[release-1.36] Update Konflux references

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	minor	0.2 → 0.3
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	minor	0.1 → 0.3.1
quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta (source, changelog)	tekton-bundle	minor	0.5 → 0.10.5
quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check (source, changelog)	tekton-bundle	digest	f59175d → 0ccc688
quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta (source, changelog)	tekton-bundle	digest	286eff4 → 935adb6
quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check (source, changelog)	tekton-bundle	digest	cd86fe9 → a7696d9
quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta (source, changelog)	tekton-bundle	minor	0.1 → 0.2.5
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	minor	0.2 → 0.4.3
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta (source, changelog)	tekton-bundle	minor	0.2 → 0.6.0
quay.io/konflux-ci/tekton-catalog/task-show-sbom (source, changelog)	tekton-bundle	digest	beb0616 → 8fe70a9
quay.io/konflux-ci/tekton-catalog/task-validate-fbc (source, changelog)	tekton-bundle	minor	0.1 → 0.2

---

Release Notes

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-apply-tags)

v0.3

• Switched from bash implementation to Konflux Build CLI.
• Deprecated older 0.1 and 0.2 versions.

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-build-image-index)

v0.3.1

Fixed

• Export SBOM_SKIP_VALIDATION into the step environment so the create-sbom step honors the parameter.
  The parameter did nothing before. Now it works as expected.

v0.3

Fixed

• Export SBOM_SKIP_VALIDATION into the step environment so the create-sbom step honors the parameter.
  The parameter did nothing before. Now it works as expected.

konflux-ci/build-definitions (quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta)

v0.10.5

Added

• Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
  --rhsm-mount-ca-certs option.

v0.10

Added

• Added a new parameter RHSM_MOUNT_CA_CERTS to allow setting [konflux-build-cli]'s
  --rhsm-mount-ca-certs option.

v0.9

Fixed

• Validate base image architecture before build. The task now fails if a base image
  doesn't match the host architecture, preventing silent emulation builds.

v0.8

Fixed

• Platform build arguments (BUILDPLATFORM, TARGETPLATFORM) now correctly include CPU variant
  for ARM architectures (e.g., linux/arm/v7 or linux/arm64/v8 instead of just linux/arm
  or linux/arm64).

v0.7

Added

• Started tracking changes in this file.

konflux-ci/build-pipeline-tasks (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta)

v0.6.0

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.59.0

v0.5.0

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.58.0

v0.4.1

Fixed

• Mount the trusted-ca volume in the use-trusted-artifact and create-trusted-artifact steps.
  Previously, the mount was missing, which means the task did not support container registries
  with certificates signed by a private/self-signed CA.

v0.4.0

• Hermeto releases from 0.55.0 to 0.57.1 - hermetoproject/hermeto@0.55.0...0.57.1

v0.3.2

• Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
• Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.

v0.3

• Added enable-package-registry-proxy parameter to enable use of the package registry proxy when prefetching dependencies.
• Added SERVICE_CA_TRUST_CONFIG_MAP_NAME and SERVICE_CA_TRUST_CONFIG_MAP_KEY parameters to mount the OpenShift service CA for verifying TLS connections to in-cluster services such as the package registry proxy.

konflux-ci/konflux-operator-tasks (quay.io/konflux-ci/tekton-catalog/task-validate-fbc)

v0.2

Changed

• Version bump to trigger automated rollout of the new fbc-inject-lifecycle-oci-ta
  task to all FBC builder pipelines via MintMaker. No functional changes to this task.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 05:00 AM and 11:59 PM, only on Saturday (* 5-23 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh02[bot]
Once this PR has been reviewed and has the lgtm label, please assign maschmid for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dsimansk]

/ok-to-test

[Kaustubh-pande]

/retest

[rudyredhat1]

/retest serverless-must-gather-136-on-pull-request

[openshift-ci]

@rudyredhat1: The /retest command does not accept any targets.
The following commands are available to trigger required jobs:

/test 414-images

/test 414-operator-e2e

/test 414-test-upgrade

/test 419-images

/test 419-operator-e2e

/test 419-test-upgrade

/test 420-images

/test 420-operator-e2e

/test 420-test-upgrade

The following commands are available to trigger optional jobs:

/test 414-kitchensink-e2e

/test 414-kitchensink-upgrade

/test 414-mesh-e2e

/test 414-mesh-upgrade

/test 414-test-soak

/test 414-ui-e2e

/test 414-upstream-e2e

/test 414-upstream-e2e-kafka

/test 419-kitchensink-e2e

/test 419-kitchensink-upgrade

/test 419-mesh-e2e

/test 419-mesh-upgrade

/test 419-test-soak

/test 419-ui-e2e

/test 419-upstream-e2e

/test 419-upstream-e2e-kafka

/test 420-kitchensink-e2e

/test 420-kitchensink-upgrade

/test 420-mesh-e2e

/test 420-mesh-upgrade

/test 420-test-soak

/test 420-ui-e2e

/test 420-upstream-e2e

/test 420-upstream-e2e-kafka

Details

In response to this:

/retest serverless-must-gather-136-on-pull-request

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[rudyredhat1]

retest "Validate / Generated files are committed"

[rudyredhat1]

/retest

[red-hat-konflux-kflux-prd-rh02]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: /bin/sh -c pipeline-migration-tool migrate -f "$RENOVATE_POST_UPGRADE_COMMAND_DATA_FILE"
DEBUG:2026-07-25 08:05:55,848:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,849:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,849:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,851:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,851:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,851:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,852:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,926:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:55,926:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,025:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,163:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,126:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,223:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta
DEBUG:2026-07-25 08:05:56,226:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,228:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,254:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 383
DEBUG:2026-07-25 08:05:56,255:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta
DEBUG:2026-07-25 08:05:56,323:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,324:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 380
DEBUG:2026-07-25 08:05:56,325:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,326:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,327:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check
DEBUG:2026-07-25 08:05:56,327:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,329:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta
DEBUG:2026-07-25 08:05:56,329:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,330:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,330:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-deprecated-image-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,332:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-build-image-index
DEBUG:2026-07-25 08:05:56,332:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,334:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check
DEBUG:2026-07-25 08:05:56,334:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,335:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,335:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,335:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,336:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,424:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,426:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-apply-tags
DEBUG:2026-07-25 08:05:56,427:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,431:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,468:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 718
DEBUG:2026-07-25 08:05:56,522:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-init
DEBUG:2026-07-25 08:05:56,523:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,523:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,525:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta
DEBUG:2026-07-25 08:05:56,525:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,526:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,573:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14361
DEBUG:2026-07-25 08:05:56,574:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,722:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,822:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-validate-fbc/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 381
DEBUG:2026-07-25 08:05:56,823:migrate.resolver-proxy:Migration image is found from repository quay.io/konflux-ci/tekton-catalog/task-validate-fbc
