chore(CR-29164): updated node.js, debian, jsonpath-plus, tar-fs, kubectl, brace-expansion (#883)

## What
CVE-2025-1302 - fixed by updating jsonpath-plus
CVE-2022-33987 , CVE-2022-33987  -  fixed by updating openid-client
CVE-2025-48387 , CVE-2024-12905 - fixed by updating tar-fs
CVE-2025-48060 , CVE-2024-23337 , CVE-2025-26519 , CVE-2024-9143 ,
CVE-2024-13176 , CVE-2024-12797- fixed by updating alpine/debian
CVE-2024-45338 , CVE-2025-22870 , CVE-2025-22872 - fixed by updating
kubectl
CVE-2025-5889 - fixed by updating brace-expansion


## Why

## Notes

Author: vitalii-codefresh

.nvmrc

@@ -1 +1 @@
-v22.11.0
+v22.16.0

Dockerfile

@@ -11,10 +11,10 @@ RUN pip install yq==${YQ_VERSION}
 RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/ $(which yq)
 
 # kubectl binary
-FROM bitnami/kubectl:1.30.6 AS kubectl
+FROM bitnami/kubectl:1.33.1 AS kubectl
 
 # Main
-FROM node:22.11.0-alpine3.20
+FROM node:22.16.0-alpine3.22
 RUN apk --update add --no-cache \
     bash \
     ca-certificates \

Dockerfile-debian

@@ -11,10 +11,10 @@ RUN pip install yq==${YQ_VERSION}
 RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/ $(which yq)
 
 # kubectl binary
-FROM bitnami/kubectl:1.30.6 as kubectl
+FROM bitnami/kubectl:1.33.1 as kubectl
 
 # Main
-FROM node:22.11.0-bullseye-slim
+FROM node:22.16.0-bookworm-slim
 RUN apt update \
     && apt -y install \
     apt-transport-https \

Dockerfile-debian-rootless

@@ -11,10 +11,10 @@ RUN pip install yq==${YQ_VERSION}
 RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/ $(which yq)
 
 # kubectl binary
-FROM bitnami/kubectl:1.30.6 as kubectl
+FROM bitnami/kubectl:1.33.1 as kubectl
 
 # Main
-FROM node:22.11.0-bullseye-slim
+FROM node:22.16.0-bookworm-slim
 RUN apt update \
     && apt -y install \
     bash \

Dockerfile-rootless

@@ -11,10 +11,10 @@ RUN pip install yq==${YQ_VERSION}
 RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/ $(which yq)
 
 # kubectl binary
-FROM bitnami/kubectl:1.30.6 as kubectl
+FROM bitnami/kubectl:1.33.1 as kubectl
 
 # Main
-FROM node:22.11.0-alpine3.20
+FROM node:22.16.0-alpine3.22
 RUN apk --update add --no-cache \
     bash \
     ca-certificates \

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codefresh",
-  "version": "0.89.1",
+  "version": "0.89.2",
   "description": "Codefresh command line utility",
   "main": "index.js",
   "preferGlobal": true,
@@ -42,7 +42,8 @@
     "json-schema": "^0.4.0",
     "ansi-regex": "^5.0.1",
     "kubernetes-client/@kubernetes/client-node": ">=0.22.2",
-    "tough-cookie": "^4.1.3"
+    "tough-cookie": "^4.1.3",
+    "openid-client": "^4.9.0"
   },
   "dependencies": {
     "@codefresh-io/docker-reference": "^0.0.5",