From 39fe4cb17e1f993f6082a846ac596b72c49da3a5 Mon Sep 17 00:00:00 2001
From: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
Date: Wed, 1 Oct 2025 02:54:49 +0000
Subject: [PATCH 1/2] kubevela/1.10.4 package update

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
---
 kubevela.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kubevela.yaml b/kubevela.yaml
index e3815497f69a..bcc3da707810 100644
--- a/kubevela.yaml
+++ b/kubevela.yaml
@@ -1,7 +1,7 @@
 package:
   name: kubevela
   version: "1.10.4"
-  epoch: 0 # CVE-2025-47907
+  epoch: 1 # CVE-2025-47907
   description: KubeVela is a modern application delivery platform that makes deploying and operating applications across today's hybrid, multi-cloud environments easier, faster and more reliable
   copyright:
     - license: Apache-2.0
@@ -13,7 +13,7 @@ package:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: a8b652e59da9a3349ccb0e9d455c04c8d88e0868
+      expected-commit: 773149aa5344e898052cb080f40627c411345508
       repository: https://github.com/kubevela/kubevela
       tag: v${{package.version}}
 

From 57ffd8e341ca7868c408697404805cdb2b32c4d7 Mon Sep 17 00:00:00 2001
From: Arturo Borrero Gonzalez <arturo.borrero@chainguard.dev>
Date: Mon, 6 Oct 2025 13:18:30 +0200
Subject: [PATCH 2/2] kubevela: refresh git hash

Refresh git hash.

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero@chainguard.dev>
---
 kubevela.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kubevela.yaml b/kubevela.yaml
index bcc3da707810..ab49e8ec6b4c 100644
--- a/kubevela.yaml
+++ b/kubevela.yaml
@@ -13,7 +13,7 @@ package:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 773149aa5344e898052cb080f40627c411345508
+      expected-commit: 17b7edca9e25bcd9aa1ff2bf6a7aa76564318dcc
       repository: https://github.com/kubevela/kubevela
       tag: v${{package.version}}