chore(deps): update konflux references main

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	550afde → b33bfa8
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	13d49df → d30f13d
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	a2efbcd → 3dc78af
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	d4e3499 → 41720da

---

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 11:59 PM, only on Saturday ( * 5-23 * * 6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 8ad115ae-f865-4703-84b6-232faedaae2c

📥 Commits

Reviewing files that changed from the base of the PR and between 7967663 and 79eb569.

📒 Files selected for processing (2)

• .tekton/openshift-mcp-server-pull-request.yaml
• .tekton/openshift-mcp-server-push.yaml

---

📝 Walkthrough

Walkthrough

This pull request updates pinned Tekton catalog task bundle image digests for four tasks across both pull-request and push pipeline definitions. The same four tasks (git-clone-oci-ta, prefetch-dependencies-oci-ta, build-image-index, rpms-signature-scan) receive updated @sha256 digest references in each YAML file. No pipeline control flow or task wiring changes.

Changes

Tekton Task Bundle Digest Updates

Layer / File(s)	Summary
Pull-request pipeline task bundle updates .tekton/openshift-mcp-server-pull-request.yaml	Digest references for clone-repository, prefetch-dependencies, build-image-index, and rpms-signature-scan tasks are updated with new @sha256 pins.
Push pipeline task bundle updates .tekton/openshift-mcp-server-push.yaml	Digest references for the same four tasks (git-clone-oci-ta, prefetch-dependencies-oci-ta, build-image-index, rpms-signature-scan) receive matching digest updates.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• openshift/openshift-mcp-server#239: Updates the same Tekton task bundle digests for overlapping tasks in both PipelineRun definitions.
• openshift/openshift-mcp-server#271: Updates the same Tekton task bundle @sha256 digests in both openshift-mcp-server-{pull,push}.yaml files.
• openshift/openshift-mcp-server#312: Updates the pinned Tekton catalog task-bundle digest for shared tasks in the same PipelineRun YAMLs.

Suggested reviewers

• Cali0707
• Kaustubh-pande

Poem

🐰 Four tasks get new digests, crisp and clean,
The freshest bundle pins you've ever seen,
From pull to push, the updates flow,
No logic changed, just a swift digest glow! 🎯

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately describes the main change: updating Konflux task bundle references (digests) across two Tekton YAML configuration files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/main

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment