chore(deps): update quay.io/konflux-ci/build-trusted-artifacts:latest docker digest to 254989d

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/build-trusted-artifacts	tekton-step-image	digest	a03e798 → 254989d

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:44 PM UTC · Completed 3:50 PM UTC
Commit: 37b10e4 · View workflow run →

[fullsend-ai-review]

Looks good to me

Previous run

Looks good to me

Previous run (2)

Review

Outcome: Approve

Routine Docker image digest update for quay.io/konflux-ci/build-trusted-artifacts:latest in the package-operator-package-oci-ta Tekton task, generated by Renovate.

Summary

• 1 file changed: task/package-operator-package-oci-ta/0.1/package-operator-package-oci-ta.yaml
• Change: Digest pin updated from sha256:a03e798... → sha256:86652d2... on the use-trusted-artifact step image
• Image source: Remains quay.io/konflux-ci/build-trusted-artifacts (same trusted organization)
• Scope: Value-only change — no structural, behavioral, or API modifications

Review dimensions

Dimension	Result
Correctness	✅ Valid SHA-256 digest format (64 hex chars), correct image:tag@sha256:digest reference pattern, no surrounding code changes
Security	✅ No secrets, injection patterns, or permission changes. Image source remains from trusted konflux-ci organization with digest pinning
Intent & coherence	✅ Mechanical change by Renovate — authorization implicit from automated dependency management
Style & conventions	✅ Follows existing image:tag@sha256:digest pattern used across the repository
Documentation	✅ No documentation impact — image digests are implementation details not referenced in docs
Cross-repo contracts	✅ Skipped — no exported interfaces or API surfaces modified

---

Labels: Automated dependency digest update by Renovate bot

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 4:36 AM UTC · Completed 4:42 AM UTC
Commit: 37b10e4 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:11 PM UTC · Completed 1:17 PM UTC
Commit: 37b10e4 · View workflow run →