Update Konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	3ab8441 → 6387614
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	patch	0.3 → 0.3.1
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	patch	0.10 → 0.10.5
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog)	tekton-bundle	patch	0.3 → 0.3.2
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	patch	0.3 → 0.3.1
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog)	tekton-bundle	digest	e78d0d3 → 0ccc688
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	2e5ebe0 → 27c9760
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	patch	0.2 → 0.2.5
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	patch	0.4 → 0.4.3
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	minor	0.3 → 0.6.0
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	tekton-bundle	patch	0.3 → 0.3.1
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	patch	0.2 → 0.2.1
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	tekton-bundle	digest	f6a115e → 61b27e6
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	tekton-bundle	digest	918327b → eba24f5
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	tekton-bundle	digest	4961c44 → eb9d539
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	digest	7c5575a → 2dd5b3e
quay.io/konflux-ci/tekton-catalog/task-validate-fbc (source, changelog)	tekton-bundle	minor	0.1 → 0.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

v0.3.1

Fixed

• Export SBOM_SKIP_VALIDATION into the step environment so the create-sbom step honors the parameter.
  The parameter did nothing before. Now it works as expected.

konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.10.5

Added

• Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
  --rhsm-mount-ca-certs option.

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clair-scan)

v0.3.2

Changed

• Replaced quay.io/konflux-ci/oras:latest image with quay.io/konflux-ci/task-runner:1.5.0 in the oci-attach-report step.

Added

• set docker-config-dir in clair-action report command

v0.3.1

Added

• Declare DOCKER_CONFIG to get get credential to quay.io.
• Increase retry to 5

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.6.0

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.59.0

v0.5.0

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.58.0

v0.4.1

Fixed

• Mount the trusted-ca volume in the use-trusted-artifact and create-trusted-artifact steps.
  Previously, the mount was missing, which means the task did not support container registries
  with certificates signed by a private/self-signed CA.

v0.4.0

• Hermeto releases from 0.55.0 to 0.57.1 - hermetoproject/hermeto@0.55.0...0.57.1

v0.3.2

• Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
• Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.

konflux-ci/konflux-operator-tasks (quay.io/konflux-ci/tekton-catalog/task-validate-fbc)

v0.2

Changed

• Version bump to trigger automated rollout of the new fbc-inject-lifecycle-oci-ta
  task to all FBC builder pipelines via MintMaker. No functional changes to this task.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

Tekton PipelineRuns refresh pinned task bundle references across FBC, Lightspeed, and OLS workflows. Lightspeed and OLS pipelines also add reproducibility parameters and pass them to buildah-remote-oci-ta.

Changes

Tekton pipeline updates

Layer / File(s)	Summary
FBC task bundle references .tekton/fbc-v4-*.yaml	Updates pinned task bundle versions and digests across FBC pull-request and push PipelineRuns without changing task wiring.
Lightspeed reproducibility parameters and bundle references .tekton/lightspeed-operator-*.yaml	Adds source-date-epoch, rewrite-timestamp, and omit-history, passes them to buildah-remote-oci-ta, and refreshes referenced bundles.
OLS reproducibility parameters and bundle references .tekton/ols-bundle-*.yaml	Adds the same reproducibility parameters, wires them into buildah-remote-oci-ta, and refreshes referenced bundles.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

• openshift/lightspeed-operator#1765: Updates overlapping pinned Tekton task bundles and includes related parameter wiring.
• openshift/lightspeed-operator#1789: Updates pinned Tekton bundle references across the same FBC PipelineRuns.

Suggested reviewers: joshuawilson, bparees

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is concise and accurately summarizes the main change: updating Konflux references.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/main

---

_{Comment @coderabbitai help to get the list of available commands.}

[red-hat-konflux]

⚠️ Artifact update problem

ℹ️ Note

This PR body was truncated due to platform limits.

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: /bin/sh -c pipeline-migration-tool migrate -f "$RENOVATE_POST_UPGRADE_COMMAND_DATA_FILE"
DEBUG:2026-07-28 04:11:01,821:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,822:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,822:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,824:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,822:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,822:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,894:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,896:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,896:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,896:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,898:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,899:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,900:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,901:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,993:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,996:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:01,997:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,093:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,094:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta
DEBUG:2026-07-28 04:11:02,095:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,193:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-deprecated-image-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,293:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 380
DEBUG:2026-07-28 04:11:02,294:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-build-image-index
DEBUG:2026-07-28 04:11:02,394:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,394:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,396:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check
DEBUG:2026-07-28 04:11:02,493:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,493:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-rpms-signature-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-07-28 04:11:02,494:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 715
DEBUG:2026-07-28 04:11:02,494:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clamav-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,495:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,495:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,497:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta
DEBUG:2026-07-28 04:11:02,497:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,499:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan
DEBUG:2026-07-28 04:11:02,500:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta
DEBUG:2026-07-28 04:11:02,501:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-clamav-scan
DEBUG:2026-07-28 04:11:02,509:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clair-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,525:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,529:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,533:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-source-build-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 381
DEBUG:2026-07-28 04:11:02,533:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,542:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-28 04:11:02,544:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 718
DEBUG:2026-07-28 04:11:02,568:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-07-28 04:11:02,593:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.10- HTTP/1.1" 200 2666
DEBUG:2026-07-28 04:11:02,594:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,595:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-apply-tags
DEBUG:2026-07-28 04:11:02,595:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,595:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-validate-fbc/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 381
DEBUG:2026-07-28 04:11:02,595:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,596:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,596:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,597:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-clair-scan
DEBUG:2026-07-28 04:11:02,598:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks
DEBUG:2026-07-28 04:11:02,599:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta
DEBUG:2026-07-28 04:11:02,600:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta
DEBUG:2026-07-28 04:11:02,601:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta
DEBUG:2026-07-28 04:11:02,602:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta
DEBUG:2026-07-28 04:11:02,695:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,605:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta
WARNING:2026-07-28 04:11:02,607:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.10.5@sha256:eb277ec7b44443f0506a60ac940a2e52178d60f17cb0f51a6966daed5b3755de
DEBUG:2026-07-28 04:11:02,607:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,609:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-validate-fbc
