diff --git a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/api/api.yaml b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/api/api.yaml
similarity index 99%
rename from .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/api/api.yaml
rename to .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/api/api.yaml
index 6448164286..7d8dc2f801 100644
--- a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/api/api.yaml
+++ b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/api/api.yaml
@@ -168,7 +168,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: tekton-hub-api
-          image: quay.io/tekton-hub/api:v1.22.3
+          image: quay.io/tekton-hub/api:v1.22.5
           resources:
             requests:
               cpu: 100m
@@ -206,6 +206,7 @@ spec:
             timeoutSeconds: 1
           securityContext:
             allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
             runAsUser: 65532
             capabilities:
               drop:
diff --git a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/db-migration/db-migration.yaml b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/db-migration/db-migration.yaml
similarity index 95%
rename from .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/db-migration/db-migration.yaml
rename to .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/db-migration/db-migration.yaml
index 869ed4aa21..e1254abe20 100644
--- a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/db-migration/db-migration.yaml
+++ b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/db-migration/db-migration.yaml
@@ -28,9 +28,10 @@ spec:
           type: RuntimeDefault
       containers:
         - name: tekton-hub-db-migration
-          image: quay.io/tekton-hub/db-migration:v1.22.3
+          image: quay.io/tekton-hub/db-migration:v1.22.5
           securityContext:
             allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
             runAsUser: 65532
             capabilities:
               drop:
diff --git a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/db/db.yaml b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/db/db.yaml
similarity index 100%
rename from .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/db/db.yaml
rename to .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/db/db.yaml
diff --git a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/hub-info/hub-info.yaml b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/hub-info/hub-info.yaml
similarity index 99%
rename from .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/hub-info/hub-info.yaml
rename to .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/hub-info/hub-info.yaml
index 66961ac6c1..18e2900cc0 100644
--- a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/hub-info/hub-info.yaml
+++ b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/hub-info/hub-info.yaml
@@ -20,7 +20,7 @@ metadata:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-hub
 data:
-  version: v1.22.3
+  version: v1.22.5
 
 ---
 # Copyright 2024 The Tekton Authors
diff --git a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/ui/ui.yaml b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/ui/ui.yaml
similarity index 89%
rename from .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/ui/ui.yaml
rename to .konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/ui/ui.yaml
index c6367e7d11..ec0e4d8eb4 100644
--- a/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.3/ui/ui.yaml
+++ b/.konflux/olm-catalog/bundle/kodata/tekton-hub/v1.22.5/ui/ui.yaml
@@ -34,7 +34,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: tekton-hub-ui
-          image: quay.io/tekton-hub/ui:v1.22.3
+          image: quay.io/tekton-hub/ui:v1.22.5
           resources:
             requests:
               cpu: 100m
@@ -44,10 +44,16 @@ spec:
               memory: 500Mi
           securityContext:
             allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
             runAsUser: 65532
             capabilities:
               drop:
                 - ALL
+          volumeMounts:
+            - name: config-volume
+              mountPath: /tmp/config
+            - name: tmp
+              mountPath: /tmp
           env:
             - name: API_URL
               valueFrom:
@@ -100,6 +106,11 @@ spec:
             periodSeconds: 5
             successThreshold: 1
             timeoutSeconds: 1
+      volumes:
+        - name: config-volume
+          emptyDir: {}
+        - name: tmp
+          emptyDir: {}
 
 ---
 apiVersion: v1
diff --git a/.konflux/olm-catalog/bundle/manifests/openshift-pipelines-operator-rh.clusterserviceversion.yaml b/.konflux/olm-catalog/bundle/manifests/openshift-pipelines-operator-rh.clusterserviceversion.yaml
index b028e44217..7655dfbfc6 100644
--- a/.konflux/olm-catalog/bundle/manifests/openshift-pipelines-operator-rh.clusterserviceversion.yaml
+++ b/.konflux/olm-catalog/bundle/manifests/openshift-pipelines-operator-rh.clusterserviceversion.yaml
@@ -356,7 +356,7 @@ spec:
 
     - Tekton Chains: v0.25.1
 
-    - Tekton Hub (tech-preview): v1.22.3
+    - Tekton Hub (tech-preview): v1.22.5
 
     - Tekton Results (tech-preview): v0.16.0