Skip to content

Update Konflux references (main) - #3479

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/references/main
Open

Update Konflux references (main)#3479
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/references/main

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog) tekton-bundle digest 6387614da0cff2
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog) tekton-bundle digest a355355b00c9e6
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog) tekton-bundle minor 0.10.70.11.1
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog) tekton-bundle digest 27c9760e438f31
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog) tekton-bundle digest 510daad799e609
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog) tekton-bundle digest b8465d515d3d4a
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog) tekton-bundle minor 0.6.00.7.1
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog) tekton-bundle digest 5393bad350a144
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog) tekton-bundle digest ccb77d141ff593
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog) tekton-bundle digest 61b27e6beb05ae
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog) tekton-bundle digest eba24f5b78e9c0
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog) tekton-bundle digest eb9d539d09f717
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog) tekton-bundle digest 6081c4193f1df1
quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta (source, changelog) tekton-bundle digest 2624bc3da807e4

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.11.1

Changed
  • Set a 5 minute I/O timeout for rsync transfers to and from the build VMs.
    The build will fail if the connection goes 5 minutes without transfering
    a single byte of data.
Fixed
  • Stopped rsyncing /var/workdir from build VMs back to the cluster.
    This directory contains the git repository and prefetched dependencies,
    which can be a lot of data. The rsync back was an unfortunate side effect
    of how tooling generates the remote-oci-ta task variant from the base task,
    and was completely unnecessary.

v0.11.0

Changed
  • When scanning the built image with Syft, scans the image filesystem as
    a directory instead of scanning the the image as an OCI archive. This improves
    the scanning time, disk usage and may improve memory usage. More details in
    konflux-build-cli/docs/design/syft-image-scanning.md.
  • The remote variants of this task now push the built image to the registry directly
    from the build VM instead of rsyncing the image back to the cluster first.
    For large images, this significantly reduces the time spent on network transfers.
Removed
  • BREAKING: Removed the sbom-syft-generate step, SBOM generation now happens
    in the build step.
  • BREAKING: Removed the push step, the push now happens in the build step.
  • If you have step overrides configured for either of the two removed steps,
    the pipeline will fail with invalid StepOverride. See the migration guidance below.
Migration guidance

Buildah v0.11.0 comes with a migration script that will attempt to automatically
fix the step overrides in your PipelineRuns. In most cases, no manual action will
be needed. But there are cases that the script cannot handle:

  1. Your PipelineRun references an external Pipeline. In this case, the migration
    script will never get a chance to run on the PipelineRun.
  2. Your PipelineRun is multi-platform, SBOM generation needs more resources
    than the build itself and the remote VMs do not have sufficient resources.

If the migration script doesn't solve the problem, please follow the procedure below.

Manual procedure

If you have sbom-syft-generate or push step overrides in the .spec.taskRunSpecs
section in your PipelineRun, please remove them. In most cases, this should be all.

However, if you were previously requesting more resources for SBOM generation
than for the build step itself, there is a chance that the build will fail.
In this case, move the relevant overrides to the build step. The same technically
applies for the push step, but it's highly unlikely that pushing would require
more resources than the build.

For example:

 spec:
   taskRunSpecs:
     - pipelineTaskName: build-container
       stepSpecs:
-        - name: sbom-syft-generate
+        - name: build
           computeResources:
             requests:
               memory: 16Gi
             limits:
               memory: 16Gi

This will work for build steps that run in-cluster - single-platform builds
and typically also the amd64 builds in a multi-platform build setup.

For build steps that run on remote VMs, the overrides have no effect. In case
the build fails, please switch to a larger VM flavor (consult the documentation
of your particular Konflux deployment to see what's available).

For example:

 spec:
   params:
     - name: build-platforms
       value:
         - localhost
-        - linux/arm64
+        - linux-mxlarge/arm64
konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.7.1

v0.7.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux

red-hat-konflux Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: /bin/sh -c pipeline-migration-tool migrate -f "$RENOVATE_POST_UPGRADE_COMMAND_DATA_FILE"
DEBUG:2026-08-11 03:55:55,633:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,634:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,635:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,635:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,636:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,636:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,704:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,704:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,705:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,706:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,707:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,708:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,708:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:55,709:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,135:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,204:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-08-11 03:55:56,204:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,204:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-apply-tags
DEBUG:2026-08-11 03:55:56,206:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,206:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta
DEBUG:2026-08-11 03:55:56,208:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta
DEBUG:2026-08-11 03:55:56,208:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,209:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,210:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks
DEBUG:2026-08-11 03:55:56,210:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,212:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,213:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,238:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,213:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,213:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,303:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,304:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-rpms-signature-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-08-11 03:55:56,304:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,305:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 385
DEBUG:2026-08-11 03:55:56,307:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta
DEBUG:2026-08-11 03:55:56,308:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan
DEBUG:2026-08-11 03:55:56,310:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta
DEBUG:2026-08-11 03:55:56,310:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta
DEBUG:2026-08-11 03:55:56,311:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,312:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,312:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,312:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,314:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,315:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,316:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,337:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 380
DEBUG:2026-08-11 03:55:56,404:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,405:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-08-11 03:55:56,405:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 12987
DEBUG:2026-08-11 03:55:56,405:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-build-image-index
DEBUG:2026-08-11 03:55:56,405:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 715
DEBUG:2026-08-11 03:55:56,406:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta
DEBUG:2026-08-11 03:55:56,407:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta
DEBUG:2026-08-11 03:55:56,411:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,409:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,410:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,409:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,505:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta
DEBUG:2026-08-11 03:55:56,505:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,506:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-source-build-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 381
DEBUG:2026-08-11 03:55:56,507:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,507:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,509:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta
DEBUG:2026-08-11 03:55:56,510:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-08-11 03:55:56,525:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 718
