[ckhordiasma]

Summary

Revert the unintended UBI 9.9 image upgrades introduced by #126 and #128 on main.

Related Issue

RHAI-23068

Changes

• Restore the OpenClaw Node.js 24 image and the CLI, gateway, and supervisor PQC runtime images to their exact pre-update UBI 9.8 tags and SHA-256 digests.
• Limit the changes to 4 Dockerfiles; preserve all unrelated changes.
• No Renovate-policy changes. This revert alone does not prevent future 9.9 proposals.

Testing

• Exact-reference assertions against the original merged PR diffs: restored tag/digest pairs match the pre-update values.
• Changed ARG/FROM reference syntax and SHA-256 format validated; surrounding file contents verified unchanged.
• Changed-file scope verified and git diff --check passed.
• Global rh-pre-commit hook passed.
• Full Dockerfile lint, container builds, registry checks, and runtime/e2e tests were not run locally. No Dockerfile linter was available; validation was limited to the changed references and exact-revert assertions.
• No new unit tests: image-reference-only reverts.

Checklist

• Conventional Commit format.
• Commit signed off for DCO.
• No application code, workflow, or documentation changes.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

Four Dockerfiles update their pinned base images from version 9.9 to 9.8. The package installation and crypto policy checks remain unchanged.

Changes: Container base images

Layer / File(s)	Summary
Update pinned base images deploy/docker/Dockerfile.konflux.cli, deploy/docker/Dockerfile.konflux.gateway, deploy/docker/Dockerfile.konflux.openclaw, deploy/docker/Dockerfile.konflux.supervisor	The CLI, gateway, and supervisor Dockerfiles switch from UBI 9.9 to 9.8 images. The OpenClaw default Node.js image changes from a 9.9 tag to a 9.8 tag. Each change includes an updated image digest.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Bug fix

Suggested reviewers: andre-motta, emilienm

Merge Risk: Minimal · up to d2682

This change restores previously used UBI 9.8 base image pins in four Dockerfiles. It is a reference-only revert with no identified behavioral risk, so it looks ready to merge.

Pre-merge checks: 4

Check name	Status	Explanation
Title check		The title states the main change: a fix that restores UBI 9.8 image pins on main, which matches the summaries of the four Dockerfiles that revert the 9.9 upgrades. It is specific and follows Conventio…
Description check		The description states that it reverts the unintended UBI 9.9 upgrades from two referenced PRs. It lists the restored OpenClaw Node.js 24 and CLI, gateway, and supervisor PQC image pins, and it names …
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title states the main change: a fix that restores UBI 9.8 image pins on main, which matches the summaries of the four Dockerfiles that revert the 9.9 upgrades. It is specific and follows Conventional Commit style.

Full details: Description check

Explanation

The description states that it reverts the unintended UBI 9.9 upgrades from two referenced PRs. It lists the restored OpenClaw Node.js 24 and CLI, gateway, and supervisor PQC image pins, and it names the four Dockerfiles. This matches the raw summary.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 7cea0798-37d7-44e9-97f4-728f0cbc4a99

Commits

Reviewing files that changed from the base of the PR and between f027ff7 and d26823c.

Files selected for processing: 4

• deploy/docker/Dockerfile.konflux.cli
• deploy/docker/Dockerfile.konflux.gateway
• deploy/docker/Dockerfile.konflux.openclaw
• deploy/docker/Dockerfile.konflux.supervisor

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

[ckhordiasma]

/retest