Repository navigation
Update Konflux references - #95
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
Conversation
|
🤖 Finished Review · ✅ Success · Started 12:06 AM UTC · Completed 12:14 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.76 |
|
<!-- fullsend:risk-assessment --> DetailsBot-authored routine Konflux Tekton pipeline reference update touching only two config files with no source code, no security-sensitive paths, and minimal git history churn, warranting the lowest risk score. Previous runRisk Assessment: low (1/5) DetailsRoutine bot-authored Konflux pipeline reference update touching only two Tekton YAML config files with no security-sensitive paths, no CI workflow changes, and no dependency modifications — all tier signals converge on minimal risk. Previous run (2)Risk Assessment: low (1/5) DetailsBot-authored routine Tekton task-bundle digest/version bump touching only 2 config files with <100 lines changed, no security-sensitive paths, no CI workflow changes, and low git-history churn — all signals converge on minimal risk. Previous run (3)Risk Assessment: low (1/5) DetailsBot-authored Tekton task bundle digest bump touching only 2 config-only YAML files with no source changes, no security-sensitive paths, no CI workflow modifications, and zero regression history yields a uniformly low composite score across both tiers (Tier 1 ≈ 1.0, Tier 2 ≈ 1.75, weighted composite ≈ 1.3 → rounds to 1). Previous run (4)Risk Assessment: low (1/5) DetailsBot-authored Konflux reference update touching only 2 Tekton YAML config files with 32 lines of digest/version bumps; all metadata and git history signals point to minimal risk. |
|
Looks good to me Previous run<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJhY3Rpb24iOiJhcHByb3ZlIiwiZmluZGluZ3MiOltdfQ== --> Looks good to me Previous run (2)<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 --> Looks good to me Previous run (3)Looks good to me <!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 --> Previous run (4)Looks good to me |
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
added
the
ready-for-merge
f577abc to
bc707bc
Compare
|
🤖 Finished Review · ✅ Success · Started 12:11 AM UTC · Completed 12:18 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.69 |
Superseded by updated review
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
bc707bc to
721b809
Compare
|
🤖 Finished Review · ✅ Success · Started 12:07 AM UTC · Completed 12:14 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.90 |
Superseded by updated review
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
721b809 to
50755d8
Compare
|
🤖 Finished Review · ✅ Success · Started 12:07 AM UTC · Completed 12:15 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.32 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Superseded by updated review
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
50755d8 to
493e3f9
Compare
|
🤖 Finished Review · ✅ Success · Started 12:07 AM UTC · Completed 12:21 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $4.29 |
fullsend-ai-review
Bot
removed
the
ready-for-merge
Superseded by updated review
fullsend-ai-review
Bot
added
the
ready-for-merge
This PR contains the following updates:
0.3.1→0.3.20.3.1→0.40.12.1→0.14.10.3.3→0.3.40ccc688→81b7cadfa53ef4→cc7d71da367891→b3c05f2c6c414a→ba9c1970.10.3→0.11.03e59d63→e3521e70.1→0.1.1d9df5d3→3e9b9940.1→0.1.10.5→0.5.10.4→0.4.10.3.1→0.4.0Release Notes
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-apply-tags)
v0.3.2Added
ADDITIONAL_TAGS_FROM_LABELparameter to specify image label to read additional tags from.For now set previously hardcoded value
konflux.additional-tagsby default to avoid changing the task behavior.konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-build-image-index)
v0.4Added
IMAGE_PLATFORM_MAPparameter: optional per-image platform mapping(
imageRef=os/archentries) passed tokonflux-build-clias--image-platform-map. This sets the platform on each index entry explicitly,which is required for OCI artifacts whose empty config carries no platform
information (e.g. disk images), where the platform would otherwise be null.
When empty (the default), behaviour is unchanged.
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)
v0.14.1Changed
v0.14.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
prefetch-dependencies-oci-ta>= 0.11.0 for naming consistency of the parameter.v0.13.0Changed
The
BUILD_ARGS_FILEparameter was renamed toBUILD_ARGS_FILESand allowspassing multiple build arguments files as buildah itself does.
v0.12.3Version 0.12.3 only has relevant changes for the remote variants of this task.
v0.12.2Changed
konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)
v0.3.4Added
clamd scans each file directly instead of recursing through nested archive
layers. This makes scanning of deeply nested archives faster. Extraction uses
bsdtar, which detects archives (zip/jar/war/ear/tarand tar.gz/tar.bz2/tar.xz) by content rather than extension — important because
the OCI
dir:payload is an extension-less blob — and unpacks themunconditionally with no size/count/depth limits. It is defensive: a corrupt or
partial archive is left in place for clamd rather than aborting the scan. No new
parameters are introduced. Requires the
clamav-dbimage to shipbsdtar(added in konflux-clamav).
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)
v0.11.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
buildah-oci-ta>= 0.14.0 andsource-build-oci-ta>= 0.4.0 for namingconsistency of the result.
v0.10.4konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)
v0.1.1Changed
konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta)
v0.1.1Fixed
CACHI2_ARTIFACTparameterfrom user pipelines. The parameter was dropped from the task definition in an
earlier release, but pipelines kept passing it.
konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta)
v0.5.1Fixed
CACHI2_ARTIFACTparameterfrom user pipelines. The parameter was dropped from the task definition in an
earlier release, but pipelines kept passing it.
konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta)
v0.4.1Fixed
CACHI2_ARTIFACTparameterfrom user pipelines. The parameter was dropped from the task definition in an
earlier release, but pipelines kept passing it.
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)
v0.4.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
prefetch-dependencies-oci-ta>= 0.11.0 for naming consistency of the parameter.v0.3.2Fixed
vendored as unpacked source trees rather than archives, so previously they
were missed by the archive-type filter and left out of the source image.
Configuration
📅 Schedule: (UTC)
* * * * 6)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.