Hello Konflux Community! 👋
It's time for our status update for the past month, and wow, have we been busy! With 470 Pull Requests merged and 27 active issues, the momentum across our repositories is incredible. Your collaboration and dedication are truly moving the needle!
Note: the 27 active issues stat is interesting. On first glance, that’s low. A community like ours should have more discussion happening publicly in github than not. However, think about where we’re coming from and where we’re going. Active discussions on 27 github issues across the org is an increase from previous months.
We saw some fantastic work focused on stability, performance, and robustness.
Reliability for Releases! Huge shoutout to @elenagerman, @mmalina, @kasemAlem, and @johnbieren for landing multiple key PRs (like #1595, #1624, #1354, and #1349) that improve reliability both for konflux and its users.
Next-Gen Building: Thanks to @jlebon and @chmeliik, the buildah task now supports SOURCE_DATE_EPOCH (merged in #2947) for more reproducible builds, laying the groundwork for a commonly requested feature.
Refactor Progress: Great collaborative work from @mmorhun, @mmalina, and others on improving feature coverage of the new konflux-build-cli (see #2).
Vulnerability Diffing: @willianrampazzo introduced a new SBOM diff collector to release-service-collectors in konflux-ci/release-service-collectors#25. This exciting feature compares SBOMs between releases to highlight vulnerability changes, improving metadata that our releases expose to downstream consumers! I’m actually, really, very excited about it.
Merge Queue Support: @querti delivered a series of updates across several repositories (release-service, release-service-utils, internal-services) like konflux-ci/release-service-utils#558 to ensure our continuous integration pipelines correctly support GitHub's Merge Queues. This streamlines merging and protects the main branch.
Pipeline Migration Tool Progress: @tkdchen and @fmudry landed substantial work on the pipeline-migration-tool, notably enabling the use of the powerful pmt-modify command for writing migration scripts (e.g., konflux-ci/pipeline-migration-tool#73 and konflux-ci/pipeline-migration-tool#81), making task migrations much more manageable.
Multi-Platform Builds: Thanks to @arewm, several critical utility images, like release-service-utils in konflux-ci/release-service-utils#571, now support multi-architecture builds (x86_64 and arm64). This expands Konflux's portability and is a fantastic step toward wider platform adoption including running locally on developers laptops.
Mock Client for Testing: A big shoutout to @kasemAlem for adding a custom mock client to the operator-toolkit in konflux-ci/operator-toolkit#26 used by both release-service and integration-service. This enables better testing of Kubernetes client operations, strengthening the reliability of our controllers.
Community discussions are vital for steering the project. Here are a couple of highlights where your voice is especially needed:
Governance Committee Nominations! The nominations for the open seat on the Konflux Governance Committee have closed but voting is now open! Head over to issue #42 to see the nominees and look for an email with the form in your inbox.
A New ADR for Tracing: A new Architecture Decision Record (ADR) proposal for a Schema-Governed Correlation ID is currently being discussed in PR #280. This aims to create end-to-end traceability for workflows across multiple services.
Thank you to everyone who contributed! Special appreciation this week goes to prolific authors like @rcerven, @mmorhun, @dirgim, @hongweiliu17, and @yftacherzog for their consistent, high-quality work across multiple repositories.
Got an idea or found a bug? We encourage you to open a PR or chime into a discussion. Your ongoing commitment makes Konflux a welcoming, productive place. Keep the contributions coming!
Ralph and Andrew - the Konflux Governance Committee (KGC)