Update Konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Notes
quay.io/konflux-ci/tekton-catalog/task-build-image-index	846dc99 -> 3499772
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta	48b99ad -> 9e9bac2
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta	5b8d51f -> 9e866d4
quay.io/konflux-ci/tekton-catalog/task-clair-scan	d354939 -> 417f441
quay.io/konflux-ci/tekton-catalog/task-clamav-scan	9cab95a -> 7749146
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks	b550ff4 -> f99d2bd
quay.io/konflux-ci/tekton-catalog/task-init	66e90d3 -> 1d8221c
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta	a1ddc34 -> 092491a
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta	5d8013b -> 8c75c4a
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta	808bcaf -> bf7bdde
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta	e61f541 -> fe5e5ba
quay.io/konflux-ci/tekton-catalog/task-show-sbom	1b1df4d -> 86c069c
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta	0.2 -> 0.3	⚠️migration⚠️

---

Configuration

📅 Schedule: Branch creation - "after 5am on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[sourcery-ai]

Reviewer's Guide

This PR updates the Tekton pipeline definitions by bumping key Konflux task bundle references to their new digests/versions and normalizes YAML sequence indentation across both operator and bundle pipelines.

Flow diagram for updated Tekton pipeline task sequence

flowchart TD
  A[init]
  B[clone-repository]
  C[prefetch-dependencies]
  D[build-images/build-container]
  E[build-image-index]
  F[build-source-image]
  G[deprecated-base-image-check]
  H[clair-scan]
  I[ecosystem-cert-preflight-checks]
  J[sast-snyk-check-oci-ta]
  K[sast-shell-check-oci-ta]
  L[sast-unicode-check-oci-ta]
  M[clamav-scan]
  N[apply-tags]
  O[push-dockerfile]
  P[rpms-signature-scan]
  Q[show-sbom]

  A --> B
  B --> C
  C --> D
  D --> E
  E --> F
  E --> G
  E --> H
  E --> I
  E --> J
  E --> K
  E --> L
  E --> M
  E --> N
  E --> O
  E --> P
  E --> Q

  %% Highlight updated tasks
  classDef updated fill:#f9f,stroke:#333,stroke-width:2px;
  class C,F,I updated;

Loading

File-Level Changes

Change	Details	Files
Bump task bundle references to updated digests and versions	Updated task-prefetch-dependencies-oci-ta digest from a1ddc34… to f10a484… Updated task-ecosystem-cert-preflight-checks digest from b550ff4… to abbe195… Updated task-source-build-oci-ta version from 0.2 to 0.3 (including bundle reference and migration note)	.tekton/operator-build-pipeline.yaml .tekton/bundle-build-pipeline.yaml
Normalize YAML sequence and indentation	Converted nested list item prefixes to top-level dashes for params, results, tasks, finally and workspaces Realigned bundle reference blocks under taskRef sections Removed inconsistent indentation and redundant markers across both pipeline files	.tekton/operator-build-pipeline.yaml .tekton/bundle-build-pipeline.yaml

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.87%. Comparing base (3c03209) to head (5f0cdb0).
Report is 1 commits behind head on downstream.

Additional details and impacted files

@@             Coverage Diff             @@
##           downstream     #634   +/-   ##
===========================================
  Coverage       82.87%   82.87%           
===========================================
  Files              16       16           
  Lines            3060     3060           
===========================================
  Hits             2536     2536           
  Misses            437      437           
  Partials           87       87           

Flag	Coverage Δ
unittests	82.87% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3c03209...5f0cdb0. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.