[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi9/ubi	final	digest	5f08e80 → 1963e00
registry.access.redhat.com/ubi9/ubi-micro	stage	digest	5be877a → 6d9eff1
registry.redhat.io/openshift/golang-builder	stage	digest	0a93368 → 78bd08b

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 02:00 AM and 08:59 AM, only on Friday (* 2-8 * * 5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

• Chores
  • Updated the underlying container images used to build and package the application. No changes to application behavior are included.

The Dockerfile now pins updated digests for the Go builder, ubi-micro runtime base, and ubi package installer images. The Dockerfile stages and build and runtime instructions are unchanged.

Changes: Docker Image Pins

Layer / File(s)	Summary
Update pinned image digests konflux.Dockerfile	The builder, ubi-micro runtime base, and ubi package installer image digests changed. Other Dockerfile stages and instructions are unchanged.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: Minimal · up to 3b4a8

The change updates pinned base images. No material issue is established; the PR is ready to merge after normal checks.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title refers to the dependency updates, but it is broader than the changes to container image digests.
Description check		The description identifies all three container image digest updates.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

Recent review info

Run configuration

• Source mode: Auto
• Repository: stackrox/stackrox-mcp
• Branch: release-0.2
• File: .coderabbit.yaml
• Commit: 48bdc97
• Layers: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Enterprise
• Run ID: 57de7178-775a-4a42-a6fb-a3bdd774ae6d

Commits

Reviewing files that changed from the base of the PR and between 48bdc97 and 3b4a877.

Files selected for processing: 1

• konflux.Dockerfile

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

[codecov-commenter]

❌ 2 Tests Failed:

Tests completed	Failed	Passed	Skipped
386	2	384	12

View the full list of 2 ❄️ flaky test(s)

::policy 1

Flake rate in main: 100.00% (Passed 0 times, Failed 210 times)

Stack Traces | 0s run time

- test violation 1
- test violation 2
- test violation 3

::policy 4

Flake rate in main: 100.00% (Passed 0 times, Failed 210 times)

Stack Traces | 0s run time

- testing multiple alert violation messages 1
- testing multiple alert violation messages 2
- testing multiple alert violation messages 3

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[github-actions]

E2E Test Results

Commit: 3b4a877
Workflow Run: View Details
Artifacts: Download test results & logs

=== Evaluation Summary ===

  ✓ list-clusters (assertions: 3/3)
  ✓ cve-cluster-does-exist (assertions: 3/3)
  ✓ cve-cluster-does-not-exist (assertions: 3/3)
  ✓ cve-detected-workloads (assertions: 3/3)
  ✓ rhsa-not-supported (assertions: 2/2)
  ✓ cve-nonexistent (assertions: 3/3)
  ✓ cve-cluster-list (assertions: 3/3)
  ✓ cve-log4shell (assertions: 3/3)
  ✓ cve-clusters-general (assertions: 3/3)
  ✓ cve-detected-clusters (assertions: 3/3)
  ✓ cve-multiple (assertions: 3/3)

Tasks:      11/11 passed (100.00%)
Assertions: 32/32 passed (100.00%)
Tokens:     ~53323 (estimate - excludes system prompt & cache)
MCP schemas: ~12562 (included in token total)
Agent used tokens:
  Input:  12980 tokens
  Output: 21783 tokens
Judge used tokens:
  Input:  49845 tokens
  Output: 54231 tokens