NO-ISSUE: Update registry.access.redhat.com/ubi9/ubi-minimal:latest Docker digest to 12db987

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi9/ubi-minimal		digest	b9b10f4 → 12db987
registry.access.redhat.com/ubi9/ubi-minimal	final	digest	b9b10f4 → 12db987

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci-robot]

@red-hat-konflux[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi9/ubi-minimal		digest	b9b10f4 → fe9e574
registry.access.redhat.com/ubi9/ubi-minimal	final	digest	b9b10f4 → fe9e574

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Walkthrough

Final-stage base image digest for registry.access.redhat.com/ubi9/ubi-minimal:latest is updated in Dockerfile and Dockerfile.rhtap; no other build or runtime instructions were changed.

Changes

Base Image Digest Update

Layer / File(s)	Summary
Runtime base image pinning Dockerfile, Dockerfile.rhtap	Updated final-stage FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256 digest from b9b10f42d7eba7ad4a6d5ef26b7d34fdc892b2ffe59b8d0372ec884008569eb6 to 12db9874bd753eb98b1ab3d840e75de5d6842ac0604fbd68c012adefe97140be. All other build stages, copied artifacts, working directory, user, and entrypoint remain unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• openshift/cluster-api-provider-agent#840: updates the same UBI minimal runtime image digest in Dockerfile(s).
• openshift/cluster-api-provider-agent#833: modifies the pinned ubi9/ubi-minimal sha256 digest in Dockerfile(s).
• openshift/cluster-api-provider-agent#996: adjusts final-stage base image digest for ubi9/ubi-minimal in Dockerfile and Dockerfile.rhtap.

Suggested reviewers

• avishayt
• rccrdpccl

🚥 Pre-merge checks | ✅ 12

✅ Passed checks (12 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: updating the Docker digest for ubi9/ubi-minimal across both Dockerfile and Dockerfile.rhtap files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	This PR only modifies Dockerfile and Dockerfile.rhtap to update Docker base image digests. No Ginkgo test files were modified, so the check does not apply.
Test Structure And Quality	✅ Passed	PR only modifies Dockerfile and Dockerfile.rhtap with base image digest updates. No Ginkgo test code is modified. Custom check for Ginkgo test quality is not applicable to this PR.
Microshift Test Compatibility	✅ Passed	The newly added Ginkgo tests use standard Kubernetes and Cluster API - no MicroShift-incompatible APIs like ClusterOperator, DeploymentConfig, Build, or Project are referenced.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The PR updates Docker image digests only and does not add or modify any Ginkgo e2e tests. The SNO test compatibility check is not applicable to this PR.
Topology-Aware Scheduling Compatibility	✅ Passed	PR only updates Dockerfile base image digests, not deployment manifests, operator code, or controllers. Custom check is scoped to those areas and does not apply.
Ote Binary Stdout Contract	✅ Passed	PR only updates Docker image digests in Dockerfile and Dockerfile.rhtap. No Go code changes present; OTE Binary Stdout Contract check not applicable to Docker image updates.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No Ginkgo e2e tests added. PR only updates Docker base image digests in Dockerfiles. IPv6/disconnected network test compatibility check is not applicable.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/master/ubi-runtime-images

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 42fc164 and 2 for PR HEAD 65105ee in total

[openshift-ci]

New changes are detected. LGTM label has been removed.

[openshift-ci]

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-ai-operator-ztp-capi	1168774	link	true	/test e2e-ai-operator-ztp-capi

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.