[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	a1d5e6d → 87e1451
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	digest	654446d → 0c0cf90
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	minor	0.13.0 → 0.14.1
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	digest	6fe7e04 → 6406168
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	4390141 → cc7d71d
quay.io/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta (source, changelog)	tekton-bundle	digest	465d8c8 → 2fdc236
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	digest	a367891 → b3c05f2
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	7854d7b → ba9c197
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	minor	0.10.3 → 0.11.0
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	tekton-bundle	digest	4c567d1 → e3521e7
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	patch	0.1 → 0.1.1
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	f72e0ba → b01333d
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	tekton-bundle	digest	a3bcbf0 → 8372228
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	tekton-bundle	digest	d01cd72 → 53443fe
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	tekton-bundle	digest	ec176a3 → 2ee8973
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	minor	0.3.2 → 0.4.0

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.14.1

Changed

• Mobster revision updated.
• SBOMs now preserve Syft relationships even for Hermeto-prefetched packages.

v0.14.0

Changed

• Renamed Trusted Artifact parameter CACHI2_ARTIFACT to PREFETCH_ARTIFACT.
• Renamed Trusted Artifact path /var/workdir/cachi2 to /var/workdir/prefetch.

Recommended to use prefetch-dependencies-oci-ta >= 0.11.0 for naming consistency of the parameter.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.11.0

Changed

• Renamed Trusted Artifact result CACHI2_ARTIFACT to PREFETCH_ARTIFACT.
• Renamed Trusted Artifact path /var/workdir/cachi2 to /var/workdir/prefetch.

Recommended to use buildah-oci-ta >= 0.14.0 and source-build-oci-ta >= 0.4.0 for naming
consistency of the result.

v0.10.4

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.63.0

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)

v0.1.1

Changed

• Updated rox-image-scan and exchange-service-account-token steps image to version 4.11.5 by following digest registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@​sha256:98f01d623e119acbbc211bdeb36192b619969aa149d9c66bab8034eeef84c861

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)

v0.4.0

Changed

• Renamed Trusted Artifact parameter CACHI2_ARTIFACT to PREFETCH_ARTIFACT.
• Renamed Trusted Artifact path /var/workdir/cachi2 to /var/workdir/prefetch.

Recommended to use prefetch-dependencies-oci-ta >= 0.11.0 for naming consistency of the parameter.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Saturday (* * * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dsimansk]

Don't merge until cachi2 param migration is sorted.

/hold

[Kaustubh-pande]

/retest
/lgtm
/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Kaustubh-pande, red-hat-konflux-kflux-prd-rh02[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [Kaustubh-pande]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

New changes are detected. LGTM label has been removed.