[main] Update Konflux references by red-hat-konflux-kflux-prd-rh02[bot] · Pull Request #4135 · openshift-knative/serverless-operator

red-hat-konflux-kflux-prd-rh02 · 2026-06-20T08:13:10Z

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	patch	`0.3` → `0.3.1`
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	minor	`0.3` → `0.4`
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	minor	`0.9` → `0.12.3`
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog)	tekton-bundle	minor	`0.3` → `0.4.1`
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	patch	`0.3` → `0.3.4`
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog)	tekton-bundle	digest	`e78d0d3` → `0ccc688`
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	`88f4fd6` → `fa53ef4`
quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta (source, changelog)	tekton-bundle	digest	`23c6e30` → `7361770`
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	minor	`0.1` → `0.2.6`
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	patch	`0.4` → `0.4.3`
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	minor	`0.3` → `0.10.3`
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	tekton-bundle	patch	`0.3` → `0.3.1`
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	patch	`0.2` → `0.2.2`
quay.io/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta (source, changelog)	tekton-bundle	digest	`6a7c758` → `edc7d82`
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta (source, changelog)	tekton-bundle	digest	`3cbb353` → `d00c884`
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	tekton-bundle	minor	`0.4` → `0.5.0`
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta (source, changelog)	tekton-bundle	digest	`2238120` → `15d654c`
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	tekton-bundle	patch	`0.3` → `0.3.2`
quay.io/konflux-ci/tekton-catalog/task-validate-fbc (source, changelog)	tekton-bundle	minor	`0.1` → `0.3`

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-apply-tags)

`v0.3.1`

Changed

Nothing. Started using semver specification for version labels.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

`v0.4`

Added

IMAGE_PLATFORM_MAP parameter: optional per-image platform mapping
(imageRef=os/arch entries) passed to konflux-build-cli as
--image-platform-map. This sets the platform on each index entry explicitly,
which is required for OCI artifacts whose empty config carries no platform
information (e.g. disk images), where the platform would otherwise be null.
When empty (the default), behaviour is unchanged.

`v0.3.1`

Fixed

Export SBOM_SKIP_VALIDATION into the step environment so the create-sbom step honors the parameter.
The parameter did nothing before. Now it works as expected.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

`v0.12.3`

Changed

All ssh and rsync invocations to the build VM now share a single ssh
connection. The build step writes an ~/.ssh/config with ControlMaster auto,
ControlPath and ControlPersist, so only the first invocation pays the cost
of the TCP handshake, key exchange and authentication.

`v0.12.2`

Removed

Removed the SSH port forwarding from decommissioned JVM Build Service artifact cache
(JVM_BUILD_WORKSPACE_ARTIFACT_CACHE_PORT_80_TCP_ADDR) from the remote build. This is just cleanup of unused code.

`v0.12.1`

Changed

Bump prepare-sboms step memory from 256Mi to 512Mi (requests = limits) to prevent OOM kills on large container images (GPU/ML, bootc, driver-toolkit).
Remove prepare-sboms CPU limit (was 100m) to allow burst CPU and prevent throttling. CPU requests remain at 100m.

`v0.12.0`

Changed

Parameter CONTEXTUALIZE_SBOM is now set to false by default. The SBOM
contextualization received an overhaul, enabling the support for builder
content contextualization in SBOMs. To get involved in UAT, set this value
to true and report issues
to Mobster maintainers.
When CONTEXTUALIZE_SBOM is set to true, the built image will contain
new labels, io.buildah.stage.name and io.buildah.stage.base.

`v0.11.2`

Fixed

Per-arch RPM filtering for the prefetch SBOM.
- With buildah task versions >= 0.10.0, < 0.11.2, the final SBOM would always
  include the x86_64 RPMs (and no other arches) from the prefetch SBOM,
  even for images built on other arches.
- Now, the SBOM will contain the RPMs for the corresponding arch.

`v0.11.1`

Changed

Set a 5 minute I/O timeout for rsync transfers to and from the build VMs.
The build will fail if the connection goes 5 minutes without transfering
a single byte of data.

Fixed

Stopped rsyncing /var/workdir from build VMs back to the cluster.
This directory contains the git repository and prefetched dependencies,
which can be a lot of data. The rsync back was an unfortunate side effect
of how tooling generates the remote-oci-ta task variant from the base task,
and was completely unnecessary.

`v0.11.0`

Changed

When scanning the built image with Syft, scans the image filesystem as
a directory instead of scanning the the image as an OCI archive. This improves
the scanning time, disk usage and may improve memory usage. More details in
konflux-build-cli/docs/design/syft-image-scanning.md.
The remote variants of this task now push the built image to the registry directly
from the build VM instead of rsyncing the image back to the cluster first.
For large images, this significantly reduces the time spent on network transfers.

Removed

BREAKING: Removed the sbom-syft-generate step, SBOM generation now happens
in the build step.
BREAKING: Removed the push step, the push now happens in the build step.
If you have step overrides configured for either of the two removed steps,
the pipeline will fail with invalid StepOverride. See the migration guidance below.

Migration guidance

Buildah v0.11.0 comes with a migration script that will attempt to automatically
fix the step overrides in your PipelineRuns. In most cases, no manual action will
be needed. But there are cases that the script cannot handle:

Your PipelineRun references an external Pipeline. In this case, the migration
script will never get a chance to run on the PipelineRun.
Your PipelineRun is multi-platform, SBOM generation needs more resources
than the build itself and the remote VMs do not have sufficient resources.

If the migration script doesn't solve the problem, please follow the procedure below.

Manual procedure

If you have sbom-syft-generate or push step overrides in the .spec.taskRunSpecs
section in your PipelineRun, please remove them. In most cases, this should be all.

However, if you were previously requesting more resources for SBOM generation
than for the build step itself, there is a chance that the build will fail.
In this case, move the relevant overrides to the build step. The same technically
applies for the push step, but it's highly unlikely that pushing would require
more resources than the build.

For example:

 spec:
   taskRunSpecs:
     - pipelineTaskName: build-container
       stepSpecs:
-        - name: sbom-syft-generate
+        - name: build
           computeResources:
             requests:
               memory: 16Gi
             limits:
               memory: 16Gi

This will work for build steps that run in-cluster - single-platform builds
and typically also the amd64 builds in a multi-platform build setup.

For build steps that run on remote VMs, the overrides have no effect. In case
the build fails, please switch to a larger VM flavor (consult the documentation
of your particular Konflux deployment to see what's available).

For example:

 spec:
   params:
     - name: build-platforms
       value:
         - localhost
-        - linux/arm64
+        - linux-mxlarge/arm64

`v0.10.7`

Fixed

Thanks to konflux-build-cli#208, the task now supports per-containerfile
ignore files, same as buildah itself.
- Previously, the task supported the .containerignore and .dockerignore files
  in the root of the context directory, but not the <containerfile>.containerignore
  and <containerfile>.dockerignore files.

`v0.10.6`

Fixed

Attaching SBOM attestations using keyless signing. This stopped working between
versions 0.10.4 and 0.10.5, when the upload-sbom step upgraded cosign to v3.
- Cosign v3 wants to use a "signing config" JSON file instead of accepting
  service URLs directly as CLI flags. The konflux-ci/konflux-ci deployment
  of Konflux doesn't provide the config file in the TUF mirror. Fixed
  by setting --use-signing-config=false to still allow direct URLs.

Changed

Consolidated all keyless signing code in the upload-sbom step.
Previously, if keyless signing was enabled, the task would sign the image
in the push step and then the SBOM in upload-sbom step. Now, it will sign both
in the upload-sbom step. This has no practical impact, but enables a larger
rework of the push step in the future.

`v0.10.5`

Added

Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
--rhsm-mount-ca-certs option.

`v0.10`

Fixed

Thanks to konflux-build-cli#208, the task now supports per-containerfile
ignore files, same as buildah itself.
- Previously, the task supported the .containerignore and .dockerignore files
  in the root of the context directory, but not the <containerfile>.containerignore
  and <containerfile>.dockerignore files.

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clair-scan)

`v0.4.1`

Changed

Allign script and task version.

`v0.3.2`

Changed

Replaced quay.io/konflux-ci/oras:latest image with quay.io/konflux-ci/task-runner:1.5.0 in the oci-attach-report step.

Added

set docker-config-dir in clair-action report command

`v0.3.1`

Added

Declare DOCKER_CONFIG to get get credential to quay.io.
Increase retry to 5

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)

`v0.3.4`

Added

Pre-extract every nested archive into a loose file tree before scanning, so
clamd scans each file directly instead of recursing through nested archive
layers. This makes scanning of deeply nested archives faster. Extraction uses
bsdtar, which detects archives (zip/jar/war/ear/tar
and tar.gz/tar.bz2/tar.xz) by content rather than extension — important because
the OCI dir: payload is an extension-less blob — and unpacks them
unconditionally with no size/count/depth limits. It is defensive: a corrupt or
partial archive is left in place for clamd rather than aborting the scan. No new
parameters are introduced. Requires the clamav-db image to ship bsdtar
(added in konflux-clamav).

`v0.3.3`

Changed

Skip downloading OCI layers whose manifest annotations name only unscannable
model-weight files (.safetensors, .gguf, .ggml, .pt, .pth, .onnx,
.onnx_data / .onnx_data_*), using org.opencontainers.image.title and
olot.layer.content.inlayerpath. Any other annotated layer is skipped when
the OCI descriptor size is at least 2000MiB (slightly under ClamAV's ~2GiB
MaxFileSize), regardless of extension. Layers without those annotations are
still listed with --dry-run as in 0.3.2. The --dry-run skip uses the
same name list.

`v0.3.2`

Added

Skip extracting OCI layers that contain only unscannable model-weight files
(.safetensors, .gguf, .ggml). Other layers are still extracted and
scanned. If layer listing fails, the task falls back to extracting the
full image.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

`v0.10.3`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.62.0

`v0.10.2`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.61.1

`v0.10.1`

Changed

When input is empty, only run the skip-ta step and skip other steps
Use quay.io/konflux-ci/task-runner for the skip-ta step instead of ubi-minimal

`v0.10.0`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.61.0

`v0.9.0`

Added

Added optional pip-index-url parameter to pass PIP_INDEX_URL to Hermeto for pip dependency prefetch.
When set, this URL is used as a fallback package index when requirements.txt does not specify --index-url.
To use this parameter, add pip-index-url (type: string, default: "") to your pipeline params
and pass it to the prefetch-dependencies task.

`v0.8.0`

Add Bundler and Cargo package registry proxy support - konflux-ci/konflux-build-cli#229

`v0.7.1`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.60.1
Fixes GHSA-rfhj-wcpf-9jcx
Fixes GHSA-rpww-j58f-22xr
Fixes GHSA-pxcg-wp85-mcrg
Fixes GHSA-wx26-fvpq-v9rp

`v0.7.0`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.60.0
The .repo file for RPM dependencies is now named hermeto.repo instead of cachi2.repo

`v0.6.0`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.59.0

`v0.5.0`

Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.58.0

`v0.4.1`

Fixed

Mount the trusted-ca volume in the use-trusted-artifact and create-trusted-artifact steps.
Previously, the mount was missing, which means the task did not support container registries
with certificates signed by a private/self-signed CA.

`v0.4.0`

Hermeto releases from 0.55.0 to 0.57.1 - hermetoproject/hermeto@0.55.0...0.57.1

`v0.3.2`

Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.

konflux-ci/konflux-sast-tasks (quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta)

`v0.5.0`

Added

Started tracking changes in this file.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta)

`v0.3.2`

Fixed

Cargo prefetched dependencies are now included in the source image. They are
vendored as unpacked source trees rather than archives, so previously they
were missed by the archive-type filter and left out of the source image.

`v0.3.1`

Changed

Nothing. Started using semver specification for version labels.

konflux-ci/konflux-operator-tasks (quay.io/konflux-ci/tekton-catalog/task-validate-fbc)

`v0.3`

Fixed

Migration script for fbc-inject-lifecycle-oci-ta now resolves the task bundle
digest dynamically at migration time instead of using a hardcoded pin, preventing
digest-mismatch errors for teams that had not yet merged the MintMaker PR for 0.2.

Changed

Migration script now uses yq instead of sed for all pipeline YAML edits,
for cross-platform compatibility (macOS + Linux) and safer, structure-aware
modifications (e.g. distinguishing actual task objects from string matches
on bundle_ref or param values).
Added BUILD_ARGS param wiring to fbc-inject-lifecycle, sourced from
$(params.build-args[*]) and normalized to a list value.

`v0.2`

Changed

Version bump to trigger automated rollout of the new fbc-inject-lifecycle-oci-ta
task to all FBC builder pipelines via MintMaker. No functional changes to this task.

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Saturday (* * * * 6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

openshift-ci · 2026-06-20T08:13:18Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh02[bot]
Once this PR has been reviewed and has the lgtm label, please assign lberk for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-06-20T08:13:23Z

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

red-hat-konflux-kflux-prd-rh02 · 2026-09-05T08:06:46Z

⚠️ Artifact update problem

ℹ️ Note

This PR body was truncated due to platform limits.

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: /bin/sh -c pipeline-migration-tool migrate -f "$RENOVATE_POST_UPGRADE_COMMAND_DATA_FILE"
DEBUG:2026-09-26 20:05:14,290:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,290:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,291:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,291:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,293:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,293:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,294:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,296:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,298:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,299:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,300:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,300:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,302:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,303:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,308:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,309:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,310:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,310:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,387:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:14,670:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-deprecated-image-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:14,789:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check
DEBUG:2026-09-26 20:05:15,087:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,087:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 385
DEBUG:2026-09-26 20:05:15,088:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,088:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 380
DEBUG:2026-09-26 20:05:15,089:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-09-26 20:05:15,092:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta
DEBUG:2026-09-26 20:05:15,095:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-apply-tags
DEBUG:2026-09-26 20:05:15,095:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-build-image-index
DEBUG:2026-09-26 20:05:15,187:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 1054
DEBUG:2026-09-26 20:05:15,188:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-rpms-signature-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-09-26 20:05:15,188:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,188:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,188:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,189:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,189:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 715
DEBUG:2026-09-26 20:05:15,191:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta
DEBUG:2026-09-26 20:05:15,191:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,191:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,192:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,193:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-init
DEBUG:2026-09-26 20:05:15,194:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan
DEBUG:2026-09-26 20:05:15,195:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta
DEBUG:2026-09-26 20:05:15,196:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta
DEBUG:2026-09-26 20:05:15,197:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta
DEBUG:2026-09-26 20:05:15,199:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,199:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,200:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta
DEBUG:2026-09-26 20:05:15,202:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,202:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,202:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,202:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,203:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,203:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,204:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,204:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,205:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,225:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,206:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,208:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,250:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-source-build-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 715
DEBUG:2026-09-26 20:05:15,251:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta
DEBUG:2026-09-26 20:05:15,226:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks
DEBUG:2026-09-26 20:05:15,205:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,209:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,286:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,287:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clair-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-09-26 20:05:15,287:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,287:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,291:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,303:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,308:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,310:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta
DEBUG:2026-09-26 20:05:15,389:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,387:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clamav-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,387:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 380
DEBUG:2026-09-26 20:05:15,388:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-deprecated-image-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 9740
DEBUG:2026-09-26 20:05:15,389:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta
DEBUG:2026-09-26 20:05:15,389:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,391:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-clamav-scan
DEBUG:2026-09-26 20:05:15,393:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,289:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-clair-scan
DEBUG:2026-09-26 20:05:15,487:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-09-26 20:05:15,487:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-validate-fbc/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 715
DEBUG:2026-09-26 20:05:15,490:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,490:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,491:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,535:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 1781
DEBUG:2026-09-26 20:05:15,538:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 385
DEBUG:2026-09-26 20:05:15,588:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 1054
DEBUG:2026-09-26 20:05:15,588:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,588:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,687:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14247
DEBUG:2026-09-26 20:05:15,688:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-validate-fbc
DEBUG:2026-09-26 20:05:15,688:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta
DEBUG:2026-09-26 20:05:15,690:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
WARNING:2026-09-26 20:05:15,692:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3.1@sha256:4c567d11296850230fe32e76d129834d3bf337a0cae9989b64279b7cfaa4e735
DEBUG:2026-09-26 20:05:15,695:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,695:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,696:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-09-26 20:05:15,697:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
INFO:2026-09-26 20:05:15,697:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta. Skip resolving migrations.
DEBUG:2026-09-26 20:05:15,698:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,698:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,699:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,700:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,787:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 14496
DEBUG:2026-09-26 20:05:15,787:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14496
DEBUG:2026-09-26 20:05:15,847:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clair-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-09-26 20:05:15,887:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-source-build-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 715
DEBUG:2026-09-26 20:05:15,887:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 9554
DEBUG:2026-09-26 20:05:15,887:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-clamav-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 10639
DEBUG:2026-09-26 20:05:15,890:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,890:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,894:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-rpms-signature-scan/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-09-26 20:05:15,894:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
WARNING:2026-09-26 20:05:15,897:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:d00c884c78489a52dc638e6ced0a01429670d0754f5b1305ad576709cf660312
DEBUG:2026-09-26 20:05:15,898:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:15,986:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-deprecated-image-check/manifests/sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872 HTTP/1.1" 200 1377
DEBUG:2026-09-26 20:05:15,987:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 21975
INFO:2026-09-26 20:05:15,988:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta. Skip resolving migrations.
INFO:2026-09-26 20:05:15,989:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5-a545338e5bac49c7dfdba1cc2e5ad1c0b1e9ef7d@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
DEBUG:2026-09-26 20:05:15,991:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,086:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,087:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.4- HTTP/1.1" 200 14187
DEBUG:2026-09-26 20:05:16,089:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,186:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14575
DEBUG:2026-09-26 20:05:16,187:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/manifests/migration-0.4.3-d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97-1786457984 HTTP/1.1" 200 631
DEBUG:2026-09-26 20:05:16,189:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-09-26 20:05:16,190:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,193:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,222:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/blobs/sha256:d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97 HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:16,223:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:16,251:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 3226
DEBUG:2026-09-26 20:05:16,287:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-validate-fbc/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 715
DEBUG:2026-09-26 20:05:16,287:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 4921
DEBUG:2026-09-26 20:05:16,387:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-rpms-signature-scan/manifests/migration-0.2.1-2a1624ccd4b208f24611434c2464591a7195e5221334dd086923a7e696a9d62c-1770887021 HTTP/1.1" 200 631
DEBUG:2026-09-26 20:05:16,391:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/manifests/migration-0.11.0-1c9be44fab93eff65ce47db18253e37b4df4f253e47e7c376103e45b309d3020-1785833792 HTTP/1.1" 200 633
DEBUG:2026-09-26 20:05:16,395:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,396:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,396:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,420:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-rpms-signature-scan/blobs/sha256:2a1624ccd4b208f24611434c2464591a7195e5221334dd086923a7e696a9d62c HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:16,486:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/blobs/sha256:1c9be44fab93eff65ce47db18253e37b4df4f253e47e7c376103e45b309d3020 HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:16,487:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-clair-scan/manifests/migration-0.4.1-5398432717983ac913833efb15ba4d45e6e70d5b8535e480eecf83a5f8e90d75-1787576146 HTTP/1.1" 200 631
DEBUG:2026-09-26 20:05:16,487:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 2359
DEBUG:2026-09-26 20:05:16,487:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-clamav-scan/manifests/sha256:3203cd3bde82d9e4d1beb5f1366942346800cff89e392c920733eb0ea78d731b HTTP/1.1" 200 1264
DEBUG:2026-09-26 20:05:16,489:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:16,490:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:16,588:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 12996
INFO:2026-09-26 20:05:16,494:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3-da7066dd2828ad9a275c11fdb75fa91ca08f401b@sha256:3203cd3bde82d9e4d1beb5f1366942346800cff89e392c920733eb0ea78d731b
DEBUG:2026-09-26 20:05:16,589:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/d3/d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200516Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=59655a3f522dea90121a0bfa3b41be3756df6c52638a33ada9603172a3fb1960 HTTP/1.1" 200 4750
DEBUG:2026-09-26 20:05:16,590:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,590:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-clair-scan/blobs/sha256:5398432717983ac913833efb15ba4d45e6e70d5b8535e480eecf83a5f8e90d75 HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:16,687:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/manifests/migration-0.3.2-6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea-1782912267 HTTP/1.1" 200 631
DEBUG:2026-09-26 20:05:16,688:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.4- HTTP/1.1" 200 1203
DEBUG:2026-09-26 20:05:16,690:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-09-26 20:05:16,692:oras.logger:Successfully pulled /tmp/tmpuk6r1bxo-migration/0.4.3.sh.
DEBUG:2026-09-26 20:05:16,693:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:16,699:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,717:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/blobs/sha256:6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:16,787:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/manifests/migration-0.2-41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733-1783967772 HTTP/1.1" 200 629
DEBUG:2026-09-26 20:05:16,789:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 4382
DEBUG:2026-09-26 20:05:16,789:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/1c/1c9be44fab93eff65ce47db18253e37b4df4f253e47e7c376103e45b309d3020?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200516Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=7aea5b09a8d219de270ea266c42fb769899913d01d95ea8096cfb10365d4d819 HTTP/1.1" 200 11913
DEBUG:2026-09-26 20:05:16,887:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks/manifests/sha256:fa53ef450ba538addafee1211ff6ac15b55865ce652fec15ac99b554680cb642 HTTP/1.1" 200 1490
DEBUG:2026-09-26 20:05:16,887:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta/manifests/sha256:edc7d8263a73aa061ab23b7b16f42ca86a40a0d03848cb64097d97c4d084a3f6 HTTP/1.1" 200 2305
DEBUG:2026-09-26 20:05:16,888:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
INFO:2026-09-26 20:05:16,894:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2-73e631f48e0cff886b1a8ae2c35e364943e837c0@sha256:fa53ef450ba538addafee1211ff6ac15b55865ce652fec15ac99b554680cb642. It points to a previous migration bundle sha256:f0c7632803ea659ae224ce16db6e0728ac1d79996c85bb43eea80a9de2a8a8d6 that is before the current upgrade.
INFO:2026-09-26 20:05:16,896:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-run-opm-command-oci-ta:0.1-b8af62d5044a0d344b7feb3d63aa1a4cf67eb4cb@sha256:edc7d8263a73aa061ab23b7b16f42ca86a40a0d03848cb64097d97c4d084a3f6
INFO:2026-09-26 20:05:16,897:oras.logger:Successfully pulled /tmp/tmpy32je8f6-migration/0.11.0.sh.
DEBUG:2026-09-26 20:05:16,900:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,902:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:16,908:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/blobs/sha256:41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733 HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:16,909:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:16,925:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/2a/2a1624ccd4b208f24611434c2464591a7195e5221334dd086923a7e696a9d62c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200516Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=6531ee154bbfa6ae09497cfbe12d3526af06527e0d3baa887e39cd28d3e06ad7 HTTP/1.1" 200 2482
INFO:2026-09-26 20:05:16,925:oras.logger:Successfully pulled /tmp/tmpy64ov5mx-migration/0.2.1.sh.
DEBUG:2026-09-26 20:05:16,987:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=3&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 12996
DEBUG:2026-09-26 20:05:16,987:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/53/5398432717983ac913833efb15ba4d45e6e70d5b8535e480eecf83a5f8e90d75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200516Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=3692056d69d4e17099b6a8d222f38af7a8cff3b19e0904b4c7adbb6216f7f414 HTTP/1.1" 200 2663
DEBUG:2026-09-26 20:05:16,988:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 8391
DEBUG:2026-09-26 20:05:16,990:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
WARNING:2026-09-26 20:05:16,992:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.5.0@sha256:17b9587eba53fabaab35061275306bfe1f99661d55e14e22f62321fa7cb5ff3e
DEBUG:2026-09-26 20:05:16,994:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 2070
INFO:2026-09-26 20:05:16,994:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta. Skip resolving migrations.
WARNING:2026-09-26 20:05:17,088:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.6@sha256:a3678910c2bf9187a66a96066193cb41046fbb7097160bf2be6a374ed5e49d30
INFO:2026-09-26 20:05:17,089:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta. Skip resolving migrations.
INFO:2026-09-26 20:05:17,092:oras.logger:Successfully pulled /tmp/tmpv1ufqpop-migration/0.4.1.sh.
DEBUG:2026-09-26 20:05:17,187:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/manifests/migration-0.4.2-e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf-1782733140 HTTP/1.1" 200 630
DEBUG:2026-09-26 20:05:17,188:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/64/6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200516Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=c3021d082ff09a2634eb7fb172acaf20a143118c21388dcad0440b8eef57cb54 HTTP/1.1" 200 2593
INFO:2026-09-26 20:05:17,190:oras.logger:Successfully pulled /tmp/tmpja8b8g7o-migration/0.3.2.sh.
DEBUG:2026-09-26 20:05:17,236:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/41/41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200516Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=52d298a6021044157935ef595037808e312e4e00f53503437a0ff8f7a201c0d3 HTTP/1.1" 200 3853
INFO:2026-09-26 20:05:17,237:oras.logger:Successfully pulled /tmp/tmpelnq8ors-migration/0.2.sh.
DEBUG:2026-09-26 20:05:17,239:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-09-26 20:05:17,241:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=4&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 12888
WARNING:2026-09-26 20:05:17,244:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3.1@sha256:c177fc2b2482b1299e713c51bf258eba4972c016ef260d9f45335c2550dc7b2b
INFO:2026-09-26 20:05:17,244:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-apply-tags. Skip resolving migrations.
DEBUG:2026-09-26 20:05:17,250:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/manifests/sha256:736177074f4949bab9467f41526d056ea5f229c3b5a4f28dbe51c38ba70e8328 HTTP/1.1" 200 2581
INFO:2026-09-26 20:05:17,251:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta:0.1-0@sha256:736177074f4949bab9467f41526d056ea5f229c3b5a4f28dbe51c38ba70e8328
DEBUG:2026-09-26 20:05:17,252:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/blobs/sha256:e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:17,253:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:17,325:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/manifests/migration-0.3-ace7d6aab72332fda292232e7968938549bc6fb67141fb11fd36f180958c384e-1785425140 HTTP/1.1" 200 629
DEBUG:2026-09-26 20:05:17,339:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/e9/e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200517Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=07e9802d3f0f6b7bb75ed5bf02909c19ca7f1b19bb35c16a96b462e7b7edfb51 HTTP/1.1" 200 996
INFO:2026-09-26 20:05:17,339:oras.logger:Successfully pulled /tmp/tmp3p0m4ykc-migration/0.4.2.sh.
DEBUG:2026-09-26 20:05:17,348:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/blobs/sha256:ace7d6aab72332fda292232e7968938549bc6fb67141fb11fd36f180958c384e HTTP/1.1" 302 1019
DEBUG:2026-09-26 20:05:17,349:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-09-26 20:05:17,423:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/ac/ace7d6aab72332fda292232e7968938549bc6fb67141fb11fd36f180958c384e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260926%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260926T200517Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=4132a1f11292640f450db764229bbd372dfed6bff17b0c6c09826358c2ce0f27 HTTP/1.1" 200 6332
INFO:2026-09-26 20:05:17,423:oras.logger:Successfully pulled /tmp/tmpstykblj9-migration/0.3.sh.
WARNING:2026-09-26 20:05:17,429:migrate:Failed to resolve migrations for bundles: []
WARNING:2026-09-26 20:05:17,429:migrate:Do not attempt handling migrations for them.
INFO:2026-09-26 20:05:17,429:migrate.transition-to-modify:All migration scripts are using pmt-modify command.
INFO:2026-09-26 20:05:17,814:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.11.0 in package file .tekton/bundle-build.yaml
DEBUG:2026-09-26 20:05:17,814:migrate:Run: ['bash', '/tmp/tmp5bw5c_g1-migration-file', '.tekton/bundle-build.yaml']
DEBUG:2026-09-26 20:05:18,596:migrate:b'Processing Pipeline .tekton/bundle-build.yaml\nLooking for PipelineRuns that reference Pipeline .tekton/bundle-build.yaml\nProcessing PipelineRun .tekton/serverless-bundle-138-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-bundle-138-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\n'
INFO:2026-09-26 20:05:18,596:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.4.1 in package file .tekton/bundle-build.yaml
DEBUG:2026-09-26 20:05:18,597:migrate:Run: ['bash', '/tmp/tmp5bw5c_g1-migration-file', '.tekton/bundle-build.yaml']
DEBUG:2026-09-26 20:05:28,505:migrate:b'INFO:2026-09-26 20:05:20,190:modify.task:task \'clair-scan\' in \'/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml\': renamed to \'roxctl-scan\'\nDEBUG:2026-09-26 20:05:21,300:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-09-26 20:05:21,359:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-roxctl-scan/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nINFO:2026-09-26 20:05:22,204:modify.task:task \'roxctl-scan\' in \'/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml\': bundle updated to \'quay.io/konflux-ci/tekton-catalog/task-roxctl-scan:0.1@sha256:4d48db2ada6584bc7343ee11adb04d86f1ca9a2849dc718ccda861e092fcf41b\'\nINFO:2026-09-26 20:05:22,604:modify.task:task \'roxctl-scan\' in \'/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml\': taskRef name updated to \'roxctl-scan\'\n'
INFO:2026-09-26 20:05:28,505:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file .tekton/bundle-build.yaml
DEBUG:2026-09-26 20:05:28,505:migrate:Run: ['bash', '/tmp/tmp5bw5c_g1-migration-file', '.tekton/bundle-build.yaml']
DEBUG:2026-09-26 20:05:28,513:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-09-26 20:05:28,513:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file .tekton/bundle-build.yaml
DEBUG:2026-09-26 20:05:28,514:migrate:Run: ['bash', '/tmp/tmp5bw5c_g1-migration-file', '.tekton/bundle-build.yaml']
DEBUG:2026-09-26 20:05:38,388:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-09-26 20:05:29,897:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-09-26 20:05:31,493:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-09-26 20:05:33,112:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-09-26 20:05:34,705:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-09-26 20:05:36,298:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-09-26 20:05:37,891:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml': param 'OMIT_HISTORY' will be created\n"
INFO:2026-09-26 20:05:38,389:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file .tekton/bundle-build.yaml
DEBUG:2026-09-26 20:05:38,389:migrate:Run: ['bash', '/tmp/tmp5bw5c_g1-migration-file', '.tekton/bundle-build.yaml']
DEBUG:2026-09-26 20:05:39,714:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-09-26 20:05:39,612:modify.task:task 'prefetch-dependencies' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/bundle-build.yaml': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-09-26 20:05:39,714:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file .tekton/bundle-build.yaml
DEBUG:2026-09-26 20:05:39,721:migrate:Run: ['bash', '/tmp/tmp5bw5c_g1-migration-file', '.tekton/bundle-build.yaml']
DEBUG:2026-09-26 20:05:39,792:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-09-26 20:05:39,793:migrate.transition-to-modify:All migration scripts are using pmt-modify command.
INFO:2026-09-26 20:05:40,201:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.11.0 in package file .tekton/docker-build.yaml
DEBUG:2026-09-26 20:05:40,202:migrate:Run: ['bash', '/tmp/tmp4wlk3gn4-migration-file', '.tekton/docker-build.yaml']
DEBUG:2026-09-26 20:05:41,200:migrate:b'Processing Pipeline .tekton/docker-build.yaml\nLooking for PipelineRuns that reference Pipeline .tekton/docker-build.yaml\nProcessing PipelineRun .tekton/serverless-ingress-138-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-ingress-138-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-kn-operator-138-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-kn-operator-138-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-metadata-webhook-138-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-metadata-webhook-138-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-must-gather-138-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-must-gather-138-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-openshift-kn-operator-138-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-openshift-kn-operator-138-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\n'
INFO:2026-09-26 20:05:41,200:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.4.1 in package file .tekton/docker-build.yaml
DEBUG:2026-09-26 20:05:41,216:migrate:Run: ['bash', '/tmp/tmp4wlk3gn4-migration-file', '.tekton/docker-build.yaml']
DEBUG:2026-09-26 20:05:51,712:migrate:b'INFO:2026-09-26 20:05:42,815:modify.task:task \'clair-scan\' in \'/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml\': renamed to \'roxctl-scan\'\nDEBUG:2026-09-26 20:05:44,011:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-09-26 20:05:44,137:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-roxctl-scan/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nINFO:2026-09-26 20:05:45,091:modify.task:task \'roxctl-scan\' in \'/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml\': bundle updated to \'quay.io/konflux-ci/tekton-catalog/task-roxctl-scan:0.1@sha256:4d48db2ada6584bc7343ee11adb04d86f1ca9a2849dc718ccda861e092fcf41b\'\nINFO:2026-09-26 20:05:45,505:modify.task:task \'roxctl-scan\' in \'/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml\': taskRef name updated to \'roxctl-scan\'\n'
INFO:2026-09-26 20:05:51,712:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file .tekton/docker-build.yaml
DEBUG:2026-09-26 20:05:51,712:migrate:Run: ['bash', '/tmp/tmp4wlk3gn4-migration-file', '.tekton/docker-build.yaml']
DEBUG:2026-09-26 20:05:51,791:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-09-26 20:05:51,791:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file .tekton/docker-build.yaml
DEBUG:2026-09-26 20:05:51,791:migrate:Run: ['bash', '/tmp/tmp4wlk3gn4-migration-file', '.tekton/docker-build.yaml']
DEBUG:2026-09-26 20:06:01,908:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-09-26 20:05:53,205:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-09-26 20:05:54,995:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-09-26 20:05:56,596:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-09-26 20:05:58,215:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-09-26 20:05:59,813:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-09-26 20:06:01,404:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml': param 'OMIT_HISTORY' will be created\n"
INFO:2026-09-26 20:06:01,908:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file .tekton/docker-build.yaml
DEBUG:2026-09-26 20:06:01,908:migrate:Run: ['bash', '/tmp/tmp4wlk3gn4-migration-file', '.tekton/docker-build.yaml']
DEBUG:2026-09-26 20:06:03,195:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-09-26 20:06:03,098:modify.task:task 'prefetch-dependencies' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/docker-build.yaml': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-09-26 20:06:03,195:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2.1 in package file .tekton/docker-build.yaml
DEBUG:2026-09-26 20:06:03,249:migrate:Run: ['bash', '/tmp/tmp4wlk3gn4-migration-file', '.tekton/docker-build.yaml']
DEBUG:2026-09-26 20:06:03,258:migrate:b'Pipeline does not require rpms-signature-scan bundle migration, skipping\n'
INFO:2026-09-26 20:06:03,259:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-09-26 20:06:03,515:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.11.0 in package file .tekton/fbc-builder.yaml
DEBUG:2026-09-26 20:06:03,515:migrate:Run: ['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-09-26 20:06:04,706:migrate:b'Processing Pipeline .tekton/fbc-builder.yaml\nLooking for PipelineRuns that reference Pipeline .tekton/fbc-builder.yaml\nProcessing PipelineRun .tekton/serverless-index-138-fbc-416-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-416-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-417-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-417-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-418-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-418-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-419-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-419-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-420-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-420-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-421-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-421-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-422-pull-request.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\nProcessing PipelineRun .tekton/serverless-index-138-fbc-422-push.yaml\nProcessing overrides for pipelineTask build-images\nNo sbom-syft-generate step overrides found\nNo push step overrides found\n'
INFO:2026-09-26 20:06:04,706:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file .tekton/fbc-builder.yaml
DEBUG:2026-09-26 20:06:04,706:migrate:Run: ['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-09-26 20:06:04,788:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-09-26 20:06:04,788:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file .tekton/fbc-builder.yaml
DEBUG:2026-09-26 20:06:04,788:migrate:Run: ['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-09-26 20:06:13,310:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-09-26 20:06:05,909:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-09-26 20:06:07,298:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-09-26 20:06:08,703:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-09-26 20:06:10,095:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-09-26 20:06:11,494:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-09-26 20:06:12,901:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'OMIT_HISTORY' will be created\n"
INFO:2026-09-26 20:06:13,311:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file .tekton/fbc-builder.yaml
DEBUG:2026-09-26 20:06:13,311:migrate:Run: ['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-09-26 20:06:14,503:migrate:b"Error: no matches found\nError: no matches found\nenable-package-registry-proxy pipeline parameter already exists\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-09-26 20:06:14,406:modify.task:task 'prefetch-dependencies' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'enable-package-registry-proxy' already has required values\n"
INFO:2026-09-26 20:06:14,503:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file .tekton/fbc-builder.yaml
DEBUG:2026-09-26 20:06:14,503:migrate:Run: ['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-09-26 20:06:15,406:migrate:b'DEBUG:2026-09-26 20:06:15,290:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-09-26 20:06:15,369:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:8160f098d374c18d98acce888b20c3df70f5ce0fc5f4f530c509786557dec5f6\n'
ERROR:2026-09-26 20:06:15,407:migrate:Failed to apply migration: Command '['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']' returned non-zero exit status 2.
INFO:2026-09-26 20:06:15,407:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.3 in package file .tekton/fbc-builder.yaml
DEBUG:2026-09-26 20:06:15,407:migrate:Run: ['bash', '/tmp/tmpc7xekkwf-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-09-26 20:06:18,109:migrate:b'DEBUG:2026-09-26 20:06:17,107:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-09-26 20:06:17,228:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-c

> ✂ **Note**
> 
> PR body was truncated to here.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

openshift-ci Bot requested review from dsimansk and matzew June 20, 2026 08:13

openshift-ci Bot added the needs-ok-to-test label Jun 20, 2026

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch 2 times, most recently from 61656b4 to fc66739 Compare July 4, 2026 08:04

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch 2 times, most recently from 4f857a6 to 2a6cf6a Compare July 18, 2026 08:04

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch 2 times, most recently from 2f09f98 to 40d5a37 Compare August 1, 2026 08:05

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch 2 times, most recently from dc7e7a4 to fabb8b6 Compare August 15, 2026 08:05

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch from fabb8b6 to 4dfe0ea Compare August 22, 2026 08:05

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch from 4dfe0ea to f0275e1 Compare August 29, 2026 08:06

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch from f0275e1 to 4d8b4b9 Compare September 5, 2026 08:06

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch 2 times, most recently from 8ccd756 to 2958051 Compare September 19, 2026 00:37

[main] Update Konflux references

eee512e

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/references/main branch from 2958051 to eee512e Compare September 26, 2026 00:06

Navigation Menu

[main] Update Konflux references - #4135

[main] Update Konflux references#4135
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/references/main

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 20, 2026 •

edited

Loading

Uh oh!

openshift-ci Bot commented Jun 20, 2026

Uh oh!

openshift-ci Bot commented Jun 20, 2026

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Sep 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changed

Added

Fixed

Changed

Removed

Changed

Changed

Fixed

Changed

Fixed

Changed

Removed

Migration guidance

Manual procedure

Fixed

Fixed

Changed

Added

Fixed

Changed

Changed

Added

Added

Added

Changed

Added

Changed

Added

Fixed

Added

Fixed

Changed

Fixed

Changed

Changed

Configuration

Documentation

Uh oh!

openshift-ci Bot commented Jun 20, 2026

Uh oh!

openshift-ci Bot commented Jun 20, 2026

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Sep 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: undefined

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 20, 2026 •

edited

Loading

red-hat-konflux-kflux-prd-rh02 Bot commented Sep 5, 2026 •

edited

Loading