Update Konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	minor	0.3.1 → 0.4
quay.io/konflux-ci/tekton-catalog/task-buildah (source, changelog)	tekton-bundle	patch	0.12.1 → 0.12.3
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog)	tekton-bundle	patch	0.3.3 → 0.3.4
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	c6c414a → 7854d7b
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies (source, changelog)	tekton-bundle	digest	7629fe3 → 321367d
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile (source, changelog)	tekton-bundle	digest	eb8681b → 7c7d96e
quay.io/konflux-ci/tekton-catalog/task-roxctl-scan (source, changelog)	tekton-bundle	digest	97e2b2c → 4d48db2
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	d9df5d3 → 4b1856e
quay.io/konflux-ci/tekton-catalog/task-source-build (source, changelog)	tekton-bundle	patch	0.3.1 → 0.3.2

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

v0.4

Added

• IMAGE_PLATFORM_MAP parameter: optional per-image platform mapping
  (imageRef=os/arch entries) passed to konflux-build-cli as
  --image-platform-map. This sets the platform on each index entry explicitly,
  which is required for OCI artifacts whose empty config carries no platform
  information (e.g. disk images), where the platform would otherwise be null.
  When empty (the default), behaviour is unchanged.

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-buildah)

v0.12.3

Version 0.12.3 only has relevant changes for the remote variants of this task.

v0.12.2

Changed

• Version 0.12.2 only has relevant changes for the remote variants of this task.

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)

v0.3.4

Added

• Pre-extract every nested archive into a loose file tree before scanning, so
  clamd scans each file directly instead of recursing through nested archive
  layers. This makes scanning of deeply nested archives faster. Extraction uses
  bsdtar, which detects archives (zip/jar/war/ear/tar
  and tar.gz/tar.bz2/tar.xz) by content rather than extension — important because
  the OCI dir: payload is an extension-less blob — and unpacks them
  unconditionally with no size/count/depth limits. It is defensive: a corrupt or
  partial archive is left in place for clamd rather than aborting the scan. No new
  parameters are introduced. Requires the clamav-db image to ship bsdtar
  (added in konflux-clamav).

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-source-build)

v0.3.2

Fixed

• Cargo prefetched dependencies are now included in the source image. They are
  vendored as unpacked source trees rather than archives, so previously they
  were missed by the archive-type filter and left out of the source image.

---

Configuration

📅 Schedule: (in timezone America/Toronto)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 5ebbbe25-5d5b-48de-a3de-fb6ed49784ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: michael-valdron, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [michael-valdron]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment