cf-runtime-8.3.12-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.12

Changelog

changed

• Remove sidecar container from runner deployment

cf-runtime-8.3.11-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.11

Changelog

changed

• Update \dind" to 28.3.3-3.0.3"
• Update \engine" to 1.180.2"

fixed

• Prevent DinD containers escaping the pod cgroup on cgroup v2. Rootless DinD requires additional configuration on cgroup v2, see \Rootless DinD" section in docs for details."
• Enable legacy Prometheus metrics in the \engine" only if METRICS_PROMETHEUS_ENABLED=true."

cf-runtime-8.3.10-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.10

Changelog

security

• Updated gcloud-builder with security fixes

cf-runtime-8.3.9-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.9

Changelog

fixed

• Improve debuggability for cf-container-logger.

cf-runtime-8.3.8-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.8

Changelog

changed

• Update \runner" (aka "venona") to 2.0.7"

security

• Fix CVE-2025-4575, CVE-2025-22868, CVE-2025-22872, CVE-2025-22870, CVE-2024-45338, CVE-2025-4575

cf-runtime-8.3.7-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.7

Changelog

security

• Security fix in cf-git-cloner and cf-docker-puller

cf-runtime-8.3.6-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.6

Changelog

security

• Security fix in cf-docker-builder, cf-docker-puller, cf-docker-pusher, compose, pikolo, cf-debugger.

cf-runtime-8.3.5-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.5

Changelog

security

• Security fix in cf-app-proxy and cf-cosign-image-signer.

cf-runtime-8.3.4-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.4

Changelog

removed

• Remove support for \rbd" volume backend from "dind-volume-provisioner""

changed

• Update \dind-volume-provisioner" to 2.0.0"

security

• Fix CVE-2025-50181, CVE-2025-5222, CVE-2024-47081, CVE-2025-29087, CVE-2025-29088, CVE-2025-3277, CVE-2025-6965, CVE-2025-1352, CVE-2025-1376, CVE-2025-4598, CVE-2025-6020, CVE-2025-5702, CVE-2025-5987, CVE-2025-5372, CVE-2025-5318, CVE-2025-5351, CVE-2025-4877, CVE-2025-4878, CVE-2025-4373, CVE-2025-6052, CVE-2025-52555, CVE-2025-47273, CVE-2025-40909, CVE-2025-6395, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2024-12718, CVE-2025-8194, CVE-2025-6069, CVE-2025-4517, CVE-2025-4435, CVE-2025-4516, CVE-2025-4330, CVE-2025-4138, CVE-2025-1795, CVE-2025-3576, CVE-2025-22868

cf-runtime-8.3.3-helm

To get Helm chart for this Runner release run:

helm pull oci://quay.io/codefresh/cf-runtime --version 8.3.3

Changelog

fixed

• Fix typo in \runtime.engine.runtimeImagesRegistry""