Skip to content

chore(deps): update konflux references to v0.3.4 - #1873

Merged
red-hat-konflux[bot] merged 1 commit into
mainfrom
konflux/references/main
Sep 24, 2026
Merged

red-hat-konflux[bot] merged 1 commit into
mainfrom
konflux/references/main

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog) tekton-bundle patch 0.3.30.3.4

Release Notes

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)

v0.3.4

Added
  • Pre-extract every nested archive into a loose file tree before scanning, so
    clamd scans each file directly instead of recursing through nested archive
    layers. This makes scanning of deeply nested archives faster. Extraction uses
    bsdtar, which detects archives (zip/jar/war/ear/tar
    and tar.gz/tar.bz2/tar.xz) by content rather than extension — important because
    the OCI dir: payload is an extension-less blob — and unpacks them
    unconditionally with no size/count/depth limits. It is defensive: a corrupt or
    partial archive is left in place for clamd rather than aborting the scan. No new
    parameters are introduced. Requires the clamav-db image to ship bsdtar
    (added in konflux-clamav).

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot requested review from a team as code owners September 24, 2026 02:01
@red-hat-konflux
red-hat-konflux Bot enabled auto-merge (squash) September 24, 2026 02:01
@coderabbitai

coderabbitai Bot commented Sep 24, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: stackrox/fact/.coderabbit.yml

Review profile: CHILL

Plan: Advanced

Run ID: 9e55cbe7-f0e3-4b5b-a06a-0086bc3ceaca

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@rhacs-bot rhacs-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved by automation.

@codecov-commenter

codecov-commenter commented Sep 24, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 33.47%. Comparing base (c4100e4) to head (e4cbb02).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1873   +/-   ##
=======================================
  Coverage   33.47%   33.47%           
=======================================
  Files          22       22           
  Lines        3621     3621           
  Branches     3621     3621           
=======================================
  Hits         1212     1212           
  Misses       2400     2400           
  Partials        9        9           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/references/main branch from baaa4e7 to e4cbb02 Compare September 24, 2026 05:52
@red-hat-konflux
red-hat-konflux Bot merged commit d0c266a into main Sep 24, 2026
46 of 48 checks passed
@red-hat-konflux
red-hat-konflux Bot deleted the konflux/references/main branch September 24, 2026 06:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants