Merge branch 'main' into chore/CR-30339-security

Author: vitalii-codefresh

charts/gitops-runtime/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
 - name: argo-cd
   repository: https://codefresh-io.github.io/argo-helm
   condition: argo-cd.enabled
-  version: 8.0.6-6-cap-v3.0.2-2025-07-06-e9fc72a9
+  version: 8.0.6-8-cap-v3.0.2-2025-08-12-9c8dfae9
 - name: argo-events
   repository: https://codefresh-io.github.io/argo-helm
   version: 2.4.8-cap-CR-29689

charts/gitops-runtime/tests/cf-argocd-extras_test.yaml

@@ -310,51 +310,6 @@ tests:
             mountPath: /app/config/codefresh-tls-certs
             readOnly: true
 
-  - it: Event Reporter checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/event-reporter/statefulset.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.eventReporter.configMaps.cmd-params-cm.data.foo: bar
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "747ba21145c84900dd029f20a15e73096e090da7865b67b86601135d10d8cc18"
-
-
-  - it: Event Reporter checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/event-reporter/statefulset.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.eventReporter.configMaps.cmd-params-cm.data.alice: bob
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "42a0e8eee09a1a411447be59e5b5a078d699560b4d93b62d388a1b622a463b18"
-
-  - it: Sources Server checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/sources-server/deployment.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.sourcesServer.configMaps.cmd-params-cm.data.foo: bar
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "1aac0bdcb473209b67afca0d5ff7cb1d9b849748f82c76e53fd9a43c51456dc2"
-
-  - it: Sources Server checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/sources-server/deployment.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.sourcesServer.configMaps.cmd-params-cm.data.alice: bob
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "cf799238e8fa77132860698833bfe00a6dce93ec57d994da59aa8be3909e61b5"
-
   - it: Sources Server with external redis
     template: cf-argocd-extras/sources-server/deployment.yaml
     values:

charts/gitops-runtime/values.yaml

@@ -564,14 +564,14 @@ app-proxy:
           tag: 1.1.15-main
   image:
     repository: quay.io/codefresh/cap-app-proxy
-    tag: 1.3702.0
+    tag: 1.3706.0
     pullPolicy: IfNotPresent
   # -- Extra volume mounts for main container
   extraVolumeMounts: []
   initContainer:
     image:
       repository: quay.io/codefresh/cap-app-proxy-init
-      tag: 1.3702.0
+      tag: 1.3706.0
       pullPolicy: IfNotPresent
     command:
       - ./init.sh
@@ -726,7 +726,7 @@ gitops-operator:
     # -- defaults
     registry: quay.io
     repository: codefresh/codefresh-gitops-operator
-    tag: v0.10.2
+    tag: v0.11.1
   serviceAccount:
     create: true
     annotations: {}

installer-image/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.24.2 AS go-build
+FROM golang:1.24.6 AS go-build
 
 RUN go install github.com/davidrjonas/semver-cli@latest \
   && cp $GOPATH/bin/semver-cli /usr/local/bin/
@@ -8,13 +8,14 @@ FROM debian:12.11-slim
 
 RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
 
-ARG CF_CLI_VERSION=v0.2.9
+ARG CF_CLI_VERSION=v0.2.10
 ARG TARGETARCH
 
 RUN apt-get update && apt-get install curl jq -y
 RUN curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/${CF_CLI_VERSION}/cf-linux-${TARGETARCH}.tar.gz | tar zx && mv ./cf-linux-${TARGETARCH} /usr/local/bin/cf
 COPY --from=go-build /usr/local/bin/semver-cli /usr/local/bin/semver-cli
-COPY --from=bitnami/kubectl:1.33.1 /opt/bitnami/kubectl/bin/kubectl /usr/local/bin/
+
+COPY --from=bitnamilegacy/kubectl:1.33.3 /opt/bitnami/kubectl/bin/kubectl /usr/local/bin/
 
 RUN adduser --shell /bin/bash codefresh
 USER codefresh