From fab0c0ebe2f9e380e19efd1abe9a45d20748ad7e Mon Sep 17 00:00:00 2001
From: "red-hat-konflux[bot]"
 <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Date: Wed, 15 Jul 2026 15:34:48 +0000
Subject: [PATCH] chore(deps): update konflux references

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
---
 .tekton/operator-index-pipeline.yaml | 64 +++++++++++++++-------------
 1 file changed, 34 insertions(+), 30 deletions(-)

diff --git a/.tekton/operator-index-pipeline.yaml b/.tekton/operator-index-pipeline.yaml
index 258fcf54..bc437ee6 100644
--- a/.tekton/operator-index-pipeline.yaml
+++ b/.tekton/operator-index-pipeline.yaml
@@ -2,17 +2,13 @@ apiVersion: tekton.dev/v1
 kind: Pipeline
 metadata:
   name: operator-index-pipeline
-
 spec:
-
   description: |
     This pipeline builds and verifies ACS operator [file-based catalogs](https://konflux-ci.dev/docs/advanced-how-tos/building-olm.adoc#building-the-file-based-catalog).
     Modified from the generic Konflux pipeline by adding an OpenShift version parameter.
 
     _Uses `buildah` to create a container image. Its build-time tests are limited to verifying the included catalog and do not scan the image._
-
   finally:
-
   - name: slack-notification
     params:
     - name: message
@@ -20,7 +16,7 @@ spec:
     - name: key-name
       value: 'acs-konflux-notifications'
     when:
-    # Run when any task has Failed
+        # Run when any task has Failed
     - input: $(tasks.status)
       operator: in
       values: ["Failed"]
@@ -33,7 +29,6 @@ spec:
       - name: kind
         value: task
       resolver: bundles
-
   - name: show-sbom
     params:
     - name: IMAGE_URL
@@ -47,7 +42,6 @@ spec:
       - name: kind
         value: task
       resolver: bundles
-
   - name: show-summary
     params:
     - name: pipelinerun-name
@@ -67,7 +61,6 @@ spec:
       - name: kind
         value: task
       resolver: bundles
-
   - name: post-metric-end
     params:
     - name: AGGREGATE_TASKS_STATUS
@@ -81,7 +74,6 @@ spec:
       - name: kind
         value: task
       resolver: bundles
-
   params:
   - description: Source Repository URL
     name: git-url
@@ -125,9 +117,9 @@ spec:
     type: string
   - description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
     name: image-expires-after
-    # Image expiry disabled because it sets quay.expires-after label on the image which fails Conforma at release time.
-    # A downside is that FBC images will stay in our Quay forever while certainly they become unneeded as time passes.
-    # TODO(ROX-27836): find a way to garbage-collect FBC images.
+      # Image expiry disabled because it sets quay.expires-after label on the image which fails Conforma at release time.
+      # A downside is that FBC images will stay in our Quay forever while certainly they become unneeded as time passes.
+      # TODO(ROX-27836): find a way to garbage-collect FBC images.
     default: ''
   - default: "false"
     description: Build a source image.
@@ -157,7 +149,6 @@ spec:
     default: 'false'
     description: Enable cache proxy configuration
     type: string
-
   results:
   - description: ""
     name: IMAGE_URL
@@ -171,15 +162,11 @@ spec:
   - description: ""
     name: CHAINS-GIT_COMMIT
     value: $(tasks.clone-repository.results.commit)
-
   workspaces:
   - name: git-auth
-
   tasks:
-
   - name: post-metric-start
     taskRef: *post-bigquery-metrics-ref
-
   - name: init
     params:
     - name: enable-cache-proxy
@@ -193,7 +180,6 @@ spec:
       - name: kind
         value: task
       resolver: bundles
-
   - name: clone-repository
     params:
     - name: url
@@ -216,7 +202,6 @@ spec:
     workspaces:
     - name: basic-auth
       workspace: git-auth
-
   - name: build-images
     matrix:
       params:
@@ -241,7 +226,7 @@ spec:
       - base_image=$(params.base-image)
       - catalog_dir=$(params.catalog-dir)
     - name: SOURCE_ARTIFACT
-      value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+      value: $(tasks.fbc-inject-lifecycle.results.SOURCE_ARTIFACT)
     - name: IMAGE_APPEND_PLATFORM
       value: "true"
     - name: BUILDAH_FORMAT
@@ -260,7 +245,7 @@ spec:
         value: task
       resolver: bundles
     retries: 1
-
+    runAfter: []
   - name: build-image-index
     params:
     - name: IMAGE
@@ -281,8 +266,7 @@ spec:
       - name: kind
         value: task
       resolver: bundles
-    runAfter: [ build-images ]
-
+    runAfter: [build-images]
   - name: deprecated-base-image-check
     params:
     - name: IMAGE_URL
@@ -302,7 +286,6 @@ spec:
     - input: $(params.skip-checks)
       operator: in
       values: ["false"]
-
   - name: apply-tags
     params:
     - name: IMAGE_URL
@@ -314,11 +297,10 @@ spec:
       - name: name
         value: apply-tags
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:3ab844157eccd68e95e4852adc06c3c4ea674edb7865a474b0a898227f2893d6
+        value: quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3@sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf
       - name: kind
         value: task
       resolver: bundles
-
   - name: validate-fbc
     params:
     - name: IMAGE_URL
@@ -330,7 +312,7 @@ spec:
       - name: name
         value: validate-fbc
       - name: bundle
-        value: quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.1@sha256:855ac0d3e01755cfcc9854d4e47fed2a655fd7ca259adf4e403ab5b658333313
+        value: quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2@sha256:f430ab31b170583495ce81beef15a54c8a0910b6eec0836ced4736d43c1aa91c
       - name: kind
         value: task
       resolver: bundles
@@ -338,7 +320,6 @@ spec:
     - input: $(params.skip-checks)
       operator: in
       values: ["false"]
-
   - name: fbc-target-index-pruning-check
     params:
     - name: IMAGE_URL
@@ -362,7 +343,6 @@ spec:
     - input: $(params.skip-checks)
       operator: in
       values: ["false"]
-
   - name: fbc-fips-check-oci-ta
     params:
     - name: image-digest
@@ -370,7 +350,7 @@ spec:
     - name: image-url
       value: $(tasks.build-image-index.results.IMAGE_URL)
     - name: SOURCE_ARTIFACT
-      value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+      value: $(tasks.fbc-inject-lifecycle.results.SOURCE_ARTIFACT)
     taskRef:
       params:
       - name: name
@@ -384,3 +364,27 @@ spec:
     - input: $(params.skip-checks)
       operator: in
       values: ["false"]
+    runAfter: []
+  - name: fbc-inject-lifecycle
+    taskRef:
+      resolver: bundles
+      params:
+      - name: kind
+        value: task
+      - name: name
+        value: fbc-inject-lifecycle-oci-ta
+      - name: bundle
+        value: quay.io/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta:0.1@sha256:9b6d61e5e887a8f30940c1fed0e118b8974c382d0a6328db99705a44365f6b0b
+    params:
+    - name: DOCKERFILE
+      value: $(params.dockerfile)
+    - name: CONTEXT
+      value: $(params.path-context)
+    - name: SOURCE_ARTIFACT
+      value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
+    - name: ociStorage
+      value: $(params.output-image).lifecycle
+    - name: ociArtifactExpiresAfter
+      value: $(params.image-expires-after)
+    runAfter:
+    - clone-repository