)

0f38b2a

Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

chore: update cap-app-proxy to 1.4085.0 (#1177)

40bd615

* chore: update cap-app-proxy to 1.4085.0 * helm-docs

Update Chart.yaml and changelog for 0.29.6 release (#1178)

43c05b8

Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

chore: fix various security vulnerabilities in argo-workflows (#1185)

726651a

fix: upgrade argo-cd (#1187)

903b78e

* upgrade argo-cd * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

chore: fix various security vulnerabilities (#1190)

4a92a27

* chore: fix various security vulnerabilities * CI Automatic commit - align Chart version * update cap-app-proxy to 1.4091.0 --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

prepare-version(0.29.9): prepare chart content for release (#1191)

61da359

* Update Chart.yaml and changelog for 0.29.9 release * update changelog * update changelog --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io> Co-authored-by: Vadim Kharin <vadim.kharin@codefresh.io>

fix(cap-app-proxy): support arbitrary user IDs on OpenShift (#1193)

79fc68d

* fix(cap-app-proxy): support arbitrary user IDs on OpenShift * CI Automatic commit - align Chart version --------- Co-authored-by: cf-ci-bot-v2 <cf-ci-bot-v2@codefresh.io>

feat: move CI from argo workflows to classic builds (#1196) (#1198)

cb89d2a

feat: test promote (#1202)

c9bc07e

mikhail-klimko and others added 17 commits May 14, 2026 18:21

feat: add imagePullSecrets to CI

973b96e

feat: test release-branch-updated pipeline (#1204)

b51ac1d

feat: add httproute template (#1211) (#1212)

c3b67f6

* feat: add httproute template (#1211) * CI Automatic commit - align Chart version --------- Co-authored-by: codefresh-git-integration[bot] <151943927+codefresh-git-integration[bot]@users.noreply.github.com>

prepare-version(0.29.13): prepare chart content for release (#1213)

dcfd9f9

fix: security vulnerabilities in gitops-runtime-installer (#1218)

23e7994

update image tag to fix security

287cfd3

bump version

6e81f0d

alina-codefresh requested review from a team, chen-keinan, dmaizel, eti-codefresh, masontikhonov and scme0 as code owners June 26, 2026 09:22

alina-codefresh closed this Jun 26, 2026

alina-codefresh deleted the CFS-7011-security-fix-release-0.29 branch June 26, 2026 11:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(cf-argocd-extras): security fix, bump image tag to ace3860#1226

fix(cf-argocd-extras): security fix, bump image tag to ace3860#1226
alina-codefresh wants to merge 47 commits into
mainfrom
CFS-7011-security-fix-release-0.29

alina-codefresh commented Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

Uh oh!

Conversation

alina-codefresh commented Jun 26, 2026

Why

Notes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants