Skip to content

chore(deps): update konflux references#634

Closed
red-hat-konflux[bot] wants to merge 1 commit into
security-compliancefrom
konflux/references/security-compliance
Closed

chore(deps): update konflux references#634
red-hat-konflux[bot] wants to merge 1 commit into
security-compliancefrom
konflux/references/security-compliance

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Notes
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog) 0.20.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog) 0.20.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog) 0.70.9 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog) 654b9898fad4c2
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog) b2f2559567cb66
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog) 1cf21dee78d0d3
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog) da4f6a588f4fd6
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog) 56f65a1d30f13d
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog) 0.20.4 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog) 0.20.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog) 0.10.3 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog) 0041778237c54b
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog) e7a51573cbb353
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog) 49b7d090ebf28a
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog) 0.30.4 ⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-show-sbom (source, changelog) beb0616a7346ed
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog) c35ba218567bb7

Release Notes

konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-apply-tags)

v0.3

  • Switched from bash implementation to Konflux Build CLI.
  • Deprecated older 0.1 and 0.2 versions.
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

v0.3

Changed
  • The task now uses konflux-build-cli for the build step instead of an inline bash
    implementation. This provides more robust error handling and simplified maintenance.
  • When ALWAYS_BUILD_INDEX is false and multiple images are provided, the task now
    creates an image index instead of failing. The previous behavior (failing with an error)
    was not useful.
  • Image reference validation is now stricter and will fail earlier for invalid formats.
Removed
  • COMMIT_SHA parameter (was not used by the task implementation)
  • IMAGE_EXPIRES_AFTER parameter (was not used by the task implementation)
Added
  • Started tracking changes in this file.
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)

v0.9

Fixed
  • Validate base image architecture before build. The task now fails if a base image
    doesn't match the host architecture, preventing silent emulation builds.

v0.8

Fixed
  • Platform build arguments (BUILDPLATFORM, TARGETPLATFORM) now correctly include CPU variant
    for ARM architectures (e.g., linux/arm/v7 or linux/arm64/v8 instead of just linux/arm
    or linux/arm64).
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-init)

v0.4

  • Pipeline upgrade: Remove PipelineRun parameter sast-target-dirs with invalid attributes from PipelineRun .spec.params definition

v0.3

  • Remove params image-url, rebuild and skip-checks
  • Remove task result build
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.3

  • Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
  • Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.
konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta)

v0.3

Fixed
  • Use Dockerfile as the file name in the uploaded artifact, regardless of the name of the actual file.

v0.2

Removed
  • BREAKING: Support for Dockerfile downloading in Konflux Build Pipeline.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@karelhala
Copy link
Copy Markdown
Contributor

Closing: superseded by combined dependency update PR on main.

@karelhala karelhala closed this May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant