From 539af50d49e3d3300314f22dba41668f6bb68a60 Mon Sep 17 00:00:00 2001
From: Vadim Kharin <vadim.kharin@codefresh.io>
Date: Fri, 27 Mar 2026 10:25:32 +0200
Subject: [PATCH 1/2] chore: fix various security vulnerabilities in
 argo-workflows

---
 charts/gitops-runtime/Chart.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/charts/gitops-runtime/Chart.yaml b/charts/gitops-runtime/Chart.yaml
index 02ebb783..8bd6383a 100644
--- a/charts/gitops-runtime/Chart.yaml
+++ b/charts/gitops-runtime/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
     version: 9.4.4
   - name: argo-workflows
     repository: https://codefresh-io.github.io/argo-helm
-    version: 0.45.18-v3.6.7-cap-CR-32333
+    version: 0.45.19-v3.6.7-cap-CR-38032
     condition: argo-workflows.enabled
   - name: sealed-secrets
     repository: https://bitnami-labs.github.io/sealed-secrets/

From c376d94ff4ffa1713493f599d28d3352ce02b7f2 Mon Sep 17 00:00:00 2001
From: Vadim Kharin <vadim.kharin@codefresh.io>
Date: Fri, 27 Mar 2026 11:58:21 +0200
Subject: [PATCH 2/2] update alpine/kubectl to 1.35.3

---
 charts/gitops-runtime/values.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml
index cf51b072..55b2a871 100644
--- a/charts/gitops-runtime/values.yaml
+++ b/charts/gitops-runtime/values.yaml
@@ -722,7 +722,7 @@ redis-secret-init:
   image:
     registry: docker.io
     repository: alpine/kubectl
-    tag: 1.35.1
+    tag: 1.35.3
   nodeSelector: {}
   tolerations: []
   affinity: {}