Repository navigation
[release-1.19] NO-JIRA: Update Konflux references - #930
red-hat-konflux[bot] wants to merge 1 commit into
Conversation
|
@red-hat-konflux[bot]: This pull request explicitly references no jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci-robot
added
the
jira/valid-reference
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: red-hat-konflux[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
a7d0c88 to
40992d1
Compare
28b2b19 to
f878c45
Compare
f878c45 to
522d104
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
522d104 to
ecc1f21
Compare
This PR contains the following updates:
0.3.1→0.3.20.3.1→0.40.12.1→0.14.10.12.1→0.14.10.3.3→0.3.40ccc688→81b7cadc07d2be→43604d02e8fe30→590db5c4be9343→e3f908c0.10.2→0.11.0ef00a86→c6874d30.1→0.1.19ef4dab→a0942640.1→0.1.10.5→0.5.10.4→0.4.10.3.1→0.4.0Release Notes
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-apply-tags)
v0.3.2Added
ADDITIONAL_TAGS_FROM_LABELparameter to specify image label to read additional tags from.For now set previously hardcoded value
konflux.additional-tagsby default to avoid changing the task behavior.konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-build-image-index)
v0.4Added
IMAGE_PLATFORM_MAPparameter: optional per-image platform mapping(
imageRef=os/archentries) passed tokonflux-build-clias--image-platform-map. This sets the platform on each index entry explicitly,which is required for OCI artifacts whose empty config carries no platform
information (e.g. disk images), where the platform would otherwise be null.
When empty (the default), behaviour is unchanged.
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta)
v0.14.1Changed
v0.14.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
prefetch-dependencies-oci-ta>= 0.11.0 for naming consistency of the parameter.v0.13.0Changed
The
BUILD_ARGS_FILEparameter was renamed toBUILD_ARGS_FILESand allowspassing multiple build arguments files as buildah itself does.
v0.12.3Version 0.12.3 only has relevant changes for the remote variants of this task.
v0.12.2Changed
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)
v0.14.1Changed
v0.14.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
prefetch-dependencies-oci-ta>= 0.11.0 for naming consistency of the parameter.v0.13.0Changed
The
BUILD_ARGS_FILEparameter was renamed toBUILD_ARGS_FILESand allowspassing multiple build arguments files as buildah itself does.
v0.12.3Changed
sshandrsyncinvocations to the build VM now share a single sshconnection. The build step writes an
~/.ssh/configwithControlMaster auto,ControlPathandControlPersist, so only the first invocation pays the costof the TCP handshake, key exchange and authentication.
v0.12.2Removed
(
JVM_BUILD_WORKSPACE_ARTIFACT_CACHE_PORT_80_TCP_ADDR) from the remote build. This is just cleanup of unused code.konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)
v0.3.4Added
clamd scans each file directly instead of recursing through nested archive
layers. This makes scanning of deeply nested archives faster. Extraction uses
bsdtar, which detects archives (zip/jar/war/ear/tarand tar.gz/tar.bz2/tar.xz) by content rather than extension — important because
the OCI
dir:payload is an extension-less blob — and unpacks themunconditionally with no size/count/depth limits. It is defensive: a corrupt or
partial archive is left in place for clamd rather than aborting the scan. No new
parameters are introduced. Requires the
clamav-dbimage to shipbsdtar(added in konflux-clamav).
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)
v0.11.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
buildah-oci-ta>= 0.14.0 andsource-build-oci-ta>= 0.4.0 for namingconsistency of the result.
v0.10.4v0.10.3konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-roxctl-scan)
v0.1.1Changed
konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta)
v0.1.1Fixed
CACHI2_ARTIFACTparameterfrom user pipelines. The parameter was dropped from the task definition in an
earlier release, but pipelines kept passing it.
konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta)
v0.5.1Fixed
CACHI2_ARTIFACTparameterfrom user pipelines. The parameter was dropped from the task definition in an
earlier release, but pipelines kept passing it.
konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta)
v0.4.1Fixed
CACHI2_ARTIFACTparameterfrom user pipelines. The parameter was dropped from the task definition in an
earlier release, but pipelines kept passing it.
konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)
v0.4.0Changed
CACHI2_ARTIFACTtoPREFETCH_ARTIFACT./var/workdir/cachi2to/var/workdir/prefetch.Recommended to use
prefetch-dependencies-oci-ta>= 0.11.0 for naming consistency of the parameter.v0.3.2Fixed
vendored as unpacked source trees rather than archives, so previously they
were missed by the archive-type filter and left out of the source image.
Configuration
📅 Schedule: (UTC)
* * * * 6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.