DEBUG:2026-07-28 04:11:02,609:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,693:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,693:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,693:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,694:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,694:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,695:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,695:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,604:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-init
DEBUG:2026-07-28 04:11:02,697:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,697:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-07-28 04:11:02,697:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta. Skip resolving migrations.
DEBUG:2026-07-28 04:11:02,698:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,698:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,700:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,700:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,702:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,704:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,704:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-28 04:11:02,704:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,706:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,707:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:02,893:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-deprecated-image-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 9526
DEBUG:2026-07-28 04:11:02,894:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 380
DEBUG:2026-07-28 04:11:02,936:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-rpms-signature-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-07-28 04:11:02,943:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-validate-fbc/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 381
DEBUG:2026-07-28 04:11:02,972:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 11584
DEBUG:2026-07-28 04:11:02,976:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-07-28 04:11:02,998:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,093:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 1781
DEBUG:2026-07-28 04:11:03,093:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 14496
DEBUG:2026-07-28 04:11:03,096:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 5210
DEBUG:2026-07-28 04:11:03,096:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clamav-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 9483
DEBUG:2026-07-28 04:11:03,097:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,097:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,098:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,098:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
WARNING:2026-07-28 04:11:03,101:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3.1@sha256:e19d134048f05dc7c337914b68590699240b92194979bfcc9e1ef4bdf6adb4c4
DEBUG:2026-07-28 04:11:03,103:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
WARNING:2026-07-28 04:11:03,104:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3.1@sha256:53a02326bfb930ca5ef6bfa7a33acca833d57752f34f3cb79255fe2e25e7d217
DEBUG:2026-07-28 04:11:03,105:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-07-28 04:11:03,105:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta. Skip resolving migrations.
INFO:2026-07-28 04:11:03,106:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-clamav-scan. Skip resolving migrations.
DEBUG:2026-07-28 04:11:03,125:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 718
DEBUG:2026-07-28 04:11:03,126:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,133:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 2070
DEBUG:2026-07-28 04:11:03,193:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clair-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 10958
DEBUG:2026-07-28 04:11:03,194:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14217
WARNING:2026-07-28 04:11:03,194:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:d5f39d5a89e8073774bac1a9b9013709c5931921dd4fb1cf662f800e6c5c9ee7
INFO:2026-07-28 04:11:03,198:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta. Skip resolving migrations.
DEBUG:2026-07-28 04:11:03,294:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,296:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,382:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/manifests/sha256:eba24f5d9f4b18aa71e523b9b3dbcf22982aa4b018824260a090b19dfc9abf6f HTTP/1.1" 200 2358
INFO:2026-07-28 04:11:03,383:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.5-7d6f8a51f6ea409321304beadefef2f061163b63@sha256:eba24f5d9f4b18aa71e523b9b3dbcf22982aa4b018824260a090b19dfc9abf6f
DEBUG:2026-07-28 04:11:03,396:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/manifests/migration-0.2-41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733-1783967772 HTTP/1.1" 200 629
DEBUG:2026-07-28 04:11:03,441:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/manifests/migration-0.3.2-6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea-1782912267 HTTP/1.1" 200 631
DEBUG:2026-07-28 04:11:03,442:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 1203
DEBUG:2026-07-28 04:11:03,493:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 6405
DEBUG:2026-07-28 04:11:03,493:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-rpms-signature-scan/manifests/migration-0.2.1-2a1624ccd4b208f24611434c2464591a7195e5221334dd086923a7e696a9d62c-1770887021 HTTP/1.1" 200 631
DEBUG:2026-07-28 04:11:03,494:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/blobs/sha256:41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733 HTTP/1.1" 302 1019
DEBUG:2026-07-28 04:11:03,495:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-apply-tags/manifests/sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf HTTP/1.1" 200 1168
DEBUG:2026-07-28 04:11:03,498:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-deprecated-image-check/manifests/sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872 HTTP/1.1" 200 1377
DEBUG:2026-07-28 04:11:03,500:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-07-28 04:11:03,502:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3-1783929211@sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf
DEBUG:2026-07-28 04:11:03,504:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/manifests/migration-0.4.3-d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97-1784627340 HTTP/1.1" 200 631
INFO:2026-07-28 04:11:03,505:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5-a545338e5bac49c7dfdba1cc2e5ad1c0b1e9ef7d@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
DEBUG:2026-07-28 04:11:03,505:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-28 04:11:03,507:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,544:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/blobs/sha256:6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea HTTP/1.1" 302 1019
DEBUG:2026-07-28 04:11:03,557:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-rpms-signature-scan/blobs/sha256:2a1624ccd4b208f24611434c2464591a7195e5221334dd086923a7e696a9d62c HTTP/1.1" 302 1019
DEBUG:2026-07-28 04:11:03,593:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-28 04:11:03,593:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-28 04:11:03,620:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/blobs/sha256:d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97 HTTP/1.1" 302 1019
DEBUG:2026-07-28 04:11:03,692:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-clair-scan/manifests/sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174 HTTP/1.1" 200 1267
DEBUG:2026-07-28 04:11:03,693:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/41/41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260728%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260728T041103Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=9ea470bb490648dd5adc00fd2cba22caed5aeb3dd459bc8e1dec9de9749cb383 HTTP/1.1" 200 3853
DEBUG:2026-07-28 04:11:03,693:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/manifests/sha256:27c9760ad11c74ad010d9615ee15348e3674843166acb7686929b3ef6840416c HTTP/1.1" 200 1490
INFO:2026-07-28 04:11:03,695:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3-2fdb160d51306e0e24efdfdca98779392ae4c122@sha256:f5b4415db9ac1fba3e11d993a617e0b275d1f0ed2fc669b12c400ed848c39174
DEBUG:2026-07-28 04:11:03,696:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
INFO:2026-07-28 04:11:03,697:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2-85c42a8f01e2504db4cbfc1e26ebd44c4da02408@sha256:27c9760ad11c74ad010d9615ee15348e3674843166acb7686929b3ef6840416c. It points to a previous migration bundle sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6 that is before the current upgrade.
INFO:2026-07-28 04:11:03,697:oras.logger:Successfully pulled /tmp/tmpow58ft5r-migration/0.2.sh.
DEBUG:2026-07-28 04:11:03,710:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/manifests/sha256:61b27e6ad5daba761d41bb37efb790ed98380603fd4fe2f86d156def5bd72ecc HTTP/1.1" 200 1684
INFO:2026-07-28 04:11:03,711:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1-0@sha256:61b27e6ad5daba761d41bb37efb790ed98380603fd4fe2f86d156def5bd72ecc
DEBUG:2026-07-28 04:11:03,754:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/d3/d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260728%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260728T041103Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=9c378c6dc7fbe4f51013c0031bbf02fc92dd91b9a38eb644caa02ee0e5b6edc3 HTTP/1.1" 200 4750
INFO:2026-07-28 04:11:03,755:oras.logger:Successfully pulled /tmp/tmpmx6omwfk-migration/0.4.3.sh.
DEBUG:2026-07-28 04:11:03,755:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/2a/2a1624ccd4b208f24611434c2464591a7195e5221334dd086923a7e696a9d62c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260728%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260728T041103Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=78db4397b849ad38aaef85ad2000d6eb116ffcb32f5ebb921f355fe7c88109c2 HTTP/1.1" 200 2482
INFO:2026-07-28 04:11:03,756:oras.logger:Successfully pulled /tmp/tmp2edjwa1d-migration/0.2.1.sh.
DEBUG:2026-07-28 04:11:03,793:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/64/6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260728%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260728T041103Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=d9e1a579b2a15840de92d87c7b2c430193f7f1af0297d50251a29279db8d5186 HTTP/1.1" 200 2593
INFO:2026-07-28 04:11:03,797:oras.logger:Successfully pulled /tmp/tmp9wypf8fs-migration/0.3.2.sh.
DEBUG:2026-07-28 04:11:03,800:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-28 04:11:03,927:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/manifests/migration-0.4.2-e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf-1782733140 HTTP/1.1" 200 630
DEBUG:2026-07-28 04:11:03,999:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/blobs/sha256:e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf HTTP/1.1" 302 1019
DEBUG:2026-07-28 04:11:04,000:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-28 04:11:04,060:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/e9/e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260728%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260728T041103Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=e1528c5fc9c5684be15358ec4309e37ec432b5152577e03e89dfcd79a9147ba9 HTTP/1.1" 200 996
INFO:2026-07-28 04:11:04,060:oras.logger:Successfully pulled /tmp/tmpx_rxg6mq-migration/0.4.2.sh.
WARNING:2026-07-28 04:11:04,065:migrate:Failed to resolve migrations for bundles: []
WARNING:2026-07-28 04:11:04,066:migrate:Do not attempt handling migrations for them.
INFO:2026-07-28 04:11:04,066:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:11:04,709:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmp73ftfxkk-pipeline
DEBUG:2026-07-28 04:11:04,709:migrate:Run: ['bash', '/tmp/tmpfd1dxggn-migration-file', '/tmp/tmp73ftfxkk-pipeline']
DEBUG:2026-07-28 04:11:04,720:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:11:04,720:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmp73ftfxkk-pipeline
DEBUG:2026-07-28 04:11:04,720:migrate:Run: ['bash', '/tmp/tmpfd1dxggn-migration-file', '/tmp/tmp73ftfxkk-pipeline']
DEBUG:2026-07-28 04:11:14,807:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:11:06,011:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp73ftfxkk-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:11:07,600:modify.task:task 'build-images' in '/tmp/tmp73ftfxkk-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:11:09,204:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp73ftfxkk-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:11:10,795:modify.task:task 'build-images' in '/tmp/tmp73ftfxkk-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:11:12,504:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp73ftfxkk-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:11:14,299:modify.task:task 'build-images' in '/tmp/tmp73ftfxkk-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:11:14,807:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmp73ftfxkk-pipeline
DEBUG:2026-07-28 04:11:14,807:migrate:Run: ['bash', '/tmp/tmpfd1dxggn-migration-file', '/tmp/tmp73ftfxkk-pipeline']
DEBUG:2026-07-28 04:11:16,095:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:11:16,001:modify.task:task 'prefetch-dependencies' in '/tmp/tmp73ftfxkk-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:11:16,095:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmp73ftfxkk-pipeline
DEBUG:2026-07-28 04:11:16,096:migrate:Run: ['bash', '/tmp/tmpfd1dxggn-migration-file', '/tmp/tmp73ftfxkk-pipeline']
DEBUG:2026-07-28 04:11:16,105:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:11:16,105:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmp73ftfxkk-pipeline
DEBUG:2026-07-28 04:11:16,105:migrate:Run: ['bash', '/tmp/tmpfd1dxggn-migration-file', '/tmp/tmp73ftfxkk-pipeline']
DEBUG:2026-07-28 04:11:16,915:migrate:b'DEBUG:2026-07-28 04:11:16,812:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:11:16,874:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48bc0e740d86565de8fc5d3e5cdcf98e7cc9f4fe7acd02\n'
ERROR:2026-07-28 04:11:16,915:migrate:Failed to apply migration: Command '['bash', '/tmp/tmpfd1dxggn-migration-file', '/tmp/tmp73ftfxkk-pipeline']' returned non-zero exit status 2.
INFO:2026-07-28 04:11:16,915:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:11:17,521:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmpinw7fc7a-pipeline
DEBUG:2026-07-28 04:11:17,521:migrate:Run: ['bash', '/tmp/tmpzncg1shh-migration-file', '/tmp/tmpinw7fc7a-pipeline']
DEBUG:2026-07-28 04:11:17,599:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:11:17,599:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmpinw7fc7a-pipeline
DEBUG:2026-07-28 04:11:17,599:migrate:Run: ['bash', '/tmp/tmpzncg1shh-migration-file', '/tmp/tmpinw7fc7a-pipeline']
DEBUG:2026-07-28 04:11:27,396:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:11:18,805:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpinw7fc7a-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:11:20,393:modify.task:task 'build-images' in '/tmp/tmpinw7fc7a-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:11:21,993:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpinw7fc7a-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:11:23,507:modify.task:task 'build-images' in '/tmp/tmpinw7fc7a-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:11:25,198:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpinw7fc7a-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:11:26,813:modify.task:task 'build-images' in '/tmp/tmpinw7fc7a-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:11:27,396:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmpinw7fc7a-pipeline
