chore(deps): refresh rpm lockfiles

[red-hat-konflux]

This PR contains the following updates:

File rpms.in.yaml:

Package	Change
kernel-headers	5.14.0-687.53.1.el9_8 -> 5.14.0-687.54.1.el9_8

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 12:00 AM and 04:59 AM (* 0-4 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by CodeRabbit

• Updates
  • Updated the locked kernel-headers package to version 5.14.0-687.54.1.el9_8 for aarch64 and x86_64.

[red-hat-konflux]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml
    Updating crates.io index
    Updating git repository `https://github.com/aya-rs/aya.git`
error: failed to get `aya` as a dependency of package `fact v0.5.0-dev (/tmp/renovate/repos/github/stackrox/fact/fact)`

Caused by:
  failed to load source for dependency `aya`

Caused by:
  unable to update https://github.com/aya-rs/aya.git?rev=c29cd71cb4fe1440bc0d566633afa822f1b41fc5

Caused by:
  failed to create directory `/home/renovate/.cargo/git/db/aya-c5ab473414e1dedb`

Caused by:
  Permission denied (os error 13)

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path fact-api/Cargo.toml
    Updating crates.io index
    Updating git repository `https://github.com/aya-rs/aya.git`
error: failed to get `aya` as a dependency of package `fact v0.5.0-dev (/tmp/renovate/repos/github/stackrox/fact/fact)`

Caused by:
  failed to load source for dependency `aya`

Caused by:
  unable to update https://github.com/aya-rs/aya.git?rev=c29cd71cb4fe1440bc0d566633afa822f1b41fc5

Caused by:
  failed to create directory `/home/renovate/.cargo/git/db/aya-c5ab473414e1dedb`

Caused by:
  Permission denied (os error 13)

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path fact-ebpf/Cargo.toml
    Updating crates.io index
    Updating git repository `https://github.com/aya-rs/aya.git`
error: failed to get `aya` as a dependency of package `fact v0.5.0-dev (/tmp/renovate/repos/github/stackrox/fact/fact)`

Caused by:
  failed to load source for dependency `aya`

Caused by:
  unable to update https://github.com/aya-rs/aya.git?rev=c29cd71cb4fe1440bc0d566633afa822f1b41fc5

Caused by:
  failed to create directory `/home/renovate/.cargo/git/db/aya-c5ab473414e1dedb`

Caused by:
  Permission denied (os error 13)

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path fact/Cargo.toml
    Updating crates.io index
    Updating git repository `https://github.com/aya-rs/aya.git`
error: failed to get `aya` as a dependency of package `fact v0.5.0-dev (/tmp/renovate/repos/github/stackrox/fact/fact)`

Caused by:
  failed to load source for dependency `aya`

Caused by:
  unable to update https://github.com/aya-rs/aya.git?rev=c29cd71cb4fe1440bc0d566633afa822f1b41fc5

Caused by:
  failed to create directory `/home/renovate/.cargo/git/db/aya-c5ab473414e1dedb`

Caused by:
  Permission denied (os error 13)

[rhacs-bot]

Auto-approved by automation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: stackrox/fact/.coderabbit.yml

Review profile: CHILL

Plan: Enterprise

Run ID: 098fbb80-3ac8-4646-8203-0fc0942f383f

📥 Commits

Reviewing files that changed from the base of the PR and between 3b2edba and a9d68b5.

📒 Files selected for processing (1)

• rpms.lock.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 9 remain after this review.

---

📝 Walkthrough

Walkthrough

The kernel-headers package lock advances from version 5.14.0-687.53.1.el9_8 to 5.14.0-687.54.1.el9_8 for aarch64 and x86_64. Both entries update their RPM metadata and source RPM references.

Changes

Kernel headers lock

Layer / File(s)	Summary
Update kernel-headers lock entries rpms.lock.yaml	The aarch64 and x86_64 entries use version 5.14.0-687.54.1.el9_8 and updated RPM URLs, sizes, checksums, EVRs, and source RPM references.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to a9d68

Both kernel-headers locks advance consistently with the RPM inputs; no actionable merge risk is established.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the kernel-headers version update and Renovate configuration. It does not include the required checklist or testing information, and it does not state which checklist items do…	Add the checklist with applicable items marked. Complete the Testing Performed section with the tests run or explain why testing is not required for this lockfile-only change.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies a dependency lockfile refresh. It matches the kernel-headers RPM lockfile changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description explains the kernel-headers version update and Renovate configuration. It does not include the required checklist or testing information, and it does not state which checklist items do not apply.

• Fix all pre-merge checks with AI

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 33.47%. Comparing base (3b2edba) to head (a9d68b5).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1975   +/-   ##
=======================================
  Coverage   33.47%   33.47%           
=======================================
  Files          22       22           
  Lines        3621     3621           
  Branches     3621     3621           
=======================================
  Hits         1212     1212           
  Misses       2400     2400           
  Partials        9        9           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.