[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

• Chores
  • Updated platform package information for supported RHEL 9.9 architectures.

The lock file updates selected binary and source RPM versions and metadata for aarch64, ppc64le, s390x, and x86_64.

Changes: RPM lock refresh

Layer / File(s)	Summary
Update locked RPM records rpms.lock.yaml	Selected coreutils, crypto-policies, ACL/attr, GCC/libgcc, libselinux, and redhat-release records receive updated versions and RPM metadata across four architectures.

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Merge Risk: Minimal · up to f10bf

The lock refresh has no identified merge-blocking issue; artifact verification remains unconfirmed.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly describes the RPM lockfile refresh, which matches the main change.
Description check		The description covers the RPM version updates and related security changes, so it is relevant to the changeset.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Recent review info

Run configuration

• Source mode: Auto
• Repository: stackrox/stackrox-mcp
• Branch: main
• File: .coderabbit.yaml
• Commit: 8c42bd8
• Layers: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Enterprise
• Run ID: f53a320d-cbf8-4a64-871a-d72e111bc416

Commits

Reviewing files that changed from the base of the PR and between 8c42bd8 and f10bf33.

Files selected for processing: 1

• rpms.lock.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

[codecov-commenter]

❌ 2 Tests Failed:

Tests completed	Failed	Passed	Skipped
386	2	384	12

View the full list of 2 ❄️ flaky test(s)

::policy 1

Flake rate in main: 100.00% (Passed 0 times, Failed 220 times)

Stack Traces | 0s run time

- test violation 1
- test violation 2
- test violation 3

::policy 4

Flake rate in main: 100.00% (Passed 0 times, Failed 220 times)

Stack Traces | 0s run time

- testing multiple alert violation messages 1
- testing multiple alert violation messages 2
- testing multiple alert violation messages 3

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[github-actions]

E2E Test Results

Commit: f10bf33
Workflow Run: View Details
Artifacts: Download test results & logs

=== Evaluation Summary ===

  ✗ list-clusters (assertions: 1/3)
      one or more verification steps failed
      - ToolsUsed: Required tool not called: server=stackrox-mcp, tool=, pattern=list_secured_clusters
      - MinToolCalls: Too few tool calls: expected >= 1, got 0
  ✓ cve-detected-workloads (assertions: 3/3)
  ✓ cve-cluster-does-exist (assertions: 3/3)
  ✓ cve-detected-clusters (assertions: 3/3)
  ✓ cve-cluster-does-not-exist (assertions: 3/3)
  ✓ cve-clusters-general (assertions: 3/3)
  ✓ rhsa-not-supported (assertions: 2/2)
  ✓ cve-cluster-list (assertions: 3/3)
  ✓ cve-multiple (assertions: 3/3)
  ✗ cve-nonexistent (assertions: 2/3)
      one or more verification steps failed
      - MaxToolCalls: Too many tool calls: expected <= 5, got 7
  ✗ cve-log4shell (assertions: 3/3)
      one or more verification steps failed

Tasks:      8/11 passed (72.73%)
Assertions: 29/32 passed (90.62%)
Tokens:     ~59596 (estimate - excludes system prompt & cache)
MCP schemas: ~12562 (included in token total)
Agent used tokens:
  Input:  11176 tokens
  Output: 25124 tokens
Judge used tokens:
  Input:  33656 tokens
  Output: 37130 tokens