Skip to content

Update registry.access.redhat.com/ubi9/ubi-minimal:latest Docker digest to bba2b4b (main) - #3667

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/docker-images
Open

red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/docker-images

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
registry.access.redhat.com/ubi9/ubi-minimal final digest 2d4c455 → bba2b4b

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

…st to bba2b4b

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@coderabbitai

coderabbitai Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 8a03192c-b592-45f2-8c9b-d90d25b995a0
Commits

Reviewing files that changed from the base of the PR and between e669d75 and a92ed15.

Files selected for processing: 3
  • Dockerfile
  • Dockerfile.dist
  • acceptance/kubernetes/kind/acceptance.Dockerfile

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

Walkthrough

The production, distribution, and Kubernetes acceptance-test Dockerfiles now pin the UBI 9 minimal image to a new digest.

Changes: UBI 9 Image Pins

Layer / File(s) Summary
Update pinned image digests
Dockerfile, Dockerfile.dist, acceptance/kubernetes/kind/acceptance.Dockerfile
All three Dockerfiles now use digest bba2b4bbf0ed15cfe7dd72a1e17ae7d2015a141f306b304e1a2785c41400e39c for the UBI 9 minimal image.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: cuipinghuo, simonbaird

Merge Risk: Minimal · up to a92ed

The image digest update introduces no actionable merge-blocking risk.

Pre-merge checks: Passed 4 · Failed 1

Failed Failed checks: 1 warning

Check name Status Explanation Resolution
Description check Warning The description is an automated Renovate dependency update. It gives a clear update table (package, type, old digest 2d4c455 to new digest bba2b4b) and explains the schedule, automerge setting, and re… Add the repository template sections. Under '#### What:', state that the change updates the ubi9/ubi-minimal:latest digest from 2d4c455 to bba2b4b in the Dockerfile, Dockerfile.dist, and acceptance/kubernetes/kind/acceptance.Dockerfile. Und…
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title names the main change: updating the registry.access.redhat.com/ubi9/ubi-minimal:latest Docker digest to bba2b4b on main. The raw summary confirms the changes in Dockerfile, Dockerfile.dist, …
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title names the main change: updating the registry.access.redhat.com/ubi9/ubi-minimal:latest Docker digest to bba2b4b on main. The raw summary confirms the changes in Dockerfile, Dockerfile.dist, and acceptance/kubernetes/kind/acceptance.Dockerfile all pin this image to the new digest. The title is specific and matches the changeset.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (3 skipped: 3 unsupported.)

Full details: Description check

Explanation

The description is an automated Renovate dependency update. It gives a clear update table (package, type, old digest 2d4c455 to new digest bba2b4b) and explains the schedule, automerge setting, and rebase options. It does not follow the repository template. It has no '#### What:', '#### Why:', or '#### Tickets:' sections. The 'What' content is covered by the update table. The 'Why' is not explained beyond the generic dependency update, and no Jira ticket is linked. The description is mostly complete for a bot-generated update, but it does not meet the template structure.

Resolution

Add the repository template sections. Under '#### What:', state that the change updates the ubi9/ubi-minimal:latest digest from 2d4c455 to bba2b4b in the Dockerfile, Dockerfile.dist, and acceptance/kubernetes/kind/acceptance.Dockerfile. Under '#### Why:', explain the reason for the update, such as picking up the latest base image patches. Under '#### Tickets:', link the related Jira issue, or state that none exists.

Finishing Touches
Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

@codecov

codecov Bot commented Oct 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
acceptance 54.61% <ø> (ø)
generative 12.22% <ø> (ø)
integration 23.62% <ø> (ø)
unit 72.29% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@fullsend-ai-review fullsend-ai-review Bot added the risk/moderate PR risk: moderate label Oct 31, 2026
@fullsend-ai-review

Copy link
Copy Markdown

<!-- fullsend:risk-assessment -->
Risk Assessment: moderate (2/5)

Details

Routine bot-authored (Konflux/Renovate) image digest pin across 3 Dockerfiles (6 lines total); protected-path and CI-workflow signals are elevated but fully offset by bot authorship, zero fix/revert history, and minimal recent churn, yielding a moderate score requiring only standard review.

@fullsend-ai-review

Copy link
Copy Markdown

Review

Findings

High

  • [protected-path] Dockerfile, Dockerfile.dist — This PR modifies protected files (Dockerfile, Dockerfile.dist) but has no linked issue providing justification for the changes. Protected paths require human approval. While this is an automated Renovate/MintMaker digest update by the red-hat-konflux bot, the absence of a linked issue means insufficient context for governance review of protected-path changes.

Labels: Renovate PR updates Docker base image digest across 3 Dockerfiles — docker and dependencies labels apply.


Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR

<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 -->

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

@fullsend-ai-review fullsend-ai-review Bot added docker Pull requests that update Docker code dependencies Pull requests that update a dependency file labels Oct 31, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code main renovate risk/moderate PR risk: moderate size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants