Update registry.redhat.io/ubi9/ubi Docker digest to 37a1589 main

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
registry.redhat.io/ubi9/ubi	final	digest	13a41a2 → 37a1589

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 8b717292-7908-4005-9447-0578ae767b2b

📥 Commits

Reviewing files that changed from the base of the PR and between 8c6324f and 235f283.

📒 Files selected for processing (2)

• bundle.Dockerfile
• bundle.developer.Dockerfile

✅ Files skipped from review due to trivial changes (1)

• bundle.Dockerfile

🚧 Files skipped from review as they are similar to previous changes (1)

• bundle.developer.Dockerfile

---

Walkthrough

The pinned UBI9 digest in the builder-stage FROM instruction is updated in both bundle Dockerfiles. No other build instructions change.

Changes

UBI9 Base Image Digest Bump

Layer / File(s)	Summary
Builder stage digest update bundle.Dockerfile, bundle.developer.Dockerfile	The registry.redhat.io/ubi9/ubi@sha256:... reference in the builder-stage FROM line is updated in both files.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• openshift/kueue-operator#2057: Updates the same builder-stage UBI9 digest in both bundle Dockerfiles.
• openshift/kueue-operator#2058: Changes the pinned sha256 digest in the same FROM lines.
• openshift/kueue-operator#2059: Bumps the registry.redhat.io/ubi9/ubi digest in the same builder-stage references.

Suggested labels

lgtm, konflux-nudge

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title matches the change type, but it names an incorrect digest value that does not match the PR summary.	Rename it to reflect the actual digest update, e.g. update the UBI9 base image digest on main without a specific mismatched hash.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	Only bundle Dockerfiles changed; no Ginkgo/test files or titles were added or modified, so no unstable test names are present.
Test Structure And Quality	✅ Passed	PR only updates bundle Dockerfile digests; no Ginkgo test files or test logic were changed, so the test-quality check is not applicable.
Microshift Test Compatibility	✅ Passed	Only bundle.Dockerfile and bundle.developer.Dockerfile changed; no Ginkgo/e2e test files or Go test code were added or modified.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Only bundle Dockerfiles changed; no Ginkgo/e2e test files were added, so the SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	Only the two bundle Dockerfiles changed to bump a UBI base-image digest; no deployment manifests, controllers, or scheduling constraints were modified.
Ote Binary Stdout Contract	✅ Passed	Only bundle Dockerfiles were updated to bump the base image digest; no Go/test code or stdout-writing process-level code changed.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR only updates UBI digest in two Dockerfiles; no new Ginkgo e2e tests or external connectivity assumptions were added.
No-Weak-Crypto	✅ Passed	Only the UBI9 base-image digest changed in the Dockerfiles; no MD5/SHA1/DES/RC4/3DES/Blowfish/ECB or custom crypto code was added.
Container-Privileges	✅ Passed	Only the builder image digest changed in the two Dockerfiles; no privileged, hostNetwork, hostPID/IPC, allowPrivilegeEscalation, or root-run settings were added.
No-Sensitive-Data-In-Logs	✅ Passed	Only two Dockerfiles changed their UBI9 digest; no logging calls or sensitive-data strings appear in the touched files.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/registry.redhat.io-ubi9-ubi

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 7be950a and 2 for PR HEAD 8c6324f in total

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[kannon92]

/lgtm