chore(deps): bump github.com/openshift-pipelines/pipelines-as-code from 0.43.0 to 0.45.0

[dependabot]

Bumps github.com/openshift-pipelines/pipelines-as-code from 0.43.0 to 0.45.0.

Release notes

Sourced from github.com/openshift-pipelines/pipelines-as-code's releases.

v0.45.0

Pipelines as Code version v0.45.0

OpenShift Pipelines as Code v0.45.0 has been released 🥳

✨ Major changes and Features

• Implement GraphQL batch fetching for .tekton files: Introduced GraphQL-based batch fetching for .tekton directory files, significantly reducing GitHub API calls and improving performance for repositories with many pipeline files.
  • Link: tektoncd/pipelines-as-code#2423
  • Jira: SRVKP-11470

🐛 Bug Fixes

• Restore relative task path resolution for repository paths: Fixed a regression where relative task paths were not resolved correctly when using repository-based path references.
  • Link: tektoncd/pipelines-as-code#2554
  • Jira: SRVKP-11021
• Fix watcher secret creation log and OpenShift console link: Corrected watcher secret creation logging output and fixed the OpenShift console link generation.
  • Link: tektoncd/pipelines-as-code#2637
• Populate DefaultBranch for incoming webhooks: Fixed missing DefaultBranch field population when processing incoming webhook events, ensuring correct branch detection.
  • Link: tektoncd/pipelines-as-code#2647

📚 Documentation Updates

• Rearrange events in GitHub App docs: Reorganized the events section in GitHub App documentation for improved readability and discoverability.
  • Link: tektoncd/pipelines-as-code#2648

⚙️ Chores

• Move secret creation to reconciler: Refactored secret creation logic to the reconciler for improved code organization and separation of concerns.
  • Link: tektoncd/pipelines-as-code#2510
• Cache getPullRequest result in GitHub provider: Added internal caching of getPullRequest results in the GitHub provider to reduce redundant API calls.
  • Link: tektoncd/pipelines-as-code#2621
• Replace real time.Sleep with clockwork in unit tests: Substituted real time.Sleep calls with a fake clockwork clock in unit tests, reducing overall test execution time by 10–13 seconds.
  • Link: tektoncd/pipelines-as-code#2627
• Use ok-to-test action for E2E permission checks: Updated E2E CI pipeline to use the ok-to-test GitHub Action for safer permission handling.
  • Link: tektoncd/pipelines-as-code#2628
• Fix test execution and improve assertions: Fixed test execution issues and strengthened test assertions for better reliability.
  • Link: tektoncd/pipelines-as-code#2631
• Add zizmor and fix GitHub Actions security findings: Integrated the zizmor security scanner and resolved identified GitHub Actions security issues.
  • Link: tektoncd/pipelines-as-code#2632
• Update ok-to-test action commit SHA: Pinned the ok-to-test action to a specific commit SHA for improved CI security.
  • Link: tektoncd/pipelines-as-code#2634
• Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5: Updated go-jose/v3 dependency to the latest patch release.
  • Link: tektoncd/pipelines-as-code#2638
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4: Updated go-jose/v4 dependency to the latest patch release.
  • Link: tektoncd/pipelines-as-code#2639
• Bump jaxxstorm/action-install-gh-release from 2.1.0 to 3.0.0: Updated jaxxstorm/action-install-gh-release GitHub Action to major version 3.
  • Link: tektoncd/pipelines-as-code#2640
• Bump actions/setup-go from 6.3.0 to 6.4.0: Updated actions/setup-go GitHub Action to the latest version.
  • Link: tektoncd/pipelines-as-code#2641

... (truncated)

Commits

• 92a3273 fix(ci): pass smee URL env vars to e2e test runner step
• 501ba3b fix(ci): allow actions token write permission on PR
• a387d41 fix: populate DefaultBranch for incoming webhooks
• d78ef4e ci(gha): fix zizmor security findings in workflows
• 8c1e41e docs: rearrange events in gh app docs
• a8db555 fix: PR close condition in e2e tests
• cb4296f chore(deps): bump jaxxstorm/action-install-gh-release
• 6779bd3 chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0
• a2f56e8 chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5
• 010acfd chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
• Additional commits viewable in compare view

[anithapriyanatarajan]

/lgtm

[anithapriyanatarajan]

/approve

[tekton-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: anithapriyanatarajan

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [anithapriyanatarajan]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment