chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Notes
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	b33bfa8 → 70c52e8
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	85102e4 → 62de839
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	41f3f36 → c77892b
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog)	8fad4c2 → 9ff424d
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	567cb66 → 53a0232
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	0.1 → 0.2	⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	0e6324e → 92956e7
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	7855471 → f3e97e6
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	a542b5a → 65370cc
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	f960cc9 → fc685d6
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	0.4 → 0.5	⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	324291c → 5807ffe
quay.io/konflux-ci/tekton-catalog/task-show-sbom (source, changelog)	a7346ed → 8fe70a9
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	8567bb7 → 7c5575a

---

Release Notes

konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta)

v0.2

• Fix SSH setup failing when mounted secrets contain symlinks to directories konflux-build-cli#165

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 04:59 AM (* 0-4 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:43 AM UTC · Completed 2:47 AM UTC
Commit: ffde3b2 · View workflow run →

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.49%. Comparing base (13a2f01) to head (e866fb2).

❗ There is a different number of reports uploaded between BASE (13a2f01) and HEAD (e866fb2). Click for more details.

HEAD has 2 uploads less than BASE

Flag	BASE (13a2f01)	HEAD (e866fb2)
unit-tests	2	1
e2e-tests	1	0

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1699      +/-   ##
==========================================
- Coverage   87.43%   81.49%   -5.95%     
==========================================
  Files          34       34              
  Lines        3566     3566              
==========================================
- Hits         3118     2906     -212     
- Misses        285      512     +227     
+ Partials      163      148      -15     

Flag	Coverage Δ
e2e-tests	?
unit-tests	81.49% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 12 files with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 13a2f01...e866fb2. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[fullsend-ai-review]

Looks good to me

Previous run

Looks good to me

---

Labels: Automated dependency/digest update to Tekton CI pipeline definitions

Previous run (2)

Looks good to me

Previous run (3)

Looks good to me

Previous run (4)

Looks good to me

Previous run (5)

Looks good to me

---

Labels: Automated dependency version bump by MintMaker/Renovate bot

Previous run (6)

Looks good to me

Previous run (7)

Review

Findings

Info

• [API contract] .tekton/release-service-pull-request.yaml:364 — The sast-snyk-check-oci-ta task is bumped from version tag 0.4 to 0.5 (a minor version bump), while all other tasks only change their digest within the same version tag. The PR body notes a migration warning for this bump. The parameters passed to this task (image-digest, image-url, SOURCE_ARTIFACT, CACHI2_ARTIFACT, TARGET_DIRS) are identical in both pipeline files and remain unchanged in this diff. If the 0.5 task definition has removed, renamed, or added required parameters, the pipeline would fail at runtime. Since the task is pinned by sha256 digest, the actual risk depends on the upstream task's interface at that digest. Confirm upstream compatibility.

Previous run (8)

Looks good to me

Previous run (9)

Review

Findings

Low

• [api-contract] .tekton/release-service-pull-request.yaml:364 — The sast-snyk-check-oci-ta task is bumped from version 0.4 to 0.5 (not just a digest rotation). The PR body notes a migration warning. If v0.5 has added required parameters, removed parameters, or changed result names, the pipeline could break at runtime. The current parameter set is carried forward unchanged. Worth confirming upstream that no new required parameters were introduced in 0.5.

Previous run (10)

Review

Findings

No findings.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:50 AM UTC · Completed 1:56 AM UTC
Commit: 218f229 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:25 AM UTC · Completed 2:30 AM UTC
Commit: 218f229 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:38 AM UTC · Completed 2:46 AM UTC
Commit: 0d0162a · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:08 AM UTC · Completed 2:14 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:46 AM UTC · Completed 2:52 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:34 AM UTC · Completed 1:40 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:31 AM UTC · Completed 1:38 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ❌ Failure · Started 4:36 PM UTC · Completed 4:43 PM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:44 AM UTC · Completed 1:48 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:34 AM UTC · Completed 1:37 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:31 AM UTC · Completed 1:35 AM UTC
Commit: ec21706 · View workflow run →