DEBUG:2026-07-28 04:11:27,398:migrate:Run: ['bash', '/tmp/tmpzncg1shh-migration-file', '/tmp/tmpinw7fc7a-pipeline']
DEBUG:2026-07-28 04:11:28,698:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:11:28,601:modify.task:task 'prefetch-dependencies' in '/tmp/tmpinw7fc7a-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:11:28,698:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmpinw7fc7a-pipeline
DEBUG:2026-07-28 04:11:28,700:migrate:Run: ['bash', '/tmp/tmpzncg1shh-migration-file', '/tmp/tmpinw7fc7a-pipeline']
DEBUG:2026-07-28 04:11:28,708:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:11:28,708:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmpinw7fc7a-pipeline
DEBUG:2026-07-28 04:11:28,708:migrate:Run: ['bash', '/tmp/tmpzncg1shh-migration-file', '/tmp/tmpinw7fc7a-pipeline']
DEBUG:2026-07-28 04:11:29,608:migrate:b'DEBUG:2026-07-28 04:11:29,499:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:11:29,549:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48bc0e740d86565de8fc5d3e5cdcf98e7cc9f4fe7acd02\n'
ERROR:2026-07-28 04:11:29,609:migrate:Failed to apply migration: Command '['bash', '/tmp/tmpzncg1shh-migration-file', '/tmp/tmpinw7fc7a-pipeline']' returned non-zero exit status 2.
INFO:2026-07-28 04:11:29,609:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:11:30,297:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmpjpbr0yxs-pipeline
DEBUG:2026-07-28 04:11:30,297:migrate:Run: ['bash', '/tmp/tmp5s35v5ft-migration-file', '/tmp/tmpjpbr0yxs-pipeline']
DEBUG:2026-07-28 04:11:30,305:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:11:30,305:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmpjpbr0yxs-pipeline
DEBUG:2026-07-28 04:11:30,305:migrate:Run: ['bash', '/tmp/tmp5s35v5ft-migration-file', '/tmp/tmpjpbr0yxs-pipeline']
DEBUG:2026-07-28 04:11:42,005:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:11:31,600:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpjpbr0yxs-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:11:33,116:modify.task:task 'build-images' in '/tmp/tmpjpbr0yxs-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:11:34,717:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpjpbr0yxs-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:11:36,312:modify.task:task 'build-images' in '/tmp/tmpjpbr0yxs-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:11:37,907:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpjpbr0yxs-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:11:39,498:modify.task:task 'build-images' in '/tmp/tmpjpbr0yxs-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:11:42,005:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmpjpbr0yxs-pipeline
DEBUG:2026-07-28 04:11:42,006:migrate:Run: ['bash', '/tmp/tmp5s35v5ft-migration-file', '/tmp/tmpjpbr0yxs-pipeline']
DEBUG:2026-07-28 04:11:43,312:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:11:43,216:modify.task:task 'prefetch-dependencies' in '/tmp/tmpjpbr0yxs-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:11:43,312:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmpjpbr0yxs-pipeline
DEBUG:2026-07-28 04:11:43,313:migrate:Run: ['bash', '/tmp/tmp5s35v5ft-migration-file', '/tmp/tmpjpbr0yxs-pipeline']
DEBUG:2026-07-28 04:11:43,322:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:11:43,322:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmpjpbr0yxs-pipeline
DEBUG:2026-07-28 04:11:43,322:migrate:Run: ['bash', '/tmp/tmp5s35v5ft-migration-file', '/tmp/tmpjpbr0yxs-pipeline']
DEBUG:2026-07-28 04:11:44,202:migrate:b'DEBUG:2026-07-28 04:11:44,097:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:11:44,153:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48bc0e740d86565de8fc5d3e5cdcf98e7cc9f4fe7acd02\n'
ERROR:2026-07-28 04:11:44,202:migrate:Failed to apply migration: Command '['bash', '/tmp/tmp5s35v5ft-migration-file', '/tmp/tmpjpbr0yxs-pipeline']' returned non-zero exit status 2.
INFO:2026-07-28 04:11:44,202:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:11:44,807:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmp68k893p7-pipeline
DEBUG:2026-07-28 04:11:44,807:migrate:Run: ['bash', '/tmp/tmp2rc01bt8-migration-file', '/tmp/tmp68k893p7-pipeline']
DEBUG:2026-07-28 04:11:44,816:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:11:44,816:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmp68k893p7-pipeline
DEBUG:2026-07-28 04:11:44,816:migrate:Run: ['bash', '/tmp/tmp2rc01bt8-migration-file', '/tmp/tmp68k893p7-pipeline']
DEBUG:2026-07-28 04:11:54,509:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:11:46,122:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp68k893p7-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:11:47,715:modify.task:task 'build-images' in '/tmp/tmp68k893p7-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:11:49,315:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp68k893p7-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:11:50,822:modify.task:task 'build-images' in '/tmp/tmp68k893p7-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:11:52,418:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp68k893p7-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:11:54,002:modify.task:task 'build-images' in '/tmp/tmp68k893p7-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:11:54,510:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmp68k893p7-pipeline
DEBUG:2026-07-28 04:11:54,511:migrate:Run: ['bash', '/tmp/tmp2rc01bt8-migration-file', '/tmp/tmp68k893p7-pipeline']
DEBUG:2026-07-28 04:11:55,798:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:11:55,697:modify.task:task 'prefetch-dependencies' in '/tmp/tmp68k893p7-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:11:55,798:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmp68k893p7-pipeline
DEBUG:2026-07-28 04:11:55,799:migrate:Run: ['bash', '/tmp/tmp2rc01bt8-migration-file', '/tmp/tmp68k893p7-pipeline']
DEBUG:2026-07-28 04:11:55,808:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:11:55,808:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmp68k893p7-pipeline
DEBUG:2026-07-28 04:11:55,808:migrate:Run: ['bash', '/tmp/tmp2rc01bt8-migration-file', '/tmp/tmp68k893p7-pipeline']
DEBUG:2026-07-28 04:11:56,654:migrate:b'DEBUG:2026-07-28 04:11:56,502:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:11:56,627:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48bc0e740d86565de8fc5d3e5cdcf98e7cc9f4fe7acd02\n'
ERROR:2026-07-28 04:11:56,654:migrate:Failed to apply migration: Command '['bash', '/tmp/tmp2rc01bt8-migration-file', '/tmp/tmp68k893p7-pipeline']' returned non-zero exit status 2.
INFO:2026-07-28 04:11:56,654:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:11:57,298:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmpt83uai6c-pipeline
DEBUG:2026-07-28 04:11:57,298:migrate:Run: ['bash', '/tmp/tmp92tyok6t-migration-file', '/tmp/tmpt83uai6c-pipeline']
DEBUG:2026-07-28 04:11:57,306:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:11:57,306:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmpt83uai6c-pipeline
DEBUG:2026-07-28 04:11:57,306:migrate:Run: ['bash', '/tmp/tmp92tyok6t-migration-file', '/tmp/tmpt83uai6c-pipeline']
DEBUG:2026-07-28 04:12:06,894:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:11:58,512:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpt83uai6c-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:12:00,102:modify.task:task 'build-images' in '/tmp/tmpt83uai6c-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:12:01,699:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpt83uai6c-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:12:03,209:modify.task:task 'build-images' in '/tmp/tmpt83uai6c-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:12:04,806:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpt83uai6c-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:12:06,318:modify.task:task 'build-images' in '/tmp/tmpt83uai6c-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:12:06,894:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmpt83uai6c-pipeline
DEBUG:2026-07-28 04:12:06,895:migrate:Run: ['bash', '/tmp/tmp92tyok6t-migration-file', '/tmp/tmpt83uai6c-pipeline']
DEBUG:2026-07-28 04:12:08,105:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:12:08,010:modify.task:task 'prefetch-dependencies' in '/tmp/tmpt83uai6c-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:12:08,105:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmpt83uai6c-pipeline
DEBUG:2026-07-28 04:12:08,106:migrate:Run: ['bash', '/tmp/tmp92tyok6t-migration-file', '/tmp/tmpt83uai6c-pipeline']
DEBUG:2026-07-28 04:12:08,115:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:12:08,115:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmpt83uai6c-pipeline
DEBUG:2026-07-28 04:12:08,115:migrate:Run: ['bash', '/tmp/tmp92tyok6t-migration-file', '/tmp/tmpt83uai6c-pipeline']
DEBUG:2026-07-28 04:12:08,997:migrate:b'DEBUG:2026-07-28 04:12:08,821:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:12:08,953:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48bc0e740d86565de8fc5d3e5cdcf98e7cc9f4fe7acd02\n'
ERROR:2026-07-28 04:12:08,997:migrate:Failed to apply migration: Command '['bash', '/tmp/tmp92tyok6t-migration-file', '/tmp/tmpt83uai6c-pipeline']' returned non-zero exit status 2.
INFO:2026-07-28 04:12:08,997:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:12:09,601:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmp_z4jyu38-pipeline
DEBUG:2026-07-28 04:12:09,601:migrate:Run: ['bash', '/tmp/tmp2e20qi35-migration-file', '/tmp/tmp_z4jyu38-pipeline']
DEBUG:2026-07-28 04:12:09,609:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:12:09,609:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmp_z4jyu38-pipeline
DEBUG:2026-07-28 04:12:09,609:migrate:Run: ['bash', '/tmp/tmp2e20qi35-migration-file', '/tmp/tmp_z4jyu38-pipeline']
DEBUG:2026-07-28 04:12:19,205:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:12:10,903:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp_z4jyu38-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:12:12,417:modify.task:task 'build-images' in '/tmp/tmp_z4jyu38-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:12:14,010:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp_z4jyu38-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:12:15,592:modify.task:task 'build-images' in '/tmp/tmp_z4jyu38-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:12:17,112:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmp_z4jyu38-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:12:18,698:modify.task:task 'build-images' in '/tmp/tmp_z4jyu38-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:12:19,205:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmp_z4jyu38-pipeline
DEBUG:2026-07-28 04:12:19,207:migrate:Run: ['bash', '/tmp/tmp2e20qi35-migration-file', '/tmp/tmp_z4jyu38-pipeline']
DEBUG:2026-07-28 04:12:20,413:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:12:20,319:modify.task:task 'prefetch-dependencies' in '/tmp/tmp_z4jyu38-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:12:20,413:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmp_z4jyu38-pipeline
DEBUG:2026-07-28 04:12:20,415:migrate:Run: ['bash', '/tmp/tmp2e20qi35-migration-file', '/tmp/tmp_z4jyu38-pipeline']
DEBUG:2026-07-28 04:12:20,423:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:12:20,423:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmp_z4jyu38-pipeline
DEBUG:2026-07-28 04:12:20,423:migrate:Run: ['bash', '/tmp/tmp2e20qi35-migration-file', '/tmp/tmp_z4jyu38-pipeline']
DEBUG:2026-07-28 04:12:21,787:migrate:b'DEBUG:2026-07-28 04:12:21,202:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:12:21,761:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48bc0e740d86565de8fc5d3e5cdcf98e7cc9f4fe7acd02\n'
ERROR:2026-07-28 04:12:21,787:migrate:Failed to apply migration: Command '['bash', '/tmp/tmp2e20qi35-migration-file', '/tmp/tmp_z4jyu38-pipeline']' returned non-zero exit status 2.
INFO:2026-07-28 04:12:21,788:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-28 04:12:22,316:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file /tmp/tmpe4r0s07g-pipeline
DEBUG:2026-07-28 04:12:22,316:migrate:Run: ['bash', '/tmp/tmpn83iy2_1-migration-file', '/tmp/tmpe4r0s07g-pipeline']
DEBUG:2026-07-28 04:12:22,324:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-28 04:12:22,324:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file /tmp/tmpe4r0s07g-pipeline
DEBUG:2026-07-28 04:12:22,324:migrate:Run: ['bash', '/tmp/tmpn83iy2_1-migration-file', '/tmp/tmpe4r0s07g-pipeline']
DEBUG:2026-07-28 04:12:32,019:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-28 04:12:23,694:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpe4r0s07g-pipeline\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-28 04:12:25,214:modify.task:task 'build-images' in '/tmp/tmpe4r0s07g-pipeline': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-28 04:12:26,809:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpe4r0s07g-pipeline\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-28 04:12:28,395:modify.task:task 'build-images' in '/tmp/tmpe4r0s07g-pipeline': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-28 04:12:29,920:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/tmpe4r0s07g-pipeline\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-28 04:12:31,512:modify.task:task 'build-images' in '/tmp/tmpe4r0s07g-pipeline': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-28 04:12:32,019:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file /tmp/tmpe4r0s07g-pipeline
DEBUG:2026-07-28 04:12:32,021:migrate:Run: ['bash', '/tmp/tmpn83iy2_1-migration-file', '/tmp/tmpe4r0s07g-pipeline']
DEBUG:2026-07-28 04:12:33,313:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-28 04:12:33,218:modify.task:task 'prefetch-dependencies' in '/tmp/tmpe4r0s07g-pipeline': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-07-28 04:12:33,313:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file /tmp/tmpe4r0s07g-pipeline
DEBUG:2026-07-28 04:12:33,314:migrate:Run: ['bash', '/tmp/tmpn83iy2_1-migration-file', '/tmp/tmpe4r0s07g-pipeline']
DEBUG:2026-07-28 04:12:33,322:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-07-28 04:12:33,322:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file /tmp/tmpe4r0s07g-pipeline
DEBUG:2026-07-28 04:12:33,322:migrate:Run: ['bash', '/tmp/tmpn83iy2_1-migration-file', '/tmp/tmpe4r0s07g-pipeline']
DEBUG:2026-07-28 04:12:34,230:migrate:b'DEBUG:2026-07-28 04:12:34,021:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-28 04:12:34,199:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8f7dc31d9fec7a06fc48b

> ✂ **Note**
> 
> PR body was truncated to here.

[raptorsun]

/lgtm

[raptorsun]

/retitle "rebase! Update Konflux references"

[raptorsun]

/retitle "rebase! Update Konflux references"

[raptorsun]

/retitle rebase! Update Konflux references

[openshift-ci]

New changes are detected. LGTM label has been removed.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[raptorsun]

/close
need rebase

[openshift-ci]

@raptorsun: Closed this PR.

Details

In response to this:

/close
need rebase

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.