Update RUNNER_IMAGES_VERSION to 0.0.42 to resolve ubi-fips CVEs (!6733) · Merge requests · GitLab.org / gitlab-runner

What does this MR do?

Updates the RUNNER_IMAGES_VERSION to 0.0.42.

Why was this MR needed?

CVEs have been flagged in the latest ubi-fips images for Runner and Runner Helper.

The relevant base images have been rebuilt and tagged as version 0.0.42. Rebuilding the base images automatically updates the OS packages affected by the CVEs.

Updating RUNNER_IMAGES_VERSION to 0.0.42 in this repository ensures that when the Runner and Runner Helper images are being built for the next release (currently targeting 19.0), they use the updated base images.

What's the best way to test this MR?

The vulnerability scanner that raised the issues below will automatically re-scan the updated images and close the related issues once the latest tags are updated following the next stable release.

What are the relevant issue numbers?

Edited May 13, 2026 by Daniel Keenan

Update RUNNER_IMAGES_VERSION to 0.0.42 to resolve ubi-fips CVEs

What does this MR do?

Why was this MR needed?

What's the best way to test this MR?

What are the relevant issue numbers?

Merge request reports