feat(hub): migrate hub container build to UBI10/RHEL10 (RHIDP-14879)

[polasudo]

Migrate Konflux hub builds from UBI9 to UBI10 on main, refresh RPM lockfiles for UBI10 repos, and switch techdocs Python to 3.12.

Description

• Update build/containerfiles/Containerfile skeleton and runner stages to ubi10/nodejs-24 and ubi10/nodejs-24-minimal
• Switch techdocs venv/runtime Python from 3.11 to 3.12
• Regenerate rpms.lock.yaml for UBI10 repos (including codeready-builder)
• Drop el9-only packages not published on UBI10 CDN: libdb, libsigsegv, pcre, libreport-filesystem, yajl, slirp4netns, python3-chardet, python3-pysocks
• Drop nodejs:24 module stream (not used on UBI10 nodejs-24 image)

Rebased on latest main (resolves merge conflict with recent UBI9 base image bumps).

Which issue(s) does this PR fix

• RHIDP-14879

PR acceptance criteria

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing (re-trigger after rebase)
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related (N/A)

How to test changes / Special notes to the reviewer

• Hermetic PR image: quay.io/rhdh-community/rhdh:pr-5250
• Downstream smoke tag: quay.io/rhdh/rhdh-hub-rhel10:[RHIDP-14879](https://redhat.atlassian.net/browse/RHIDP-14879)
• Re-run OCP Helm E2E after merge queue: /test e2e-ocp-helm
• Dual RHEL9/RHEL10 script support for maintenance branches is tracked separately in RHIDP-14884 / chore(scripts): add dual RHEL9/RHEL10 hub image support (RHIDP-14884) #5262

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.73%. Comparing base (1f6ef14) to head (2e14fd3).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5250      +/-   ##
==========================================
- Coverage   63.71%   59.73%   -3.99%     
==========================================
  Files         121      109      -12     
  Lines        2285     2059     -226     
  Branches      525      500      -25     
==========================================
- Hits         1456     1230     -226     
- Misses        827      828       +1     
+ Partials        2        1       -1     

Flag	Coverage Δ
rhdh	59.73% <ø> (-3.99%)	⬇️

Components	Coverage Δ
Backend plugins	∅ <ø> (∅)
Backend app	69.51% <ø> (ø)
Frontend app	58.89% <ø> (ø)
Plugin utils	∅ <ø> (∅)
Dynamic plugins utils	∅ <ø> (∅)

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1f6ef14...2e14fd3. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5250
• quay.io/rhdh-community/rhdh:pr-5250-e7ab510c

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5250
• quay.io/rhdh-community/rhdh:pr-5250-a1f4f0a5

[polasudo]

/test e2e-ocp-helm

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5250
• quay.io/rhdh-community/rhdh:pr-5250-6b975eba

[hopehadfield]

This lgtm for when it's ready to merge. Will drop a /lgtm once it's rebased and no longer a draft.

[polasudo]

/test e2e-ocp-helm

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5250
• quay.io/rhdh-community/rhdh:pr-5250-2e14fd37

[openshift-ci]

@polasudo: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-ocp-helm	2e14fd3	link	unknown	/test e2e-ocp-helm

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.