[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	a1d5e6d → a77e614
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	digest	654446d → daa950c
quay.io/konflux-ci/tekton-catalog/task-buildah (source, changelog)	tekton-bundle	patch	0.14.0 → 0.14.1
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	tekton-bundle	patch	0.14.0 → 0.14.1
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	patch	0.14.0 → 0.14.1
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	digest	6c7e4e2 → 79d5b56
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	cc7d71d → 43604d0
quay.io/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta (source, changelog)	tekton-bundle	digest	465d8c8 → 2fdc236
quay.io/konflux-ci/tekton-catalog/task-git-clone (source, changelog)	tekton-bundle	digest	8c7fc8c → 6fe1a25
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	digest	a367891 → 590db5c
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	5197c2d → e3f908c
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies (source, changelog)	tekton-bundle	digest	8a62790 → 9a07e87
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	digest	7ffdaab → 6c63bc1
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile (source, changelog)	tekton-bundle	digest	7c7d96e → 7e8ac10
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	tekton-bundle	digest	4c567d1 → c6874d3
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	digest	2fafbf5 → 41ec2c6
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	f3d7323 → a094264
quay.io/konflux-ci/tekton-catalog/task-source-build (source, changelog)	tekton-bundle	digest	3d2a749 → 4826b7e
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	digest	7a38719 → 71bd384

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah)

v0.14.1

Changed

• Mobster revision updated.
• SBOMs now preserve Syft relationships even for Hermeto-prefetched packages.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)

v0.14.1

Changed

• Mobster revision updated.
• SBOMs now preserve Syft relationships even for Hermeto-prefetched packages.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.14.1

Changed

• Mobster revision updated.
• SBOMs now preserve Syft relationships even for Hermeto-prefetched packages.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Saturday (* * * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-merge-bot]

Pipeline controller notification

This PR uses the pipeline controller for second-stage tests. Selection and triggering follow the repository configuration.

Use /test ? to list jobs and /pipeline help for commands.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review: 1

• devel

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: openshift/sandboxed-containers-operator
• Branch: osc-release-v1.13
• File: .coderabbit.yaml
• Commit: ba1de34
• Layers: Repository YAML (base), Central YAML (inherited)
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 85c0dd88-5858-4707-bd14-f08fa857503c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[wainersm]

Konflux Build Triage — PR #3540

Failed pipelines: 6/6 | Assessment: Mixed — 4 retryable, 2 require fixes
Auto-retest: /retest posted at 14:00 UTC | 1/2 retests used

openshift-sandboxed-containers-enterprise-contract-v1-13 / pr group

• Failed task: unknown
• Category: Transient/Infrastructure (auto-learned) (retryable)
• Log source: GitHub check run summary only
• Error: (no error text)

Suggested action: Retry the build; cancelled status without explicit errors typically indicates timeout or transient scheduling issues.
PipelineRun: View in Konflux

---

openshift-sandboxed-containers-enterprise-contract-v1-13 / osc-must-gather-v1-13

• Failed task: unknown
• Category: Transient/Infrastructure (auto-learned) (retryable)
• Log source: GitHub check run summary only
• Error: (no error text)

Suggested action: Retry the task; if persistent, check Tekton controller logs and cluster events for timeout or resource eviction.
PipelineRun: View in Konflux

---

openshift-sandboxed-containers-enterprise-contract-v1-13 / osc-operator-v1-13

• Failed task: unknown
• Category: Transient/Infrastructure (auto-learned) (retryable)
• Log source: GitHub check run summary only
• Error: (no error text)

Suggested action: Retry the build
PipelineRun: View in Konflux

---

make-test-v1-13 / osc-operator-v1-13

• Failed task: unknown
• Category: Transient/Infrastructure (auto-learned) (retryable)
• Log source: GitHub check run summary only
• Error: (no error text)

Suggested action: Retry the build to determine if the cancellation was transient infrastructure or timeout issue.
PipelineRun: View in Konflux

---

osc-must-gather-v1-13-on-pull-request

• Failed task: unknown
• Category: Unknown (auto-learned) (not retryable)
• Log source: GitHub check run summary only
• Error: (no error text)

Suggested action: Retrieve full task logs and error details from the failed build step to determine root cause.
PipelineRun: View in Konflux

---

osc-operator-v1-13-on-pull-request

• Failed task: build-images
• Category: Unknown (auto-learned) (not retryable)
• Log source: GitHub check run summary only
• Error: (no error text)

Suggested action: Retrieve full build logs from the task execution to identify the actual failure reason.
PipelineRun: View in Konflux

---

Generated by konflux-build-triage

[wainersm]

/retest

[littlejawa]

/ok-to-test

[red-hat-konflux]

All PipelineRuns for this commit have already succeeded. Use /retest <pipeline-name> to re-run a specific pipeline or /test to re-run all pipelines.