From a33ed34828f44293dce1b9adf06fdeb5ffd848bb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 8 Jan 2025 14:13:42 +0000
Subject: [PATCH] chore(deps): update build

---
 task/build-image-index/0.1/build-image-index.yaml             | 2 +-
 task/buildah-oci-ta/0.1/buildah-oci-ta.yaml                   | 4 ++--
 task/buildah-oci-ta/0.2/buildah-oci-ta.yaml                   | 4 ++--
 task/buildah-oci-ta/0.3/buildah-oci-ta.yaml                   | 4 ++--
 task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml     | 4 ++--
 task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml     | 4 ++--
 task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml     | 4 ++--
 task/buildah-remote/0.1/buildah-remote.yaml                   | 4 ++--
 task/buildah-remote/0.2/buildah-remote.yaml                   | 4 ++--
 task/buildah-remote/0.3/buildah-remote.yaml                   | 4 ++--
 task/buildah-rhtap/0.1/buildah-rhtap.yaml                     | 2 +-
 task/buildah/0.1/buildah.yaml                                 | 4 ++--
 task/buildah/0.2/buildah.yaml                                 | 4 ++--
 task/buildah/0.3/buildah.yaml                                 | 4 ++--
 task/generate-labels/0.1/generate-labels.yaml                 | 2 +-
 .../0.1/prefetch-dependencies-oci-ta.yaml                     | 2 +-
 task/prefetch-dependencies/0.1/prefetch-dependencies.yaml     | 2 +-
 task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml   | 2 +-
 task/push-dockerfile/0.1/push-dockerfile.yaml                 | 2 +-
 task/source-build-oci-ta/0.1/source-build-oci-ta.yaml         | 2 +-
 task/source-build/0.1/source-build.yaml                       | 2 +-
 .../0.1/update-infra-deployments.yaml                         | 2 +-
 22 files changed, 34 insertions(+), 34 deletions(-)

diff --git a/task/build-image-index/0.1/build-image-index.yaml b/task/build-image-index/0.1/build-image-index.yaml
index bd7d6a8353..0a116caa0a 100644
--- a/task/build-image-index/0.1/build-image-index.yaml
+++ b/task/build-image-index/0.1/build-image-index.yaml
@@ -163,7 +163,7 @@ spec:
         add:
           - SETFCAP
 
-  - image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+  - image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: create-sbom
     computeResources:
       limits:
diff --git a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
index 174a3915c8..02b8caa187 100644
--- a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
@@ -456,7 +456,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: merge-syft-sboms
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
       workingDir: /var/workdir
       script: |
         #!/bin/python3
@@ -503,7 +503,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: create-purl-sbom
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
       workingDir: /var/workdir
       script: |
         #!/bin/python3
diff --git a/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
index 93814684e4..4cde37306b 100644
--- a/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
@@ -575,7 +575,7 @@ spec:
           add:
             - SETFCAP
     - name: icm
-      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -683,7 +683,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: prepare-sboms
-      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
       workingDir: /var/workdir
       script: |
         if [ "${SKIP_SBOM_GENERATION}" = "true" ]; then
diff --git a/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
index 045b5188dc..f8bb5f97d9 100644
--- a/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
@@ -563,7 +563,7 @@ spec:
           add:
             - SETFCAP
     - name: icm
-      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -648,7 +648,7 @@ spec:
         echo "Running syft on the image filesystem"
         syft dir:"$(cat /shared/container_path)" --output cyclonedx-json="/var/workdir/sbom-image.json"
     - name: prepare-sboms
-      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
       workingDir: /var/workdir
       script: |
         if [ "${SKIP_SBOM_GENERATION}" = "true" ]; then
diff --git a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
index b47ade17e7..95a5fd3991 100644
--- a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
@@ -554,7 +554,7 @@ spec:
     - mountPath: /shared
       name: shared
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -603,7 +603,7 @@ spec:
       runAsUser: 0
     workingDir: /var/workdir
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: create-purl-sbom
     script: |
       #!/bin/python3
diff --git a/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
index 23dc42eb16..9ab3b65376 100644
--- a/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
@@ -683,7 +683,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -820,7 +820,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
index 16f2baf698..1939e1ab72 100644
--- a/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
@@ -671,7 +671,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -779,7 +779,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml
index 8d12e7f080..159e7ad551 100644
--- a/task/buildah-remote/0.1/buildah-remote.yaml
+++ b/task/buildah-remote/0.1/buildah-remote.yaml
@@ -547,7 +547,7 @@ spec:
     - mountPath: /shared
       name: shared
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -596,7 +596,7 @@ spec:
       runAsUser: 0
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: create-purl-sbom
     script: |
       #!/bin/python3
diff --git a/task/buildah-remote/0.2/buildah-remote.yaml b/task/buildah-remote/0.2/buildah-remote.yaml
index 35f6872deb..e9aeca21d7 100644
--- a/task/buildah-remote/0.2/buildah-remote.yaml
+++ b/task/buildah-remote/0.2/buildah-remote.yaml
@@ -659,7 +659,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -798,7 +798,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-remote/0.3/buildah-remote.yaml b/task/buildah-remote/0.3/buildah-remote.yaml
index 36a92491dc..03bc33008b 100644
--- a/task/buildah-remote/0.3/buildah-remote.yaml
+++ b/task/buildah-remote/0.3/buildah-remote.yaml
@@ -647,7 +647,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -757,7 +757,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-rhtap/0.1/buildah-rhtap.yaml b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
index 7ebb8f4afe..942c109e9d 100644
--- a/task/buildah-rhtap/0.1/buildah-rhtap.yaml
+++ b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
@@ -144,7 +144,7 @@ spec:
       name: tmpfiles
 
   - name: merge-sboms
-    image: registry.access.redhat.com/ubi8/python-311@sha256:e61de96a78dc883686a8b6f5ce27e00342801947cad48207ea7cf9cf06da1f1e
+    image: registry.access.redhat.com/ubi8/python-311@sha256:ed5206776ac1e41e553fc6d0bedec4b4f471674b6fb3c1844fd95be97e728113
     env:
       - name: RESULT_PATH
         value: $(results.SBOM_BLOB_URL.path)
diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml
index a9fe35d41f..16fb0f781f 100644
--- a/task/buildah/0.1/buildah.yaml
+++ b/task/buildah/0.1/buildah.yaml
@@ -415,7 +415,7 @@ spec:
       runAsUser: 0
 
   - name: merge-syft-sboms
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     script: |
       #!/bin/python3
       import json
@@ -464,7 +464,7 @@ spec:
       runAsUser: 0
 
   - name: create-purl-sbom
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     script: |
       #!/bin/python3
       import json
diff --git a/task/buildah/0.2/buildah.yaml b/task/buildah/0.2/buildah.yaml
index 2491ec451c..12273c1091 100644
--- a/task/buildah/0.2/buildah.yaml
+++ b/task/buildah/0.2/buildah.yaml
@@ -512,7 +512,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - name: icm
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     securityContext:
       capabilities:
         add:
@@ -627,7 +627,7 @@ spec:
       runAsUser: 0
 
   - name: prepare-sboms
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     computeResources:
       limits:
         memory: 512Mi
diff --git a/task/buildah/0.3/buildah.yaml b/task/buildah/0.3/buildah.yaml
index de24c5bac5..3a01af2008 100644
--- a/task/buildah/0.3/buildah.yaml
+++ b/task/buildah/0.3/buildah.yaml
@@ -501,7 +501,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - name: icm
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     securityContext:
       capabilities:
         add:
@@ -593,7 +593,7 @@ spec:
       name: shared
 
