Skip to content

Conversation

@red-hat-konflux
Copy link

@red-hat-konflux red-hat-konflux bot commented Jun 21, 2025

This PR contains the following updates:

Package Change Notes
quay.io/konflux-ci/tekton-catalog/task-apply-tags 0c411c2 -> f44be1b
quay.io/konflux-ci/tekton-catalog/task-build-image-index 9c95b1f -> 79784d5
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta 0.4 -> 0.5 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.2 -> 0.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.2 -> 0.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check 8b58c4f -> db2b267
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check ecd3366 -> f59175d
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 8a2d3ce -> dae8e28
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta 0fea1e4 -> 0d80f66
quay.io/konflux-ci/tekton-catalog/task-init 66e90d3 -> bbf313b
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta adbd819 -> dc82a72
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta d0ee13a -> 2bc5b3a
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan ec7f6de -> 1b6c20a
quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta 7c845b1 -> cdbe1a9
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta 60a7ee6 -> bf7bdde
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta 9a6ec55 -> 181d63c
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta 0.2 -> 0.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-show-sbom 002f7c8 -> beb0616
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta 0.2 -> 0.3 ⚠️migration⚠️

Configuration

📅 Schedule: Branch creation - "after 5am on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@openshift-ci openshift-ci bot requested review from andyatmiami and atheo89 June 21, 2025 14:49
@red-hat-konflux
Copy link
Author

red-hat-konflux bot commented Jun 21, 2025

Caution

There are some errors in your PipelineRun template.

PipelineRun Error
unknown `Object 'Kind' is missing in '

List of images referenced from the Python code generation scripts for Tekton pipelines.

The structure of this file must be compatible with

https://docs.renovatebot.com/modules/manager/tekton/

Specifically, see function getDeps and function getBundleValue() in

https://github.com/renovatebot/renovate/blob/main/lib/modules/manager/tekton/extract.ts

This is using the 'older-style' bundle references (see ^^^), because they are a bit less verbose

Konflux (MintMaker) will then update the hashes in this yaml together with the generated Tekton pipelines

because the default renovate.json config includes .tekton/**.yaml (and .yml) files

https://github.com/konflux-ci/mintmaker/blob/289fefb5c7ac18c978b96080c2628d55d0712e83/config/renovate/renovate.json#L62-L70

items:

  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.4@sha256:9e866d4d0489a6ab84ae263db416c9f86d2d6117ef4444f495a0e97388ae3ac0
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1@sha256:86c069cac0a669797e8049faa8aa4088e70ff7fcd579d5bdc37626a9e0488a05
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-init:0.2@sha256:1d8221c84f91b923d89de50bf16481ea729e3b68ea04a9a7cbe8485ddbb27ee6
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:d35e5d501cb5f5f88369511f76249857cb5ac30250e1dcf086939321964ff6b9
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:092491ac0f6e1009d10c58a1319d1029371bf637cc1293cceba53c6da5314ed1
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.1@sha256:3499772af90aad0d3935629be6d37dd9292195fb629e6f43ec839c7f545a0faa
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:b1eb49583b41872b27356fee20d5f0eb6ff7f5cdeacde7ffb39655f031104728
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:3c8b81fa868e27c6266e7660a4bfb4c822846dcf4304606e71e20893b0d3e515
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.2@sha256:417f44117f8d87a4a62fea6589b5746612ac61640b454dbd88f74892380411f2
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:f99d2bdb02f13223d494077a2cde31418d09369f33c02134a8e7e5fad2f61eda
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:fe5e5ba3a72632cd505910de2eacd62c9d11ed570c325173188f8d568ac60771
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.2@sha256:7749146f7e4fe530846f1b15c9366178ec9f44776ef1922a60d3e7e2b8c6426b
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-sast-coverity-check-oci-ta:0.3@sha256:f9ca942208dc2e63b479384ccc56a611cc793397ecc837637b5b9f89c2ecbefe
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-coverity-availability-check:0.2@sha256:db2b267dc15e4ed17f704ee91b8e9b38068e1a35b1018a328fdca621819d74c6
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:bf7bdde00b7212f730c1356672290af6f38d070da2c8a316987b5c32fd49e0b9
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.3@sha256:a2bde66f6b4164620298c7d709b8f08515409404000fa1dc2260d2508b135651
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.2@sha256:517a51e260c0b59654a9d7b842e1ab07d76bce15ca7ce9c8fd2489a19be6463d
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.1@sha256:8c75c4a747e635e5f3e12266a3bb6e5d3132bf54e37eaa53d505f89897dd8eca
  • spec:
    taskRef:
    bundle: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:1b6c20ab3dbfb0972803d3ebcb2fa72642e59400c77bd66dfd82028bdd09e120

'` |

@openshift-ci
Copy link

openshift-ci bot commented Jun 21, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign jiridanek for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link

openshift-ci bot commented Jun 21, 2025

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a red-hat-data-services member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from ad0c23e to 301a308 Compare June 28, 2025 08:19
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch 2 times, most recently from 89f1bd5 to c0fbea2 Compare July 12, 2025 08:06
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from c0fbea2 to 8d1e8f6 Compare July 19, 2025 16:33
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from 8d1e8f6 to 58df7a6 Compare August 9, 2025 08:28
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from 58df7a6 to e8e0578 Compare August 16, 2025 08:48
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from e8e0578 to db1197a Compare August 23, 2025 08:57
@jiridanek jiridanek changed the title chore(deps): update konflux references [rhoai-2.22] chore(deps): update konflux references Aug 25, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from db1197a to 7e888c6 Compare August 30, 2025 08:56
@red-hat-konflux red-hat-konflux bot changed the title [rhoai-2.22] chore(deps): update konflux references chore(deps): update konflux references Aug 30, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from 7e888c6 to 3dd6891 Compare September 6, 2025 08:49
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from 3dd6891 to 3c5dc65 Compare September 13, 2025 08:54
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch 2 times, most recently from 9789063 to 1d6f222 Compare September 27, 2025 08:49
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/references/rhoai-2.22 branch from 1d6f222 to 64097d2 Compare October 4, 2025 08:55
@atheo89
Copy link
Member

atheo89 commented Oct 15, 2025

@moulalis I ping you here but if somebody else monitor this .tekton updates on downstream please feel free to redirect this request.

What is the status of these updates? Shall you merge this PR or can be closed?
There are a lot open abandoned PRs on downstream and it would be nice to clean up a bit.

@atheo89 atheo89 closed this Oct 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant