Skip to content

chore(deps): update konflux references to v0.3.4 - #3894

Merged
red-hat-konflux[bot] merged 1 commit into
release-2.39from
konflux/references/release-2.39
Sep 24, 2026
Merged

red-hat-konflux[bot] merged 1 commit into
release-2.39from
konflux/references/release-2.39

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
quay.io/konflux-ci/tekton-catalog/task-clamav-scan (source, changelog) tekton-bundle patch 0.3.30.3.4

Release Notes

konflux-ci/konflux-test-tasks (quay.io/konflux-ci/tekton-catalog/task-clamav-scan)

v0.3.4

Added
  • Pre-extract every nested archive into a loose file tree before scanning, so
    clamd scans each file directly instead of recursing through nested archive
    layers. This makes scanning of deeply nested archives faster. Extraction uses
    bsdtar, which detects archives (zip/jar/war/ear/tar
    and tar.gz/tar.bz2/tar.xz) by content rather than extension — important because
    the OCI dir: payload is an extension-less blob — and unpacks them
    unconditionally with no size/count/depth limits. It is defensive: a corrupt or
    partial archive is left in place for clamd rather than aborting the scan. No new
    parameters are introduced. Requires the clamav-db image to ship bsdtar
    (added in konflux-clamav).

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • Between 12:00 AM and 07:59 AM (* 0-7 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot enabled auto-merge (squash) September 24, 2026 05:47
@red-hat-konflux
red-hat-konflux Bot requested review from a team and rhacs-bot as code owners September 24, 2026 05:47

@rhacs-bot rhacs-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved by automation.

@red-hat-konflux
red-hat-konflux Bot merged commit ac6a551 into release-2.39 Sep 24, 2026
40 of 44 checks passed
@red-hat-konflux
red-hat-konflux Bot deleted the konflux/references/release-2.39 branch September 24, 2026 06:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant