Summary

The hotfix branch becomes stale because the Konflux bot (MintMaker) only updates Tekton task dependencies in our .tekton files on our default (main) branch. When a hotfix is needed, we must first manually reconcile the Tekton files from main to hotfix. This manual process is tedious and causes significant delays in our ability to release critical fixes to production. Example PR: https://github.com/RedHatInsights/rhsm-subscriptions/pull/5058

Acceptance Criteria

• MintMaker creates PRs with Tekton SHA updates against both main and hotfix branches
• Security updates trigger immediately on both branches (ignoring normal schedule)
• Grouped updates work correctly on both branches
• No disruption to existing main branch update process
• Configuration change is documented and validated

Done Criteria

• renovate.json updated with baseBranches configuration targeting main and hotfix branches
• MintMaker successfully creates test PRs against hotfix branch

Implementation Notes

• Add `"baseBranches": ["main", "hotfix"]` to renovate.json on default branch
• Preserve the other default MintMaker configs
• Test with actual quay.io/redhat-appstudio-tekton-catalog and quay.io/konflux-ci/tekton-catalog updates
• Verify migration guides are included in hotfix PRs when applicable

References

• Renovate baseBranches Documentation
• MintMaker Default Configuration
• MintMaker GitHub Repository
• Renovate Documentation