[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	patch	0.14.0 → 0.14.1

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.14.1

Changed

• Mobster revision updated.
• SBOMs now preserve Syft relationships even for Hermeto-prefetched packages.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 12:00 AM and 07:59 AM (* 0-7 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[rhacs-bot]

Auto-approved by automation.

[rhacs-bot]

Auto-approved by automation.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Central YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 457584dd-bfa3-4a89-a771-6a031f910292

Commits

Reviewing files that changed from the base of the PR and between 0abda78 and 51d53de.

Files selected for processing: 1

• .tekton/scanner-component-pipeline.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 7 remain after this review.

📝 Summary

Summary by CodeRabbit

• Chores
  • Updated the image-building pipeline to use a newer build task version. No user-facing changes are included in this update.

The build-images task now references task-buildah-remote-oci-ta version 0.14.1 instead of 0.14.0. Its bundle digest is also updated.

Changes: Pipeline bundle update

Layer / File(s)	Summary
Update Buildah task reference .tekton/scanner-component-pipeline.yaml	The build-images task now uses task-buildah-remote-oci-ta version 0.14.1 and its corresponding digest.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: msugakov

Merge Risk: Minimal · up to 51d53

The dependency update is ready to merge with no identified behavioral or operational risk.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title names the change: a dependency update of the Konflux references to v0.14.1. The changeset updates task-buildah-remote-oci-ta from 0.14.0 to 0.14.1 in .tekton/scanner-component-pipeline.yaml,…
Description check		The description gives a Renovate-generated table that shows the package quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta updated from 0.14.0 to 0.14.1. It includes the v0.14.1 release note…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the change: a dependency update of the Konflux references to v0.14.1. The changeset updates task-buildah-remote-oci-ta from 0.14.0 to 0.14.1 in .tekton/scanner-component-pipeline.yaml, so the title matches the main change. It uses the conventional 'chore(deps)' prefix and is concise. It does not name the specific task, but it is specific enough for a teammate to understand the change.

Full details: Description check

Explanation

The description gives a Renovate-generated table that shows the package quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta updated from 0.14.0 to 0.14.1. It includes the v0.14.1 release notes (Mobster revision update and Syft relationship preservation for Hermeto-prefetched packages). This directly describes the changeset.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

/konflux-retest scanner-db-slim-on-push

[github-actions]

/konflux-retest scanner-db-slim-on-push

[github-actions]

/konflux-retest scanner-slim-on-push

[github-actions]

/konflux-retest scanner-db-on-push

[github-actions]

/konflux-retest scanner-db-slim-on-push

[github-actions]

/konflux-retest scanner-slim-on-push

[github-actions]

/konflux-retest scanner-on-push

[github-actions]

/konflux-retest scanner-db-on-push

[github-actions]

/konflux-retest scanner-slim-on-push

[github-actions]

/konflux-retest scanner-on-push

[github-actions]

/konflux-retest scanner-db-on-push

[github-actions]

/konflux-retest scanner-on-push

[openshift-ci]

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/slim-e2e-tests	51d53de	link	false	/test slim-e2e-tests
ci/prow/e2e-tests	51d53de	link	false	/test e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.