Skip to content

Update Konflux references (release-v0.7) - #3514

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-v0.7from
konflux/references/release-v0.7
Open

Update Konflux references (release-v0.7)#3514
red-hat-konflux[bot] wants to merge 1 commit into
release-v0.7from
konflux/references/release-v0.7

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog) tekton-bundle digest da0cff22dae3c4
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog) tekton-bundle digest b00c9e6c2cda69
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog) tekton-bundle patch 0.11.00.11.2
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog) tekton-bundle minor 0.3.20.4.0
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog) tekton-bundle digest e438f314619769
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog) tekton-bundle patch 0.2.50.2.6
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog) tekton-bundle digest 15d3d4a5f68715
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog) tekton-bundle minor 0.7.10.10.1
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog) tekton-bundle digest 350a144393b4d0
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog) tekton-bundle digest 41ff593538a853
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog) tekton-bundle digest d33d800beb05ae
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog) tekton-bundle digest f4818f8b78e9c0
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog) tekton-bundle digest f31055cd09f717
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog) tekton-bundle digest 93f1df16bb2697

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)

v0.11.2

Fixed
  • Per-arch RPM filtering for the prefetch SBOM.
    • With buildah task versions >= 0.10.0, < 0.11.2, the final SBOM would always
      include the x86_64 RPMs (and no other arches) from the prefetch SBOM,
      even for images built on other arches.
    • Now, the SBOM will contain the RPMs for the corresponding arch.

v0.11.1

Version 0.11.1 only has relevant changes for the remote variants of this task.

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clair-scan)

v0.4

Changed

0.4 is a dummy version used to facilitate the migration from clair-scan 0.3 to roxctl-scan 0.1

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.10.1

Changed
  • When input is empty, only run the skip-ta step and skip other steps
  • Use quay.io/konflux-ci/task-runner for the skip-ta step instead of ubi-minimal

v0.10.0

v0.9.0

Added
  • Added optional pip-index-url parameter to pass PIP_INDEX_URL to Hermeto for pip dependency prefetch.
    When set, this URL is used as a fallback package index when requirements.txt does not specify --index-url.
    To use this parameter, add pip-index-url (type: string, default: "") to your pipeline params
    and pass it to the prefetch-dependencies task.

v0.8.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 22, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 6:40 AM UTC · Completed 6:47 AM UTC

Commit: 87c4a29 · View workflow run →

@codecov

codecov Bot commented Aug 22, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
generative 69.55% <ø> (ø)
integration 69.55% <ø> (ø)
unit 69.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@fullsend-ai-review

Copy link
Copy Markdown

Looks good to me

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Aug 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ready-for-merge All reviewers approved — ready to merge release-v0.7 renovate size: S

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants