chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	a291081 → 3ab8441
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	0b4251e → 70c52e8
quay.io/konflux-ci/tekton-catalog/task-buildah-oci-ta (source, changelog)	c38fc46 → 62de839
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	ae1b7a3 → c77892b
quay.io/konflux-ci/tekton-catalog/task-clair-scan (source, changelog)	312fb4d → 9ff424d
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	567cb66 → 53a0232
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	52827a4 → 12cbcf0
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta (source, changelog)	581ddbb → f3e97e6
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta (source, changelog)	91980bb → fda2e51
quay.io/konflux-ci/tekton-catalog/task-show-sbom (source, changelog)	a7346ed → 8fe70a9
quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta (source, changelog)	d8115c7 → 7c5575a
quay.io/konflux-ci/tekton-catalog/task-summary (source, changelog)	a009e58 → 62c465f

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Walkthrough

Updates pinned sha256 image digests for multiple Tekton task bundles in the multi-arch and single-arch build pipeline YAML files. Task names, versions, parameters, and pipeline control flow remain unchanged; only the bundle digest references are replaced.

Changes

Tekton Pipeline Task Bundle Digest Updates

Layer / File(s)	Summary
Multi-arch pipeline digest pins .tekton/multi-arch-build-pipeline.yaml	Bundle sha256 digests updated for git-clone, buildah-remote, build-image-index, source-build, clair-scan, sast-snyk-check, clamav-scan, apply-tags, push-dockerfile, and finally show-sbom tasks.
Single-arch pipeline digest pins .tekton/single-arch-build-pipeline.yaml	Bundle sha256 digests updated for git-clone, buildah, source-build, clair-scan, sast-snyk-check, clamav-scan, and finally show-sbom and show-summary tasks.

Estimated code review effort: 1 (Trivial) | ~5 minutes

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The commit only updates Tekton YAML bundle digests in .tekton/*.yaml; no Ginkgo test titles or test files were changed.
Test Structure And Quality	✅ Passed	The PR only updates Tekton YAML bundle digests; no Ginkgo test files or test code were changed, so the check is not applicable.
Microshift Test Compatibility	✅ Passed	Only Tekton pipeline YAML digest updates changed; no Ginkgo e2e tests or MicroShift-sensitive APIs were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Only Tekton pipeline YAML digest pins changed; no Ginkgo e2e tests or node-topology assumptions were added.
Topology-Aware Scheduling Compatibility	✅ Passed	Only Tekton task bundle digests changed in two pipeline YAMLs; no affinity, nodeSelector, tolerations, spread, replica, or topology constraints were introduced.
Ote Binary Stdout Contract	✅ Passed	PR only updates Tekton YAML bundle digests; no OTE binary code, main/init/TestMain, or suite-setup stdout paths were changed.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR only updates Tekton pipeline bundle digests in YAML; no new Ginkgo e2e tests or network/IP logic were added.
No-Weak-Crypto	✅ Passed	Diff only repins Tekton bundle images via sha256 digests; no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB, custom crypto, or secret comparisons were added.
Container-Privileges	✅ Passed	The changed Tekton manifests only update bundle digests; neither file contains privileged, host* or allowPrivilegeEscalation settings.
No-Sensitive-Data-In-Logs	✅ Passed	Diff only updates Tekton bundle digests; no logging, secrets, PII, or hostnames were added or changed.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the dependency update to Konflux/Tekton task references in the pipelines.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/main

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[frobware]

/approve
/lgtm
/ok-to-test

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: frobware, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [frobware]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[frobware]

/retest