DEBUG:2026-08-11 03:55:56,604:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 1781
DEBUG:2026-08-11 03:55:56,604:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-08-11 03:55:56,604:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 385
DEBUG:2026-08-11 03:55:56,604:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-init
DEBUG:2026-08-11 03:55:56,607:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
WARNING:2026-08-11 03:55:56,704:migrate:Registry does not have current bundle quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3.1@sha256:5393bada94051f02aa971ff773b130928e01ac595b9ce3bbbd69899751ed8222
INFO:2026-08-11 03:55:56,704:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta. Skip resolving migrations.
DEBUG:2026-08-11 03:55:56,705:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 14496
DEBUG:2026-08-11 03:55:56,706:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,707:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,745:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 2070
DEBUG:2026-08-11 03:55:56,803:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/manifests/migration-0.11.0-1c9be44fab93eff65ce47db18253e37b4df4f253e47e7c376103e45b309d3020-1785833792 HTTP/1.1" 200 633
DEBUG:2026-08-11 03:55:56,804:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 6116
WARNING:2026-08-11 03:55:56,746:migrate:Registry does not have current bundle quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:510daad5648d37936b9b2c599a35c8e59b7389de8e1a4e58f6c6d079957d730d
INFO:2026-08-11 03:55:56,805:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta. Skip resolving migrations.
DEBUG:2026-08-11 03:55:56,807:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 9521
DEBUG:2026-08-11 03:55:56,810:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,812:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,874:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 1492
DEBUG:2026-08-11 03:55:56,877:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,887:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 6077
DEBUG:2026-08-11 03:55:56,903:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/blobs/sha256:1c9be44fab93eff65ce47db18253e37b4df4f253e47e7c376103e45b309d3020 HTTP/1.1" 302 1019
DEBUG:2026-08-11 03:55:56,904:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-apply-tags/manifests/sha256:da0cff2a36f07087798cd5f577b15f3d9e6dd4d3d08956227b298362e08ecc37 HTTP/1.1" 200 1168
DEBUG:2026-08-11 03:55:56,905:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-08-11 03:55:56,905:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3-1786022318@sha256:da0cff2a36f07087798cd5f577b15f3d9e6dd4d3d08956227b298362e08ecc37
DEBUG:2026-08-11 03:55:56,906:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-08-11 03:55:56,924:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta/manifests/sha256:da807e473a1f3b6565617080ccdbfa7f49f34084c224bc0fb5123acc08a9f51c HTTP/1.1" 200 1385
DEBUG:2026-08-11 03:55:56,926:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:56,944:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/manifests/sha256:e438f3104d706f73812994953d3d0a9c62ac8e4a372d86337ff26bbca9902709 HTTP/1.1" 200 1490
DEBUG:2026-08-11 03:55:57,003:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/manifests/sha256:b78e9c05c5126613eddee53f2f3534a9b86bfca17d903599f2fa465b7938e241 HTTP/1.1" 200 2358
DEBUG:2026-08-11 03:55:57,004:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/1c/1c9be44fab93eff65ce47db18253e37b4df4f253e47e7c376103e45b309d3020?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260811%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260811T035556Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=70a98c104bd2521271ccda1b3ff60355d6043efa180bd5521c3df5e3930b2d7a HTTP/1.1" 200 11913
DEBUG:2026-08-11 03:55:57,004:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14217
INFO:2026-08-11 03:55:57,005:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2-9d7d4653950510ee57277034c9b69d215b69fb78@sha256:e438f3104d706f73812994953d3d0a9c62ac8e4a372d86337ff26bbca9902709. It points to a previous migration bundle sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6 that is before the current upgrade.
INFO:2026-08-11 03:55:57,006:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.5-9408f28e4020e01dba0718c6121a7b1a69aca8de@sha256:b78e9c05c5126613eddee53f2f3534a9b86bfca17d903599f2fa465b7938e241
DEBUG:2026-08-11 03:55:57,009:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-08-11 03:55:57,009:oras.logger:Successfully pulled /tmp/tmp842zxchm-migration/0.11.0.sh.
DEBUG:2026-08-11 03:55:57,066:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta/referrers/sha256:da807e473a1f3b6565617080ccdbfa7f49f34084c224bc0fb5123acc08a9f51c?artifactType=text%2Fx-shellscript HTTP/1.1" 200 660
DEBUG:2026-08-11 03:55:57,081:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 7272
DEBUG:2026-08-11 03:55:57,104:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-08-11 03:55:57,173:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/manifests/sha256:beb05ae2fad733783b3b17e05871e0eaf527a07c904cf3fb2cb551025007eec1 HTTP/1.1" 200 1684
INFO:2026-08-11 03:55:57,175:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1-9408f28e4020e01dba0718c6121a7b1a69aca8de@sha256:beb05ae2fad733783b3b17e05871e0eaf527a07c904cf3fb2cb551025007eec1
DEBUG:2026-08-11 03:55:57,187:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta/manifests/sha256:ed4a0ad92690f264295af1940763fd7b9cf1397421c7fbdddd74cd018e6492d6 HTTP/1.1" 200 788
DEBUG:2026-08-11 03:55:57,253:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta/blobs/sha256:aa8d60c8382e5f4bfd65a695c6fb40979bc69588d38d0d578a4dd0af9f9f5a15 HTTP/1.1" 302 1019
DEBUG:2026-08-11 03:55:57,254:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-08-11 03:55:57,313:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/aa/aa8d60c8382e5f4bfd65a695c6fb40979bc69588d38d0d578a4dd0af9f9f5a15?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260811%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260811T035557Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=d67bcfd773b1d8fd8e75033520c83d8be8a0050a34f21cd4b73c506133184f08 HTTP/1.1" 200 1138
INFO:2026-08-11 03:55:57,315:migrate:Task bundle quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2-aa0a7c544bec1c7c0c64abcd64674afea4bcaa98@sha256:da807e473a1f3b6565617080ccdbfa7f49f34084c224bc0fb5123acc08a9f51c has migration.
INFO:2026-08-11 03:55:57,315:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2-aa0a7c544bec1c7c0c64abcd64674afea4bcaa98@sha256:da807e473a1f3b6565617080ccdbfa7f49f34084c224bc0fb5123acc08a9f51c. It points to a previous migration bundle sha256:0e12654b0532ca720523693a5a85e67e0221d3678e2f54c675a61e72c5c240b3 that is before the current upgrade.
WARNING:2026-08-11 03:55:57,318:migrate:Failed to resolve migrations for bundles: []
WARNING:2026-08-11 03:55:57,319:migrate:Do not attempt handling migrations for them.
INFO:2026-08-11 03:55:57,319:migrate.transition-to-modify:All migration scripts are using pmt-modify command.
INFO:2026-08-11 03:55:57,806:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.11.0 in package file .tekton/cli-main-pull-request.yaml
DEBUG:2026-08-11 03:55:57,806:migrate:Run: ['bash', '/tmp/tmpsx0frz_6-migration-file', '.tekton/cli-main-pull-request.yaml']
DEBUG:2026-08-11 03:55:57,915:migrate:b'Processing PipelineRun .tekton/cli-main-pull-request.yaml\nProcessing overrides for pipelineTask build-container\nNo sbom-syft-generate step overrides found\nNo push step overrides found\n'
INFO:2026-08-11 03:55:57,915:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2-aa0a7c544bec1c7c0c64abcd64674afea4bcaa98@sha256:da807e473a1f3b6565617080ccdbfa7f49f34084c224bc0fb5123acc08a9f51c in package file .tekton/cli-main-pull-request.yaml
DEBUG:2026-08-11 03:55:57,916:migrate:Run: ['bash', '/tmp/tmpsx0frz_6-migration-file', '.tekton/cli-main-pull-request.yaml']
DEBUG:2026-08-11 03:55:58,714:migrate:b'usage: pmt modify generic remove [-h] YAML-PATH\npmt modify generic remove: error: argument YAML-PATH: expected \'<document start>\', but found (\'[\',)\n  in "<unicode string>", line 6, column 1:\n    [\n    ^ (line: 6)\n'
ERROR:2026-08-11 03:55:58,714:migrate:Failed to apply migration: Command '['bash', '/tmp/tmpsx0frz_6-migration-file', '.tekton/cli-main-pull-request.yaml']' returned non-zero exit status 2.
INFO:2026-08-11 03:55:58,715:migrate.transition-to-modify:All migration scripts are using pmt-modify command.
INFO:2026-08-11 03:55:59,207:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.11.0 in package file .tekton/cli-main-push.yaml
DEBUG:2026-08-11 03:55:59,207:migrate:Run: ['bash', '/tmp/tmpv6vbj9xo-migration-file', '.tekton/cli-main-push.yaml']
DEBUG:2026-08-11 03:55:59,316:migrate:b'Processing PipelineRun .tekton/cli-main-push.yaml\nProcessing overrides for pipelineTask build-container\nNo sbom-syft-generate step overrides found\nNo push step overrides found\n'
INFO:2026-08-11 03:55:59,316:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-tkn-bundle-oci-ta:0.2-aa0a7c544bec1c7c0c64abcd64674afea4bcaa98@sha256:da807e473a1f3b6565617080ccdbfa7f49f34084c224bc0fb5123acc08a9f51c in package file .tekton/cli-main-push.yaml
DEBUG:2026-08-11 03:55:59,317:migrate:Run: ['bash', '/tmp/tmpv6vbj9xo-migration-file', '.tekton/cli-main-push.yaml']
DEBUG:2026-08-11 03:56:00,118:migrate:b'usage: pmt modify generic remove [-h] YAML-PATH\npmt modify generic remove: error: argument YAML-PATH: expected \'<document start>\', but found (\'[\',)\n  in "<unicode string>", line 6, column 1:\n    [\n    ^ (line: 6)\n'
ERROR:2026-08-11 03:56:00,119:migrate:Failed to apply migration: Command '['bash', '/tmp/tmpv6vbj9xo-migration-file', '.tekton/cli-main-push.yaml']' returned non-zero exit status 2.
ERROR:2026-08-11 03:56:00,119:cli:Cannot do migration for pipeline. Reason: ExceptionGroup('migrate errors', [ExceptionGroup('Migration apply errors', [ExceptionGroup('Apply migrations errors', [MigrationApplyError("Failed to apply migration: Command '['bash', '/tmp/tmpsx0frz_6-migration-file', '.tekton/cli-main-pull-request.yaml']' returned non-zero exit status 2.")]), ExceptionGroup('Apply migrations errors', [MigrationApplyError("Failed to apply migration: Command '['bash', '/tmp/tmpv6vbj9xo-migration-file', '.tekton/cli-main-push.yaml']' returned non-zero exit status 2.")])])])
  + Exception Group Traceback (most recent call last):
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/cli.py", line 28, in entry_point
  |     main()
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/cli.py", line 22, in main
  |     args.action(args)
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/cli.py", line 266, in action
  |     _action_impl(args)
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/cli.py", line 299, in _action_impl
  |     migrate(upgrades, resolver_class)
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 274, in migrate
  |     raise ExceptionGroup("migrate errors", errors)
  | ExceptionGroup: migrate errors (1 sub-exception)
  +-+---------------- 1 ----------------
    | Exception Group Traceback (most recent call last):
    |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 269, in migrate
    |     manager.apply_migrations(skip_bundles=skip_bundles)
    |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 244, in apply_migrations
    |     raise ExceptionGroup("Migration apply errors", errors)
    | ExceptionGroup: Migration apply errors (2 sub-exceptions)
    +-+---------------- 1 ----------------
      | Exception Group Traceback (most recent call last):
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 240, in apply_migrations
      |     op.handle(package_file.file_path)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/pipeline.py", line 46, in handle
      |     self.handle_pipeline_run_file(file_path, doc, yaml_style)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 168, in handle_pipeline_run_file
      |     self._apply_migration(file_path)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 97, in _apply_migration
      |     raise ExceptionGroup("Apply migrations errors", errors)
      | ExceptionGroup: Apply migrations errors (1 sub-exception)
      +-+---------------- 1 ----------------
        | pipeline_migration.actions.migrate.exceptions.MigrationApplyError: Failed to apply migration: Command '['bash', '/tmp/tmpsx0frz_6-migration-file', '.tekton/cli-main-pull-request.yaml']' returned non-zero exit status 2.
        +------------------------------------
      +---------------- 2 ----------------
      | Exception Group Traceback (most recent call last):
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 240, in apply_migrations
      |     op.handle(package_file.file_path)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/pipeline.py", line 46, in handle
      |     self.handle_pipeline_run_file(file_path, doc, yaml_style)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 168, in handle_pipeline_run_file
      |     self._apply_migration(file_path)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 97, in _apply_migration
      |     raise ExceptionGroup("Apply migrations errors", errors)
      | ExceptionGroup: Apply migrations errors (1 sub-exception)
      +-+---------------- 1 ----------------
        | pipeline_migration.actions.migrate.exceptions.MigrationApplyError: Failed to apply migration: Command '['bash', '/tmp/tmpv6vbj9xo-migration-file', '.tekton/cli-main-push.yaml']' returned non-zero exit status 2.
        +------------------------------------

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 8, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 6:11 AM UTC · Completed 6:19 AM UTC

Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 8, 2026

Copy link
Copy Markdown

Looks good to me

Previous run

Looks good to me

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Aug 8, 2026
@codecov

codecov Bot commented Aug 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
acceptance 54.42% <ø> (ø)
generative 16.35% <ø> (ø)
integration 27.56% <ø> (ø)
unit 72.13% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@simonbaird

Copy link
Copy Markdown
Member

I don't understand that error log, but I'm thinking let's retry and see if the problem goes away.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/references/main branch from 1e4c15a to 713ecad Compare August 11, 2026 03:56
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 11, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:57 AM UTC · Completed 4:06 AM UTC

Commit: 87c4a29 · View workflow run →

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

main ready-for-merge All reviewers approved — ready to merge renovate size: S

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant