Skip to content

chore(deps): refresh rpm lockfiles [SECURITY] - #91

Merged
red-hat-konflux[bot] merged 1 commit into
mainfrom
konflux/mintmaker/main/lock-file-maintenance-vulnerability
Oct 11, 2026
Merged

chore(deps): refresh rpm lockfiles [SECURITY]#91
red-hat-konflux[bot] merged 1 commit into
mainfrom
konflux/mintmaker/main/lock-file-maintenance-vulnerability

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Oct 9, 2026 •
edited
Loading

Copy link
Copy Markdown

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot enabled auto-merge (squash) October 9, 2026 01:00
@coderabbitai

coderabbitai Bot commented Oct 9, 2026 •
edited
Loading

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Central YAML (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 073689c1-03cf-4673-844a-be99a3bd6cba
📥 Commits

Reviewing files that changed from the base of the PR and between 4f48833 and f464ec8.

📒 Files selected for processing (6)
  • deploy/konflux/cli/rpms.lock.yaml
  • deploy/konflux/e2e-odh/rpms.lock.yaml
  • deploy/konflux/gateway/rpms.lock.yaml
  • deploy/konflux/openclaw/rpms.lock.yaml
  • deploy/konflux/sandbox/rpms.lock.yaml
  • deploy/konflux/supervisor/rpms.lock.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📝 Walkthrough
📝 Walkthrough
📝 Walkthrough
📝 Walkthrough

Walkthrough

The six Konflux RPM lockfiles update package versions and related artifact metadata. The updates include glibc-family packages across both architectures, plus selected OpenSSL, tzdata, kernel-header, and glibc development packages.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~8 minutes

Merge Risk: ⚪ Minimal · up to f464e

This PR refreshes pinned RPM records across the six Konflux targets; no concrete build or runtime regression is established in the supplied evidence. It appears ready to merge subject to normal validation.

🚥 Pre-merge checks | ✅ 10
✅ Passed checks (10 passed)
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly identifies a dependency lockfile refresh and correctly indicates the security-update intent. It matches the primary changes across all six RPM lockfiles.
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Contribution Quality And Spam Detection Passed The diff updates six RPM lockfiles with matching package URLs, EVRs, source RPMs, sizes, and SHA-256 checksums. It adds no application code or validation logic. The description uses a formulaic depend…
No Hardcoded Secrets Passed PASS. The pull request changes only six RPM lockfiles. Added URLs point to public cdn-ubi.redhat.com paths and contain no embedded credentials. No added API-key, secret, token, password, private-key…
No Weak Cryptography Passed PASS. The PR changes only six RPM lockfiles. The diff updates package URLs, versions, sizes, source RPMs, and SHA-256 checksums. It introduces no MD5, SHA-1, DES, RC4, 3DES, Blowfish, ECB, custom cryp…
No Injection Vectors Passed The PR changes only six rpms.lock.yaml files. The diff updates static RPM URLs, sizes, SHA-256 checksums, EVRs, and source RPM names. No SQL construction, shell=True, os.system, eval/exec, u…
No Privileged Containers Passed PASS — The authoritative pull-request diff changes only six RPM lockfiles under deploy/konflux/. The diff contains package versions, URLs, sizes, checksums, and source RPM metadata only. It adds no …
No Sensitive Data In Logs Passed The pull request changes only six RPM lockfiles. The added lines update package URLs, versions, sizes, checksums, and source RPM metadata. No logging statements or sensitive-data fields appear in the …

Comment @coderabbitai help to get the list of available commands.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/lock-file-maintenance-vulnerability branch 2 times, most recently from 36507bc to 14b536e Compare October 10, 2026 02:43
@red-hat-konflux
chore(deps): refresh rpm lockfiles [SECURITY]
18fc44f 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/lock-file-maintenance-vulnerability branch from 14b536e to 18fc44f Compare October 10, 2026 07:19
@red-hat-konflux
red-hat-konflux Bot merged commit 29096e2 into main Oct 11, 2026
22 checks passed
@red-hat-konflux
red-hat-konflux Bot deleted the konflux/mintmaker/main/lock-file-maintenance-vulnerability branch October 11, 2026 01:04
@rhods-devops-app rhods-devops-app Bot mentioned this pull request Oct 12, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants