chore(deps): bump ubi9/ubi-minimal from 9.7-1776104705 to 9.8-1780378819 in /build

[dependabot]

Bumps ubi9/ubi-minimal from 9.7-1776104705 to 9.8-1780378819.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated Docker base images to newer versions across build configurations for improved stability and security.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: f379445b-8cba-4770-a7f7-b225c57c0837

📥 Commits

Reviewing files that changed from the base of the PR and between a240827 and e23e7db.

📒 Files selected for processing (3)

• build/Dockerfile
• build/Dockerfile.olm-registry
• build/Dockerfile.webhook

---

Walkthrough

This PR updates the Red Hat UBI-minimal base image version from 9.7-1776104705 to 9.8-1780378819 consistently across three Dockerfile variants: the main application build, the OLM registry build, and the webhook build. No other build logic or runtime configuration changed.

Changes

Base image version update

Layer / File(s)	Summary
Update ubi-minimal base image to 9.8-1780378819 build/Dockerfile, build/Dockerfile.olm-registry, build/Dockerfile.webhook	All three Dockerfile runtime stages update the ubi-minimal base image tag from 9.7-1776104705 to 9.8-1780378819 in their FROM instructions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: updating the ubi-minimal base image from version 9.7 to 9.8 across the Dockerfile files in /build.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR only updates Docker image base tags; no Ginkgo tests or test files modified. Custom check for Ginkgo test names is not applicable to this dependency-only PR.
Test Structure And Quality	✅ Passed	Check is not applicable to this PR. The custom check reviews Ginkgo test code quality, but this PR only modifies Docker build configurations (Dockerfile base image versions) with no test code changes.
Microshift Test Compatibility	✅ Passed	PR only updates Docker base image tags in Dockerfile files; no new Ginkgo e2e tests were added, making this check not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only updates Docker base image versions in Dockerfiles; no Ginkgo e2e tests are added, so SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	PR only updates Docker base image tags in Dockerfiles; no deployment manifests, operator code, or controllers were added/modified, so topology-aware scheduling check is not applicable.
Ote Binary Stdout Contract	✅ Passed	PR only updates Docker base image tags in Dockerfile files; no changes to Go source code, main entry points, or process-level stdout writes that the OTE Binary Stdout Contract check concerns.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR contains only Docker base image version updates; no new Ginkgo e2e tests are added, making the IPv6/disconnected network compatibility check inapplicable.
No-Weak-Crypto	✅ Passed	PR only updates base image tags in Dockerfiles with no weak crypto usage. No code changes or crypto implementations introduced in pull request.
Container-Privileges	✅ Passed	PR only updates base image tag; no privileged settings, hostPID/hostNetwork/hostIPC, SYS_ADMIN capabilities, or root execution. Containers run as non-root with proper securityContext.
No-Sensitive-Data-In-Logs	✅ Passed	PR only updates Docker base image tags in Dockerfiles from 9.7 to 9.8; no logging code added or modified, and no sensitive data exposure in logs.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/docker/build/ubi9/ubi-minimal-9.8-1780378819

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign erdii for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.24%. Comparing base (a240827) to head (e23e7db).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #751   +/-   ##
=======================================
  Coverage   59.24%   59.24%           
=======================================
  Files          62       62           
  Lines        4125     4125           
=======================================
  Hits         2444     2444           
  Misses       1532     1532           
  Partials      149      149           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.