LCORE-1441: Updated Konflux dependencies

[tisnik]

Description

LCORE-1441: Updated Konflux dependencies

Type of change

• Refactor
• New feature
• Bug fix
• CVE fix
• Optimization
• Documentation Update
• Configuration Update
• Bump-up service version
• Bump-up dependent library
• Bump-up library or tool used for development (does not change the final image)
• CI configuration change
• Konflux configuration change
• Unit tests improvement
• Integration tests improvement
• End to end tests improvement
• Benchmarks improvement

Tools used to create PR

• Assisted-by: N/A
• Generated by: N/A

Related Tickets & Documents

• Related Issue #LCORE-1441

Summary by CodeRabbit

• Chores
  • Updated multiple Python dependencies to latest versions, including authentication, cloud integration, and machine learning libraries.
  • Streamlined build configurations and removed unused build packages.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 3c745629-4600-4a2a-83d7-61bd42fa9786

📥 Commits

Reviewing files that changed from the base of the PR and between 6dcf810 and 7224f11.

📒 Files selected for processing (5)

• .tekton/lightspeed-stack-pull-request.yaml
• .tekton/lightspeed-stack-push.yaml
• requirements-build.txt
• requirements.hashes.source.txt
• requirements.hashes.wheel.txt

💤 Files with no reviewable changes (1)

• requirements.hashes.wheel.txt

---

Walkthrough

This PR updates Python package dependencies across the build system, removes packages from Tekton prefetch configurations, and updates requirement file hashes. The changes consolidate which packages are prefetched during CI/CD pipelines and bump versions for several core dependencies like azure-core, google-auth, openai, and sentence-transformers.

Changes

Cohort / File(s)	Summary
Tekton Pipeline Configuration .tekton/lightspeed-stack-pull-request.yaml, .tekton/lightspeed-stack-push.yaml	Removed "build" package and reduced the list of Python packages in the binary.packages prefetch-input blocks. No changes to other pipeline fields or control flow.
Build Requirements requirements-build.txt	Removed commented lines for optional/indirect dependencies (pip, pybuild-deps, xdg, pip-tools); added azure-core comment indicator. No version or logic changes.
Source Hash Requirements requirements.hashes.source.txt	Updated 8 package versions with new hashes: azure-core, azure-identity, google-auth, litellm, openai, pyjwt, pythainlp, and sentence-transformers. Removed entries for build, rsa, pyproject-hooks, and wheel.
Wheel Hash Requirements requirements.hashes.wheel.txt	Removed entries for build==1.4.0, rsa==4.9.1, pyproject-hooks==1.2.0, wheel==0.46.3, and their associated hash lines.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

• LCORE-1326: Updated Konflux dependencies #1296: Both PRs reduce the binary.packages list in the same Tekton YAML files to slim down prefetch configurations.
• LCORE-1108: Updated Konflux dependencies #1090: Both PRs modify the same requirements hash files and .tekton manifests, altering dependency specifications across the build system.
• LCORE-1255: updated Konflux deps #1106: Both PRs update the litellm package entry and related hashes in requirements.hashes.source.txt.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'LCORE-1441: Updated Konflux dependencies' clearly and accurately describes the main change—updating Konflux dependencies—and aligns with the changeset which modifies dependency versions and configuration files across multiple Konflux-related YAML and requirements files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Tip

CodeRabbit can use your project's `ruff` configuration to improve the quality of Python code reviews.

Add a Ruff configuration file to your project to customize how CodeRabbit runs ruff.