Update registry.redhat.io/ubi9/ubi-minimal Docker digest to 463cae3 release-1.3

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
registry.redhat.io/ubi9/ubi-minimal	final	digest	c5478a5 → 463cae3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by CodeRabbit

• Chores
  • Updated pinned runtime base image references in container builds.
  • Kept all build steps, permissions, labels, and runtime behavior unchanged.
  • Applied the same image refresh across the main image, kueue image, and must-gather image.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 6173549a-6b8d-461b-b141-cb25208e629c

📥 Commits

Reviewing files that changed from the base of the PR and between 5551e31 and b46230b.

📒 Files selected for processing (3)

• Dockerfile
• Dockerfile.kueue
• must-gather/Dockerfile

---

Walkthrough

Three Dockerfiles (Dockerfile, Dockerfile.kueue, must-gather/Dockerfile) have their registry.redhat.io/ubi9/ubi-minimal base image digest updated to a new pinned SHA256 value. No other build steps, labels, or runtime configurations are changed.

Changes

Base Image Digest Bump

Layer / File(s)	Summary
ubi-minimal digest update Dockerfile, Dockerfile.kueue, must-gather/Dockerfile	Replaces the pinned ubi9/ubi-minimal SHA256 digest in the final/runtime FROM line of all three Dockerfiles.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• openshift/kueue-operator#2066: Same three Dockerfiles updated with a different ubi9/ubi-minimal digest bump.
• openshift/kueue-operator#2109: Identical pattern of pinned ubi9/ubi-minimal digest update across the same Dockerfiles.
• openshift/kueue-operator#2121: Same ubi9/ubi-minimal digest bump in the same three Dockerfiles without other changes.

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: updating the ubi-minimal Docker image digest on release-1.3.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR only changes Dockerfile image digests; no Ginkgo test files or test titles were added or modified.
Test Structure And Quality	✅ Passed	Only Dockerfiles changed; no Ginkgo or Go test files were modified, so the test-structure checklist is not applicable.
Microshift Test Compatibility	✅ Passed	Only three Dockerfiles changed, all just pinned UBI digest updates; no Ginkgo tests or OpenShift API usage were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR only bumps ubi-minimal digests in three Dockerfiles; no new It/Describe/Context/When tests were added.
Topology-Aware Scheduling Compatibility	✅ Passed	Only Dockerfile base-image digests changed; no manifests, controllers, or scheduling/topology constraints were added.
Ote Binary Stdout Contract	✅ Passed	PR only updates three Dockerfile base-image digests; no Go/test process code or stdout-writing setup is changed.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	Only Dockerfiles changed; no Ginkgo e2e tests were added or modified, so IPv4/external-connectivity compatibility is not applicable.
No-Weak-Crypto	✅ Passed	Diff only updates ubi-minimal image digests in three Dockerfiles; no weak-crypto, custom crypto, or secret-comparison code appears in the changes.
Container-Privileges	✅ Passed	The PR only bumps UBI base-image digests in three Dockerfiles; no privileged, host* IPC/network, SYS_ADMIN, or root-user settings were added.
No-Sensitive-Data-In-Logs	✅ Passed	The changed Dockerfiles only pin a new UBI digest; no logging, secrets, or PII-bearing strings appear in the touched files.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/release-1.3/registry.redhat.io-ubi9-ubi-minimal

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment