NO-JIRA: chore(deps): update konflux references main

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	aa62b41 → de3722b
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	ae3fa44 → b65a1e0
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	4b3b768 → 0bc358b
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	9f18b21 → 4b0f83c
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	b4ac586 → 2d439dc
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	2c388d2 → f3f28a4
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	288f310 → f2de909
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	9917d11 → db8f7c0
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	1bc2d0f → aa0d54c
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	7f2e8ed → 65b14e5
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	2ad986f → 8f3ecbe
quay.io/konflux-ci/tekton-catalog/task-show-sbom (source, changelog)	04994df → a7346ed
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	362f047 → 0201377

---

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 11:59 PM, only on Saturday ( * 5-23 * * 6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated SHA256 digests for thirteen Tekton task bundle references across two PipelineRun configuration files. Task names and versions remain unchanged; only the bundle image digests are replaced with new values.

Changes

Cohort / File(s)	Summary
Tekton Task Bundle Digest Updates .tekton/openshift-mcp-server-pull-request.yaml, .tekton/openshift-mcp-server-push.yaml	Updated SHA256 digests for 13 Tekton task bundle references (show-sbom, init, git-clone-oci-ta, prefetch-dependencies-oci-ta, buildah-remote-oci-ta, build-image-index, source-build-oci-ta, ecosystem-cert-preflight-checks, sast-snyk-check-oci-ta, clamav-scan, apply-tags, push-dockerfile-oci-ta, rpms-signature-scan) while preserving task names and version tags.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 Bundle digests hop and skip,
New SHA values take a trip,
Tasks stay steady, versions bright,
Checksums dance in morning light,
Pipeline flows just right, just right! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Title check	✅ Passed	The title 'NO-JIRA: chore(deps): update konflux references main' directly reflects the main change—updating Tekton task bundle image digests for Konflux references across multiple Tekton pipeline files.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/main

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci-robot]

@red-hat-konflux[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	aa62b41 → de3722b
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	ae3fa44 → b65a1e0
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	4b3b768 → 0bc358b
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	9f18b21 → 4b0f83c
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	b4ac586 → 2d439dc
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	2c388d2 → f3f28a4
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	288f310 → f2de909
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	9917d11 → db8f7c0
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	1bc2d0f → aa0d54c
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	7f2e8ed → 65b14e5
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	2ad986f → 8f3ecbe
quay.io/konflux-ci/tekton-catalog/task-show-sbom (source, changelog)	04994df → a7346ed
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	362f047 → 0201377

---

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 11:59 PM, only on Saturday ( * 5-23 * * 6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[matzew]

/override "Konflux kflux-prd-rh02 / openshift-mcp-server-on-pull-request"

[openshift-ci]

@matzew: Overrode contexts on behalf of matzew: Konflux kflux-prd-rh02 / openshift-mcp-server-on-pull-request

Details

In response to this:

/override "Konflux kflux-prd-rh02 / openshift-mcp-server-on-pull-request"

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.