chore(deps): update konflux references to 1bd72f0

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	7f2e8ed → 1bd72f0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by CodeRabbit

• Chores
  • Updated build pipeline task bundle references across multiple Tekton configuration files to use updated task digests, ensuring pipelines reference the correct immutable task versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7ab4990-56d0-466c-ad0f-78c019acf068

📥 Commits

Reviewing files that changed from the base of the PR and between 983348f and 29c3567.

📒 Files selected for processing (1)

• .tekton/insights-chrome-pull-request.yaml

✅ Files skipped from review due to trivial changes (1)

• .tekton/insights-chrome-pull-request.yaml

---

Walkthrough

This pull request updates the Tekton task bundle digest for rpms-signature-scan in six pipeline YAMLs, changing the immutable image digest while keeping the same task name and tag (0.2); no control flow, parameters, workspaces, or other pipeline structure were modified.

Changes

Cohort / File(s)	Summary
Tekton Dev Pipeline Configurations /.tekton/insights-chrome-dev-pull-request.yaml, /.tekton/insights-chrome-dev-push.yaml	Updated rpms-signature-scan task bundle digest from sha256:7f2e8ed... to sha256:1bd72f....
Tekton Main Pipeline Configurations /.tekton/insights-chrome-pull-request.yaml, /.tekton/insights-chrome-push.yaml	Updated rpms-signature-scan task bundle digest from sha256:7f2e8ed... to sha256:1bd72f....
Tekton Service Catalog Pipeline Configurations /.tekton/insights-chrome-sc-pull-request.yaml, /.tekton/insights-chrome-sc-push.yaml	Updated rpms-signature-scan task bundle digest from sha256:7f2e8ed... to sha256:1bd72f....

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 8

✅ Passed checks (8 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately describes the main change: updating konflux task references to a new digest (1bd72f0), which is the primary purpose reflected across all six YAML files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Tests Required	✅ Passed	PR modifies only Tekton pipeline configuration files (.tekton/*.yaml) to update task bundle digest references with zero source code changes in src/ directory.
Typescript Strict Mode	✅ Passed	PR modifies only YAML configuration files in .tekton/ directory updating task bundle digest references; no TypeScript code changes made.
Auth Abstraction Layer	✅ Passed	PR exclusively modifies Tekton CI/CD pipeline configuration files with no source code changes; authentication abstraction check is not applicable.
Chrome Api Breaking Changes	✅ Passed	PR modifies only .tekton/ CI/CD configuration files, with no changes to src/chrome/create-chrome.ts or Chrome API surface.
Module Federation Compatibility	✅ Passed	PR modifies only Tekton pipeline configuration files (.tekton/*.yaml) with no changes to webpack, Module Federation, or JavaScript configuration files.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/master

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.85%. Comparing base (c74d79e) to head (068ac7b).
⚠️ Report is 31 commits behind head on master.

❌ Your project status has failed because the head coverage (52.85%) is below the target coverage (60.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3453      +/-   ##
==========================================
- Coverage   53.99%   52.85%   -1.14%     
==========================================
  Files         253      251       -2     
  Lines        6253     6153     -100     
  Branches      905      892      -13     
==========================================
- Hits         3376     3252     -124     
- Misses       2172     2204      +32     
+ Partials      705      697       -8     

see 13 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[red-hat-konflux]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[karelhala]

/retest