Chore/security 0 24 1 (#713)

* updated frpc (#693)

(cherry picked from commit 012ad77)

* installer: updated cli-v2, kubectl (#697)

(cherry picked from commit 857462a)

* updated prometheus-nats-exporter, nats-server-config-reloader for jetstream (#687)

(cherry picked from commit 20e1b3d)

* updated version

* updated version

* Update charts/gitops-runtime/Chart.yaml

Co-authored-by: Yaroslav Drachenko <[email protected]>

---------

Co-authored-by: Yaroslav Drachenko <[email protected]>

Author: vitalii-codefresh

charts/gitops-runtime/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: 0.1.75
 description: A Helm chart for Codefresh gitops runtime
 name: gitops-runtime
-version: '0.24.0'
+version: '0.24.1'
 home: https://github.com/codefresh-io/gitops-runtime-helm
 icon: https://avatars1.githubusercontent.com/u/11412079?v=3
 keywords:
@@ -15,13 +15,7 @@ annotations:
   artifacthub.io/alternativeName: "codefresh-gitops-runtime"
   artifacthub.io/changes: |-
     - kind: changed
-      description: 'feat: support single-namespaced runtime installation (#617)'
-    - kind: changed
-      description: 'chore: update app-proxy image tags to 1.3736.0 - support single-namespaced runtime'
-    - kind: changed
-      description: 'chore: update gitops-operator image tags to 58625b8 - disable RGS controller in single-namespaced mode'
-    - kind: security
-      description: 'sanitized argo-cd Project API response to remove sensitive information (https://github.com/advisories/GHSA-786q-9hcg-v9ff)'
+      description: 'chore: security fixes in tunnel-client, argo-events jetstreaming, runtime-installer'
 dependencies:
   - name: argo-cd
     repository: https://codefresh-io.github.io/argo-helm
@@ -44,7 +38,7 @@ dependencies:
     condition: sealed-secrets.enabled
   - name: codefresh-tunnel-client
     repository: oci://quay.io/codefresh/charts
-    version: 0.1.21
+    version: 0.1.22
     alias: tunnel-client
     condition: tunnel-client.enabled
   - name: cf-common

charts/gitops-runtime/values.yaml

@@ -296,8 +296,8 @@ argo-events:
       versions:
         - version: latest
           natsImage: nats:2.11.4
-          metricsExporterImage: natsio/prometheus-nats-exporter:0.16.0
-          configReloaderImage: natsio/nats-server-config-reloader:0.18.2
+          metricsExporterImage: natsio/prometheus-nats-exporter:0.17.3
+          configReloaderImage: natsio/nats-server-config-reloader:0.19.1
           startCommand: /nats-server
 # *********************************************************************************************************************
 # DOCS: https://github.com/codefresh-io/argo-helm/blob/argo-workflows-0.45.15-v3.6.7-cap-CR-28355/charts/argo-workflows

installer-image/Dockerfile

@@ -8,14 +8,14 @@ FROM debian:12.11-slim
 
 RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
 
-ARG CF_CLI_VERSION=v0.2.11
+ARG CF_CLI_VERSION=v0.2.12
 ARG TARGETARCH
 
 RUN apt-get update && apt-get install curl jq -y
 RUN curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/${CF_CLI_VERSION}/cf-linux-${TARGETARCH}.tar.gz | tar zx && mv ./cf-linux-${TARGETARCH} /usr/local/bin/cf
 COPY --from=go-build /usr/local/bin/semver-cli /usr/local/bin/semver-cli
 
-COPY --from=bitnamilegacy/kubectl:1.33.3 /opt/bitnami/kubectl/bin/kubectl /usr/local/bin/
+COPY --from=bitnamilegacy/kubectl:1.33.4 /opt/bitnami/kubectl/bin/kubectl /usr/local/bin/
 
 RUN adduser --shell /bin/bash codefresh
 USER codefresh