[release-1.35] Sync Konflux configurations (#3373)

Co-authored-by: serverless-qe <[email protected]>

Author: serverless-qe

.github/workflows/dependabot-deps.yaml

@@ -1,3 +1,4 @@
+
 name: Dependabot
 
 on:
@@ -7,7 +8,7 @@ permissions:
   contents: write
 
 jobs:
-  generate_some_code:
+  update-deps:
     name: Update deps
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
@@ -22,9 +23,13 @@ jobs:
       - name: Setup Golang
         uses: openshift-knative/hack/actions/setup-go@main
 
-      - name: Run ./hack/update-deps.sh
+      - name: Install yq
+        run: |
+          go install github.com/mikefarah/yq/v3@latest
+
+      - name: Generate files
         working-directory: ./src/github.com/${{ github.repository }}
-        run: ./hack/update-deps.sh
+        run: make generated-files
 
       - name: git push
         working-directory: ./src/github.com/${{ github.repository }}
@@ -34,6 +39,6 @@ jobs:
             git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
             git config --local user.name "github-actions[bot]"
             git add .
-            git commit -m "Run ./hack/update-deps.sh"
+            git commit -m "Run make generated-files"
             git push
           fi

.tekton/docker-build.yaml

@@ -468,9 +468,9 @@ spec:
     taskRef:
       params:
       - name: name
-        value: sast-shell-check-oci-ta
+        value: sast-unicode-check-oci-ta
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-sast-shell-check-oci-ta:0.1@sha256:b00fa0294e6318ff8130ca11358ae0b3764c4e6c9a12ec7a953e1a813ca2e231
+        value: quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check-oci-ta:0.1@sha256:3a128580c41abdac5bd76d0d1e066f2f3473278ba9fab90639878a27ced7a0e6
       - name: kind
         value: task
       resolver: bundles

.tekton/fbc-builder.yaml

@@ -321,6 +321,32 @@ spec:
       operator: in
       values:
       - "false"
+  - name: fbc-target-index-pruning-check
+    params:
+    - name: IMAGE_URL
+      value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: IMAGE_DIGEST
+      value: $(tasks.build-image-index.results.IMAGE_DIGEST)
+    - name: TARGET_INDEX
+      value: registry.redhat.io/redhat/redhat-operator-index
+    - name: RENDERED_CATALOG_DIGEST
+      value: $(tasks.validate-fbc.results.RENDERED_CATALOG_DIGEST)
+    runAfter:
+    - validate-fbc
+    taskRef:
+      params:
+      - name: name
+        value: fbc-target-index-pruning-check
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check:0.1@sha256:299c44a5d6930f7a2c878f20853c705f155231cae36d9f37add4cdb7e75e2e12
+      - name: kind
+        value: task
+      resolver: bundles
+    when:
+    - input: $(params.skip-checks)
+      operator: in
+      values:
+      - "false"
   workspaces:
   - name: git-auth
     optional: true

.tekton/serverless-bundle-135-pull-request.yaml

@@ -8,7 +8,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch == "release-1.35" && ( files.all.exists(x, x.matches('^olm-catalog/serverless-operator/')) || files.all.exists(x, x.matches('^.tekton/')) )
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-135
@@ -22,7 +21,7 @@ spec:
       value: olm-catalog/serverless-operator/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal

.tekton/serverless-bundle-135-push.yaml

@@ -7,7 +7,6 @@ metadata:
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
     pipelinesascode.tekton.dev/max-keep-runs: "3"
     pipelinesascode.tekton.dev/on-cel-expression: event == "push" && target_branch == "release-1.35" && ( files.all.exists(x, x.matches('^olm-catalog/serverless-operator/')) || files.all.exists(x, x.matches('^.tekton/')) )
-    build.appstudio.openshift.io/build-nudge-files: ".*Dockerfile.*,olm-catalog/.*.yaml,olm-catalog/.*.yml,.*Containerfile.*"
   creationTimestamp: null
   labels:
     appstudio.openshift.io/application: serverless-operator-135
@@ -21,7 +20,7 @@ spec:
       value: olm-catalog/serverless-operator/Dockerfile
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal

.tekton/serverless-index-135-fbc-414-pull-request.yaml

@@ -23,7 +23,7 @@ spec:
       value: ./olm-catalog/serverless-operator-index/v4.14
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal

.tekton/serverless-index-135-fbc-414-push.yaml

@@ -22,7 +22,7 @@ spec:
       value: ./olm-catalog/serverless-operator-index/v4.14
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal

.tekton/serverless-index-135-fbc-415-pull-request.yaml

@@ -23,7 +23,7 @@ spec:
       value: ./olm-catalog/serverless-operator-index/v4.15
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal

.tekton/serverless-index-135-fbc-415-push.yaml

@@ -22,7 +22,7 @@ spec:
       value: ./olm-catalog/serverless-operator-index/v4.15
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal

.tekton/serverless-index-135-fbc-416-pull-request.yaml

@@ -23,7 +23,7 @@ spec:
       value: ./olm-catalog/serverless-operator-index/v4.16
     - name: build-args
       value:
-        - VERSION=1.35.0
+        - VERSION=1.35.1
         - CLI_ARTIFACTS=registry.redhat.io/openshift4/ose-cli-artifacts:v4.14
         - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.22
         - GO_RUNTIME=registry.access.redhat.com/ubi8/ubi-minimal