Skip to content

Update Konflux references - #3089

Merged
tisnik merged 1 commit into
release/0.7from
konflux/references/release/0.7
Nov 3, 2026
Merged

tisnik merged 1 commit into
release/0.7from
konflux/references/release/0.7

Conversation

@red-hat-konflux-kflux-prd-rh02

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog) tekton-bundle digest 87e1451 → a77e614
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog) tekton-bundle digest 0c0cf90 → daa950c
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog) tekton-bundle digest 2ca404d → 612f539
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog) tekton-bundle digest 6406168 → 79d5b56
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog) tekton-bundle digest cc7d71d → 43604d0
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog) tekton-bundle digest b3c05f2 → 590db5c
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog) tekton-bundle digest ba9c197 → e3f908c
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog) tekton-bundle digest e670e56 → 6c63bc1
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog) tekton-bundle digest e3521e7 → c6874d3
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog) tekton-bundle digest 4d2c2ed → 41ec2c6
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog) tekton-bundle digest 3e9b994 → a094264
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog) tekton-bundle digest dafbb41 → 71bd384

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Saturday (* * * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
@coderabbitai

coderabbitai Bot commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@fullsend-ai-review

fullsend-ai-review Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 12:07 AM UTC · Completed 12:14 AM UTC

Commit: 27ed9c3 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.39

@fullsend-ai-review fullsend-ai-review Bot added the risk/low PR risk: low label Oct 31, 2026
@fullsend-ai-review

Copy link
Copy Markdown

<!-- fullsend:risk-assessment -->
Risk Assessment: low (1/5)

Details

Bot author (Konflux) updating Tekton pipeline references in two .tekton YAML files. No protected paths, no security-sensitive files, no dependency changes, no CI workflow changes. Minimal 48-line change with small blast radius. Low churn and no regression or revert history.

@fullsend-ai-review

Copy link
Copy Markdown

Looks good to me


Labels: PR updates Konflux/Tekton pipeline task bundle digests

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge dependencies Pull requests that update a dependency file konflux Review effort 1/5 labels Oct 31, 2026

@tisnik tisnik left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tisnik
tisnik merged commit 5f70c36 into release/0.7 Nov 3, 2026
125 of 135 checks passed
@fullsend-ai-retro

fullsend-ai-retro Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

🤖 Finished Retro · ✅ Success · Started 8:13 AM UTC · Completed 8:21 AM UTC

Commit: 27ed9c3 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.88

@fullsend-ai-retro

Copy link
Copy Markdown

Retro: PR #3089 — Update Konflux references

Workflow outcome: Correct. The review agent accurately classified this bot-generated Tekton digest bump as low-risk and approved it. No false positives, no missed issues. The human reviewer (tisnik) confirmed with "LGTM" three days later, adding no additional findings.

No new proposals filed. All improvement opportunities identified are covered by existing open issues:

Token cost — review agent spent $2.39 on a trivial bot PR

The review agent ran at high effort on claude-opus-4-6 for a purely mechanical change (12 sha256 digest swaps across 2 Tekton YAML files by the Konflux bot). Four sub-agents (correctness, style-conventions, security, risk-assessment) were dispatched — all returned zero findings, as expected.

→ Covered by #3101 — "Configure REVIEW_SKIP_AUTHORS to skip reviews on Konflux bot PRs," filed from PR #3090 in the same Konflux batch. Also tracked upstream at fullsend-ai/fullsend#8911, fullsend-ai/agents#257, and others.

Wasted retries — sub-agent model unavailability on Vertex

The style-conventions and risk-assessment sub-agents were dispatched on claude-sonnet-4-6, which was not available on the Vertex deployment. Both failed and had to retry without the model override, adding ~2 minutes of wasted processing. The log explicitly suggested switching to claude-sonnet-4-5@20250929.

→ Covered by fullsend-ai/agents#379 and fullsend-ai/fullsend#6964. Note: a platform-level fix (fullsend-ai/fullsend#8426) was closed as completed on 2026-10-14, but this run on 2026-10-31 still hit the same failure — this may indicate a regression or incomplete fix scope.

E2E shields test flakiness from LLM non-determinism

The E2E: library / ci / shields test failed because the LLM returned a substantive response about OpenShift instead of refusing. This is unrelated to the PR's digest-only changes and is the same root-cause class (asserting specific LLM output content) as the responses.feature:353 flake.

→ Evidence for #3081 — "Make E2E scenario responses.feature:353 resilient to non-deterministic LLM output." The shields test failure demonstrates that this pattern extends beyond the originally reported scenario.

Autonomy readiness

The review agent's approval was correct and complete — the human reviewer added no findings. For this class of change (bot-authored, digest-only Tekton updates), the agent could be trusted with higher autonomy, contingent on the skip-authors configuration proposed in #3101.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file konflux ready-for-merge All reviewers approved — ready to merge Review effort 1/5 risk/low PR risk: low

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant