Skip to content

chore(deps): update konflux references - #384

Merged
michael-valdron merged 1 commit into
mainfrom
konflux/references/main
Nov 8, 2026
Merged

michael-valdron merged 1 commit into
mainfrom
konflux/references/main

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog) tekton-bundle digest a77e614 → 6106621
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog) tekton-bundle digest daa950c → 6c80911
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog) tekton-bundle digest 2c44f7f → c02e7ce
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog) tekton-bundle patch 0.3.4 → 0.3.6
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog) tekton-bundle digest 81b7cad → f86e420
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog) tekton-bundle digest 43604d0 → 0b1783a
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog) tekton-bundle digest 590db5c → c3c1071
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog) tekton-bundle digest e3f908c → 67bea82
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog) tekton-bundle digest 6c63bc1 → 3839c84
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog) tekton-bundle digest c6874d3 → d9d5ecd
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog) tekton-bundle minor 0.1.1 → 0.2
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog) tekton-bundle digest 71bd384 → 4bf27ae

Release Notes

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)

v0.3.6

Fixed
  • Normalize Konflux node-pool suffixes in image-arch before selecting an OCI
    manifest. A scheduling label such as linux-m2xlarge/arm64 is treated as
    linux/arm64, so the scan matches the image manifest.

v0.3.5

Added
  • Scan Linux, Windows, and macOS container images by retaining each manifest's
    OCI operating system and architecture during platform selection and layer
    extraction. The image-arch parameter now accepts full OCI platforms and
    recognizes mac, macos, and osx as aliases for darwin.
konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)

v0.2

Added
  • Added new result: ACS_RHSAS that contains found critical and important CVEs RHSAS
  • Added new step: get-rhsas fetches all critical and important RHSAs from parsed roxctl-scan output and stores it in the result mentioned above

Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@openshift-ci
openshift-ci Bot requested review from Jdubrick and thepetk November 8, 2026 00:32
@coderabbitai

coderabbitai Bot commented Nov 8, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 49c7fa20-7fba-4c5b-b582-8aec23187a45

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@michael-valdron michael-valdron left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci

openshift-ci Bot commented Nov 8, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved label Nov 8, 2026
@michael-valdron
michael-valdron merged commit 594021e into main Nov 8, 2026
10 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant