Overwrite image deps tags by default to automatically patch CVEs (#4623)

* Overwrite image deps tags by default to automatically patch CVEs
replicatedhq · May 15, 2024 · 7f46d9c · 7f46d9c
1 parent 710df61
commit 7f46d9c
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 7 deletions.
diff --git a/.github/workflows/image-deps-updater.yaml b/.github/workflows/image-deps-updater.yaml
@@ -8,7 +8,7 @@ on:
       overwrite:
         description: 'Overwrite the existing image tags'
         required: false
-        default: 'false'
+        default: 'true'
 jobs:
   build-3rd-party-images:
     runs-on: ubuntu-20.04

diff --git a/.image.env b/.image.env
@@ -4,5 +4,5 @@
 MINIO_TAG='0.20240510.014138-r0'
 RQLITE_TAG='8.24.7-r0'
 DEX_TAG='2.39.1-r2'
-SCHEMAHERO_TAG='0.17.7'
-LVP_TAG='v0.6.2'
+SCHEMAHERO_TAG='0.17.8'
+LVP_TAG='v0.6.3'
diff --git a/Makefile b/Makefile
@@ -3,7 +3,7 @@ CURRENT_USER := $(if $(GITHUB_USER),$(GITHUB_USER),$(shell id -u -n))
 MINIO_TAG ?= 0.20240510.014138-r0
 RQLITE_TAG ?= 8.24.7-r0
 DEX_TAG ?= 2.39.1-r2
-LVP_TAG ?= v0.6.2
+LVP_TAG ?= v0.6.3
 
 define sendMetrics
 @if [ -z "${PROJECT_NAME}" ]; then \

diff --git a/migrations/Makefile b/migrations/Makefile
@@ -1,5 +1,5 @@
 SHELL:=/bin/bash
-SCHEMAHERO_TAG ?= 0.17.7
+SCHEMAHERO_TAG ?= 0.17.8
 
 build_schema:
 	docker build --pull --build-arg SCHEMAHERO_TAG=${SCHEMAHERO_TAG} -f deploy/Dockerfile -t ${IMAGE} .

diff --git a/pkg/image/constants.go b/pkg/image/constants.go
@@ -8,6 +8,6 @@ const (
 	Minio      = "kotsadm/minio:0.20240510.014138-r0"
 	Rqlite     = "kotsadm/rqlite:8.24.7-r0"
 	Dex        = "kotsadm/dex:2.39.1-r2"
-	Schemahero = "schemahero/schemahero:0.17.7"
-	Lvp        = "replicated/local-volume-provider:v0.6.2"
+	Schemahero = "schemahero/schemahero:0.17.8"
+	Lvp        = "replicated/local-volume-provider:v0.6.3"
 )