DEBUG:2026-07-25 08:05:56,823:migrate.resolver-proxy:Use MigrationImagesResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,824:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,825:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-build-image-index/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 380
DEBUG:2026-07-25 08:05:56,826:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-show-sbom/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25&limit=10 HTTP/1.1" 200 49
DEBUG:2026-07-25 08:05:56,827:migrate.resolver-proxy:Migration image is not found from repository quay.io/konflux-ci/tekton-catalog/task-show-sbom
DEBUG:2026-07-25 08:05:56,827:migrate.resolver-proxy:Use LinkedMigrationsResolver to resolve migrations.
DEBUG:2026-07-25 08:05:56,828:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,828:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 383
DEBUG:2026-07-25 08:05:56,829:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-deprecated-image-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 9526
DEBUG:2026-07-25 08:05:56,923:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.5- HTTP/1.1" 200 6438
DEBUG:2026-07-25 08:05:56,929:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,925:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,934:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,934:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:56,966:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 6919
DEBUG:2026-07-25 08:05:56,967:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 3804
DEBUG:2026-07-25 08:05:57,025:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,025:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 14496
DEBUG:2026-07-25 08:05:57,122:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-init/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 718
DEBUG:2026-07-25 08:05:57,123:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,126:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 6116
DEBUG:2026-07-25 08:05:57,131:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,132:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,169:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-show-sbom/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 4960
DEBUG:2026-07-25 08:05:57,222:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-validate-fbc/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3Amigration-%25.%25-%25-%25 HTTP/1.1" 200 381
DEBUG:2026-07-25 08:05:57,224:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,232:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.6- HTTP/1.1" 200 7007
DEBUG:2026-07-25 08:05:57,322:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,323:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,325:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,421:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-deprecated-image-check/manifests/sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872 HTTP/1.1" 200 1377
INFO:2026-07-25 08:05:57,423:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.5-a545338e5bac49c7dfdba1cc2e5ad1c0b1e9ef7d@sha256:0ccc688a77e9b7b0b8973c132a1e840844137e77f887be4a0bec8893b0776872
DEBUG:2026-07-25 08:05:57,476:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/manifests/migration-0.4.3-d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97-1784627340 HTTP/1.1" 200 631
DEBUG:2026-07-25 08:05:57,477:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=2&onlyActiveTags=true&filter_tag_name=like%3A0.1- HTTP/1.1" 200 2359
DEBUG:2026-07-25 08:05:57,527:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-apply-tags/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.3- HTTP/1.1" 200 11584
DEBUG:2026-07-25 08:05:57,528:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-build-image-index/manifests/migration-0.3-82c0d007252c0ec5d7593d2e4d362ef87d62754214ace6eab2f96a6cbeb3fcd6-1784805164 HTTP/1.1" 200 628
DEBUG:2026-07-25 08:05:57,623:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/manifests/migration-0.3.2-6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea-1782912267 HTTP/1.1" 200 631
DEBUG:2026-07-25 08:05:57,627:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check/manifests/sha256:a7696d92734be62700723b6d2c40dfaee4809e6a1d42b28deefc7c7463176c32 HTTP/1.1" 200 1445
DEBUG:2026-07-25 08:05:57,628:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-07-25 08:05:57,630:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-fbc-target-index-pruning-check:0.1-58cd2ddccbb0d370f2482f43c2ea0206b10dc49b@sha256:a7696d92734be62700723b6d2c40dfaee4809e6a1d42b28deefc7c7463176c32
