remove hardcoded optout image version

Author: lizk886

.github/workflows/run-e2e-tests-on-operator.yaml

@@ -124,7 +124,7 @@ jobs:
       target_environment: ${{ inputs.target_environment }}
       delay_operator_shutdown: ${{ inputs.delay_operator_shutdown }}
       operator_image_version: ${{ inputs.operator_image_version }}
-      core_image_version: ${{ inputs.core_image_version }}
+      core_image_version: 2.30.39-alpha-161-SNAPSHOT # hardcoded to wzh-UID2-6362-E2E-pipeline-fix-workaround-private 
       optout_image_version: ${{ inputs.optout_image_version }}
       e2e_image_version: ${{ inputs.e2e_image_version }}
       operator_branch: ${{ github.ref }}

.trivyignore

@@ -16,3 +16,10 @@ CVE-2025-64720 exp:2026-06-05
 
 # UID2-6340
 CVE-2025-65018 exp:2026-06-05
+
+
+# ignore for testing only.
+# Investigating below vulnerabilites are out of scope of this ticket
+CVE-2025-66418
+CVE-2025-66471
+# ignore for testing only.

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>com.uid2</groupId>
     <artifactId>uid2-operator</artifactId>
-    <version>5.62.11</version>
+    <version>5.62.16-alpha-583-SNAPSHOT</version>
 
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -240,6 +240,12 @@
                     <artifactId>attestation-gcp</artifactId>
                     <version>${enclave-gcp.version}</version>
                 </dependency>
+                <!-- Required for GCP Secret Manager - attestation-gcp uses newer gax-rpc that needs this -->
+                <dependency>
+                    <groupId>com.google.auth</groupId>
+                    <artifactId>google-auth-library-oauth2-http</artifactId>
+                    <version>1.41.0</version>
+                </dependency>
             </dependencies>
         </profile>
     </profiles>

scripts/azure-aks/deployment/generate-deployment-artifacts.sh

@@ -52,6 +52,10 @@ for f in ${INPUT_FILES[@]}; do
 done
 
 az version
+# Upgrade typing_extensions to fix pydantic-core compatibility issue with confcom extension
+# The confcom extension requires typing_extensions>=4.10.0 for the Sentinel class
+sudo /opt/az/bin/python3 -m pip install --upgrade typing_extensions
+
 # Install confcom extension, az is originally available in GitHub workflow environment
 az extension add --name confcom
 if [[ $? -ne 0 ]]; then

scripts/azure-cc/deployment/generate-deployment-artifacts.sh

@@ -55,6 +55,10 @@ for f in ${INPUT_FILES[@]}; do
 done
 
 az version
+# Upgrade typing_extensions to fix pydantic-core compatibility issue with confcom extension
+# The confcom extension requires typing_extensions>=4.10.0 for the Sentinel class
+sudo /opt/az/bin/python3 -m pip install --upgrade typing_extensions
+
 # Install confcom extension, az is originally available in GitHub workflow environment
 az extension add --name confcom
 if [[ $? -ne 0 ]]; then