Security update: Bump app version to 1.10.1-fix.1 (CVE-2025-55182) (#352)

- Update image tags for Dify 1.10.1-fix.1
- Bump appVersion to 1.10.1-fix.1 and chart version to 0.34.0-rc2

Author: BorisPolonsky

README.md

@@ -43,15 +43,15 @@ graph TB
     ProxyPod -->|Marketplace| MarketplaceAPI[🛒 Marketplace API<br/>External]
 
     %% Backend Pods
-    APIService --> APIPod[📦 API Pod<br/>langgenius/dify-api:1.10.1<br/>Port: 5001]
-    WebService --> WebPod[📦 Web Pod<br/>langgenius/dify-web:1.10.1<br/>Port: 3000]
+    APIService --> APIPod[📦 API Pod<br/>langgenius/dify-api:1.10.1-fix.1<br/>Port: 5001]
+    WebService --> WebPod[📦 Web Pod<br/>langgenius/dify-web:1.10.1-fix.1<br/>Port: 3000]
     PluginService --> PluginPod[📦 Plugin Daemon Pod<br/>langgenius/dify-plugin-daemon:0.4.1-local<br/>Ports: 5002, 5003]
 
     %% Worker Pod (Background Processing)
-    WorkerPod[📦 Worker Pod<br/>langgenius/dify-api:1.10.1]
+    WorkerPod[📦 Worker Pod<br/>langgenius/dify-api:1.10.1-fix.1]
 
     %% Beat Pod (Periodic task scheduler)
-    BeatPod[📦 Beat Pod<br/>langgenius/dify-api:1.10.1]
+    BeatPod[📦 Beat Pod<br/>langgenius/dify-api:1.10.1-fix.1]
 
     %% Sandbox Service
     SandboxService[🏖️ Sandbox Service<br/>Port: 8194] --> SandboxPod[📦 Sandbox Pod<br/>langgenius/dify-sandbox:0.2.12<br/>Port: 8194]
@@ -163,10 +163,10 @@ The Nginx proxy handles traffic routing with the following rules:
 
 | Component | Image | Port | Role |
 |-----------|-------|------|------|
-| **API** | `langgenius/dify-api:1.10.1` | 5001 | RESTful API server, business logic processing |
-| **Web** | `langgenius/dify-web:1.10.1` | 3000 | Web UI frontend |
-| **Worker** | `langgenius/dify-api:1.10.1` | - | Background task processing (Celery) |
-| **Beat** | `langgenius/dify-api:1.10.1` | - | Periodic task scheduler (Celery Beat) |
+| **API** | `langgenius/dify-api:1.10.1-fix.1` | 5001 | RESTful API server, business logic processing |
+| **Web** | `langgenius/dify-web:1.10.1-fix.1` | 3000 | Web UI frontend |
+| **Worker** | `langgenius/dify-api:1.10.1-fix.1` | - | Background task processing (Celery) |
+| **Beat** | `langgenius/dify-api:1.10.1-fix.1` | - | Periodic task scheduler (Celery Beat) |
 | **Sandbox** | `langgenius/dify-sandbox:0.2.12` | 8194 | Secure code execution environment |
 | **Plugin Daemon** | `langgenius/dify-plugin-daemon:0.4.1-local` | 5002, 5003 | Plugin management and execution |
 | **SSRF Proxy** | `ubuntu/squid:latest` | 3128 | External request security proxy |

charts/dify/Chart.yaml

@@ -16,13 +16,13 @@ type: application
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 0.34.0-rc1
+version: 0.34.0-rc2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "1.10.1"
+appVersion: "1.10.1-fix.1"
 
 dependencies:
 - name: postgresql

charts/dify/values.yaml

@@ -8,7 +8,7 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.
@@ -19,7 +19,7 @@ image:
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.

ci/values/values-eso-external-es.yaml

@@ -1,12 +1,12 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   sandbox:

ci/values/values-eso-external-pg.yaml

@@ -5,7 +5,7 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.
@@ -16,7 +16,7 @@ image:
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.

ci/values/values-eso-external-redis.yaml

@@ -1,12 +1,12 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   sandbox:

ci/values/values-eso-external-s3-pg-es-redis.yaml

@@ -1,12 +1,12 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   sandbox:

ci/values/values-eso-external-s3.yaml

@@ -1,12 +1,12 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   sandbox:

ci/values/values-eso-otel.yaml

@@ -1,12 +1,12 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   sandbox:

ci/values/values-eso.yaml

@@ -1,12 +1,12 @@
 image:
   api:
     repository: langgenius/dify-api
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   web:
     repository: langgenius/dify-web
-    tag: "1.10.1"
+    tag: "1.10.1-fix.1"
     pullPolicy: IfNotPresent
 
   sandbox: