[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	a1d5e6d → 87e1451
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	digest	654446d → 0c0cf90
quay.io/konflux-ci/tekton-catalog/task-buildah (source, changelog)	tekton-bundle	patch	0.14.0 → 0.14.1
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	digest	6c7e4e2 → 6406168
quay.io/konflux-ci/tekton-catalog/task-git-clone (source, changelog)	tekton-bundle	digest	8c7fc8c → 2f39fc8
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	5197c2d → ba9c197
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies (source, changelog)	tekton-bundle	digest	8a62790 → 662bd51
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile (source, changelog)	tekton-bundle	digest	7c7d96e → 8aa76b7
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	digest	2fafbf5 → 4d2c2ed
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	f3d7323 → 3e9b994
quay.io/konflux-ci/tekton-catalog/task-source-build (source, changelog)	tekton-bundle	digest	3d2a749 → 4826b7e

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah)

v0.14.1

Changed

• Mobster revision updated.
• SBOMs now preserve Syft relationships even for Hermeto-prefetched packages.

---

Configuration

📅 Schedule: (in timezone America/Toronto)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 08026162-a65f-4cad-a1a2-377d606b5824

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [michael-valdron]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment