Merge branch 'stable/0.24' into prep/v0.24.2

Author: vitalii-codefresh

charts/gitops-runtime/Chart.yaml

@@ -37,14 +37,14 @@ dependencies:
     version: 8.0.6-8-cap-v3.0.2-2025-09-07-cdf75df5
   - name: argo-events
     repository: https://codefresh-io.github.io/argo-helm
-    version: 2.4.8-cap-CR-29689
+    version: 2.4.9-cap-CR-30841
   - name: argo-workflows
     repository: https://codefresh-io.github.io/argo-helm
-    version: 0.45.15-v3.6.7-cap-CR-28355
+    version: 0.45.16-v3.6.7-cap-CR-30835
     condition: argo-workflows.enabled
   - name: argo-rollouts
     repository: https://codefresh-io.github.io/argo-helm
-    version: 2.37.3-6-v1.7.2-cap-CR-29629
+    version: 2.37.3-7-v1.7.2-cap-OSS-697
     condition: argo-rollouts.enabled
   - name: sealed-secrets
     repository: https://bitnami-labs.github.io/sealed-secrets/

charts/gitops-runtime/templates/hooks/pre-uninstall/cleanup-resources.yaml

@@ -3,13 +3,14 @@ kind: Job
 metadata:
   name: cleanup-runtime-resources
   annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+    helm.sh/hook: pre-delete
+    helm.sh/hook-weight: "5"
+    helm.sh/hook-delete-policy: hook-succeeded,before-hook-creation
 spec:
   backoffLimit: 3
   template:
     spec:
-      serviceAccount: argocd-application-controller
+      serviceAccount: runtime-cleanup
       restartPolicy: Never
       containers:
       - name: cleanup-runtime-resources

charts/gitops-runtime/templates/hooks/pre-uninstall/delete-runtime-from-platform.yaml

@@ -8,8 +8,8 @@ kind: Job
 metadata:
   name: delete-runtime-from-platform
   annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation,hook-failed
+    helm.sh/hook: pre-delete
+    helm.sh/hook-delete-policy: hook-succeeded,before-hook-creation,hook-failed
 spec:
   backoffLimit: 3
   template:

charts/gitops-runtime/templates/hooks/pre-uninstall/rbac.yaml

@@ -1,10 +1,20 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: runtime-cleanup
+  annotations:
+    helm.sh/hook: pre-delete
+    helm.sh/hook-weight: "-10"
+    helm.sh/hook-delete-policy: hook-succeeded,before-hook-creation,hook-failed
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: runtime-cleanup
   annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation,hook-failed
+    helm.sh/hook: pre-delete
+    helm.sh/hook-weight: "-10"
+    helm.sh/hook-delete-policy: hook-succeeded,before-hook-creation,hook-failed
 rules:
   - apiGroups:
       - "*"
@@ -18,20 +28,13 @@ kind: RoleBinding
 metadata:
   name: runtime-cleanup
   annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation,hook-failed
+    helm.sh/hook: pre-delete
+    helm.sh/hook-weight: "-10"
+    helm.sh/hook-delete-policy: hook-succeeded,before-hook-creation,hook-failed
 roleRef:
   apiGroup: ""
   kind: Role
   name: runtime-cleanup
 subjects:
   - kind: ServiceAccount
     name: runtime-cleanup
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: runtime-cleanup
-  annotations:
-    "helm.sh/hook": pre-delete
-    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation,hook-failed

charts/gitops-runtime/values.yaml

@@ -226,7 +226,7 @@ sealed-secrets:
   image:
     registry: 'quay.io'
     repository: 'codefresh/sealed-secrets-controller'
-    tag: '0.29.0'
+    tag: '0.32.0'
   resources:
     limits:
       cpu: 500m
@@ -728,7 +728,7 @@ gitops-operator:
   image:
     registry: quay.io
     repository: codefresh/codefresh-gitops-operator
-    tag: 58625b8
+    tag: d6c93d9
   env:
     GITOPS_OPERATOR_VERSION: 0.10.1 # hacky workaround, since our tags are no longer semver compliant
   serviceAccount:
@@ -763,7 +763,7 @@ cf-argocd-extras:
       image:
         registry: quay.io
         repository: codefresh/cf-argocd-extras
-        tag: v0.5.14
+        tag: c74d94c
     nodeSelector: {}
     tolerations: []
     affinity: {}
@@ -787,7 +787,7 @@ cf-argocd-extras:
       image:
         registry: quay.io
         repository: codefresh/cf-argocd-extras
-        tag: v0.5.14
+        tag: c74d94c
     nodeSelector: {}
     tolerations: []
     affinity: {}

installer-image/Dockerfile

@@ -1,14 +1,14 @@
-FROM golang:1.24.6 AS go-build
+FROM golang:1.24.6 AS go-build 
 
 RUN go install github.com/davidrjonas/semver-cli@latest \
   && cp $GOPATH/bin/semver-cli /usr/local/bin/
 
 #bookworm-slim
-FROM debian:12.11-slim
+FROM debian:12.12-slim
 
 RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
 
-ARG CF_CLI_VERSION=v0.2.12
+ARG CF_CLI_VERSION=v0.2.13
 ARG TARGETARCH
 
 RUN apt-get update && apt-get install curl jq -y