Update registry.redhat.io/ubi9/ubi-minimal Docker digest to c5478a5 release-1.4

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
registry.redhat.io/ubi9/ubi-minimal	final	digest	1bc3c5c → c5478a5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

Walkthrough

Three Dockerfiles update their final runtime stage base image digest for registry.redhat.io/ubi9/ubi-minimal. No other Dockerfile instructions or metadata changed.

Changes

Runtime base image digest updates

Layer / File(s)	Summary
Final-stage digest updates Dockerfile, Dockerfile.kueue, must-gather/Dockerfile	Each final runtime FROM registry.redhat.io/ubi9/ubi-minimal@sha256:... reference was replaced with a new pinned digest.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• openshift/kueue-operator#2065: Updates the pinned registry.redhat.io/ubi9/ubi-minimal image SHA256 digest in the same Dockerfile family.
• openshift/kueue-operator#2057: Updates UBI9 ubi-minimal image digests in Dockerfile FROM lines with the same pattern.
• openshift/kueue-operator#2079: Also changes FROM registry.redhat.io/ubi9/* base image SHA256 digests in Dockerfiles.

Suggested labels

lgtm

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS: The PR only updates three Dockerfiles’ base-image digests; no Go test files or Ginkgo titles are changed.
Test Structure And Quality	✅ Passed	Only the three Dockerfiles were updated; no Ginkgo test code changed, so the test-quality checklist is not applicable.
Microshift Test Compatibility	✅ Passed	Only three Dockerfiles changed; no Ginkgo e2e tests or test code were added/modified, so MicroShift compatibility is not implicated.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only updates UBI image digests in three Dockerfiles; no new or changed Ginkgo/e2e tests, so no SNO-specific assumptions to review.
Topology-Aware Scheduling Compatibility	✅ Passed	Only Dockerfile base-image digests changed; no manifests, controllers, or scheduling-related fields were added or modified.
Ote Binary Stdout Contract	✅ Passed	Only Dockerfiles changed (digest bumps); no process-level code or stdout writes were introduced, so the OTE stdout contract is unaffected.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR only updates UBI image digests in three Dockerfiles; no new Ginkgo e2e tests or network assumptions were added.
No-Weak-Crypto	✅ Passed	Only Dockerfile base-image digests changed; no weak-crypto patterns, custom crypto, or secret/token comparisons were found.
Container-Privileges	✅ Passed	Diff only updates ubi-minimal digests in 3 Dockerfiles; no privileged, hostPID/hostNetwork/hostIPC, CAP_SYS_ADMIN, or allowPrivilegeEscalation changes.
No-Sensitive-Data-In-Logs	✅ Passed	Only UBI base-image digests changed in three Dockerfiles; no logging or sensitive-data strings were added.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: updating the ubi9/ubi-minimal Docker digest for the release-1.4 branch.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/release-1.4/registry.redhat.io-ubi9-ubi-minimal

---

_{Comment @coderabbitai help to get the list of available commands.}

[kannon92]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 2472e5c and 2 for PR HEAD e53f7e9 in total

[kannon92]

/lgtm

[kannon92]

/lgtm

[kannon92]

/lgtm

[kannon92]

/lgtm
/retest

[kannon92]

/lgtm
/retest

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 1e421e6 and 2 for PR HEAD c7f06a0 in total

[openshift-ci]

New changes are detected. LGTM label has been removed.

[openshift-ci]

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/upgrade-from-4.18-e2e-upgrade-4-18-to-4-19-kueue-1-4	c7a21d6	link	false	/test upgrade-from-4.18-e2e-upgrade-4-18-to-4-19-kueue-1-4
ci/prow/upgrade-from-4.19-e2e-upgrade-4-19-to-4-20-kueue-1-4	c7a21d6	link	false	/test upgrade-from-4.19-e2e-upgrade-4-19-to-4-20-kueue-1-4
ci/prow/upgrade-from-4.20-e2e-upgrade-4-20-to-4-21-kueue-1-4	c7a21d6	link	false	/test upgrade-from-4.20-e2e-upgrade-4-20-to-4-21-kueue-1-4

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.