Fix CVE (#27)

duckhawk · web-flow · commit 11d458e6c4a9 · 2025-10-09T11:03:09.000+03:00
Signed-off-by: v.oleynikov &lt;vasily.oleynikov@flant.com&gt;
diff --git a/.github/workflows/build_dev.yml b/.github/workflows/build_dev.yml
@@ -10,7 +10,7 @@ env:
   GOPROXY: ${{ secrets.GOPROXY }}
   SOURCE_REPO: ${{ secrets.SOURCE_REPO }}
   SOURCE_REPO_SSH_KEY: ${{ secrets.SOURCE_REPO_SSH_KEY }}
-  BASE_IMAGES_VERSION: "v0.5.25"
+  BASE_IMAGES_VERSION: "v0.5.32"
 
 on:
   #pull_request:
diff --git a/.github/workflows/build_prod.yml b/.github/workflows/build_prod.yml
@@ -11,7 +11,7 @@ env:
   GOPROXY: ${{ secrets.GOPROXY }}
   SOURCE_REPO: ${{ secrets.SOURCE_REPO }}
   SOURCE_REPO_SSH_KEY: ${{ secrets.SOURCE_REPO_SSH_KEY }}
-  BASE_IMAGES_VERSION: "v0.5.25"
+  BASE_IMAGES_VERSION: "v0.5.32"
 
 on:
   push:
diff --git a/CHANGELOG/v0.1.7.ru.yml b/CHANGELOG/v0.1.7.ru.yml
@@ -0,0 +1,3 @@
+Изменения:
+  - Обновлена версия Go до 1.24.8
+  - Обновлена lib-helm до deckhouse_lib_helm-1.63.6
diff --git a/CHANGELOG/v0.1.7.yml b/CHANGELOG/v0.1.7.yml
@@ -0,0 +1,3 @@
+Changes:
+  - Updated Go version to 1.24.8
+  - Updated lib-helm to deckhouse_lib_helm-1.63.6
diff --git a/charts/deckhouse_lib_helm-1.63.1.tgz b/charts/deckhouse_lib_helm-1.63.1.tgz
diff --git a/charts/deckhouse_lib_helm-1.63.6.tgz b/charts/deckhouse_lib_helm-1.63.6.tgz
diff --git a/hooks/go/go.mod b/hooks/go/go.mod
@@ -1,6 +1,6 @@
 module github.com/deckhouse/snapshot-controller/hooks/go
 
-go 1.24.6
+go 1.24.8
 
 require github.com/deckhouse/module-sdk v0.2.0
 
diff --git a/images/webhooks/go.mod b/images/webhooks/go.mod
@@ -1,6 +1,6 @@
 module github.com/deckhouse/snapshot-controller/images/webhooks
 
-go 1.24.6
+go 1.24.8
 
 require (
 	github.com/deckhouse/sds-common-lib v0.5.0
diff --git a/release.yaml b/release.yaml
diff --git a/werf_cleanup.yaml b/werf_cleanup.yaml
@@ -1,12 +1,32 @@
-project: snapshot-controller
 configVersion: 1
+project: snapshot-controller
 cleanup:
   keepPolicies:
-    - references:
-        branch: /.*/
-        limit:
-          in: 168h # keep dev images build during last week which not main|pre-alpha
-    - references:
-        branch: /main|pre-alpha/
-      imagesPerReference:
-        last: 5 # keep 5 images for branches main|pre-alpha
+  - references:
+      branch: /.*/
+      limit:
+        in: 168h
+  - references:
+      branch: /release-[0-9]+.*/
+      limit:
+        last: 3
+    imagesPerReference:
+      last: 1
+  - references:
+      tag: /^v([0-9]\d*)\.([0-9]\d*)\.([0-9]\d*)(-.*)?/
+      limit:
+        last: 3
+    imagesPerReference:
+      last: 1
+  - references:
+      tag: /.*/
+      limit:
+        last: 3
+    imagesPerReference:
+      last: 1
+  - references:
+      branch: /master|main/
+      limit:
+        last: 1
+    imagesPerReference:
+      last: 1

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+Изменения:`
	`2`	`+ - Обновлена версия Go до 1.24.8`
	`3`	`+ - Обновлена lib-helm до deckhouse_lib_helm-1.63.6`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+Changes:`
	`2`	`+ - Updated Go version to 1.24.8`
	`3`	`+ - Updated lib-helm to deckhouse_lib_helm-1.63.6`