chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Notes
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	0.2 → 0.3	⚠️migration⚠️
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	cad04a0 → 1da40a1
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog)	3fa03be → 8992475
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	2229dbc → 9917d11
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	0eb4cfb → 7f2e8ed
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	c89a2bc → c4ef47e
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	ba3eff8 → 2ad986f
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	92552dd → 0854d92

---

Release Notes

konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

v0.3

Changed

• The task now uses konflux-build-cli for the build step instead of an inline bash
  implementation. This provides more robust error handling and simplified maintenance.
• When ALWAYS_BUILD_INDEX is false and multiple images are provided, the task now
  creates an image index instead of failing. The previous behavior (failing with an error)
  was not useful.
• Image reference validation is now stricter and will fail earlier for invalid formats.

Removed

• COMMIT_SHA parameter (was not used by the task implementation)
• IMAGE_EXPIRES_AFTER parameter (was not used by the task implementation)

Added

• Started tracking changes in this file.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 04:59 AM ( * 0-4 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.28%. Comparing base (05955f1) to head (26ba825).

❗ There is a different number of reports uploaded between BASE (05955f1) and HEAD (26ba825). Click for more details.

HEAD has 2 uploads less than BASE

Flag	BASE (05955f1)	HEAD (26ba825)
unit-tests	2	1
e2e-tests	1	0

Additional details and impacted files

@@             Coverage Diff             @@
##             main     #681       +/-   ##
===========================================
- Coverage   82.36%   56.28%   -26.08%     
===========================================
  Files          13       13               
  Lines         533      533               
===========================================
- Hits          439      300      -139     
- Misses         69      219      +150     
+ Partials       25       14       -11     

Flag	Coverage Δ
e2e-tests	?
unit-tests	56.28% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[elenagerman]

/retest

[konflux-ci-qe-bot]

Scenario: internal-services-simple-e2e-test
@red-hat-konflux[bot]: The following test has Failed, say /retest to rerun failed tests.

PipelineRun Name	Status	Rerun command	Build Log	Test Log
internal-services-simple-e2e-test-hqn5s	Failed	/retest	View Pipeline Log	View Test Logs

Inspecting Test Artifacts

To inspect your test artifacts, follow these steps:

1. Install ORAS (see the ORAS installation guide).
2. Download artifacts with the following commands:

mkdir -p oras-artifacts
cd oras-artifacts
oras pull quay.io/konflux-test-storage/konflux-team/internal-services:internal-services-simple-e2e-test-hqn5s-local

Test results analysis

🚨 Couldn't detect a specific failure, see the related PipelineRun for more details or consult with Konflux DevProd team.

OCI Artifact Browser URL

View in Artifact Browser