chore(sync): update from opendatahub-io:main

This commit merges updates from opendatahub-io.

Please be mindful of the following resolutions employed when resolving conflicts:
- `build-notebooks.yaml` was regenerated from the `ci` script
- The `pyyaml` dependency defined in `Poetry` is now a `dev` dependency from `upstream` as well as a `main` dependency in this repo.  A simple script was written to "re-lock" this file to ensure a valid `content-hash` is provided.  This results in the `groups = ["main", "dev"]` attribute in the `pyyaml` `[[package]]` section of `poetry.lock`.
- The following files were resolved via accepting `Current Changes`:
    - `check-params-env.sh`
    - `package_versions_selftestdata.py`
        - ⚠️ _it is no obvious to me why a conflict was even reported in this file as the "conflict" seemed to be reported from a totally different file!_
    - `rstudio-gpu-notebook-imagestream.yaml`
        - _this file doesn't exist in `red-hat-data-services` org
    - `commit.env`
    - `params.env`

Author: andyatmiami

.github/renovate.json

@@ -0,0 +1,97 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "description": [
+    "https://konflux.pages.redhat.com/docs/users/mintmaker/user.html",
+    "https://github.com/konflux-ci/mintmaker/blob/main/config/renovate/renovate.json"
+  ],
+  "extends": [
+    "config:recommended",
+    ":gitSignOff",
+    ":disableDependencyDashboard"
+  ],
+  "ignorePresets": [
+    ":dependencyDashboard"
+  ],
+  "onboarding": false,
+  "requireConfig": "optional",
+  "inheritConfig": true,
+  "platformCommit": "enabled",
+  "autodiscover": false,
+  "pruneStaleBranches": false,
+  "branchConcurrentLimit": 0,
+  "customEnvVariables": {
+    "GOTOOLCHAIN": "auto"
+  },
+  "vulnerabilityAlerts": {
+    "enabled": false
+  },
+  "additionalBranchPrefix": "{{baseBranch}}/",
+  "branchPrefix": "konflux/mintmaker/",
+  "enabledManagers": [
+    "tekton",
+    "dockerfile"
+  ],
+  "tekton": {
+    "additionalBranchPrefix": "",
+    "fileMatch": [
+      "\\.yaml$",
+      "\\.yml$"
+    ],
+    "includePaths": [
+      ".tekton/**"
+    ],
+    "packageRules": [
+      {
+        "matchPackageNames": [
+          "/^quay.io/redhat-appstudio-tekton-catalog//",
+          "/^quay.io/konflux-ci/tekton-catalog//"
+        ],
+        "enabled": true,
+        "groupName": "Konflux references",
+        "branchPrefix": "konflux/references/",
+        "group": {
+          "branchTopic": "{{{baseBranch}}}",
+          "commitMessageTopic": "{{{groupName}}}"
+        },
+        "commitMessageTopic": "Konflux references",
+        "semanticCommits": "enabled",
+        "prBodyColumns": [
+          "Package",
+          "Change",
+          "Notes"
+        ],
+        "prBodyDefinitions": {
+          "Notes": "{{#if (or (containsString updateType 'minor') (containsString updateType 'major'))}}:warning:[migration](https://github.com/redhat-appstudio/build-definitions/blob/main/task/{{{replace '^quay.io/(redhat-appstudio-tekton-catalog|konflux-ci/tekton-catalog)/task-' '' packageName}}}/{{{newVersion}}}/MIGRATION.md):warning:{{/if}}"
+        },
+        "prBodyTemplate": "{{{header}}}{{{table}}}{{{notes}}}{{{changelogs}}}{{{configDescription}}}{{{controls}}}{{{footer}}}",
+        "recreateWhen": "always",
+        "rebaseWhen": "behind-base-branch"
+      },
+      {
+        "matchManagers": [
+          "gomod"
+        ],
+        "matchDepTypes": [
+          "indirect"
+        ],
+        "enabled": true
+      }
+    ],
+    "schedule": [
+      "after 5am on saturday"
+    ]
+  },
+  "dockerfile": {
+    "enabled": true,
+    "schedule": [
+      "before 5am"
+    ]
+  },
+  "forkProcessing": "enabled",
+  "allowedCommands": [
+    "^rpm-lockfile-prototype rpms.in.yaml$"
+  ],
+  "updateNotScheduled": false,
+  "dependencyDashboard": false,
+  "stopUpdatingLabel": "konflux-nudge"
+}

.github/workflows/build-notebooks-TEMPLATE.yaml

@@ -42,6 +42,12 @@ jobs:
 
     steps:
 
+      # image repository name must be lowercase
+      - name: downcase IMAGE_REGISTRY and CACHE
+        run: |
+          echo "IMAGE_REGISTRY=${IMAGE_REGISTRY,,}" >>${GITHUB_ENV}
+          echo "CACHE=${CACHE,,}" >>${GITHUB_ENV}
+
       - uses: actions/checkout@v4
 
       - run: mkdir -p $TMPDIR
@@ -248,8 +254,6 @@ jobs:
         env:
           IMAGE_TAG: "${{ steps.calculated_vars.outputs.IMAGE_TAG }}"
           CONTAINER_BUILD_CACHE_ARGS: "--cache-from ${{ env.CACHE }} --cache-to ${{ env.CACHE }}"
-          # dependent images were already built and pushed, so just let podman pull it
-          BUILD_DEPENDENT_IMAGES: "no"
       - name: "pull_request: make ${{ inputs.target }}"
         run: |
           make ${{ inputs.target }}
@@ -290,10 +294,10 @@ jobs:
       - name: Install deps
         run: poetry install --sync
 
-      - name: Run container tests (in PyTest)
+      - name: Run Testcontainers container tests (in PyTest)
         run: |
           set -Eeuxo pipefail
-          poetry run pytest --capture=fd tests/containers --image="${{ steps.calculated_vars.outputs.OUTPUT_IMAGE }}"
+          poetry run pytest --capture=fd tests/containers -m 'not openshift' --image="${{ steps.calculated_vars.outputs.OUTPUT_IMAGE }}"
         env:
           DOCKER_HOST: "unix:///var/run/podman/podman.sock"
           TESTCONTAINERS_DOCKER_SOCKET_OVERRIDE: "/var/run/podman/podman.sock"
@@ -439,6 +443,16 @@ jobs:
           kubectl wait deployments --all --all-namespaces --for=condition=Available --timeout=100s
           kubectl wait pods --all --all-namespaces --for=condition=Ready --timeout=100s
 
+      - name: "Install local-path provisioner"
+        if: ${{ steps.have-tests.outputs.tests == 'true' }}
+        run: |
+          set -Eeuxo pipefail
+          kubectl apply -f https://raw.githubusercontent.com/rancher/local-path-provisioner/v0.0.31/deploy/local-path-storage.yaml
+          kubectl wait deployments --all --namespace=local-path-storage --for=condition=Available --timeout=100s
+          # https://kubernetes.io/docs/tasks/administer-cluster/change-default-storage-class/
+          kubectl get storageclass
+          kubectl patch storageclass local-path -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'
+
       - name: "Run image tests"
         if: ${{ steps.have-tests.outputs.tests == 'true' }}
         run: python3 ci/cached-builds/make_test.py --target ${{ inputs.target }}
@@ -449,6 +463,18 @@ jobs:
 
       # endregion
 
+      - name: Run OpenShift container tests (in PyTest)
+        if: ${{ steps.have-tests.outputs.tests == 'true' }}
+        run: |
+          set -Eeuxo pipefail
+          poetry run pytest --capture=fd tests/containers -m 'openshift' --image="${{ steps.calculated_vars.outputs.OUTPUT_IMAGE }}"
+        env:
+          # TODO(jdanek): this Testcontainers stuff should not be necessary but currently it has to be there
+          DOCKER_HOST: "unix:///var/run/podman/podman.sock"
+          TESTCONTAINERS_DOCKER_SOCKET_OVERRIDE: "/var/run/podman/podman.sock"
+          # pulling the Ryuk container from docker.io introduces CI flakiness
+          TESTCONTAINERS_RYUK_DISABLED: "true"
+
       # region Trivy vulnerability scan
 
       - name: Run Trivy vulnerability scanner