0.24.7

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.7

Chart changes

• fix(app-proxy): added missing eventbus list permissions (#865)

0.24.6

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.6

Chart changes

• upd cap-app-proxy (#864)
• chore(CR-31388): upd gitops-operator with security fixes (#859)

0.24.5

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.5

Chart changes

• bumps argo-helm chart to the version that bumps redis version to 8.2.2 (#844)
• upd cli-v2 , debian for installer (#850)
• use explicit app-proxy config.cors value if exist (#847)
• chore: update argocd-extras (#807)
• chore[app-proxy]: bumps app-proxy to version 9621fba (#811)
• chore[app-proxy]: bumps app-proxy to version 0eb07df (#810)
• chore[app-proxy]: bumps app-proxy to version 5aaaae7 (#809)

0.24.4

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.4

Chart changes

• chore: bump app-proxy to 788a8d5 - fix app-proxy argocd-token monitoring (#782)
• fix: update image-enrichment images (#779)
• feat: added runtime label to codefresh cm (#781)

0.24.3

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.3

Chart changes

• backport redis bump fix 0.24 (#770)
• fix: component-test gitea deployment (#766)
• fix: app-proxy fails to report new and closed pr to product-components (#761)
• [gitops-operator]fix: promotions using pull requests do not resume after the pr has been merged (#753)
• [app-proxy]fix: git-source permissions are not being calculated for fine-grained tokens (#6683) (#749)
• chore(CR-30960): update enrichment images tag (#747)

0.24.2

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.2

Chart changes

• Chore-30961 security argocd-exstras (#729)
• bump argo-rollouts (#731)
• Chore/cr 29689 argo events workflow update with security fixes (#727)
• fix: security vulnerability CVE-2025-55190 (#733)
• Fix/svc-acc-pre-uninstall-hook (#728)
• updated sealed-secrets-controller (#723) (#724)
• fix: security fix: upgrade cli-v2 and debian versions (#718)
• feat: update cap-app-proxy image tags to 1.3750.0 (#720)

0.24.1

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.1

Chart changes

• 'chore: security fixes in tunnel-client, argo-events jetstreaming, runtime-installer'

0.24.0

Installation

To install this version of the gitops-runtime Helm chart, use the following command:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.24.0

⚠️ Important Upgrade Instructions

This release incorporates a security fix from Argo CD to address advisory GHSA-786q-9hcg-v9ff. The change removes sensitive information from the Project API response.

If you have automations or CLI commands that rely on credentials from project-scoped repositories and clusters previously returned by the Project API, you must update them to remove the logic that uses this data.

Chart Changes

This release includes the following notable changes:

• Security:

  • The Argo CD Project API response has been sanitized to remove sensitive information in accordance with GHSA-786q-9hcg-v9ff.

• Features:

  • Support for single-namespaced runtime installations has been added. This allows for a more granular and isolated setup.

• Dependency Updates:

  • The app-proxy image has been updated to version 1.3736.0 to support single-namespaced runtimes.
  • The gitops-operator image has been updated to disable the RGS controller when running in single-namespaced mode.

0.23.3

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.23.3

Chart changes

• update cli-v2 in installer - fix token validation code (#696)
• update cap-app-proxy image tags to 1.3727.0 (#692)

App-proxy changes

• fix: remote-cluster application fails to sync due to its project

Important Note

If the ISC repository already contains the resources/app-projects/cf-runtime-app-project.yaml file (created by runtime chart >=0.23 <0.23.3) - it should be manually updated:

...
spec:
  destinations:
  - namespace: '*'
    server: "*" # <-- replace 'https://kubernetes.default.svc' with "*" here
...

0.23.2

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.23.2

Chart changes

• updated changes
• updated nginx (#662)
• updated cli-v2, kubectl in runtime-installer (#661)
• using bitnamilegacy instead of bitnami (#653)
• chore(CR-30232): updated oauth2, golang.org/x/net, github.com/cloudflare (#639)
• updated cspd enrichers (#652)
• updated changes
• fix(app-proxy): update cap-app-proxy image tags to 1.3718.0 (#678)
• fix(app-proxy): update cap-app-proxy image tags to 1.3709.0 - simplify user cache (#673)

App-proxy changes

Introduced changes:

• fix: update EventSource import to default import syntax
• feat: simplify user cache
• feat: closing ha gaps in app-proxy