fix(deps): update build-tools for CVE remediation

[platex-rehor-bot]

Description

Update the build-tools submodule (insights-frontend-builder-common) to the latest version to address container image CVEs flagged in the GovCloud compliance scan.

RHCLOUD-49932

What changed:

• build-tools submodule updated from d7be112 to 4ba1f7e
• UBI9 Node.js builder image bumped from 9.7-1778648048 to 9.8-1780375952
• Rebuild will pull latest caddy-ubi:latest runtime image

CVE coverage:

• RPM CVEs fixed by rebuild (newer UBI9): glib2 (CVE-2026-58016), libacl (CVE-2026-54369), glibc (CVE-2026-5435, CVE-2026-5928), libsolv (CVE-2026-48864)
• Go CVEs fixed by caddy-ubi rebuild: golang.org/x/net (CVE-2026-46600), golang.org/x/text (CVE-2026-56852), grpc (GHSA-hrxh-6v49-42gf), stdlib (CVE-2026-39822, CVE-2026-42505)
• Not fixable (no upstream fix available): 6 curl-minimal CVEs

---

Anything reviewers should know?

This is a submodule-only change — no application source code is modified. All 110 unit tests pass. The existing mintmaker PR #328 targets the same submodule update but has merge conflicts; this PR provides a clean version from current master.

---

Checklist

• Accessibility: color contrast, keyboard nav, screen reader tested (or N/A)
• All PR checks pass locally (build, lint, test)
• No unrelated changes included
• (Optional) QE: OUIA changed, test impact, no coverage
• (Optional) UX: end-user UX modified, designs need sign-off

AI disclosure

Assisted by: Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 1c64ff5d-3bbe-4c21-9c74-c7c471edafab

📥 Commits

Reviewing files that changed from the base of the PR and between 76e86f5 and cb22001.

📒 Files selected for processing (1)

• build-tools

---

Summary by CodeRabbit

• Chores
  • Updated the build tooling to a newer revision.
  • No user-facing functionality or public API changes.

Walkthrough

The build-tools submodule reference changes from commit d7be1120600804f9c02a7327e4bc510d1c57cd27 to commit 4ba1f7eeadd1cab58c17ef8201286340b230bcba.

Changes

Build tools update

Layer / File(s)	Summary
Update submodule pointer build-tools	The submodule reference points to commit 4ba1f7eeadd1cab58c17ef8201286340b230bcba.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the build-tools dependency update and its CVE remediation purpose.
Description check	✅ Passed	The description explains the submodule update, CVE remediation, testing, issue reference, reviewer notes, checklist, and AI disclosure.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}