chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/konflux-ci/tekton-catalog/task-apply-tags (source, changelog)	tekton-bundle	digest	ccd3665 → c177fc2
quay.io/konflux-ci/tekton-catalog/task-build-image-index (source, changelog)	tekton-bundle	digest	290c9ec → 1e2e00b
quay.io/konflux-ci/tekton-catalog/task-buildah (source, changelog)	tekton-bundle	digest	338f909 → adfa3a1
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	tekton-bundle	digest	c07d2be → fa53ef4
quay.io/konflux-ci/tekton-catalog/task-git-clone (source, changelog)	tekton-bundle	digest	0d3092d → 8c7fc8c
quay.io/konflux-ci/tekton-catalog/task-init (source, changelog)	tekton-bundle	digest	4be9343 → c6c414a
quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies (source, changelog)	tekton-bundle	patch	0.10.2 → 0.10.3
quay.io/konflux-ci/tekton-catalog/task-push-dockerfile (source, changelog)	tekton-bundle	digest	b15e228 → eb8681b
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	tekton-bundle	digest	9ef4dab → d9df5d3
quay.io/konflux-ci/tekton-catalog/task-sast-shell-check (source, changelog)	tekton-bundle	digest	f40df2d → abeec41
quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check (source, changelog)	tekton-bundle	digest	691d805 → 774c947
quay.io/konflux-ci/tekton-catalog/task-sast-unicode-check (source, changelog)	tekton-bundle	digest	d03eee4 → 1f9f3a3
quay.io/konflux-ci/tekton-catalog/task-source-build (source, changelog)	tekton-bundle	digest	3474891 → af4bd24

---

Release Notes

konflux-ci/container-build-catalog (quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies)

v0.10.3

• Hermeto release - https://github.com/hermetoproject/hermeto/releases/tag/0.62.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Saturday (* * * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: b1e7c28d-5476-4603-8fc2-ff474fed310f

📥 Commits

Reviewing files that changed from the base of the PR and between 9027c14 and 279da72.

📒 Files selected for processing (2)

• .tekton/bonfire-pull-request.yaml
• .tekton/bonfire-push.yaml

Included review availability: Your plan provides up to 12 included reviews per hour; 4 remain after this review.

---

Summary by CodeRabbit

• Chores
  • Updated continuous integration pipeline task references to newer verified versions.
  • Pipeline behavior and task functionality remain unchanged.
  • No changes to exported features or end-user application behavior.

Walkthrough

The pull-request and push Tekton pipeline configurations update pinned task bundle digests. The push pipeline also updates prefetch-dependencies from version 0.10.2 to 0.10.3.

Changes

Tekton bundle updates

Layer / File(s)	Summary
Pull-request pipeline task pins .tekton/bonfire-pull-request.yaml	The pipeline updates pinned bundle digests for initialization, source retrieval, dependency prefetch, image building, security scans, tagging, and Dockerfile publishing tasks.
Push pipeline task pins .tekton/bonfire-push.yaml	The pipeline updates pinned bundle digests for its listed tasks. The prefetch-dependencies task advances from version 0.10.2 to 0.10.3.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the dependency reference updates in the Konflux Tekton bundles.
Description check	✅ Passed	The description directly documents the 13 Konflux Tekton bundle updates, including digest changes and the prefetch-dependencies version update.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}