DEBUG:2026-07-25 08:05:57,631:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,644:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-build-image-index/blobs/sha256:82c0d007252c0ec5d7593d2e4d362ef87d62754214ace6eab2f96a6cbeb3fcd6 HTTP/1.1" 302 1019
DEBUG:2026-07-25 08:05:57,654:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta/blobs/sha256:6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea HTTP/1.1" 302 1019
DEBUG:2026-07-25 08:05:57,660:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/blobs/sha256:d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97 HTTP/1.1" 302 1019
DEBUG:2026-07-25 08:05:57,724:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-25 08:05:57,725:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-25 08:05:57,726:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-25 08:05:57,763:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta/manifests/sha256:935adb61a5c9be0f619edc8838771ad3fe08cf17689094aeaaeac493af2a2115 HTTP/1.1" 200 2581
DEBUG:2026-07-25 08:05:57,822:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.7- HTTP/1.1" 200 3817
DEBUG:2026-07-25 08:05:57,824:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:57,825:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-show-sbom/manifests/sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579 HTTP/1.1" 200 1241
DEBUG:2026-07-25 08:05:57,825:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/manifests/migration-0.2-41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733-1783967772 HTTP/1.1" 200 629
DEBUG:2026-07-25 08:05:57,922:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-validate-fbc/blobs/sha256:41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733 HTTP/1.1" 302 1019
DEBUG:2026-07-25 08:05:57,924:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-git-clone-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.2- HTTP/1.1" 200 2070
INFO:2026-07-25 08:05:57,925:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-show-sbom:0.1-fb5feadc7e4b5d951a6883b5700b79d32cdc3bc0@sha256:8fe70a95c28b1ac92abd67a7477ad960218f3f570a9f8a12ad082dff7e9c9579
WARNING:2026-07-25 08:05:57,927:migrate:Registry does not have new bundle quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta:0.2.5@sha256:d5f39d5a89e8073774bac1a9b9013709c5931921dd4fb1cf662f800e6c5c9ee7
INFO:2026-07-25 08:05:57,929:migrate:Upgrade range is empty for quay.io/konflux-ci/tekton-catalog/task-git-clone-oci-ta. Skip resolving migrations.
DEBUG:2026-07-25 08:05:57,927:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
INFO:2026-07-25 08:05:57,927:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-fbc-fips-check-oci-ta:0.1-c28e85bb19ada556d1806445079a572878d5f22b@sha256:935adb61a5c9be0f619edc8838771ad3fe08cf17689094aeaaeac493af2a2115
DEBUG:2026-07-25 08:05:57,957:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/64/6433f171aae44fd4d532aa4512119015e5812b0f8e3df9ccb9f2274ccdc175ea?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260725%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260725T080557Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=fbc5cc234856fbb02ad7f7846c951a191d6eea84d5a2cbf08586727c498550b7 HTTP/1.1" 200 2593
DEBUG:2026-07-25 08:05:57,984:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/d3/d314455d220a32f6f64e3bfd7f3ef8c84e086a8107163cc9491b9cd5bdb6ac97?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260725%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260725T080557Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=ac8d179060defc6891a68d99e9bda875eada2d06709d41c5264dbf29ef7feac9 HTTP/1.1" 200 4750
INFO:2026-07-25 08:05:57,984:oras.logger:Successfully pulled /tmp/tmphi5a0vus-migration/0.4.3.sh.
DEBUG:2026-07-25 08:05:58,024:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/82/82c0d007252c0ec5d7593d2e4d362ef87d62754214ace6eab2f96a6cbeb3fcd6?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260725%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260725T080557Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=07bb1383ed75140d9ae8053a3ebfc79281c3c6ce60b20276cbd70abb2233162e HTTP/1.1" 200 890
INFO:2026-07-25 08:05:58,025:oras.logger:Successfully pulled /tmp/tmp77mni3qq-migration/0.3.sh.
INFO:2026-07-25 08:05:58,028:oras.logger:Successfully pulled /tmp/tmpmdkwmuu8-migration/0.3.2.sh.
DEBUG:2026-07-25 08:05:58,034:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:58,122:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-apply-tags/manifests/sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf HTTP/1.1" 200 1168
INFO:2026-07-25 08:05:58,124:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-apply-tags:0.3-1783929211@sha256:6387614ae4f9efa8abb7c4175db0ce5d958bc2b90665b4704880e46fbe0535bf
DEBUG:2026-07-25 08:05:58,125:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.8- HTTP/1.1" 200 4397
DEBUG:2026-07-25 08:05:58,128:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:58,171:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.9- HTTP/1.1" 200 4397
DEBUG:2026-07-25 08:05:58,173:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/41/41a3c5003ce1dcfb5cb112dc3f9a5eb5da8af0eefcb49f091e12606233270733?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260725%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260725T080557Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=b841f7bb1de0e7e5b894aebabb42454a6c1ded2642029a844fb51043760a1d31 HTTP/1.1" 200 3853
DEBUG:2026-07-25 08:05:58,173:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
INFO:2026-07-25 08:05:58,173:oras.logger:Successfully pulled /tmp/tmpfnseq1sy-migration/0.2.sh.
DEBUG:2026-07-25 08:05:58,186:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/manifests/migration-0.4.2-e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf-1782733140 HTTP/1.1" 200 630
DEBUG:2026-07-25 08:05:58,221:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-init/blobs/sha256:e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf HTTP/1.1" 302 1019
DEBUG:2026-07-25 08:05:58,222:urllib3.connectionpool:Starting new HTTPS connection (1): s3.us-east-1.amazonaws.com:443
DEBUG:2026-07-25 08:05:58,266:urllib3.connectionpool:https://s3.us-east-1.amazonaws.com:443 "GET /quayio-production-s3/sha256/e9/e9f8a6f58803a08da3325e58aae1a98557404a0d1f49c055d8f0ee7b341e1cbf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIATAAF2YHTGR23ZTE6%2F20260725%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260725T080558Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=12b8a34533a3afc23c3c07e1a4f62d201752e2b9a52fcd11eb2304467a612e1e HTTP/1.1" 200 996
INFO:2026-07-25 08:05:58,266:oras.logger:Successfully pulled /tmp/tmpz1qd1ca4-migration/0.4.2.sh.
DEBUG:2026-07-25 08:05:58,273:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/tag/?page=1&onlyActiveTags=true&filter_tag_name=like%3A0.10- HTTP/1.1" 200 2666
DEBUG:2026-07-25 08:05:58,323:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443
DEBUG:2026-07-25 08:05:58,423:urllib3.connectionpool:https://quay.io:443 "GET /v2/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta/manifests/sha256:eb277ec7b44443f0506a60ac940a2e52178d60f17cb0f51a6966daed5b3755de HTTP/1.1" 200 1537
INFO:2026-07-25 08:05:58,425:migrate:Migration search stops at quay.io/konflux-ci/tekton-catalog/task-buildah-remote-oci-ta:0.10.5-0@sha256:eb277ec7b44443f0506a60ac940a2e52178d60f17cb0f51a6966daed5b3755de
WARNING:2026-07-25 08:05:58,428:migrate:Failed to resolve migrations for bundles: []
WARNING:2026-07-25 08:05:58,428:migrate:Do not attempt handling migrations for them.
INFO:2026-07-25 08:05:58,429:migrate.transition-to-modify:Not all migration scripts are using pmt-modify command. Using legacy way to handle pipeline file for applying migrations.
INFO:2026-07-25 08:05:58,925:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-build-image-index:0.3 in package file .tekton/fbc-builder.yaml
DEBUG:2026-07-25 08:05:58,925:migrate:Run: ['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-07-25 08:06:02,631:migrate:b"INFO:2026-07-25 08:06:00,050:modify.task:task 'build-image-index' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'COMMIT_SHA' will be removed\nINFO:2026-07-25 08:06:02,045:modify.task:task 'build-image-index' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'IMAGE_EXPIRES_AFTER' will be removed\n"
INFO:2026-07-25 08:06:02,631:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.2 in package file .tekton/fbc-builder.yaml
DEBUG:2026-07-25 08:06:02,631:migrate:Run: ['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-07-25 08:06:02,641:migrate:b'Not a PipelineRun, skipping migration\n'
INFO:2026-07-25 08:06:02,641:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-init:0.4.3 in package file .tekton/fbc-builder.yaml
DEBUG:2026-07-25 08:06:02,641:migrate:Run: ['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-07-25 08:06:13,122:migrate:b"Adding source-date-epoch parameter to .spec.params\nINFO:2026-07-25 08:06:04,026:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nWiring SOURCE_DATE_EPOCH on task build-images to $(params.source-date-epoch)\nINFO:2026-07-25 08:06:05,743:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'SOURCE_DATE_EPOCH' will be created\nAdding rewrite-timestamp parameter to .spec.params\nINFO:2026-07-25 08:06:07,624:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nWiring REWRITE_TIMESTAMP on task build-images to $(params.rewrite-timestamp)\nINFO:2026-07-25 08:06:09,127:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'REWRITE_TIMESTAMP' will be created\nAdding omit-history parameter to .spec.params\nINFO:2026-07-25 08:06:10,951:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nWiring OMIT_HISTORY on task build-images to $(params.omit-history)\nINFO:2026-07-25 08:06:12,546:modify.task:task 'build-images' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'OMIT_HISTORY' will be created\n"
INFO:2026-07-25 08:06:13,122:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies-oci-ta:0.3.2 in package file .tekton/fbc-builder.yaml
DEBUG:2026-07-25 08:06:13,122:migrate:Run: ['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-07-25 08:06:16,729:migrate:b"Error: no matches found\nError: no matches found\nAdding enable-package-registry-proxy pipeline param\nINFO:2026-07-25 08:06:14,341:modify.generic:Inserting content into YAML path ['spec', 'params'] in file /tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml\nEnsuring enable-package-registry-proxy parameter exists for task prefetch-dependencies\nINFO:2026-07-25 08:06:16,147:modify.task:task 'prefetch-dependencies' in '/tmp/renovate/repos/github/openshift-knative/serverless-operator/.tekton/fbc-builder.yaml': param 'enable-package-registry-proxy' will be created\n"
INFO:2026-07-25 08:06:16,729:migrate:Apply migration of task bundle quay.io/konflux-ci/tekton-catalog/task-validate-fbc:0.2 in package file .tekton/fbc-builder.yaml
DEBUG:2026-07-25 08:06:16,729:migrate:Run: ['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']
DEBUG:2026-07-25 08:06:17,830:migrate:b'DEBUG:2026-07-25 08:06:17,633:urllib3.connectionpool:Starting new HTTPS connection (1): quay.io:443\nDEBUG:2026-07-25 08:06:17,710:urllib3.connectionpool:https://quay.io:443 "GET /api/v1/repository/konflux-ci/tekton-catalog/task-fbc-inject-lifecycle-oci-ta/tag/?page=1&onlyActiveTags=true&specificTag=0.1 HTTP/1.1" 200 295\nusage: pmt add-task [-h] [-n NAME] [-a TASK_NAME] [-p PARAM] [-s] [-g] [-f]\n                    bundle_ref [file_or_dir ...]\npmt add-task: error: argument bundle_ref: Mismatch digest. Tag 0.1 points to a different digest sha256:1be92a668fd429a1273dfd2046631c51ee0954209d99631614474ad6a1d02626\n'
ERROR:2026-07-25 08:06:17,830:migrate:Failed to apply migration: Command '['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']' returned non-zero exit status 2.
ERROR:2026-07-25 08:06:17,830:cli:Cannot do migration for pipeline. Reason: ExceptionGroup('migrate errors', [ExceptionGroup('Migration apply errors', [ExceptionGroup('Apply migrations errors', [MigrationApplyError("Failed to apply migration: Command '['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']' returned non-zero exit status 2.")])])])
  + Exception Group Traceback (most recent call last):
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/cli.py", line 28, in entry_point
  |     main()
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/cli.py", line 22, in main
  |     args.action(args)
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/cli.py", line 266, in action
  |     _action_impl(args)
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/cli.py", line 299, in _action_impl
  |     migrate(upgrades, resolver_class)
  |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 274, in migrate
  |     raise ExceptionGroup("migrate errors", errors)
  | ExceptionGroup: migrate errors (1 sub-exception)
  +-+---------------- 1 ----------------
    | Exception Group Traceback (most recent call last):
    |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 269, in migrate
    |     manager.apply_migrations(skip_bundles=skip_bundles)
    |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 244, in apply_migrations
    |     raise ExceptionGroup("Migration apply errors", errors)
    | ExceptionGroup: Migration apply errors (1 sub-exception)
    +-+---------------- 1 ----------------
      | Exception Group Traceback (most recent call last):
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 240, in apply_migrations
      |     op.handle(package_file.file_path)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/pipeline.py", line 41, in handle
      |     self.handle_pipeline_file(file_path, doc, yaml_style)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 161, in handle_pipeline_file
      |     super().handle_pipeline_file(file_path, loaded_doc, style)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 103, in handle_pipeline_file
      |     self._apply_migration(file_path)
      |   File "/home/renovate/.local/share/pipx/venvs/pipeline-migration-tool/lib64/python3.12/site-packages/pipeline_migration/actions/migrate/main.py", line 97, in _apply_migration
      |     raise ExceptionGroup("Apply migrations errors", errors)
      | ExceptionGroup: Apply migrations errors (1 sub-exception)
      +-+---------------- 1 ----------------
        | pipeline_migration.actions.migrate.exceptions.MigrationApplyError: Failed to apply migration: Command '['bash', '/tmp/tmp12qit3q_-migration-file', '.tekton/fbc-builder.yaml']' returned non-zero exit status 2.
        +------------------------------------