Skip to content

chore(deps): update konflux references - #566

Merged
JasonPowr merged 2 commits into
mainfrom
konflux/references/main
Jul 27, 2026
Merged

chore(deps): update konflux references#566
JasonPowr merged 2 commits into
mainfrom
konflux/references/main

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog) tekton-bundle patch 0.30.3.1
quay.io/konflux-ci/tekton-catalog/task-buildah (source, changelog) tekton-bundle patch 0.100.10.5
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog) tekton-bundle patch 0.100.10.5
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog) tekton-bundle patch 0.100.10.5
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog) tekton-bundle digest 9ff424df5b4415
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog) tekton-bundle digest e78d0d30ccc688
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog) tekton-bundle digest 2e5ebe027c9760
quay.io/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta (source, changelog) tekton-bundle digest 9b6d61e1be92a6
quay.io/konflux-ci/tekton-catalog/task-git-clone (source, changelog) tekton-bundle patch 0.2.40.2.5
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog) tekton-bundle patch 0.2.40.2.5
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog) tekton-bundle patch 0.4.20.4.3
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies (source, changelog) tekton-bundle minor 0.30.6.0
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog) tekton-bundle minor 0.30.6.0
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog) tekton-bundle digest 2e79e47ccb77d1
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check (source, changelog) tekton-bundle digest a13743ab3df8ca
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog) tekton-bundle digest f6a115e5e4586b
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check (source, changelog) tekton-bundle digest 8ce335c73ddc5e
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog) tekton-bundle digest 918327beba24f5
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check (source, changelog) tekton-bundle digest 9185328cc79a84
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog) tekton-bundle digest 4961c44eb9d539
quay.io/konflux-ci/tekton-catalog/task-validate-fbc (source, changelog) tekton-bundle digest f430ab38988a61

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

v0.3.1

Fixed
  • Export SBOM_SKIP_VALIDATION into the step environment so the create-sbom step honors the parameter.
    The parameter did nothing before. Now it works as expected.
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-buildah)

v0.10.5

Added
  • Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
    --rhsm-mount-ca-certs option.
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)

v0.10.5

Added
  • Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
    --rhsm-mount-ca-certs option.
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.10.5

Added
  • Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
    --rhsm-mount-ca-certs option.
konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies)

v0.6.0

v0.5.0

v0.4.1

Version 0.4.1 only changes the -oci-ta variant of this task.
Nothing changed in the base task (the one you're looking at).

v0.4.0

v0.3.2

  • Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
  • Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.
konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.6.0

v0.5.0

v0.4.1

Fixed
  • Mount the trusted-ca volume in the use-trusted-artifact and create-trusted-artifact steps.
    Previously, the mount was missing, which means the task did not support container registries
    with certificates signed by a private/self-signed CA.

v0.4.0

v0.3.2

  • Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
  • Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@JasonPowr
JasonPowr force-pushed the konflux/references/main branch from 3a60a4a to 2bf157f Compare July 27, 2026 09:54
@github-actions

Copy link
Copy Markdown

Configuration Diff

2 document(s) impacted:

+ 1 added
- 0 removed
! 1 modified
Diff
@@ spec @@
# appstudio.redhat.com/v1beta2/IntegrationTestScenario/rhtas-tenant/pipelines-enterprise-contract
! + one map entry added:
+   contexts:
+   - name: component_docker-build
+     description: "execute the integration test when component docker-build updates"
+   - name: component_docker-build-oci-ta
+     description: "execute the integration test when component docker-build-oci-ta updates"
+   - name: component_docker-build-multi-platform-oci-ta
+     description: "execute the integration test when component docker-build-multi-platform-oci-ta updates"

@@ (root level) @@
# appstudio.redhat.com/v1beta2/IntegrationTestScenario/rhtas-tenant/pipelines-fbc-enterprise-contract
! + one document added:
+   ---
+   apiVersion: appstudio.redhat.com/v1beta2
+   kind: IntegrationTestScenario
+   metadata:
+     name: pipelines-fbc-enterprise-contract
+     namespace: rhtas-tenant
+     annotations:
+       test.appstudio.openshift.io/kind: enterprise-contract
+   spec:
+     application: pipelines
+     contexts:
+     - name: component_fbc-builder
+       description: "execute the integration test when component fbc-builder updates"
+     params:
+     - name: POLICY_CONFIGURATION
+       value: rhtap-releng-tenant/fbc-standard
+     resolverRef:
+       params:
+       - name: url
+         value: "https://github.com/konflux-ci/build-definitions"
+       - name: revision
+         value: main
+       - name: pathInRepo
+         value: pipelines/enterprise-contract.yaml
+       resolver: git
+       resourceKind: pipeline

📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt

@JasonPowr
JasonPowr merged commit ff35d45 into main Jul 27, 2026
12 checks passed
@JasonPowr
JasonPowr deleted the konflux/references/main branch July 27, 2026 10:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant