NO-ISSUE: Update registry.access.redhat.com/ubi9/ubi-minimal:latest Docker digest to 1bc3c5c

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi9/ubi-minimal		digest	b9b10f4 → 1bc3c5c
registry.access.redhat.com/ubi9/ubi-minimal	final	digest	b9b10f4 → 1bc3c5c

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci-robot]

@red-hat-konflux[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi9/ubi-minimal		digest	b9b10f4 → fe9e574
registry.access.redhat.com/ubi9/ubi-minimal	final	digest	b9b10f4 → fe9e574

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

Walkthrough

Final-stage base image digest for registry.access.redhat.com/ubi9/ubi-minimal:latest is updated in Dockerfile and Dockerfile.rhtap to sha256:907b68736aa798b2d38255b7aa070b2a70acb90803864a40f05d0ec47556ddd0; no other instructions changed.

Changes

Base Image Digest Update

Layer / File(s)	Summary
Runtime base image pinning Dockerfile, Dockerfile.rhtap	Updated final-stage FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256 digest from b9b10f42d7eba7ad4a6d5ef26b7d34fdc892b2ffe59b8d0372ec884008569eb6 to 907b68736aa798b2d38255b7aa070b2a70acb90803864a40f05d0ec47556ddd0. All other build and runtime instructions remain unchanged.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• openshift/cluster-api-provider-agent#996: Also repins the registry.access.redhat.com/ubi9/ubi-minimal:latest SHA256 digest in Dockerfile(s).
• openshift/cluster-api-provider-agent#997: Related digest updates for the ubi9/ubi-minimal final-stage FROM lines.

Suggested labels

lgtm

Suggested reviewers

• avishayt

🚥 Pre-merge checks | ✅ 10 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Ipv6 And Disconnected Network Test Compatibility	⚠️ Warning	New Ginkgo e2e tests added contain hardcoded IPv4 addresses and CIDRs without IPv6 adaptation or IP family detection.	Update test fixtures to support both IPv4/IPv6 using dynamic IP family detection (GetIPAddressFamily) or mark tests as [Skipped:Disconnected] if external connectivity required.
Title check	⚠️ Warning	The PR title references updating a Docker digest to '1bc3c5c', but the actual changes update the digest to '907b68736aa798b2d38255b7aa070b2a70acb90803864a40f05d0ec47556ddd0', and the PR description mentions different digests ('457cb28' and 'fe9e574'). The stated digest in the title does not match the actual changes.	Update the PR title to accurately reflect the actual Docker digest being updated to, or verify that the correct digest was actually committed to both Dockerfile and Dockerfile.rhtap.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	All 52 test names in the PR use stable, descriptive static strings with no dynamic information like pod names, timestamps, UUIDs, or node names that could change between test runs.
Test Structure And Quality	✅ Passed	PR only modifies Dockerfile digest pins; no test code changes present. Custom check for Ginkgo test quality is not applicable.
Microshift Test Compatibility	✅ Passed	PR only updates Docker base image digests in Dockerfile and Dockerfile.rhtap; no new Ginkgo e2e tests were added, so MicroShift test compatibility check is not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only updates Docker image digests in Dockerfiles. No new Ginkgo e2e tests are added; custom check only applies when new e2e tests are introduced.
Topology-Aware Scheduling Compatibility	✅ Passed	PR only updates Docker image digest in Dockerfiles; no deployment manifests, operator code, or scheduling constraints are added or modified.
Ote Binary Stdout Contract	✅ Passed	The PR only updates Docker image digests in Dockerfile and Dockerfile.rhtap. No Go test code, OTE binary code, or stdout-writing code was modified, so the check is not applicable.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/master/ubi-runtime-images

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 42fc164 and 2 for PR HEAD 65105ee in total

[openshift-ci]

New changes are detected. LGTM label has been removed.

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.