OCM-00000 | ci: Update Konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	3ab8441 → 6387614
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	7c5575a → 2dd5b3e

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by CodeRabbit

• Maintenance
  • Refreshed Tekton task bundle digests used by pull-request and push validation pipelines.
  • Updated task references for source image build and tag application to newer bundled artifacts.
  • Pipeline behavior, configuration, conditions, and task inputs remain unchanged.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated immutable Tekton bundle digests for the task-source-build-oci-ta and task-apply-tags tasks across four pull-request and push PipelineRuns. No task parameters, conditions, workspace wiring, or pipeline structure changed.

Suggested reviewers: robpblake, braetroutman, davidleerh

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description lists the dependency updates but omits most required template sections, including the problem, testing, and impact details.	Add the missing PR Summary, issue context, linked issues, change type, behavior, testing steps, proof, and checklist sections.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR only updates Tekton bundle digests in YAML; no Ginkgo test titles or test files were added or modified.
Test Structure And Quality	✅ Passed	PR changes only Tekton PipelineRun YAML bundle digests; no Ginkgo test files or assertions were modified.
Microshift Test Compatibility	✅ Passed	Only Tekton PipelineRun bundle digests changed; no new Ginkgo e2e tests or MicroShift-relevant APIs were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Only four Tekton YAML bundle digests changed; no Go/Ginkgo tests were added or modified, so SNO compatibility is unaffected.
Topology-Aware Scheduling Compatibility	✅ Passed	Diff only updates two Tekton task bundle digests in PipelineRuns; no affinity, topologySpreadConstraints, node selectors, tolerations, replicas, or PDB changes.
Ote Binary Stdout Contract	✅ Passed	PR only updates Tekton bundle digests in YAML; no binary or process-level stdout code changed.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added; PR only bumps Tekton task bundle digests in existing PipelineRuns, with no IPv4 assumptions or new external connectivity.
No-Weak-Crypto	✅ Passed	Diff only updates Tekton bundle digests to sha256-pinned task refs; no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB, custom crypto, or token comparisons present.
Container-Privileges	✅ Passed	Only Tekton bundle digests changed; no privileged/host namespace/securityContext fields appear in the modified manifests.
No-Sensitive-Data-In-Logs	✅ Passed	Only Tekton bundle digest updates in four PipelineRun YAMLs; no log/print/debug statements or sensitive data exposure found.
Title check	✅ Passed	The title is concise and matches the main change: updating Konflux task references.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/master

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign marcolan018 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.