From b72cec99506ac8c8ac313efcddf6112ad1ca925f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Oct 2026 16:36:01 +0000
Subject: [PATCH] chore(deps): bump the all group in /tekton with 4 updates

Bumps the all group in /tekton with 4 updates: [chainguard/crane](https://github.com/chainguard-images/images), [tektoncd/plumbing/ko](https://github.com/tektoncd/plumbing), [tektoncd/plumbing/koparse](https://github.com/tektoncd/plumbing) and alpine/k8s.


Updates `chainguard/crane` from `0cbe426` to `75953b4`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `tektoncd/plumbing/ko` from `40cf6a6` to `f989377`
- [Commits](https://github.com/tektoncd/plumbing/commits)

Updates `tektoncd/plumbing/koparse` from `d23cf04` to `bdec4e2`
- [Commits](https://github.com/tektoncd/plumbing/commits)

Updates `alpine/k8s` from 1.37.0 to 1.37.1

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/ko
  dependency-version: f9893778fd9feeaf0a10cdf9128fe9b826b429f876d708bc08263fc84ccd0740
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/koparse
  dependency-version: bdec4e25a629d9f0542ef082a957dae7da9ca654a569173c68a2c233abef6283
  dependency-type: direct:production
  dependency-group: all
- dependency-name: alpine/k8s
  dependency-version: 1.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 tekton/build-publish-images-manifests.yaml | 10 +++++-----
 tekton/operator-release-pipeline.yaml      |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/tekton/build-publish-images-manifests.yaml b/tekton/build-publish-images-manifests.yaml
index aba005a982..f0bce843fd 100644
--- a/tekton/build-publish-images-manifests.yaml
+++ b/tekton/build-publish-images-manifests.yaml
@@ -80,7 +80,7 @@ spec:
   steps:
 
   - name: container-registy-auth
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:0cbe42624de5f050b3d50a65be6bc30abd5d7cdf7c7a2fd4a4cf78b038b21a1a
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:75953b494447f13f91c7657f04ed22987ea537de31c552d86f0030fdc35dd96a
     script: |
       #!/bin/sh
       set -ex
@@ -99,7 +99,7 @@ spec:
       cp ${DOCKER_CONFIG} /workspace/${KUBE_DISTRO}-docker-config.json
 
   - name: rewrite-devel-in-source
-    image: ghcr.io/tektoncd/plumbing/ko@sha256:40cf6a6cf6fdff5da0cf3303bb21320d38cd3f0b2c847b0f9d312139329e9185
+    image: ghcr.io/tektoncd/plumbing/ko@sha256:f9893778fd9feeaf0a10cdf9128fe9b826b429f876d708bc08263fc84ccd0740
     script: |
       #!/usr/bin/env sh
       set -ex
@@ -120,7 +120,7 @@ spec:
       fi
 
   - name: run-kustomize-ko
-    image: ghcr.io/tektoncd/plumbing/ko@sha256:40cf6a6cf6fdff5da0cf3303bb21320d38cd3f0b2c847b0f9d312139329e9185
+    image: ghcr.io/tektoncd/plumbing/ko@sha256:f9893778fd9feeaf0a10cdf9128fe9b826b429f876d708bc08263fc84ccd0740
     env:
     - name: KO_DOCKER_REPO
       value: $(params.imageRegistry)/$(params.imageRegistryPath)
@@ -192,7 +192,7 @@ spec:
       sed -i -E -e 's/(app.kubernetes.io\/version): "?devel"?/\1: "$(params.versionTag)"/g' -e 's/(operator.tekton.dev\/release): "?devel"?/\1: "$(params.versionTag)"/g' -e 's/(version): "?devel"?/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/${FILENAME_PREFIX}release.yaml
       sed -i -E -e 's/(app.kubernetes.io\/version): "?devel"?/\1: "$(params.versionTag)"/g' -e 's/(operator.tekton.dev\/release): "?devel"?/\1: "$(params.versionTag)"/g' -e 's/(version): "?devel"?/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/${FILENAME_PREFIX}release.notags.yaml
   - name: koparse
-    image: ghcr.io/tektoncd/plumbing/koparse@sha256:d23cf04683dfbfedf90f8c50deb40aee360d80b63345bf4cd6e31eed39931117
+    image: ghcr.io/tektoncd/plumbing/koparse@sha256:bdec4e25a629d9f0542ef082a957dae7da9ca654a569173c68a2c233abef6283
     script: |
       set -ex
 
@@ -226,7 +226,7 @@ spec:
         ${PRESERVE_IMPORT_PATH} > /workspace/built_images
 
   - name: tag-images
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:0cbe42624de5f050b3d50a65be6bc30abd5d7cdf7c7a2fd4a4cf78b038b21a1a
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:75953b494447f13f91c7657f04ed22987ea537de31c552d86f0030fdc35dd96a
     script: |
       #!/bin/sh
       set -ex
diff --git a/tekton/operator-release-pipeline.yaml b/tekton/operator-release-pipeline.yaml
index 6d40e36a4e..e4fcb455eb 100644
--- a/tekton/operator-release-pipeline.yaml
+++ b/tekton/operator-release-pipeline.yaml
@@ -435,7 +435,7 @@ spec:
         description: Whether Chains signing succeeded (true, failed, or timeout)
       steps:
       - name: wait-and-extract
-        image: docker.io/alpine/k8s:1.37.0
+        image: docker.io/alpine/k8s:1.37.1
         script: |
           #!/bin/sh
           set -e