openshift-knative · serverless-qe · Jun 1, 2026 · Jun 1, 2026
diff --git a/.github/workflows/dependabot-deps.yaml b/.github/workflows/dependabot-deps.yaml
@@ -14,7 +14,7 @@ jobs:
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.head_ref }}
           path: ./src/github.com/${{ github.repository }}

diff --git a/.konflux/applications/serverless-operator-137/components/kn-client-cli-artifacts-117.yaml b/.konflux/applications/serverless-operator-137/components/kn-client-cli-artifacts-117.yaml
@@ -7,8 +7,7 @@ metadata:
   name: kn-client-cli-artifacts-117
 spec:
   componentName: kn-client-cli-artifacts-117
-  application: serverless-operator-137
-
+  application: serverless-operator-137 
   source:
     git:
       url: https://github.com/openshift-knative/client.git

diff --git a/.konflux/applications/serverless-operator-137/components/kn-client-kn-117.yaml b/.konflux/applications/serverless-operator-137/components/kn-client-kn-117.yaml
@@ -7,8 +7,7 @@ metadata:
   name: kn-client-kn-117
 spec:
   componentName: kn-client-kn-117
-  application: serverless-operator-137
-
+  application: serverless-operator-137 
   source:
     git:
       url: https://github.com/openshift-knative/client.git

diff --git a/.konflux/applications/serverless-operator-137/components/kn-client-test-grpc-ping-117.yaml b/.konflux/applications/serverless-operator-137/components/kn-client-test-grpc-ping-117.yaml
@@ -7,8 +7,7 @@ metadata:
   name: kn-client-test-grpc-ping-117
 spec:
   componentName: kn-client-test-grpc-ping-117
-  application: serverless-operator-137
-
+  application: serverless-operator-137 
   source:
     git:
       url: https://github.com/openshift-knative/client.git

diff --git a/.konflux/applications/serverless-operator-137/components/kn-client-test-helloworld-117.yaml b/.konflux/applications/serverless-operator-137/components/kn-client-test-helloworld-117.yaml
@@ -7,8 +7,7 @@ metadata:
   name: kn-client-test-helloworld-117
 spec:
   componentName: kn-client-test-helloworld-117
-  application: serverless-operator-137
-
+  application: serverless-operator-137 
   source:
     git:
       url: https://github.com/openshift-knative/client.git

diff --git a/.../applications/serverless-operator-137/components/kn-client-test-servingcontainer-117.yaml b/.../applications/serverless-operator-137/components/kn-client-test-servingcontainer-117.yaml
@@ -7,8 +7,7 @@ metadata:
   name: kn-client-test-servingcontainer-117
 spec:
   componentName: kn-client-test-servingcontainer-117
-  application: serverless-operator-137
-
+  application: serverless-operator-137 
   source:
     git:
       url: https://github.com/openshift-knative/client.git

diff --git a/.../applications/serverless-operator-137/components/kn-client-test-sidecarcontainer-117.yaml b/.../applications/serverless-operator-137/components/kn-client-test-sidecarcontainer-117.yaml
@@ -7,8 +7,7 @@ metadata:
   name: kn-client-test-sidecarcontainer-117
 spec:
   componentName: kn-client-test-sidecarcontainer-117
-  application: serverless-operator-137
-
+  application: serverless-operator-137 
   source:
     git:
       url: https://github.com/openshift-knative/client.git

diff --git a/.tekton/docker-build.yaml b/.tekton/docker-build.yaml
@@ -87,6 +87,14 @@ spec:
   - default: "false"
     description: Enable cache proxy configuration
     name: enable-cache-proxy
+  - default: "true"
+    description: Use the package registry proxy when prefetching dependencies
+    name: enable-package-registry-proxy
+  - default: .
+    description: Target directories in component's source code to scan with SAST tools.
+      Multiple values should be separated with commas.
+    name: sast-target-dirs
+    type: string
   - default: []
     description: Array of --build-arg values ("arg=value" strings) for buildah
     name: build-args
@@ -122,6 +130,8 @@ spec:
       value: $(tasks.build-image-index.results.IMAGE_DIGEST)
     - name: image-url
       value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: TARGET_DIRS
+      value: $(params.sast-target-dirs)
     - name: SOURCE_ARTIFACT
       value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
     - name: CACHI2_ARTIFACT
@@ -148,6 +158,8 @@ spec:
       value: $(params.prefetch-input-dev-package-managers)
     - name: input
       value: $(params.prefetch-input)
+    - name: enable-package-registry-proxy
+      value: $(params.enable-package-registry-proxy)
     - name: SOURCE_ARTIFACT
       value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
     - name: ociStorage
@@ -434,6 +446,8 @@ spec:
       value: $(tasks.build-image-index.results.IMAGE_DIGEST)
     - name: image-url
       value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: TARGET_DIRS
+      value: $(params.sast-target-dirs)
     - name: SOURCE_ARTIFACT
       value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
     - name: CACHI2_ARTIFACT
@@ -460,6 +474,8 @@ spec:
       value: $(tasks.build-image-index.results.IMAGE_DIGEST)
     - name: image-url
       value: $(tasks.build-image-index.results.IMAGE_URL)
+    - name: TARGET_DIRS
+      value: $(params.sast-target-dirs)
     - name: SOURCE_ARTIFACT
       value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
     - name: CACHI2_ARTIFACT

diff --git a/.tekton/kn-client-cli-artifacts-117-pull-request.yaml b/.tekton/kn-client-cli-artifacts-117-pull-request.yaml
@@ -22,7 +22,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-cli-artifacts-117-push.yaml b/.tekton/kn-client-cli-artifacts-117-push.yaml
@@ -21,7 +21,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-kn-117-pull-request.yaml b/.tekton/kn-client-kn-117-pull-request.yaml
@@ -22,7 +22,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-kn-117-push.yaml b/.tekton/kn-client-kn-117-push.yaml
@@ -21,7 +21,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-grpc-ping-117-pull-request.yaml b/.tekton/kn-client-test-grpc-ping-117-pull-request.yaml
@@ -22,7 +22,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-grpc-ping-117-push.yaml b/.tekton/kn-client-test-grpc-ping-117-push.yaml
@@ -21,7 +21,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-helloworld-117-pull-request.yaml b/.tekton/kn-client-test-helloworld-117-pull-request.yaml
@@ -22,7 +22,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-helloworld-117-push.yaml b/.tekton/kn-client-test-helloworld-117-push.yaml
@@ -21,7 +21,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-servingcontainer-117-pull-request.yaml b/.tekton/kn-client-test-servingcontainer-117-pull-request.yaml
@@ -22,7 +22,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-servingcontainer-117-push.yaml b/.tekton/kn-client-test-servingcontainer-117-push.yaml
@@ -21,7 +21,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-sidecarcontainer-117-pull-request.yaml b/.tekton/kn-client-test-sidecarcontainer-117-pull-request.yaml
@@ -22,7 +22,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/.tekton/kn-client-test-sidecarcontainer-117-push.yaml b/.tekton/kn-client-test-sidecarcontainer-117-push.yaml
@@ -21,7 +21,7 @@ spec:
     - name: build-args
       value:
         - CLI_ARTIFACTS=brew.registry.redhat.io/rh-osbs/openshift-serverless-1-kn-cli-artifacts-rhel8:1.16.0
-        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.23
+        - GO_BUILDER=brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25
         - GO_RUNTIME=registry.access.redhat.com/ubi9/ubi-minimal
         - JAVA_BUILDER=registry.access.redhat.com/ubi9/openjdk-21
         - JAVA_RUNTIME=registry.access.redhat.com/ubi9/openjdk-21-runtime

diff --git a/openshift/ci-operator/knative-images/cli-artifacts/Dockerfile b/openshift/ci-operator/knative-images/cli-artifacts/Dockerfile
@@ -9,7 +9,7 @@ WORKDIR /workspace
 COPY . .
 ENV TAG="v1.17.0"
 ENV KN_PLUGIN_FUNC_UTIL_IMAGE=registry.redhat.io/openshift-serverless-1/kn-plugin-func-func-util-rhel9@sha256:7213f40b00c34011a2abfe834d52902305f86d8c76be0143d8d9ac9ba1300c59
-ENV KN_PLUGIN_EVENT_SENDER_IMAGE=registry.redhat.io/openshift-serverless-1/kn-plugin-event-sender-rhel9@sha256:51844c9f14680b29b072e2b26bba0f5cc2fb9206adc207a2e1d3e5330d512f6d
+ENV KN_PLUGIN_EVENT_SENDER_IMAGE=registry.redhat.io/openshift-serverless-1/kn-plugin-event-sender-rhel9@sha256:42315b1d7b2ef141ae3b6bf92c59406ff242b7177c907b89186b507dc2c29b02
 # Build binaries
 # RUN make build-cross-package
 RUN ./hack/build.sh -p linux amd64

diff --git a/openshift/ci-operator/knative-images/kn/Dockerfile b/openshift/ci-operator/knative-images/kn/Dockerfile
@@ -11,7 +11,7 @@ ENV CGO_ENABLED=1
 ENV GOEXPERIMENT=strictfipsruntime
 
 ENV KN_PLUGIN_FUNC_UTIL_IMAGE=registry.redhat.io/openshift-serverless-1/kn-plugin-func-func-util-rhel9@sha256:7213f40b00c34011a2abfe834d52902305f86d8c76be0143d8d9ac9ba1300c59
-ENV KN_PLUGIN_EVENT_SENDER_IMAGE=registry.redhat.io/openshift-serverless-1/kn-plugin-event-sender-rhel9@sha256:51844c9f14680b29b072e2b26bba0f5cc2fb9206adc207a2e1d3e5330d512f6d
+ENV KN_PLUGIN_EVENT_SENDER_IMAGE=registry.redhat.io/openshift-serverless-1/kn-plugin-event-sender-rhel9@sha256:42315b1d7b2ef141ae3b6bf92c59406ff242b7177c907b89186b507dc2c29b02
 RUN go build -tags strictfipsruntime -o /usr/bin/main ./cmd/kn
 
 FROM $GO_RUNTIME