   - name: prepare-sboms
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     computeResources:
       limits:
         memory: 512Mi
diff --git a/task/generate-labels/0.1/generate-labels.yaml b/task/generate-labels/0.1/generate-labels.yaml
index 00ba7e2749..86a3ffa2e8 100644
--- a/task/generate-labels/0.1/generate-labels.yaml
+++ b/task/generate-labels/0.1/generate-labels.yaml
@@ -38,7 +38,7 @@ spec:
       type: array
   steps:
     - name: render
-      image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+      image: quay.io/konflux-ci/yq:latest@sha256:3a1b484904c6125f442926e978aad2e7205f314d77a27863e811dd3309b6b2cd
       env:
       - name: SOURCE_DATE_EPOCH
         value: "$(params.source-date-epoch)"
diff --git a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
index 987a248540..16802f494f 100644
--- a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
+++ b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
@@ -149,7 +149,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: sanitize-cachi2-config-file-with-yq
-      image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+      image: quay.io/konflux-ci/yq:latest@sha256:3a1b484904c6125f442926e978aad2e7205f314d77a27863e811dd3309b6b2cd
       script: |
         if [ -n "${CONFIG_FILE_CONTENT}" ]; then
           # we need to drop 'goproxy_url' for safety reasons until cachi2 decides what the SBOM
diff --git a/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml b/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
index 7d07331978..5123b07cfe 100644
--- a/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
+++ b/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
@@ -69,7 +69,7 @@ spec:
         name: shared
   steps:
   - name: sanitize-cachi2-config-file-with-yq
-    image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+    image: quay.io/konflux-ci/yq:latest@sha256:3a1b484904c6125f442926e978aad2e7205f314d77a27863e811dd3309b6b2cd
     script: |
       if [ -n "${CONFIG_FILE_CONTENT}" ]
       then
diff --git a/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml b/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
index dc1408b4ca..90bd9b903c 100644
--- a/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
+++ b/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
@@ -58,7 +58,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: push
-      image: quay.io/konflux-ci/oras:latest@sha256:d164490b5cbd38dcd819898cd3f5b73b64d2e3334cb2ddc728f49945207e2706
+      image: quay.io/konflux-ci/oras:latest@sha256:b118bceefe8110d1965742ef4818fb51d2da4493c40ad99107a09b30f5c353f8
       workingDir: /var/workdir
       env:
         - name: IMAGE
diff --git a/task/push-dockerfile/0.1/push-dockerfile.yaml b/task/push-dockerfile/0.1/push-dockerfile.yaml
index 142c32ca14..407e6a1763 100644
--- a/task/push-dockerfile/0.1/push-dockerfile.yaml
+++ b/task/push-dockerfile/0.1/push-dockerfile.yaml
@@ -39,7 +39,7 @@ spec:
     description: Digest-pinned image reference to the Dockerfile image.
   steps:
   - name: push
-    image: quay.io/konflux-ci/oras:latest@sha256:d164490b5cbd38dcd819898cd3f5b73b64d2e3334cb2ddc728f49945207e2706
+    image: quay.io/konflux-ci/oras:latest@sha256:b118bceefe8110d1965742ef4818fb51d2da4493c40ad99107a09b30f5c353f8
     workingDir: $(workspaces.workspace.path)
     env:
     - name: IMAGE
diff --git a/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml b/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
index 36a95dfa8d..d147c47a24 100644
--- a/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
+++ b/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
@@ -114,7 +114,7 @@ spec:
             | .name + "@" + $matched.digest
         ' <<<"$sbom" | tee "$BASE_IMAGES_FILE"
     - name: build
-      image: quay.io/konflux-ci/source-container-build:latest@sha256:4002c18472e33b5f3d2b92e7897b0b31e4181dd5f8b8a3c4097937035e899ba3
+      image: quay.io/konflux-ci/source-container-build:latest@sha256:b4757a757be5e27e830f6c79062d6f4b37d0c3ad0deae3dba506f9287d1219d0
       workingDir: /var/workdir
       env:
         - name: SOURCE_DIR
diff --git a/task/source-build/0.1/source-build.yaml b/task/source-build/0.1/source-build.yaml
index 4191b4fc63..1f42aa45a3 100644
--- a/task/source-build/0.1/source-build.yaml
+++ b/task/source-build/0.1/source-build.yaml
@@ -102,7 +102,7 @@ spec:
         ' <<< "$sbom" | tee "$BASE_IMAGES_FILE"
 
     - name: build
-      image: quay.io/konflux-ci/source-container-build:latest@sha256:4002c18472e33b5f3d2b92e7897b0b31e4181dd5f8b8a3c4097937035e899ba3
+      image: quay.io/konflux-ci/source-container-build:latest@sha256:b4757a757be5e27e830f6c79062d6f4b37d0c3ad0deae3dba506f9287d1219d0
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       computeResources:
diff --git a/task/update-infra-deployments/0.1/update-infra-deployments.yaml b/task/update-infra-deployments/0.1/update-infra-deployments.yaml
index 8ee406f46a..6f7f61f593 100644
--- a/task/update-infra-deployments/0.1/update-infra-deployments.yaml
+++ b/task/update-infra-deployments/0.1/update-infra-deployments.yaml
@@ -109,7 +109,7 @@ spec:
 
       # Based on https://github.com/tektoncd/catalog/tree/main/task/github-app-token/0.2/
     - name: create-mr
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       volumeMounts: