deploy: update catalyst images to d852553

products/catalyst/chart/templates/api-deployment.yaml

@@ -160,7 +160,7 @@ spec:
           # values.yaml `images.catalystApi.tag` is also bumped (but
           # unused for catalyst-api; kept for SME services that DO read
           # from values).
-          image: "ghcr.io/openova-io/openova/catalyst-api:e93f2be"
+          image: "ghcr.io/openova-io/openova/catalyst-api:d852553"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080
@@ -198,7 +198,7 @@ spec:
             # field so dashboards can correlate api-version <-> chart-
             # version on a single probe.
             - name: CATALYST_BUILD_SHA
-              value: "e93f2be"
+              value: "d852553"
             - name: CATALYST_CHART_VERSION
               value: "1.4.95"
             - name: CORS_ORIGIN

products/catalyst/chart/templates/ui-deployment.yaml

@@ -24,7 +24,7 @@ spec:
           # Auto-bumped by .github/workflows/catalyst-build.yaml's deploy
           # step on every push to main, so Sovereigns AND contabo both
           # roll to the latest catalyst-ui SHA.
-          image: "ghcr.io/openova-io/openova/catalyst-ui:e93f2be"
+          image: "ghcr.io/openova-io/openova/catalyst-ui:d852553"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080

products/catalyst/chart/values.yaml

@@ -193,9 +193,9 @@ images:
   organization: "openova-io/openova"
   # SHA tags — bump these via CI when building new images.
   catalystApi:
-    tag: "e93f2be"
+    tag: "d852553"
   catalystUi:
-    tag: "e93f2be"
+    tag: "d852553"
   marketplaceApi:
     tag: "3c2f7e4"
   console: