chore(deps): update quay.io/konflux-ci/release-service-utils docker digest

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/release-service-utils	tekton-step-image	digest	5546fa7 → ab08297
quay.io/konflux-ci/release-service-utils	final	digest	5546fa7 → ab08297

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 04:59 AM (* 0-4 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[johnbieren]

@seanconroy2021 this PR isn't even updating the utils image to the same image. For example, if I click the files changed tab, I see two different refs within the first file. Is that expected?

[seanconroy2021]

@seanconroy2021 this PR isn't even updating the utils image to the same image. For example, if I click the files changed tab, I see two different refs within the first file. Is that expected?

Looks like each utils image reference is treated as its own dependency, so Mint is updating them independently, which doesn't seem the best. We should be able to group them so we can update all of them with one digest. Will take a look.

[johnbieren]

@seanconroy2021 this PR isn't even updating the utils image to the same image. For example, if I click the files changed tab, I see two different refs within the first file. Is that expected?

Looks like each utils image reference is treated as its own dependency, so Mint is updating them independently, which doesn't seem the best. We should be able to group them so we can update all of them with one digest. Will take a look.

great, thank you

[seanconroy2021]

great, thank you

I can't seem to find any Renovate config to force all digest refs to update to the same target digest using the Tekton manager. Maybe @lubomir might have some ideas?

[lubomir]

Did you mean to ping someone else, @seanconroy2021 ? I have no idea about any of this.

[seanconroy2021]

Did you mean to ping someone else, @seanconroy2021 ? I have no idea about any of this.

Yeah sorry wrong person :(

[seanconroy2021]

great, thank you

I can't seem to find any Renovate config to force all digest refs to update to the same target digest using the Tekton manager. Maybe @lubomir might have some ideas?

@querti ^^

[querti]

Checking the digests, my guess is that if an image was specified via single arch digest, renovate will propose an update to a newer single arch, and likewise for multiarch. I don't know the reason for specifying a specific arch to run certain steps, but if the reason is legitimate then the behavior seems correct to me. If there is no good reason for this then I suggest specifying multiarch digest for all tasks and all images will be updated to the same digest in the future.

[johnbieren]

Checking the digests, my guess is that if an image was specified via single arch digest, renovate will propose an update to a newer single arch, and likewise for multiarch. I don't know the reason for specifying a specific arch to run certain steps, but if the reason is legitimate then the behavior seems correct to me. If there is no good reason for this then I suggest specifying multiarch digest for all tasks and all images will be updated to the same digest in the future.

I would think we should be using the same arch setting imageRef for all of our tasks. So what do we do with this PR?

[querti]

We can request a rebase after we've unified the digests. Or I think it should be safe to merge it as-is, if we want to update the image asap.

[seanconroy2021]

Checking the digests, my guess is that if an image was specified via single arch digest, renovate will propose an update to a newer single arch, and likewise for multiarch. I don't know the reason for specifying a specific arch to run certain steps, but if the reason is legitimate then the behavior seems correct to me. If there is no good reason for this then I suggest specifying multiarch digest for all tasks and all images will be updated to the same digest in the future.

From what I know we don't release single-arch images it's grouped as multi-arch when pushed to Quay. Unless Renovate is handling this differently than expected. If these tasks were single-arch digest, they probably would fail when run locally on Kind for ARM64 (MAC) which they don't. So there might be something else going on here?

[johnbieren]

Checking the digests, my guess is that if an image was specified via single arch digest, renovate will propose an update to a newer single arch, and likewise for multiarch. I don't know the reason for specifying a specific arch to run certain steps, but if the reason is legitimate then the behavior seems correct to me. If there is no good reason for this then I suggest specifying multiarch digest for all tasks and all images will be updated to the same digest in the future.

From what I know we don't release single-arch images it's grouped as multi-arch when pushed to Quay. Unless Renovate is handling this differently than expected. If these tasks were single-arch digest, they probably would fail when run locally on Kind for ARM64 (MAC) which they don't. So there might be something else going on here?

Yeah I have no idea, but I'm moving this to draft. The images aren't consistent and the unit tests are failing anyways