Update Konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-buildah (source, changelog)	tekton-bundle	minor	0.13.0 → 0.14.0
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	digest	6fe7e04 → 6c7e4e2
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	4390141 → cc7d71d
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	7854d7b → 5197c2d
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies (source, changelog)	tekton-bundle	minor	0.10.3 → 0.11.0
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	patch	0.1 → 0.1.1
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	f72e0ba → f3d7323
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check (source, changelog)	tekton-bundle	digest	58ebf68 → 07bd358
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check (source, changelog)	tekton-bundle	digest	5274737 → 39471f7
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check (source, changelog)	tekton-bundle	digest	0df754f → c7d2e6b
quay.io/konflux-ci/tekton-catalog/task-source-build (source, changelog)	tekton-bundle	minor	0.3.2 → 0.4.0

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah)

v0.14.0

Changed

• Prefetch workspace directory $(workspaces.source.path)/cachi2 is now $(workspaces.source.path)/prefetch.

Requires prefetch-dependencies >= 0.11.0

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies)

v0.11.0

Changed

• Workspace prefetch directory $(workspaces.source.path)/cachi2 is now $(workspaces.source.path)/prefetch.

Requires buildah >= 0.14.0 and source-build >= 0.4.0

v0.10.4

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.63.0

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)

v0.1.1

Changed

• Updated rox-image-scan and exchange-service-account-token steps image to version 4.11.5 by following digest registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@​sha256:98f01d623e119acbbc211bdeb36192b619969aa149d9c66bab8034eeef84c861

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build)

v0.4.0

Changed

• Renamed workspace directory $(workspaces.workspace.path)/cachi2 to $(workspaces.workspace.path)/prefetch.

Requires prefetch-dependencies >= 0.11.0

---

Configuration

📅 Schedule: (in timezone America/Toronto)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 952f1b33-8bf7-4c53-b566-2f2eb03761ca

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[michael-valdron]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [michael-valdron]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment