[release-v1.15] Update Konflux references (#914)

This PR contains the following updates:

| Package | Change | Notes |
|---|---|---|
|
[quay.io/konflux-ci/tekton-catalog/task-apply-tags](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/apply-tags/0.3)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/apply-tags),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/apply-tags/CHANGELOG.md))
| `510b6d2` → `a291081` | |
|
[quay.io/konflux-ci/tekton-catalog/task-build-image-index](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/build-image-index/0.3)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/build-image-index),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/build-image-index/CHANGELOG.md))
| `0.2` → `0.3` |
:warning:[migration](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/build-image-index/0.3/MIGRATION.md):warning:
|
|
[quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/buildah-remote-oci-ta/0.9)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/buildah-remote-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/buildah-remote-oci-ta/CHANGELOG.md))
| `1302dbf` → `f667d11` | |
|
[quay.io/konflux-ci/tekton-catalog/task-clair-scan](https://redirect.github.com/konflux-ci/konflux-test-tasks/tree/fd7387a82555c69f8a92782eb72f45258a0a45dc/task/clair-scan/0.3)
([source](https://redirect.github.com/konflux-ci/konflux-test-tasks/tree/HEAD/task/clair-scan),
[changelog](https://redirect.github.com/konflux-ci/konflux-test-tasks/blob/main/task/clair-scan/CHANGELOG.md))
| `85717be` → `cd49cde` | |
|
[quay.io/konflux-ci/tekton-catalog/task-clamav-scan](https://redirect.github.com/konflux-ci/konflux-test-tasks/tree/fd7387a82555c69f8a92782eb72f45258a0a45dc/task/clamav-scan/0.3)
([source](https://redirect.github.com/konflux-ci/konflux-test-tasks/tree/HEAD/task/clamav-scan),
[changelog](https://redirect.github.com/konflux-ci/konflux-test-tasks/blob/main/task/clamav-scan/CHANGELOG.md))
| `657d270` → `171eca5` | |
|
[quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check](https://redirect.github.com/konflux-ci/konflux-test-tasks/tree/8ee2b0899025c0205f7792ec28984837ac363b4b/task/deprecated-image-check/0.5)
([source](https://redirect.github.com/konflux-ci/konflux-test-tasks/tree/HEAD/task/deprecated-image-check),
[changelog](https://redirect.github.com/konflux-ci/konflux-test-tasks/blob/main/task/deprecated-image-check/CHANGELOG.md))
| `516ea66` → `5ff16b7` | |
|
[quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks](https://redirect.github.com/konflux-ci/build-definitions/tree/9519ed99f385c16bb275042df4138bfb7e8b46c6/task/ecosystem-cert-preflight-checks/0.2)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/ecosystem-cert-preflight-checks),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/ecosystem-cert-preflight-checks/CHANGELOG.md))
| `945f8ba` → `2468c01` | |
|
[quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/git-clone-oci-ta/0.1)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/git-clone-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/git-clone-oci-ta/CHANGELOG.md))
| `2c388d2` → `13d49df` | |
|
[quay.io/konflux-ci/tekton-catalog/task-init](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/init/0.4)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/init),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/init/CHANGELOG.md))
| `288f310` → `b797dd4` | |
|
[quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta](https://redirect.github.com/konflux-ci/build-definitions/tree/752a53d81fccd924aee3d21dabc427a399a11963/task/prefetch-dependencies-oci-ta/0.3)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/prefetch-dependencies-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/prefetch-dependencies-oci-ta/CHANGELOG.md))
| `0.2` → `0.3` |
:warning:[migration](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/prefetch-dependencies-oci-ta/0.3/MIGRATION.md):warning:
|
|
[quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/push-dockerfile-oci-ta/0.3)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/push-dockerfile-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/push-dockerfile-oci-ta/CHANGELOG.md))
| `322d515` → `7855471` | |
|
[quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan](https://redirect.github.com/konflux-ci/tekton-tools/tree/3e774b645c93a14c6bf54710413b52a10252308c/tasks/rpms-signature-scan/0.2)
([source](https://redirect.github.com/konflux-ci/tekton-tools/tree/HEAD/task/rpms-signature-scan),
[changelog](https://redirect.github.com/konflux-ci/tekton-tools/blob/main/task/rpms-signature-scan/CHANGELOG.md))
| `05d2d9e` → `ce4bace` | |
|
[quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta](https://redirect.github.com/konflux-ci/konflux-sast-tasks/tree/399cfd4f2f02c0d978a48d00f438e2eca847f20a/task/sast-shell-check-oci-ta/0.1,!task/sast-shell-check-oci-ta/0.1/recipe.yaml)
([source](https://redirect.github.com/konflux-ci/konflux-sast-tasks/tree/HEAD/task/sast-shell-check-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/konflux-sast-tasks/blob/main/task/sast-shell-check-oci-ta/CHANGELOG.md))
| `a528f01` → `c4ef47e` | |
|
[quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta](https://redirect.github.com/konflux-ci/konflux-sast-tasks/tree/8921648b473e46c873c785d7db4d74bc9372df09/task/sast-snyk-check-oci-ta/0.4,!task/sast-snyk-check-oci-ta/0.4/recipe.yaml)
([source](https://redirect.github.com/konflux-ci/konflux-sast-tasks/tree/HEAD/task/sast-snyk-check-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/konflux-sast-tasks/blob/main/task/sast-snyk-check-oci-ta/CHANGELOG.md))
| `c4b79e0` → `8f3ecbe` | |
|
[quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta](https://redirect.github.com/konflux-ci/konflux-sast-tasks/tree/399cfd4f2f02c0d978a48d00f438e2eca847f20a/task/sast-unicode-check-oci-ta/0.4,!task/sast-unicode-check-oci-ta/0.4/recipe.yaml)
([source](https://redirect.github.com/konflux-ci/konflux-sast-tasks/tree/HEAD/task/sast-unicode-check-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/konflux-sast-tasks/blob/main/task/sast-unicode-check-oci-ta/CHANGELOG.md))
| `2bcccab` → `0854d92` | |
|
[quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta](https://redirect.github.com/konflux-ci/build-definitions/tree/44ffba6bd5e8a3da0511b13677b3a0982ae6722e/task/source-build-oci-ta/0.3)
([source](https://redirect.github.com/konflux-ci/build-definitions/tree/HEAD/task/source-build-oci-ta),
[changelog](https://redirect.github.com/konflux-ci/build-definitions/blob/main/task/source-build-oci-ta/CHANGELOG.md))
| `eb620d1` → `0917cfc` | |

---

### Release Notes

<details>
<summary>konflux-ci/build-definitions
(quay.io/konflux-ci/tekton-catalog/task-build-image-index)</summary>

###
[`v0.3`](https://redirect.github.com/konflux-ci/build-definitions/blob/HEAD/task/build-image-index/CHANGELOG.md#03)

##### Changed

- The task now uses `konflux-build-cli` for the build step instead of an
inline bash
implementation. This provides more robust error handling and simplified
maintenance.
- When `ALWAYS_BUILD_INDEX` is `false` and multiple images are provided,
the task now
creates an image index instead of failing. The previous behavior
(failing with an error)
  was not useful.
- Image reference validation is now stricter and will fail earlier for
invalid formats.

##### Removed

- `COMMIT_SHA` parameter (was not used by the task implementation)
- `IMAGE_EXPIRES_AFTER` parameter (was not used by the task
implementation)

##### Added

- Started tracking changes in this file.

</details>

<details>
<summary>konflux-ci/build-definitions
(quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)</summary>

###
[`v0.3`](https://redirect.github.com/konflux-ci/build-definitions/blob/HEAD/task/prefetch-dependencies-oci-ta/CHANGELOG.md#03)

- Removed deprecated `dev-package-managers` parameter.
- Switched from bash implementation to Konflux Build CLI.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 05:00 AM and 11:59 PM, only on
Saturday ( * 5-23 * * 6 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

To execute skipped test pipelines write comment `/ok-to-test`.

---
### Documentation

Find out how to configure dependency updates in [MintMaker
documentation](https://konflux-ci.dev/docs/mintmaker/user/) or see all
available configuration options in [Renovate
documentation](https://docs.renovatebot.com/configuration-options/).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4yNi41LXJwbSIsInVwZGF0ZWRJblZlciI6IjQyLjk5LjAtcnBtIiwidGFyZ2V0QnJhbmNoIjoicmVsZWFzZS12MS4xNSIsImxhYmVscyI6W119-->

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Co-authored-by: red-hat-konflux-kflux-prd-rh02[bot] <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

Author: red-hat-konflux-kflux-prd-rh02[bot]

.tekton/docker-build.yaml

@@ -100,6 +100,10 @@ spec:
       VMs
     name: privileged-nested
     type: string
+  - name: enable-package-registry-proxy
+    default: 'true'
+    description: Use the package registry proxy when prefetching dependencies
+    type: string
   results:
   - description: ""
     name: IMAGE_URL
@@ -133,7 +137,7 @@ spec:
       - name: name
         value: sast-snyk-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:c4b79e009cbfe58cdb80775aedd16e7fc7ee5896ec77431584abb36f067c6484
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check-oci-ta:0.4@sha256:8f3ecbeaff579e41b8278f82d7fabac27845db17a8e687ea6c510c0c9aceabbb
       - name: kind
         value: task
       resolver: bundles
@@ -154,14 +158,16 @@ spec:
       value: $(params.output-image).prefetch
     - name: ociArtifactExpiresAfter
       value: $(params.image-expires-after)
+    - name: enable-package-registry-proxy
+      value: $(params.enable-package-registry-proxy)
     runAfter:
     - clone-repository
     taskRef:
       params:
       - name: name
         value: prefetch-dependencies-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.2@sha256:22612d629796a29ddd177d6e29c18a4319875d4e2348286ea01d16427cec0dc1
+        value: quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3@sha256:1b209c0d93e52e418f3e6cd4b4fd915a84e4bd7f68e1cfd0d6446133540d7f43
       - name: kind
         value: task
       resolver: bundles
@@ -185,7 +191,7 @@ spec:
       - name: name
         value: apply-tags
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:510b6d2a3b188adeb716e49566b57d611ab36bd69a2794b5ddfc11dbf014c2ca
+        value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:a291081de7fb27f832c6fc3c4b078acf7e6162ca4c085db38b118ca87e8b5b66
       - name: kind
         value: task
       resolver: bundles
@@ -198,7 +204,7 @@ spec:
       - name: name
         value: init
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:288f3106118edc1d0f0c79a89c960abf5841a4dd8bc3f38feb10527253105b19
+        value: quay.io/konflux-ci/tekton-catalog/task-init:0.4@sha256:b797dd453ddad669365de6de4649e3a9e37e77aa26eb9862ca079a36cbfe64a4
       - name: kind
         value: task
       resolver: bundles
@@ -219,7 +225,7 @@ spec:
       - name: name
         value: git-clone-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:2c388d28651457db60bb90287e7d8c3680303197196e4476878d98d81e8b6dc9
+        value: quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.1@sha256:13d49df7dc9ae301627e45f95a236011422996152f1bea46cd60217b0f057407
       - name: kind
         value: task
       resolver: bundles
@@ -275,18 +281,14 @@ spec:
       - name: name
         value: buildah-remote-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.9@sha256:1302dbf65547d9ce065b4947f6217b7d3daa06dfd4542cbaa3e42438c1a08b0e
+        value: quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.9@sha256:f667d1146533b1d49829c08097e31faf27db24563da576434a707353de62099f
       - name: kind
         value: task
       resolver: bundles
   - name: build-image-index
     params:
     - name: IMAGE
       value: $(params.output-image)
-    - name: COMMIT_SHA
-      value: $(tasks.clone-repository.results.commit)
-    - name: IMAGE_EXPIRES_AFTER
-      value: $(params.image-expires-after)
     - name: ALWAYS_BUILD_INDEX
       value: $(params.build-image-index)
     - name: IMAGES
@@ -301,7 +303,7 @@ spec:
       - name: name
         value: build-image-index
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.2@sha256:ac4f8b58ade5000f6e47d287b72832f0d89a91651849467be73e05da639cff7d
+        value: quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3@sha256:550afde50349e22ec11191ea0db9a49395ab46fef4e8317d820b6e946677ebeb
       - name: kind
         value: task
       resolver: bundles
@@ -322,7 +324,7 @@ spec:
       - name: name
         value: source-build-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:eb620d137d2dfa9966d991ac210ad14f391cfa9cfc501e3cc1eb24e3332c6986
+        value: quay.io/konflux-ci/tekton-catalog/task-source-build-oci-ta:0.3@sha256:0917cfc7772e82cb8e74743c2104f43bcf2596aceafe87eec6fce69a8cac5f06
       - name: kind
         value: task
       resolver: bundles
@@ -344,7 +346,7 @@ spec:
       - name: name
         value: deprecated-image-check
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:516ea66977bc4cdad1da61d9273a31540f0d419270f8c8c4b6b3a6aaa4002d96
+        value: quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5@sha256:5ff16b7e6b4a8aa1adb352e74b9f831f77ff97bafd1b89ddb0038d63335f1a67
       - name: kind
         value: task
       resolver: bundles
@@ -371,7 +373,7 @@ spec:
       - name: name
         value: clair-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:85717be5f79a4c74547dff14271d1df49ee0d260ff46670ef0ea8ce23a4ababa
+        value: quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.3@sha256:cd49cdea7e5403a87c4774bd8ea10bc4e6aeb83841ff490cbe42b782779513a7
       - name: kind
         value: task
       resolver: bundles
@@ -396,7 +398,7 @@ spec:
       - name: name
         value: ecosystem-cert-preflight-checks
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:945f8ba72381402ce6b00efa24a6eeb19a27ba68b445474c28ebfbfb21bb365f
+        value: quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.2@sha256:2468c01818fbaad2235e4fca438f28e847260e3e354cf5a441bbd671684af2db
       - name: kind
         value: task
       resolver: bundles
@@ -423,7 +425,7 @@ spec:
       - name: name
         value: clamav-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:657d2704299777e90bc177ea012f4b13c80199ae77fa5d4b5e5b524993411e86
+        value: quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.3@sha256:171eca520b545a0c860c6d59249796ffe5db5be1dab87f3a328fc5ef1fd68af2
       - name: kind
         value: task
       resolver: bundles
@@ -449,7 +451,7 @@ spec:
       - name: name
         value: sast-shell-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:a528f0170b0d0de8db53dfdf02b96d201f3d9f735a904c645b5b111cea7ef44f
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:c4ef47e3b4e0508572d266fb745be7e374c29dc02580328cbe9f4d472a8aca57
       - name: kind
         value: task
       resolver: bundles
@@ -475,7 +477,7 @@ spec:
       - name: name
         value: sast-unicode-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:2bcccabd857914f66543d17a676f4d259daa67fe55c63a7d317000365c369792
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.4@sha256:0854d9261760b2dc8f092569739685a5ab0a5c620e9cb8c1b78fef9e2d077a29
       - name: kind
         value: task
       resolver: bundles
@@ -503,7 +505,7 @@ spec:
       - name: name
         value: push-dockerfile-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:322d515ca66d92188067344761733d1e5c64d4b7bb790d10f35540da5e6289f1
+        value: quay.io/konflux-ci/tekton-catalog/task-push-dockerfile-oci-ta:0.3@sha256:7855471abfe87de080b914f2f3ca27c59e64f6448a7c2435e51435b764494c71
       - name: kind
         value: task
       resolver: bundles
@@ -520,7 +522,7 @@ spec:
       - name: name
         value: rpms-signature-scan
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:05d2d9ea7d1125349bcbd356eaf255632960fa240980f94b5315c1832f09642c
+        value: quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan:0.2@sha256:ce4bace2998b02d8a4da188df4f460e1952770ccd1d2fadddefd4f2ba748705b
       - name: kind
         value: task
       resolver: bundles