Update RUNNER_IMAGES_VERSION to 0.0.47 to resolve ubi-fips CVEs

What does this MR do?

Updates the RUNNER_IMAGES_VERSION to 0.0.47.

Why was this MR needed?

CVEs have been flagged in the latest ubi-fips images for Runner and Runner Helper.

The relevant base images have been rebuilt and tagged as version 0.0.47. Rebuilding the base images automatically updates the OS packages affected by the CVEs.

Updating RUNNER_IMAGES_VERSION to 0.0.47 in this repository ensures that when the Runner and Runner Helper images are being built for the next release (currently targeting v19.2.0), they use the updated base images.

What's the best way to test this MR?

You can manually scan the relevant images. For example:

# specify the CVEs to be resolved by the fix
CVES='CVE-2026-(4046|4437|4438|7383|9076|28390|31790|34180|34181|34182|34183|42764|42766|42767|42768|42769|42770|45186|45445|45446|45447)'

# scan the latest ubi-fips image (uses base image v0.0.43) — should return all 21 CVEs
trivy image --platform linux/amd64 --quiet --scanners vuln --skip-version-check \
  registry.gitlab.com/gitlab-org/gitlab-runner:ubi-fips | grep -oE "$CVES" | sort -u

# scan the ubi-fips v0.0.47 base image — should return 0 CVEs
trivy image --platform linux/amd64 --quiet --scanners vuln --skip-version-check \
  registry.gitlab.com/gitlab-org/ci-cd/runner-tools/base-images/runner:0.0.47-ubi-fips | grep -oE "$CVES" | sort -u

After the next stable release, the vulnerability scanner that raised the issues below will automatically re-scan the updated images and close the related issues.

What are the relevant issue numbers?

This clears 42 ubi-fips OS-package CVE issues (openssl ×16, glibc ×3, expat ×1, openssl-fips-provider ×1).

https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39481, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39482, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39483, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39484, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39485, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39486, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39487, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39489, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39491, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39492, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39498, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39499, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39500, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39501, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39502, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39503, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39504, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39505, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39506, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39507, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39508, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39509, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39510, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39511, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39512, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39513, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39514, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39515, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39516, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39517, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39518, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39519, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39520, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39521, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39522, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39523, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39524, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39525, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39526, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39527, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39558, https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/39559

Merge request reports

Loading