chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	tekton-bundle	minor	0.13.0 → 0.14.0
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	digest	6fe7e04 → 6c7e4e2
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	4390141 → cc7d71d
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	7854d7b → 5197c2d
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	minor	0.10.3 → 0.11.0
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	patch	0.1 → 0.1.1
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	f72e0ba → f3d7323
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	tekton-bundle	digest	a3bcbf0 → 8372228
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	tekton-bundle	digest	d01cd72 → 53443fe
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	tekton-bundle	digest	ec176a3 → 2ee8973
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	minor	0.3.2 → 0.4.0

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)

v0.14.0

Changed

• Renamed Trusted Artifact parameter CACHI2_ARTIFACT to PREFETCH_ARTIFACT.
• Renamed Trusted Artifact path /var/workdir/cachi2 to /var/workdir/prefetch.

Recommended to use prefetch-dependencies-oci-ta >= 0.11.0 for naming consistency of the parameter.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.11.0

Changed

• Renamed Trusted Artifact result CACHI2_ARTIFACT to PREFETCH_ARTIFACT.
• Renamed Trusted Artifact path /var/workdir/cachi2 to /var/workdir/prefetch.

Recommended to use buildah-oci-ta >= 0.14.0 and source-build-oci-ta >= 0.4.0 for naming
consistency of the result.

v0.10.4

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.63.0

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)

v0.1.1

Changed

• Updated rox-image-scan and exchange-service-account-token steps image to version 4.11.5 by following digest registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@​sha256:98f01d623e119acbbc211bdeb36192b619969aa149d9c66bab8034eeef84c861

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)

v0.4.0

Changed

• Renamed Trusted Artifact parameter CACHI2_ARTIFACT to PREFETCH_ARTIFACT.
• Renamed Trusted Artifact path /var/workdir/cachi2 to /var/workdir/prefetch.

Recommended to use prefetch-dependencies-oci-ta >= 0.11.0 for naming consistency of the parameter.

---

Configuration

📅 Schedule: (in timezone America/Toronto)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5e997c5a-9de1-41ae-9bff-b30ac64a10ea

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[michael-valdron]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [michael-valdron]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment