Skip to content

Update module cloud.google.com/go/storage to v1.58.0#331

Open
github-actions[bot] wants to merge 92 commits into
mainfrom
renovate/cloud.google.com-go-storage-1.x
Open

Update module cloud.google.com/go/storage to v1.58.0#331
github-actions[bot] wants to merge 92 commits into
mainfrom
renovate/cloud.google.com-go-storage-1.x

Conversation

@github-actions

@github-actions github-actions Bot commented Jan 4, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change OpenSSF
cloud.google.com/go/storage indirect minor v1.57.0 -> v1.58.0 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Configuration

📅 Schedule: Branch creation - Only on Sunday ( * * * * 0 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
matthiasbruns pushed a commit that referenced this pull request Mar 10, 2026
…r:latest docker digest to 48e5edf (open-component-model#1939)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/open-component-model/kubernetes/controller | digest |
`bf88c59` → `48e5edf` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42MC41IiwidXBkYXRlZEluVmVyIjoiNDMuNjAuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…n-component-model#1947)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `61522ef` → `6205a8a` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42MS42IiwidXBkYXRlZEluVmVyIjoiNDMuNjEuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…r:latest docker digest to e8b2c60 (open-component-model#1940)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/open-component-model/kubernetes/controller | digest |
`48e5edf` → `e8b2c60` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42MC41IiwidXBkYXRlZEluVmVyIjoiNDMuNjEuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…r:latest docker digest to 6d05cfd (open-component-model#1950)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/open-component-model/kubernetes/controller | digest |
`e8b2c60` → `6d05cfd` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…onent-model#1946)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang | stage | digest | `e2ddb15` → `cdebbd5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42MS42IiwidXBkYXRlZEluVmVyIjoiNDMuNjEuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…r:latest docker digest to 32ce419 (open-component-model#1951)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/open-component-model/kubernetes/controller | digest |
`6d05cfd` → `32ce419` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…t-model#1952)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [actions/setup-go](https://redirect.github.com/actions/setup-go)
([changelog](https://redirect.github.com/actions/setup-go/compare/7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5..4b73464bb391d4059bd26b0524d20df3927bd417))
| action | digest | `7a3fe6c` → `4b73464` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/actions/setup-go/badge)](https://securityscorecards.dev/viewer/?uri=github.com/actions/setup-go)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…r:latest docker digest to fe1dcac (open-component-model#1953)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/open-component-model/kubernetes/controller | digest |
`32ce419` → `fe1dcac` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…-component-model#1963)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | OpenSSF |
|---|---|---|---|---|---|
|
[renovatebot/github-action](https://redirect.github.com/renovatebot/github-action)
| action | minor | `v46.0.2` → `v46.1.0` | `v46.1.4` (+3) | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/renovatebot/github-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/renovatebot/github-action)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>renovatebot/github-action (renovatebot/github-action)</summary>

###
[`v46.1.0`](https://redirect.github.com/renovatebot/github-action/releases/tag/v46.1.0)

[Compare
Source](https://redirect.github.com/renovatebot/github-action/compare/v46.0.2...v46.1.0)

##### Features

- add support for the `NO_COLOR` environment variable
([#&#8203;1018](https://redirect.github.com/renovatebot/github-action/issues/1018))
([7f791e8](https://redirect.github.com/renovatebot/github-action/commit/7f791e873ba47b2935c3078fb1a5ff1504a66530))

##### Documentation

- update references to renovatebot/github-action to v46.0.2
([b305ad3](https://redirect.github.com/renovatebot/github-action/commit/b305ad3d04d20344e0af16d7cfe79e37244c2dac))

##### Miscellaneous Chores

- **deps:** update commitlint monorepo to v20.4.1
([e8b5109](https://redirect.github.com/renovatebot/github-action/commit/e8b5109c7e0fa0e16b77f23cf60f180e45f1e1a9))
- **deps:** update dependency
[@&#8203;types/node](https://redirect.github.com/types/node) to
v24.10.10
([41820f3](https://redirect.github.com/renovatebot/github-action/commit/41820f306d617b511e9c0d2c6855767780aa367f))
- **deps:** update node.js to v24.13.1
([40285b0](https://redirect.github.com/renovatebot/github-action/commit/40285b00a9360e65a27b1208d5b2e040dee5f93f))

##### Continuous Integration

- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.5.1
([1a6a41a](https://redirect.github.com/renovatebot/github-action/commit/1a6a41a2247fe77c1b5dbc4ed171508953c37dbb))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.5.2
([57787cb](https://redirect.github.com/renovatebot/github-action/commit/57787cb27dbe84b0856d5d99c9325ef1e8b175bf))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.5.3
([8d7d410](https://redirect.github.com/renovatebot/github-action/commit/8d7d410183a4c9f78b8559f3a1f84dcbc72197c1))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.5.4
([bfef2fb](https://redirect.github.com/renovatebot/github-action/commit/bfef2fb901ab83c99aeac63c167e4644497ecb6d))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.5.5
([20ee987](https://redirect.github.com/renovatebot/github-action/commit/20ee9870d9cab7b72639228394fbc89b4787ca93))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.6.0
([7e341be](https://redirect.github.com/renovatebot/github-action/commit/7e341beb581f4f571e1e2f579ff214fefc89ec3b))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.6.2
([931fd8e](https://redirect.github.com/renovatebot/github-action/commit/931fd8e9523f60acf72a0ff2958ec369bc6a90a4))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.6.3
([5f27c88](https://redirect.github.com/renovatebot/github-action/commit/5f27c887e10f90455530092ce94cc1b32d30b093))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.8.0
([cdaa9e6](https://redirect.github.com/renovatebot/github-action/commit/cdaa9e6fd0a630f951c73deff51e332d1fb0af5c))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.8.1
([28b06b1](https://redirect.github.com/renovatebot/github-action/commit/28b06b13bc5e209d692966097a98c43a770173e3))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.8.2
([4d22b44](https://redirect.github.com/renovatebot/github-action/commit/4d22b443f406b1eee6d8a014f36c1836d99efdce))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.8.3
([81ff6bf](https://redirect.github.com/renovatebot/github-action/commit/81ff6bfdd79828fba98d5ffd3364e49376e01ce7))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.8.5
([f8022fe](https://redirect.github.com/renovatebot/github-action/commit/f8022fe01c0065047a63bd5b74ebd142572db96e))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42NC42IiwidXBkYXRlZEluVmVyIjoiNDMuNjQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…n-component-model#1956)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `6205a8a` → `cb07d3d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuNjQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…omponent-model#1974)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/credentials](https://redirect.github.com/open-component-model/open-component-model)
| require | patch | `v0.0.7` → `v0.0.9` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/credentials](https://redirect.github.com/open-component-model/open-component-model)
| indirect | patch | `v0.0.7` → `v0.0.9` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | patch | `v0.0.6` → `v0.0.7` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | patch | `v0.0.6` → `v0.0.7` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>open-component-model/open-component-model
(ocm.software/open-component-model/bindings/go/credentials)</summary>

###
[`v0.0.9`](https://redirect.github.com/open-component-model/open-component-model/compare/bindings/go/credentials/v0.0.8...bindings/go/credentials/v0.0.9)

[Compare
Source](https://redirect.github.com/open-component-model/open-component-model/compare/bindings/go/credentials/v0.0.8...bindings/go/credentials/v0.0.9)

###
[`v0.0.8`](https://redirect.github.com/open-component-model/open-component-model/compare/bindings/go/credentials/v0.0.7...bindings/go/credentials/v0.0.8)

[Compare
Source](https://redirect.github.com/open-component-model/open-component-model/compare/bindings/go/credentials/v0.0.7...bindings/go/credentials/v0.0.8)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…t-model#1978)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| kindest/node | patch | `1.35.0` → `1.35.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…#1984)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) |
[`v0.47.0` →
`v0.48.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.47.0...refs/tags/v0.48.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.48.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.47.0/v0.48.0?slim=true)
|
| [golang.org/x/mod](https://pkg.go.dev/golang.org/x/mod) | [`v0.32.0` →
`v0.33.0`](https://cs.opensource.google/go/x/mod/+/refs/tags/v0.32.0...refs/tags/v0.33.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fmod/v0.33.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fmod/v0.32.0/v0.33.0?slim=true)
|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.49.0` →
`v0.50.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.49.0...refs/tags/v0.50.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.50.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.49.0/v0.50.0?slim=true)
|
| [golang.org/x/oauth2](https://pkg.go.dev/golang.org/x/oauth2) |
[`v0.35.0` →
`v0.36.0`](https://cs.opensource.google/go/x/oauth2/+/refs/tags/v0.35.0...refs/tags/v0.36.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2foauth2/v0.36.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2foauth2/v0.35.0/v0.36.0?slim=true)
|
| [golang.org/x/term](https://pkg.go.dev/golang.org/x/term) | [`v0.39.0`
→
`v0.40.0`](https://cs.opensource.google/go/x/term/+/refs/tags/v0.39.0...refs/tags/v0.40.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fterm/v0.40.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fterm/v0.39.0/v0.40.0?slim=true)
|
| [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.33.0`
→
`v0.34.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.33.0...refs/tags/v0.34.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.34.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.33.0/v0.34.0?slim=true)
|
| [golang.org/x/time](https://pkg.go.dev/golang.org/x/time) | [`v0.14.0`
→
`v0.15.0`](https://cs.opensource.google/go/x/time/+/refs/tags/v0.14.0...refs/tags/v0.15.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftime/v0.15.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftime/v0.14.0/v0.15.0?slim=true)
|
| [golang.org/x/tools](https://pkg.go.dev/golang.org/x/tools) |
[`v0.41.0` →
`v0.42.0`](https://cs.opensource.google/go/x/tools/+/refs/tags/v0.41.0...refs/tags/v0.42.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftools/v0.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftools/v0.41.0/v0.42.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…pen-component-model#1985)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | OpenSSF |
|---|---|---|---|---|---|
|
[github.com/fluxcd/pkg/runtime](https://redirect.github.com/fluxcd/pkg)
| require | minor | `v0.99.0` → `v0.101.0` | `v0.103.0` (+1) |
[![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/fluxcd/pkg/badge)](https://securityscorecards.dev/viewer/?uri=github.com/fluxcd/pkg)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…-component-model#1988)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | OpenSSF |
|---|---|---|---|---|---|
|
[renovatebot/github-action](https://redirect.github.com/renovatebot/github-action)
| action | patch | `v46.1.0` → `v46.1.1` | `v46.1.5` (+3) | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/renovatebot/github-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/renovatebot/github-action)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>renovatebot/github-action (renovatebot/github-action)</summary>

###
[`v46.1.1`](https://redirect.github.com/renovatebot/github-action/releases/tag/v46.1.1)

[Compare
Source](https://redirect.github.com/renovatebot/github-action/compare/v46.1.0...v46.1.1)

##### Documentation

- update references to renovatebot/github-action to v46.1.0
([3e59b30](https://redirect.github.com/renovatebot/github-action/commit/3e59b3080d64396f6dc55fc552a61466a5125173))

##### Miscellaneous Chores

- **deps:** update dependency
[@&#8203;semantic-release/github](https://redirect.github.com/semantic-release/github)
to v12.0.4
([009e8e9](https://redirect.github.com/renovatebot/github-action/commit/009e8e956925bcacd2001dcd22cd4edd4fcc43fb))
- **deps:** update dependency
[@&#8203;semantic-release/github](https://redirect.github.com/semantic-release/github)
to v12.0.5
([00a531a](https://redirect.github.com/renovatebot/github-action/commit/00a531a9daf7a657335bd496c95c6fcb062d94df))
- **deps:** update dependency
[@&#8203;semantic-release/npm](https://redirect.github.com/semantic-release/npm)
to v13.1.4
([b14aee3](https://redirect.github.com/renovatebot/github-action/commit/b14aee32c0e6cc312413da0f8270311f2969759a))
- **deps:** update dependency
[@&#8203;types/node](https://redirect.github.com/types/node) to
v24.10.11
([e4b8574](https://redirect.github.com/renovatebot/github-action/commit/e4b8574f0ad3e0c09f636d26abfcf29c62556358))
- **deps:** update dependency
[@&#8203;types/node](https://redirect.github.com/types/node) to
v24.10.12
([547c051](https://redirect.github.com/renovatebot/github-action/commit/547c0517e6b4c2379c43249247fd53e1b0d950d9))
- **deps:** update dependency esbuild to v0.27.3
([254b8be](https://redirect.github.com/renovatebot/github-action/commit/254b8bef7bf795f0ec171033b1ed7c72b44f648e))
- **deps:** update pnpm to v10.29.1
([5b3fe36](https://redirect.github.com/renovatebot/github-action/commit/5b3fe365f2c0aae1cfa6b011adb22f78ace1a708))

##### Build System

- **deps:** lock file maintenance
([6d4f8ba](https://redirect.github.com/renovatebot/github-action/commit/6d4f8bae8dee0564f61306fd55eadba08d8ebc8e))

##### Continuous Integration

- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.10.1
([aafa9c6](https://redirect.github.com/renovatebot/github-action/commit/aafa9c6dec0f02df6fd3a5b83f8cd9ffbaebbbde))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.10.2
([8905d37](https://redirect.github.com/renovatebot/github-action/commit/8905d372de11afc02fa1aa172585b42d3c26c16f))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.10.3
([5583fa9](https://redirect.github.com/renovatebot/github-action/commit/5583fa9f22848ac749ec382686fefe52630eff48))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.11.0
([acd6b7a](https://redirect.github.com/renovatebot/github-action/commit/acd6b7adc7a1ece590eabbca5a46edb30d2a26ab))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.11.1
([13d385d](https://redirect.github.com/renovatebot/github-action/commit/13d385d3cc64af7ed7fa32515f0c39cf77aefce5))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.12.1
([de54e2e](https://redirect.github.com/renovatebot/github-action/commit/de54e2e298a4d4b3e1b0e147d79f2ae148c88963))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.14.0
([9f6ab2c](https://redirect.github.com/renovatebot/github-action/commit/9f6ab2c7b1911c9a588770ea81aaa2cbd02f7845))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.14.1
([1891356](https://redirect.github.com/renovatebot/github-action/commit/189135646fdd2696875d062ba780d1d309bd6333))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.15.0
([f9a9a11](https://redirect.github.com/renovatebot/github-action/commit/f9a9a11c9e7b25bab81f39e59f519b22f855a146))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.15.1
([1b92a45](https://redirect.github.com/renovatebot/github-action/commit/1b92a4580c4578d33b5539e281e95665a85429ba))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.9.0
([e8637fa](https://redirect.github.com/renovatebot/github-action/commit/e8637fa546ec9bbbd1248f9e8ed74b5e8ce5e4e6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni4zIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…-model#1982)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [github.com/lib/pq](https://redirect.github.com/lib/pq) | require |
patch | `v1.11.1` → `v1.11.2` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/lib/pq/badge)](https://securityscorecards.dev/viewer/?uri=github.com/lib/pq)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>lib/pq (github.com/lib/pq)</summary>

###
[`v1.11.2`](https://redirect.github.com/lib/pq/blob/HEAD/CHANGELOG.md#v1112-2026-02-10)

[Compare
Source](https://redirect.github.com/lib/pq/compare/v1.11.1...v1.11.2)

This fixes two regressions:

- Don't send startup parameters if there is no value, improving
compatibility
  with Supavisor ([#&#8203;1260]).

- Don't send `dbname` as a startup parameter if `database=[..]` is used
in the
connection string. It's recommended to use dbname=, as database= is not
a
  libpq option, and only worked by accident previously. ([#&#8203;1261])

[#&#8203;1260]: https://redirect.github.com/lib/pq/pull/1260

[#&#8203;1261]: https://redirect.github.com/lib/pq/pull/1261

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…-component-model#1980)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[sigs.k8s.io/kustomize/api](https://redirect.github.com/kubernetes-sigs/kustomize)
| indirect | patch | `v0.21.0` → `v0.21.1` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/kubernetes-sigs/kustomize/badge)](https://securityscorecards.dev/viewer/?uri=github.com/kubernetes-sigs/kustomize)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [x] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…en-component-model#1976)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[softprops/action-gh-release](https://redirect.github.com/softprops/action-gh-release)
([changelog](https://redirect.github.com/softprops/action-gh-release/compare/a06a81a03ee405af7f2048a818ed3f03bbf83c7b..153bb8e04406b158c6c84fc1615b65b24149a1fe))
| action | digest | `a06a81a` → `153bb8e` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/softprops/action-gh-release/badge)](https://securityscorecards.dev/viewer/?uri=github.com/softprops/action-gh-release)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…mponent-model#1983)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | OpenSSF |
|---|---|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
indirect | minor | `v1.78.0` → `v1.79.1` | `v1.79.2` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/grpc/grpc-go/badge)](https://securityscorecards.dev/viewer/?uri=github.com/grpc/grpc-go)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.1):
Release 1.79.1

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.0...v1.79.1)

### Bug Fixes

- grpc: Remove the `-dev` suffix from the User-Agent header.
([#&#8203;8902](https://redirect.github.com/grpc/grpc-go/pull/8902))

###
[`v1.79.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.0):
Release 1.79.0

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.78.0...v1.79.0)

### API Changes

- mem: Add experimental API `SetDefaultBufferPool` to change the default
buffer pool.
([#&#8203;8806](https://redirect.github.com/grpc/grpc-go/issues/8806))
- Special Thanks: [@&#8203;vanja-p](https://redirect.github.com/vanja-p)
- experimental/stats: Update `MetricsRecorder` to require embedding the
new `UnimplementedMetricsRecorder` (a no-op struct) in all
implementations for forward compatibility.
([#&#8203;8780](https://redirect.github.com/grpc/grpc-go/issues/8780))

### Behavior Changes

- balancer/weightedtarget: Remove handling of `Addresses` and only
handle `Endpoints` in resolver updates.
([#&#8203;8841](https://redirect.github.com/grpc/grpc-go/issues/8841))

### New Features

- experimental/stats: Add support for asynchronous gauge metrics through
the new `AsyncMetricReporter` and `RegisterAsyncReporter` APIs.
([#&#8203;8780](https://redirect.github.com/grpc/grpc-go/issues/8780))
- pickfirst: Add support for weighted random shuffling of endpoints, as
described in [gRFC
A113](https://redirect.github.com/grpc/proposal/pull/535).
- This is enabled by default, and can be turned off using the
environment variable `GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING`.
([#&#8203;8864](https://redirect.github.com/grpc/grpc-go/issues/8864))
- xds: Implement `:authority` rewriting, as specified in [gRFC
A81](https://redirect.github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md).
([#&#8203;8779](https://redirect.github.com/grpc/grpc-go/issues/8779))
- balancer/randomsubsetting: Implement the `random_subsetting` LB
policy, as specified in [gRFC
A68](https://redirect.github.com/grpc/proposal/blob/master/A68-random-subsetting.md).
([#&#8203;8650](https://redirect.github.com/grpc/grpc-go/issues/8650))
- Special Thanks:
[@&#8203;marek-szews](https://redirect.github.com/marek-szews)

### Bug Fixes

- credentials/tls: Fix a bug where the port was not stripped from the
authority override before validation.
([#&#8203;8726](https://redirect.github.com/grpc/grpc-go/issues/8726))
- Special Thanks:
[@&#8203;Atul1710](https://redirect.github.com/Atul1710)
- xds/priority: Fix a bug causing delayed failover to lower-priority
clusters when a higher-priority cluster is stuck in `CONNECTING` state.
([#&#8203;8813](https://redirect.github.com/grpc/grpc-go/issues/8813))
- health: Fix a bug where health checks failed for clients using legacy
compression options (`WithDecompressor` or `RPCDecompressor`).
([#&#8203;8765](https://redirect.github.com/grpc/grpc-go/issues/8765))
- Special Thanks: [@&#8203;sanki92](https://redirect.github.com/sanki92)
- transport: Fix an issue where the HTTP/2 server could skip header size
checks when terminating a stream early.
([#&#8203;8769](https://redirect.github.com/grpc/grpc-go/issues/8769))
- Special Thanks:
[@&#8203;joybestourous](https://redirect.github.com/joybestourous)
- server: Propagate status detail headers, if available, when
terminating a stream during request header processing.
([#&#8203;8754](https://redirect.github.com/grpc/grpc-go/issues/8754))
- Special Thanks:
[@&#8203;joybestourous](https://redirect.github.com/joybestourous)

### Performance Improvements

- credentials/alts: Optimize read buffer alignment to reduce copies.
([#&#8203;8791](https://redirect.github.com/grpc/grpc-go/issues/8791))
- mem: Optimize pooling and creation of `buffer` objects.
([#&#8203;8784](https://redirect.github.com/grpc/grpc-go/issues/8784))
- transport: Reduce slice re-allocations by reserving slice capacity.
([#&#8203;8797](https://redirect.github.com/grpc/grpc-go/issues/8797))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…open-component-model#1972)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token)
([changelog](https://redirect.github.com/actions/create-github-app-token/compare/29824e69f54612133e76f7eaac726eef6c875baf..fee1f7d63c2ff003460e3d139729b119787bc349))
| action | digest | `29824e6` → `fee1f7d` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/actions/create-github-app-token/badge)](https://securityscorecards.dev/viewer/?uri=github.com/actions/create-github-app-token)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…d8e9 (open-component-model#1975)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[rojopolis/spellcheck-github-actions](https://redirect.github.com/rojopolis/spellcheck-github-actions)
([changelog](https://redirect.github.com/rojopolis/spellcheck-github-actions/compare/79c6662f156bc4faa184a458c39cd672783804b3..e3cd8e9aec4587ec73bc0e60745aafd45c37aa2e))
| action | digest | `79c6662` → `e3cd8e9` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/rojopolis/spellcheck-github-actions/badge)](https://securityscorecards.dev/viewer/?uri=github.com/rojopolis/spellcheck-github-actions)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…l#1977)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [k8s.io/utils](https://redirect.github.com/kubernetes/utils) | require
| digest | `914a6e7` → `b8788ab` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/kubernetes/utils/badge)](https://securityscorecards.dev/viewer/?uri=github.com/kubernetes/utils)
|
| [k8s.io/utils](https://redirect.github.com/kubernetes/utils) |
indirect | digest | `914a6e7` → `b8788ab` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/kubernetes/utils/badge)](https://securityscorecards.dev/viewer/?uri=github.com/kubernetes/utils)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
… e3f9456 (open-component-model#1986)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| gcr.io/distroless/static | final | digest | `f512d81` → `e3f9456` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…-model#1973)

> ℹ️ **Note**
> 
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9b60a41` → `422d24c` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/cli](https://redirect.github.com/open-component-model/open-component-model)
| require | minor | `v0.1.0` → `v0.2.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>open-component-model/open-component-model
(ocm.software/open-component-model/cli)</summary>

###
[`v0.2.0`](https://redirect.github.com/open-component-model/open-component-model/releases/tag/cli/v0.2.0):
CLI 0.2.0

[Compare
Source](https://redirect.github.com/open-component-model/open-component-model/compare/cli/v0.1.0...cli/v0.2.0)

#### \[cli/v0.2.0] - promoted from \[cli/v0.2.0-rc.1] on 2026-03-13

##### 🚀 Features

- Migrate configuration v1
([#&#8203;35](https://redirect.github.com/open-component-model/open-component-model/issues/35))
- Setup the OCM CLI with Cobra and automatically generate its reference
documentation
([#&#8203;50](https://redirect.github.com/open-component-model/open-component-model/issues/50))
- Logging flags for configurable logging in the CLI
([#&#8203;83](https://redirect.github.com/open-component-model/open-component-model/issues/83))
- Add component references to CLI internals
([#&#8203;86](https://redirect.github.com/open-component-model/open-component-model/issues/86))
- Setup get component version command
([#&#8203;82](https://redirect.github.com/open-component-model/open-component-model/issues/82))
- Introduce file / path flag
([#&#8203;242](https://redirect.github.com/open-component-model/open-component-model/issues/242))
- Update the cli to use the latest plugin package
([#&#8203;284](https://redirect.github.com/open-component-model/open-component-model/issues/284))
- Add component version command
([#&#8203;189](https://redirect.github.com/open-component-model/open-component-model/issues/189))
- Ocm version command
([#&#8203;354](https://redirect.github.com/open-component-model/open-component-model/issues/354))
- `ocm download resource` command
([#&#8203;372](https://redirect.github.com/open-component-model/open-component-model/issues/372))
- Configuration for file-system config types for plugins and internal
plugins
([#&#8203;390](https://redirect.github.com/open-component-model/open-component-model/issues/390))
- *(cli)* Update to use repository module
([#&#8203;439](https://redirect.github.com/open-component-model/open-component-model/issues/439))
- *(cli)* Build and create a CTF containing the OCM CLI with multiple
Architectures and Operating Systems
([#&#8203;413](https://redirect.github.com/open-component-model/open-component-model/issues/413))
- Add `dir` input to cli
([#&#8203;450](https://redirect.github.com/open-component-model/open-component-model/issues/450))
- Download plugins from a component version
([#&#8203;473](https://redirect.github.com/open-component-model/open-component-model/issues/473))
- *(cli)* Add plugin shutdown timeout flag
([#&#8203;569](https://redirect.github.com/open-component-model/open-component-model/issues/569))
- *(cli)* Add tree renderer
([#&#8203;511](https://redirect.github.com/open-component-model/open-component-model/issues/511))
- *(cli)* Add support for default plugin directory flag
([#&#8203;570](https://redirect.github.com/open-component-model/open-component-model/issues/570))
- *(cli)* Json/yaml graph renderer
([#&#8203;574](https://redirect.github.com/open-component-model/open-component-model/issues/574))
- Dir and file updates to support working dir
([#&#8203;591](https://redirect.github.com/open-component-model/open-component-model/issues/591))
- *(565)* Relative file pointers dir input e2e
([#&#8203;613](https://redirect.github.com/open-component-model/open-component-model/issues/613))
- Setup helm blob transformer that can extract OCI layouts
([#&#8203;530](https://redirect.github.com/open-component-model/open-component-model/issues/530))
- *(cli)* \[**breaking**] Ocm get cv --recursive
([#&#8203;604](https://redirect.github.com/open-component-model/open-component-model/issues/604))
- Add support for OCI repository pattern for add component version
([#&#8203;628](https://redirect.github.com/open-component-model/open-component-model/issues/628))
- Adjust cli to updated constructor (and plugins and credentials)
([#&#8203;889](https://redirect.github.com/open-component-model/open-component-model/issues/889))
- *(cli)* Sign/verify support
([#&#8203;895](https://redirect.github.com/open-component-model/open-component-model/issues/895))
- Add component construction with external references
([#&#8203;1009](https://redirect.github.com/open-component-model/open-component-model/issues/1009))
- Component lister internal plugin for CTF
([#&#8203;1045](https://redirect.github.com/open-component-model/open-component-model/issues/1045))
- *(cli)* Resolver integration
([#&#8203;1053](https://redirect.github.com/open-component-model/open-component-model/issues/1053))
- *(cli)* Add support for multi-architecture container images
([#&#8203;1058](https://redirect.github.com/open-component-model/open-component-model/issues/1058))
- *(ci)* Overhaul CLI workflow for enhanced artifact generation and
publishing
([#&#8203;1073](https://redirect.github.com/open-component-model/open-component-model/issues/1073))
- `ocm get cv <ctf_dir>`
([#&#8203;1068](https://redirect.github.com/open-component-model/open-component-model/issues/1068))
- *(697)* Recursive cleanup
([#&#8203;1076](https://redirect.github.com/open-component-model/open-component-model/issues/1076))
- Improve download plugin UX and add help for helm input plugin
([#&#8203;1144](https://redirect.github.com/open-component-model/open-component-model/issues/1144))
- Add command to manage plugins
([#&#8203;1190](https://redirect.github.com/open-component-model/open-component-model/issues/1190))
- *(scheme)* Expose scheme retrieval methods for internal plugins
([#&#8203;1268](https://redirect.github.com/open-component-model/open-component-model/issues/1268))
- Add JSON Schema generator for Go structs
([#&#8203;1219](https://redirect.github.com/open-component-model/open-component-model/issues/1219))
- *(manager)* Add GetJSONSchemaForRepositorySpecification method
([#&#8203;1283](https://redirect.github.com/open-component-model/open-component-model/issues/1283))
- Minimal transfer command implementation
([#&#8203;1405](https://redirect.github.com/open-component-model/open-component-model/issues/1405))
- Recursive cv transfer support
([#&#8203;1506](https://redirect.github.com/open-component-model/open-component-model/issues/1506))
- Transfer local blobs by default
([#&#8203;1669](https://redirect.github.com/open-component-model/open-component-model/issues/1669))
- Add component reference resolvers to the controller
([#&#8203;1635](https://redirect.github.com/open-component-model/open-component-model/issues/1635))
- Use new resource repo bindings for oci
([#&#8203;1718](https://redirect.github.com/open-component-model/open-component-model/issues/1718))
- *(cli)* Add `describe` command for detailing OCM entities and metadata
([#&#8203;1554](https://redirect.github.com/open-component-model/open-component-model/issues/1554))
- Add progress tracking for transformation execution
([#&#8203;1702](https://redirect.github.com/open-component-model/open-component-model/issues/1702))
- Register helm as inbuilt input plugin
([#&#8203;1756](https://redirect.github.com/open-component-model/open-component-model/issues/1756))
- Oci artifact cli
([#&#8203;1684](https://redirect.github.com/open-component-model/open-component-model/issues/1684))
- Oci artifact uploader
([#&#8203;1765](https://redirect.github.com/open-component-model/open-component-model/issues/1765))
- Warn instead of info if upload-as is ociArtifact and copy-resources is
missing
([#&#8203;1824](https://redirect.github.com/open-component-model/open-component-model/issues/1824))

##### 🐛 Bug Fixes

- Fixup golangci v2 run
([#&#8203;155](https://redirect.github.com/open-component-model/open-component-model/issues/155))
- Make it so that locations without plugins don't generate warning
messages
([#&#8203;214](https://redirect.github.com/open-component-model/open-component-model/issues/214))
- Default log level to info
([#&#8203;222](https://redirect.github.com/open-component-model/open-component-model/issues/222))
- Concurrent intermediary step to ensure we install once and then run
concurrently
([#&#8203;301](https://redirect.github.com/open-component-model/open-component-model/issues/301))
- Set the temp folder flag on change
([#&#8203;441](https://redirect.github.com/open-component-model/open-component-model/issues/441))
- Make sure we do not ignore defer without a named return
([#&#8203;449](https://redirect.github.com/open-component-model/open-component-model/issues/449))
- Support plain `http` in component repository
([#&#8203;484](https://redirect.github.com/open-component-model/open-component-model/issues/484))
- *(cli)* Correct default value for `--logoutput` in CLI docs
([#&#8203;571](https://redirect.github.com/open-component-model/open-component-model/issues/571))
- Use environment property if defined and fall back to gh otherwise
([#&#8203;588](https://redirect.github.com/open-component-model/open-component-model/issues/588))
- Run plugin download integration separately as a go module
([#&#8203;581](https://redirect.github.com/open-component-model/open-component-model/issues/581))
- *(ci)* Properly generate and add repo checkout to generate
([#&#8203;610](https://redirect.github.com/open-component-model/open-component-model/issues/610))
- *(ci)* Properly generate and add repo checkout to generate
([#&#8203;611](https://redirect.github.com/open-component-model/open-component-model/issues/611))
- *(ci)* Properly generate and add repo checkout to generate
([#&#8203;612](https://redirect.github.com/open-component-model/open-component-model/issues/612))
- *(cli)* Fixup / refactor filesystem config handling
([#&#8203;615](https://redirect.github.com/open-component-model/open-component-model/issues/615))
- *(ctf)* Add support for recognizing additional CTF archive files:
tar.gz, tgz, tar
([#&#8203;651](https://redirect.github.com/open-component-model/open-component-model/issues/651))
([#&#8203;882](https://redirect.github.com/open-component-model/open-component-model/issues/882))
- In some cases golangci-lint will fail parsing a comment with a URL
([#&#8203;888](https://redirect.github.com/open-component-model/open-component-model/issues/888))
- *(oci)* Fix repository detection for OCI URLs with IP addresses
([#&#8203;894](https://redirect.github.com/open-component-model/open-component-model/issues/894))
- Use cobra.Finalize instead of PersistentPostRunE
([#&#8203;984](https://redirect.github.com/open-component-model/open-component-model/issues/984))
- *(cli)* Multi ctf repo race
([#&#8203;965](https://redirect.github.com/open-component-model/open-component-model/issues/965))
- Use the correct credential configuration in download test
([#&#8203;1038](https://redirect.github.com/open-component-model/open-component-model/issues/1038))
- Revert changing the CLI image to debian
([#&#8203;1102](https://redirect.github.com/open-component-model/open-component-model/issues/1102))
- Ensure verbose logs during tests for better diagnostics
([#&#8203;1186](https://redirect.github.com/open-component-model/open-component-model/issues/1186))
- *(cmd)* Improve error message for rendering components
([#&#8203;1217](https://redirect.github.com/open-component-model/open-component-model/issues/1217))
- Add subPath to OCI repository spec implementation
([#&#8203;1231](https://redirect.github.com/open-component-model/open-component-model/issues/1231))
- *(737)* Handle credentials resolution correctly
([#&#8203;1191](https://redirect.github.com/open-component-model/open-component-model/issues/1191))
- *(oci)* Update dependencies to simplified plugin registration
([#&#8203;1325](https://redirect.github.com/open-component-model/open-component-model/issues/1325))
- Helm input plugin validation fix
([#&#8203;1336](https://redirect.github.com/open-component-model/open-component-model/issues/1336))
- 743 add semver check cli tests
([#&#8203;1341](https://redirect.github.com/open-component-model/open-component-model/issues/1341))
- Rm nested fields and descriptor scheme
([#&#8203;1391](https://redirect.github.com/open-component-model/open-component-model/issues/1391))
- *(cmd)* Correct transformation type assignment in upload metadata
([#&#8203;1407](https://redirect.github.com/open-component-model/open-component-model/issues/1407))
- Make sure correct resource identity type is used
([#&#8203;1447](https://redirect.github.com/open-component-model/open-component-model/issues/1447))
- Remove double checking of config
([#&#8203;1629](https://redirect.github.com/open-component-model/open-component-model/issues/1629))
- Ignore shutdown try if the process is already done
([#&#8203;1662](https://redirect.github.com/open-component-model/open-component-model/issues/1662))
- Transfer localblobs with relation external
([#&#8203;1729](https://redirect.github.com/open-component-model/open-component-model/issues/1729))
- Update the configuration to 0.0.10 and fix the resolver prepending a
catch-all incorrectly
([#&#8203;1773](https://redirect.github.com/open-component-model/open-component-model/issues/1773))
- Transformer carry over signatures
([#&#8203;1798](https://redirect.github.com/open-component-model/open-component-model/issues/1798))
- Various cli fixes on transfer and construction behavior
([#&#8203;1807](https://redirect.github.com/open-component-model/open-component-model/issues/1807))
- Oci upload behavior
([#&#8203;1806](https://redirect.github.com/open-component-model/open-component-model/issues/1806))

##### 📚 Dependencies

- *(deps)* Update
ocm.software/open-component-model/bindings/go/credentials digest to
[`75bfcc6`](https://redirect.github.com/open-component-model/open-component-model/commit/75bfcc6)
([#&#8203;113](https://redirect.github.com/open-component-model/open-component-model/issues/113))
- *(deps)* Update ocm.software/open-component-model/bindings/go/blob
digest to
[`75bfcc6`](https://redirect.github.com/open-component-model/open-component-model/commit/75bfcc6)
([#&#8203;112](https://redirect.github.com/open-component-model/open-component-model/issues/112))
- *(deps)* Update ocm.software/open-component-model/bindings/go/ctf
digest to
[`75bfcc6`](https://redirect.github.com/open-component-model/open-component-model/commit/75bfcc6)
([#&#8203;114](https://redirect.github.com/open-component-model/open-component-model/issues/114))
- *(deps)* Update ocm.software/open-component-model/bindings/go/plugin
digest to
[`cc5a0fb`](https://redirect.github.com/open-component-model/open-component-model/commit/cc5a0fb)
([#&#8203;119](https://redirect.github.com/open-component-model/open-component-model/issues/119))
- *(deps)* Update
ocm.software/open-component-model/bindings/go/descriptor/runtime digest
to
[`8d95892`](https://redirect.github.com/open-component-model/open-component-model/commit/8d95892)
([#&#8203;117](https://redirect.github.com/open-component-model/open-component-model/issues/117))
- *(deps)* Update ocm.software/open-component-model/bindings/go/oci
digest to
[`cc5a0fb`](https://redirect.github.com/open-component-model/open-component-model/commit/cc5a0fb)
([#&#8203;118](https://redirect.github.com/open-component-model/open-component-model/issues/118))
- *(deps)* Update ocm.software/open-component-model/bindings/go/blob
digest to
[`0642d97`](https://redirect.github.com/open-component-model/open-component-model/commit/0642d97)
([#&#8203;130](https://redirect.github.com/open-component-model/open-component-model/issues/130))
- *(deps)* Update
ocm.software/open-component-model/bindings/go/credentials digest to
[`0642d97`](https://redirect.github.com/open-component-model/open-component-model/commit/0642d97)
([#&#8203;131](https://redirect.github.com/open-component-model/open-component-model/issues/131))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/descriptor/v2 to
v2.0.0-20250520105023-82a459e39e46
([#&#8203;122](https://redirect.github.com/open-component-model/open-component-model/issues/122))
- *(deps)* Update ocm.software/open-component-model/bindings/go/plugin
digest to
[`9a51c0d`](https://redirect.github.com/open-component-model/open-component-model/commit/9a51c0d)
([#&#8203;142](https://redirect.github.com/open-component-model/open-component-model/issues/142))
- *(deps)* Update
ocm.software/open-component-model/bindings/go/descriptor/runtime digest
to
[`424308d`](https://redirect.github.com/open-component-model/open-component-model/commit/424308d)
([#&#8203;140](https://redirect.github.com/open-component-model/open-component-model/issues/140))
- *(deps)* Bump the go group across 5 directories with 3 updates
([#&#8203;169](https://redirect.github.com/open-component-model/open-component-model/issues/169))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/blob to v0.0.2
([#&#8203;188](https://redirect.github.com/open-component-model/open-component-model/issues/188))
- *(deps)* Bump
ocm.software/open-component-model/bindings/go/descriptor/v2
([#&#8203;194](https://redirect.github.com/open-component-model/open-component-model/issues/194))
- *(deps)* Update ocm.software/open-component-model/bindings/go/plugin
digest to
[`f187f07`](https://redirect.github.com/open-component-model/open-component-model/commit/f187f07)
([#&#8203;156](https://redirect.github.com/open-component-model/open-component-model/issues/156))
- *(deps)* Update ocm.software/open-component-model/bindings/go/plugin
digest to
[`9c9e145`](https://redirect.github.com/open-component-model/open-component-model/commit/9c9e145)
([#&#8203;198](https://redirect.github.com/open-component-model/open-component-model/issues/198))
- *(deps)* Update
ocm.software/open-component-model/bindings/go/descriptor/runtime digest
to
[`2a15446`](https://redirect.github.com/open-component-model/open-component-model/commit/2a15446)
([#&#8203;165](https://redirect.github.com/open-component-model/open-component-model/issues/165))
- *(deps)* Update ocm.software/open-component-model/bindings/go/oci
digest to
[`6767834`](https://redirect.github.com/open-component-model/open-component-model/commit/6767834)
([#&#8203;141](https://redirect.github.com/open-component-model/open-component-model/issues/141))
- *(deps)* Update module golang.org/x/sync to v0.15.0
([#&#8203;216](https://redirect.github.com/open-component-model/open-component-model/issues/216))
- *(deps)* Bump the go group across 1 directory with 1 update
([#&#8203;227](https://redirect.github.com/open-component-model/open-component-model/issues/227))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/runtime to v0.0.2
([#&#8203;238](https://redirect.github.com/open-component-model/open-component-model/issues/238))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/ctf to v0.0.2
([#&#8203;241](https://redirect.github.com/open-component-model/open-component-model/issues/241))
- *(deps)* Update ocm.software/open-component-model/bindings/go/plugin
digest to
[`c7f0912`](https://redirect.github.com/open-component-model/open-component-model/commit/c7f0912)
([#&#8203;276](https://redirect.github.com/open-component-model/open-component-model/issues/276))
- *(deps)* Update ocm.software/open-component-model/bindings/go/oci
digest to
[`c7f0912`](https://redirect.github.com/open-component-model/open-component-model/commit/c7f0912)
([#&#8203;275](https://redirect.github.com/open-component-model/open-component-model/issues/275))
- *(deps)* Update module github.com/masterminds/semver/v3 to v3.4.0
([#&#8203;337](https://redirect.github.com/open-component-model/open-component-model/issues/337))
- *(deps)* Update module sigs.k8s.io/yaml to v1.5.0
([#&#8203;338](https://redirect.github.com/open-component-model/open-component-model/issues/338))
- *(deps)* Update module go.yaml.in/yaml/v2 to v3
([#&#8203;342](https://redirect.github.com/open-component-model/open-component-model/issues/342))
- *(deps)* Update ocm monorepo go module dependencies to
[`ad7810c`](https://redirect.github.com/open-component-model/open-component-model/commit/ad7810c)
([#&#8203;322](https://redirect.github.com/open-component-model/open-component-model/issues/322))
- *(deps)* Update module golang.org/x/sys to v0.34.0
([#&#8203;385](https://redirect.github.com/open-component-model/open-component-model/issues/385))
- *(deps)* Update module golang.org/x/term to v0.33.0
([#&#8203;382](https://redirect.github.com/open-component-model/open-component-model/issues/382))
- *(deps)* Update module golang.org/x/sync to v0.16.0
([#&#8203;384](https://redirect.github.com/open-component-model/open-component-model/issues/384))
- *(deps)* Update module golang.org/x/text to v0.27.0
([#&#8203;383](https://redirect.github.com/open-component-model/open-component-model/issues/383))
- *(deps)* Update module golang.org/x/net to v0.42.0
([#&#8203;387](https://redirect.github.com/open-component-model/open-component-model/issues/387))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;393](https://redirect.github.com/open-component-model/open-component-model/issues/393))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;409](https://redirect.github.com/open-component-model/open-component-model/issues/409))
- *(deps)* Update ocm monorepo go module dependencies to
[`653941b`](https://redirect.github.com/open-component-model/open-component-model/commit/653941b)
([#&#8203;410](https://redirect.github.com/open-component-model/open-component-model/issues/410))
- *(deps)* Update module github.com/spf13/pflag to v1.0.7
([#&#8203;429](https://redirect.github.com/open-component-model/open-component-model/issues/429))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;422](https://redirect.github.com/open-component-model/open-component-model/issues/422))
- *(deps)* Update module sigs.k8s.io/yaml to v1.6.0
([#&#8203;453](https://redirect.github.com/open-component-model/open-component-model/issues/453))
- *(deps)* Upgrade cli to central config
([#&#8203;463](https://redirect.github.com/open-component-model/open-component-model/issues/463))
- *(deps)* Update ocm monorepo go module dependencies to
[`3a57106`](https://redirect.github.com/open-component-model/open-component-model/commit/3a57106)
([#&#8203;440](https://redirect.github.com/open-component-model/open-component-model/issues/440))
- *(deps)* Update module github.com/jedib0t/go-pretty/v6 to v6.6.8
([#&#8203;467](https://redirect.github.com/open-component-model/open-component-model/issues/467))
- *(deps)* Update ocm monorepo go module dependencies to
[`376c827`](https://redirect.github.com/open-component-model/open-component-model/commit/376c827)
([#&#8203;465](https://redirect.github.com/open-component-model/open-component-model/issues/465))
- *(deps)* Update ocm monorepo go module dependencies to
[`2064e6f`](https://redirect.github.com/open-component-model/open-component-model/commit/2064e6f)
([#&#8203;468](https://redirect.github.com/open-component-model/open-component-model/issues/468))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;472](https://redirect.github.com/open-component-model/open-component-model/issues/472))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;483](https://redirect.github.com/open-component-model/open-component-model/issues/483))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;505](https://redirect.github.com/open-component-model/open-component-model/issues/505))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;509](https://redirect.github.com/open-component-model/open-component-model/issues/509))
- *(deps)* Update module golang.org/x/sys to v0.35.0
([#&#8203;494](https://redirect.github.com/open-component-model/open-component-model/issues/494))
- *(deps)* Update module golang.org/x/term to v0.34.0
([#&#8203;522](https://redirect.github.com/open-component-model/open-component-model/issues/522))
- *(deps)* Update module golang.org/x/text to v0.28.0
([#&#8203;523](https://redirect.github.com/open-component-model/open-component-model/issues/523))
- *(deps)* Update module golang.org/x/net to v0.43.0
([#&#8203;525](https://redirect.github.com/open-component-model/open-component-model/issues/525))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;515](https://redirect.github.com/open-component-model/open-component-model/issues/515))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;554](https://redirect.github.com/open-component-model/open-component-model/issues/554))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;563](https://redirect.github.com/open-component-model/open-component-model/issues/563))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;576](https://redirect.github.com/open-component-model/open-component-model/issues/576))
- *(deps)* Update ocm monorepo go module dependencies to
[`cde8f34`](https://redirect.github.com/open-component-model/open-component-model/commit/cde8f34)
([#&#8203;577](https://redirect.github.com/open-component-model/open-component-model/issues/577))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;578](https://redirect.github.com/open-component-model/open-component-model/issues/578))
- *(deps)* Update module github.com/gabriel-vasile/mimetype to v1.4.10
([#&#8203;625](https://redirect.github.com/open-component-model/open-component-model/issues/625))
- *(deps)* Update ocm monorepo go module dependencies to
[`6840c8c`](https://redirect.github.com/open-component-model/open-component-model/commit/6840c8c)
([#&#8203;626](https://redirect.github.com/open-component-model/open-component-model/issues/626))
- *(deps)* Update module dario.cat/mergo to v1.0.2
([#&#8203;687](https://redirect.github.com/open-component-model/open-component-model/issues/687))
- *(deps)* Update module github.com/docker/docker to
v28.3.3+incompatible \[security]
([#&#8203;679](https://redirect.github.com/open-component-model/open-component-model/issues/679))
- *(deps)* Update module github.com/go-ole/go-ole to v1.3.0
([#&#8203;692](https://redirect.github.com/open-component-model/open-component-model/issues/692))
- *(deps)* Update module github.com/tklauser/numcpus to v0.10.0
([#&#8203;694](https://redirect.github.com/open-component-model/open-component-model/issues/694))
- *(deps)* Update module
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.62.0
([#&#8203;695](https://redirect.github.com/open-component-model/open-component-model/issues/695))
- *(deps)* Update module github.com/docker/go-connections to v0.6.0
([#&#8203;691](https://redirect.github.com/open-component-model/open-component-model/issues/691))
- *(deps)* Update module github.com/tklauser/go-sysconf to v0.3.15
([#&#8203;689](https://redirect.github.com/open-component-model/open-component-model/issues/689))
- *(deps)* Update module github.com/shirou/gopsutil/v4 to v4.25.7
([#&#8203;688](https://redirect.github.com/open-component-model/open-component-model/issues/688))
- *(deps)* Update github.com/power-devops/perfstat digest to
[`82ca368`](https://redirect.github.com/open-component-model/open-component-model/commit/82ca368)
([#&#8203;682](https://redirect.github.com/open-component-model/open-component-model/issues/682))
- *(deps)* Update github.com/lufia/plan9stats digest to
[`24949be`](https://redirect.github.com/open-component-model/open-component-model/commit/24949be)
([#&#8203;681](https://redirect.github.com/open-component-model/open-component-model/issues/681))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;627](https://redirect.github.com/open-component-model/open-component-model/issues/627))
- *(deps)* Update module github.com/stretchr/testify to v1.11.1
([#&#8203;620](https://redirect.github.com/open-component-model/open-component-model/issues/620))
- *(deps)* Update kubernetes dependencies
([#&#8203;743](https://redirect.github.com/open-component-model/open-component-model/issues/743))
- *(deps)* Update opentelemetry-go-contrib monorepo
([#&#8203;758](https://redirect.github.com/open-component-model/open-component-model/issues/758))
- *(deps)* Update module github.com/spf13/cobra to v1.10.1
([#&#8203;769](https://redirect.github.com/open-component-model/open-component-model/issues/769))
- *(deps)* Update ocm monorepo go module dependencies to
[`5c315c9`](https://redirect.github.com/open-component-model/open-component-model/commit/5c315c9)
([#&#8203;712](https://redirect.github.com/open-component-model/open-component-model/issues/712))
- *(deps)* Update docker dependencies to v28.4.0+incompatible
([#&#8203;802](https://redirect.github.com/open-component-model/open-component-model/issues/802))
- *(deps)* Update module golang.org/x/text to v0.29.0
([#&#8203;815](https://redirect.github.com/open-component-model/open-component-model/issues/815))
- *(deps)* Update module golang.org/x/term to v0.35.0
([#&#8203;814](https://redirect.github.com/open-component-model/open-component-model/issues/814))
- *(deps)* Update ocm monorepo go module dependencies
([#&#8203;782](https://redirect.github.com/open-component-model/open-component-model/issues/782))
- *(deps)* Update spf13 repositories
([#&#8203;850](https://redirect.github.com/open-component-model/open-component-model/issues/850))
- *(deps)* Update golang x repositories
([#&#8203;849](https://redirect.github.com/open-component-model/open-component-model/issues/849))
- *(deps)* Update module github.com/shirou/gopsutil/v4 to v4.25.8
([#&#8203;883](https://redirect.github.com/open-component-model/open-component-model/issues/883))
- *(deps)* Update module github.com/creack/pty to v1.1.24
([#&#8203;896](https://redirect.github.com/open-component-model/open-component-model/issues/896))
- *(deps)* Update module
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to
v1.38.0
([#&#8203;897](https://redirect.github.com/open-component-model/open-component-model/issues/897))
- *(deps)* Update ocm monorepo go module dependencies to
[`9ba3663`](https://redirect.github.com/open-component-model/open-component-model/commit/9ba3663)
([#&#8203;845](https://redirect.github.com/open-component-model/open-component-model/issues/845))
- *(deps)* Update module helm.sh/helm/v3 to v3.19.0
([#&#8203;900](https://redirect.github.com/open-component-model/open-component-model/issues/900))
- *(deps)* Update ocm monorepo go module dependencies to
[`be28d8d`](https://redirect.github.com/open-component-model/open-component-model/commit/be28d8d)
([#&#8203;901](https://redirect.github.com/open-component-model/open-component-model/issues/901))
- *(deps)* Update module go.opentelemetry.io/auto/sdk to v1.2.0
([#&#8203;941](https://redirect.github.com/open-component-model/open-component-model/issues/941))
- *(deps)* Update ocm monorepo go module dependencies to
[`08cb1b0`](https://redirect.github.com/open-component-model/open-component-model/commit/08cb1b0)
([#&#8203;906](https://redirect.github.com/open-component-model/open-component-model/issues/906))
- *(deps)* Update module go.opentelemetry.io/auto/sdk to v1.2.1
([#&#8203;959](https://redirect.github.com/open-component-model/open-component-model/issues/959))
- *(deps)* Update module github.com/mailru/easyjson to v0.9.1
([#&#8203;958](https://redirect.github.com/open-component-model/open-component-model/issues/958))
- *(deps)* Update ocm monorepo go module dependencies to
[`d5e8b62`](https://redirect.github.com/open-component-model/open-component-model/commit/d5e8b62)
([#&#8203;954](https://redirect.github.com/open-component-model/open-component-model/issues/954))
- *(deps)* Update ocm monorepo go module dependencies to
[`e0cc2f4`](https://redirect.github.com/open-component-model/open-component-model/commit/e0cc2f4)
([#&#8203;978](https://redirect.github.com/open-component-model/open-component-model/issues/978))
- *(deps)* Update module github.com/ebitengine/purego to v0.9.0
([#&#8203;991](https://redirect.github.com/open-component-model/open-component-model/issues/991))
- *(deps)* Update testcontainers-go monorepo to v0.39.0 (minor)
([#&#8203;988](https://redirect.github.com/open-component-model/open-component-model/issues/988))
- *(deps)* Update module go.opentelemetry.io/auto/sdk to v1.2.1
([#&#8203;1010](https://redirect.github.com/open-component-model/open-component-model/issues/1010))
- *(deps)* Update module github.com/ebitengine/purego to v0.9.0
([#&#8203;1011](https://redirect.github.com/open-component-model/open-component-model/issues/1011))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/repository to v0.0.1
([#&#8203;989](https://redirect.github.com/open-component-model/open-component-model/issues/989))
- *(deps)* Update ocm monorepo go module dependencies to
[`0548a0a`](https://redirect.github.com/open-component-model/open-component-model/commit/0548a0a)
([#&#8203;980](https://redirect.github.com/open-component-model/open-component-model/issues/980))
- *(deps)* Update golang x repositories (minor)
([#&#8203;1065](https://redirect.github.com/open-component-model/open-component-model/issues/1065))
- *(deps)* Update ocm monorepo go module dependencies to
[`a7be1bf`](https://redirect.github.com/open-component-model/open-component-model/commit/a7be1bf)
([#&#8203;1063](https://redirect.github.com/open-component-model/open-component-model/issues/1063))
- *(deps)* Update module github.com/mattn/go-runewidth to v0.0.19
([#&#8203;1086](https://redirect.github.com/open-component-model/open-component-model/issues/1086))
- *(deps)* Update docker dependencies to v28.5.0+incompatible (minor)
([#&#8203;1127](https://redirect.github.com/open-component-model/open-component-model/issues/1127))
- *(deps)* Update module google.golang.org/protobuf to v1.36.10
([#&#8203;1124](https://redirect.github.com/open-component-model/open-component-model/issues/1124))
- *(deps)* Update module github.com/shirou/gopsutil/v4 to v4.25.9
([#&#8203;1122](https://redirect.github.com/open-component-model/open-component-model/issues/1122))
- *(deps)* Update ocm monorepo go module dependencies (minor)
([#&#8203;1083](https://redirect.github.com/open-component-model/open-component-model/issues/1083))
- *(deps)* Update google golang repositories (minor)
([#&#8203;1171](https://redirect.github.com/open-component-model/open-component-model/issues/1171))
- *(deps)* Update debian:bookworm-slim docker digest to
[`936abff`](https://redirect.github.com/open-component-model/open-component-model/commit/936abff)
([#&#8203;1155](https://redirect.github.com/open-component-model/open-component-model/issues/1155))
- *(deps)* Update docker dependencies to v28.5.1+incompatible (patch)
([#&#8203;1163](https://redirect.github.com/open-component-model/open-component-model/issues/1163))
- *(deps)* Update bindings/go/oci in the cli
([#&#8203;1199](https://redirect.github.com/open-component-model/open-component-model/issues/1199))
- *(deps)* Update ocm monorepo go module dependencies to
[`3af5ed7`](https://redirect.github.com/open-component-model/open-component-model/commit/3af5ed7)
([#&#8203;1161](https://redirect.github.com/open-component-model/open-component-model/issues/1161))
- *(deps)* Update github.com/lufia/plan9stats digest to
[`9fd1530`](https://redirect.github.com/open-component-model/open-component-model/commit/9fd1530)
([#&#8203;1202](https://redirect.github.com/open-component-model/open-component-model/issues/1202))
- *(deps)* Update ocm monorepo go module dependencies to
[`5d448c4`](https://redirect.github.com/open-component-model/open-component-model/commit/5d448c4)
([#&#8203;1205](https://redirect.github.com/open-component-model/open-component-model/issues/1205))
- *(deps)* Update module golang.org/x/crypto to v0.45.0 \[security]
([#&#8203;1234](https://redirect.github.com/open-component-model/open-component-model/issues/1234))
- *(deps)* Update golang x repositories (minor)
([#&#8203;1255](https://redirect.github.com/open-component-model/open-component-model/issues/1255))
- *(deps)* Update debian:bookworm-slim docker digest to
[`b4aa902`](https://redirect.github.com/open-component-model/open-component-model/commit/b4aa902)
([#&#8203;1239](https://redirect.github.com/open-component-model/open-component-model/issues/1239))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1247](https://redirect.github.com/open-component-model/open-component-model/issues/1247))
- *(deps)* Update ocm monorepo go module dependencies to
[`4c1b948`](https://redirect.github.com/open-component-model/open-component-model/commit/4c1b948)
([#&#8203;1243](https://redirect.github.com/open-component-model/open-component-model/issues/1243))
- *(deps)* Update module github.com/shirou/gopsutil/v4 to v4.25.10
([#&#8203;1300](https://redirect.github.com/open-component-model/open-component-model/issues/1300))
- *(deps)* Update module github.com/ebitengine/purego to v0.9.1
([#&#8203;1296](https://redirect.github.com/open-component-model/open-component-model/issues/1296))
- *(deps)* Update module github.com/gabriel-vasile/mimetype to v1.4.11
([#&#8203;1304](https://redirect.github.com/open-component-model/open-component-model/issues/1304))
- *(deps)* Update module github.com/jedib0t/go-pretty/v6 to v6.6.9
([#&#8203;1305](https://redirect.github.com/open-component-model/open-component-model/issues/1305))
- *(deps)* Update module github.com/clipperhouse/uax29/v2 to v2.3.0
([#&#8203;1310](https://redirect.github.com/open-component-model/open-component-model/issues/1310))
- *(deps)* Update ocm monorepo go module dependencies to
[`062018e`](https://redirect.github.com/open-component-model/open-component-model/commit/062018e)
([#&#8203;1290](https://redirect.github.com/open-component-model/open-component-model/issues/1290))
- *(deps)* Update ocm monorepo go module dependencies to
[`24b8f80`](https://redirect.github.com/open-component-model/open-component-model/commit/24b8f80)
([#&#8203;1334](https://redirect.github.com/open-component-model/open-component-model/issues/1334))
- *(deps)* Update ocm monorepo go module dependencies to
[`cb295d4`](https://redirect.github.com/open-component-model/open-component-model/commit/cb295d4)
([#&#8203;1338](https://redirect.github.com/open-component-model/open-component-model/issues/1338))
- *(deps)* Update dependency go to v1.25.4
([#&#8203;1357](https://redirect.github.com/open-component-model/open-component-model/issues/1357))
- *(deps)* Update module go.opentelemetry.io/proto/otlp to v1.9.0
([#&#8203;1371](https://redirect.github.com/open-component-model/open-component-model/issues/1371))
- *(deps)* Update ocm monorepo go module dependencies to
[`758d8f0`](https://redirect.github.com/open-component-model/open-component-model/commit/758d8f0)
([#&#8203;1355](https://redirect.github.com/open-component-model/open-component-model/issues/1355))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1395](https://redirect.github.com/open-component-model/open-component-model/issues/1395))
- *(deps)* Update ocm monorepo go module dependencies to
[`d29be10`](https://redirect.github.com/open-component-model/open-component-model/commit/d29be10)
([#&#8203;1398](https://redirect.github.com/open-component-model/open-component-model/issues/1398))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/oci to v0.0.23
([#&#8203;1454](https://redirect.github.com/open-component-model/open-component-model/issues/1454))
- *(deps)* Update module google.golang.org/grpc to v1.77.0
([#&#8203;1473](https://redirect.github.com/open-component-model/open-component-model/issues/1473))
- *(deps)* Update module golang.org/x/sys to v0.39.0
([#&#8203;1500](https://redirect.github.com/open-component-model/open-component-model/issues/1500))
- *(deps)* Update module helm.sh/helm/v3 to v3.19.3
([#&#8203;1492](https://redirect.github.com/open-component-model/open-component-model/issues/1492))
- *(deps)* Update dependency `descriptor/v2` to version `v2.0.1-alpha6`.
([#&#8203;1515](https://redirect.github.com/open-component-model/open-component-model/issues/1515))
- *(deps)* Update ocm monorepo go module dependencies to
[`a89982c`](https://redirect.github.com/open-component-model/open-component-model/commit/a89982c)
([#&#8203;1410](https://redirect.github.com/open-component-model/open-component-model/issues/1410))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1517](https://redirect.github.com/open-component-model/open-component-model/issues/1517))
- *(deps)* Update ocm monorepo go module dependencies to
[`ca7c68f`](https://redirect.github.com/open-component-model/open-component-model/commit/ca7c68f)
([#&#8203;1516](https://redirect.github.com/open-component-model/open-component-model/issues/1516))
- *(deps)* Update module github.com/spf13/cobra to v1.10.2
([#&#8203;1544](https://redirect.github.com/open-component-model/open-component-model/issues/1544))
- *(deps)* Update golang x repositories (minor)
([#&#8203;1549](https://redirect.github.com/open-component-model/open-component-model/issues/1549))
- *(deps)* Update dependency go to v1.25.5
([#&#8203;1537](https://redirect.github.com/open-component-model/open-component-model/issues/1537))
- *(deps)* Update debian:bookworm-slim docker digest to
[`d5d3f9c`](https://redirect.github.com/open-component-model/open-component-model/commit/d5d3f9c)
([#&#8203;1509](https://redirect.github.com/open-component-model/open-component-model/issues/1509))
- *(deps)* Update ocm monorepo go module dependencies to
[`d7a4b48`](https://redirect.github.com/open-component-model/open-component-model/commit/d7a4b48)
([#&#8203;1534](https://redirect.github.com/open-component-model/open-component-model/issues/1534))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1562](https://redirect.github.com/open-component-model/open-component-model/issues/1562))
- *(deps)* Update module github.com/jedib0t/go-pretty/v6 to v6.7.7
([#&#8203;1581](https://redirect.github.com/open-component-model/open-component-model/issues/1581))
- *(deps)* Update golang x repositories (minor)
([#&#8203;1589](https://redirect.github.com/open-component-model/open-component-model/issues/1589))
- *(deps)* Update opentelemetry-go-contrib monorepo (minor)
([#&#8203;1588](https://redirect.github.com/open-component-model/open-component-model/issues/1588))
- *(deps)* Update module github.com/morikuni/aec to v1.1.0
([#&#8203;1586](https://redirect.github.com/open-component-model/open-component-model/issues/1586))
- *(deps)* Update module github.com/gabriel-vasile/mimetype to v1.4.12
([#&#8203;1580](https://redirect.github.com/open-component-model/open-component-model/issues/1580))
- *(deps)* Update module helm.sh/helm/v3 to v3.19.4
([#&#8203;1584](https://redirect.github.com/open-component-model/open-component-model/issues/1584))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/descriptor/v2 to
v2.0.1-alpha8
([#&#8203;1569](https://redirect.github.com/open-component-model/open-component-model/issues/1569))
- *(deps)* Update opentelemetry-go monorepo to v1.39.0 (minor)
([#&#8203;1587](https://redirect.github.com/open-component-model/open-component-model/issues/1587))
- *(deps)* Update module google.golang.org/protobuf to v1.36.11
([#&#8203;1577](https://redirect.github.com/open-component-model/open-component-model/issues/1577))
- *(deps)* Update module golang.org/x/sys to v0.40.0
([#&#8203;1622](https://redirect.github.com/open-component-model/open-component-model/issues/1622))
- *(deps)* Update module github.com/moby/go-archive to v0.2.0
([#&#8203;1619](https://redirect.github.com/open-component-model/open-component-model/issues/1619))
- *(deps)* Update module github.com/sirupsen/logrus to v1.9.4
([#&#8203;1614](https://redirect.github.com/open-component-model/open-component-model/issues/1614))
- *(deps)* Update kubernetes dependencies (minor)
([#&#8203;1625](https://redirect.github.com/open-component-model/open-component-model/issues/1625))
- *(deps)* Update debian:bookworm-slim docker digest to
[`56ff6d3`](https://redirect.github.com/open-component-model/open-component-model/commit/56ff6d3)
([#&#8203;1596](https://redirect.github.com/open-component-model/open-component-model/issues/1596))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1634](https://redirect.github.com/open-component-model/open-component-model/issues/1634))
- *(deps)* Update ocm monorepo go module dependencies to
[`d34921f`](https://redirect.github.com/open-component-model/open-component-model/commit/d34921f)
([#&#8203;1558](https://redirect.github.com/open-component-model/open-component-model/issues/1558))
- *(deps)* Migrate helm from v3 to v4
([#&#8203;1630](https://redirect.github.com/open-component-model/open-component-model/issues/1630))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1668](https://redirect.github.com/open-component-model/open-component-model/issues/1668))
- *(deps)* Update module github.com/jedib0t/go-pretty/v6 to v6.7.8
([#&#8203;1659](https://redirect.github.com/open-component-model/open-component-model/issues/1659))
- *(deps)* Update ocm monorepo go module dependencies to
[`96b7457`](https://redirect.github.com/open-component-model/open-component-model/commit/96b7457)
([#&#8203;1640](https://redirect.github.com/open-component-model/open-component-model/issues/1640))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/oci to v0.0.27
([#&#8203;1672](https://redirect.github.com/open-component-model/open-component-model/issues/1672))
- *(deps)* Update ocm monorepo go module dependencies to
[`b9f20b3`](https://redirect.github.com/open-component-model/open-component-model/commit/b9f20b3)
([#&#8203;1671](https://redirect.github.com/open-component-model/open-component-model/issues/1671))
- *(deps)* Update kubernetes dependencies (patch)
([#&#8203;1689](https://redirect.github.com/open-component-model/open-component-model/issues/1689))
- *(deps)* Update kubernetes dependencies to v0.35.0 (minor)
([#&#8203;1694](https://redirect.github.com/open-component-model/open-component-model/issues/1694))
- *(deps)* Update module github.com/shirou/gopsutil/v4 to v4.25.12
([#&#8203;1692](https://redirect.github.com/open-component-model/open-component-model/issues/1692))
- *(deps)* Update module sigs.k8s.io/structured-merge-diff/v6 to v6.3.1
([#&#8203;1693](https://redirect.github.com/open-component-model/open-component-model/issues/1693))
- *(deps)* Update ocm monorepo go module dependencies to
[`e5cc8c3`](https://redirect.github.com/open-component-model/open-component-model/commit/e5cc8c3)
([#&#8203;1685](https://redirect.github.com/open-component-model/open-component-model/issues/1685))
- *(deps)* Update module golang.org/x/net to v0.48.0
([#&#8203;1697](https://redirect.github.com/open-component-model/open-component-model/issues/1697))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/repository to v0.0.6
([#&#8203;1710](https://redirect.github.com/open-component-model/open-component-model/issues/1710))
- *(deps)* Update debian:bookworm-slim docker digest to
[`98f4b71`](https://redirect.github.com/open-component-model/open-component-model/commit/98f4b71)
([#&#8203;1711](https://redirect.github.com/open-component-model/open-component-model/issues/1711))
- *(deps)* Update ocm monorepo go module dependencies to
[`f3b615f`](https://redirect.github.com/open-component-model/open-component-model/commit/f3b615f)
([#&#8203;1709](https://redirect.github.com/open-component-model/open-component-model/issues/1709))
- *(deps)* Update ocm monorepo go module dependencies to
[`9dc9b36`](https://redirect.github.com/open-component-model/open-component-model/commit/9dc9b36)
([#&#8203;1714](https://redirect.github.com/open-component-model/open-component-model/issues/1714))
- *(deps)* Update ocm monorepo go module dependencies to
[`f38d977`](https://redirect.github.com/open-component-model/open-component-model/commit/f38d977)
([#&#8203;1722](https://redirect.github.com/open-component-model/open-component-model/issues/1722))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1723](https://redirect.github.com/open-component-model/open-component-model/issues/1723))
- *(deps)* Update ocm monorepo go module dependencies to
[`f8a8aaf`](https://redirect.github.com/open-component-model/open-component-model/commit/f8a8aaf)
([#&#8203;1731](https://redirect.github.com/open-component-model/open-component-model/issues/1731))
- *(deps)* Update golang x repositories (minor)
([#&#8203;1741](https://redirect.github.com/open-component-model/open-component-model/issues/1741))
- *(deps)* Update k8s.io/utils digest to
[`914a6e7`](https://redirect.github.com/open-component-model/open-component-model/commit/914a6e7)
([#&#8203;1737](https://redirect.github.com/open-component-model/open-component-model/issues/1737))
- *(deps)* Update ocm monorepo go module dependencies to
[`0b1196f`](https://redirect.github.com/open-component-model/open-component-model/commit/0b1196f)
([#&#8203;1734](https://redirect.github.com/open-component-model/open-component-model/issues/1734))
- *(deps)* Update module
ocm.software/open-component-model/bindings/go/credentials to v0.0.7
([#&#8203;1749](https://redirect.github.com/open-component-model/open-component-model/issues/1749))
- *(deps)* Update ocm monorepo go module dependencies to
[`2b87daf`](https://redirect.github.com/open-component-model/open-component-model/commit/2b87daf)
([#&#8203;1748](https://redirect.github.com/open-component-model/open-component-model/issues/1748))
- *(deps)* Update ocm monorepo go module dependencies (patch)
([#&#8203;1758](https://redirect.github.com/open-component-model/open-component-model/issues/1758))
- *(deps)* Update ocm monorepo go module dependencies to
[`72bf2b7`](https://redirect.github.com/open-component-model/open-component-model/commit/72bf2b7)
([#&#8203;1757](https://redirect.github.com/open-component-model/open-component-model/issues/1757))
- *(deps)* Update ocm monorepo go module dependencies to
[`327ae67`](https://redirect.github.com/open-component-model/open-component-model/commit/327ae67)
([#&#8203;1766](https://redirect.github.com/open-component-model/open-component-model/issues/1766))
- *(deps)* Update ocm monorepo go module dependencies to
[`f181a2a`](https://redirect.github.com/open-component-model/open-component-model/commit/f181a2a)
([#&#8203;1768](htt

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [x] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…onent-model#1995)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](https://redirect.github.com/github/codeql-action/compare/820e3160e279568db735cee8ed8f8e77a6da7818..603b797f8b14b413fe025cd935a91c16c4782713))
| action | digest | `820e316` → `603b797` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/github/codeql-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/github/codeql-action)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni4zIiwidXBkYXRlZEluVmVyIjoiNDMuNzYuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…n-component-model#2000)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `5423e3d` → `9901759` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni41IiwidXBkYXRlZEluVmVyIjoiNDMuNzYuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…o/oci to v0.0.36 (open-component-model#2001)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/oci](https://redirect.github.com/open-component-model/open-component-model)
| require | patch | `v0.0.35` → `v0.0.36` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>open-component-model/open-component-model
(ocm.software/open-component-model/bindings/go/oci)</summary>

###
[`v0.0.36`](https://redirect.github.com/open-component-model/open-component-model/compare/bindings/go/oci/v0.0.35...bindings/go/oci/v0.0.36)

[Compare
Source](https://redirect.github.com/open-component-model/open-component-model/compare/bindings/go/oci/v0.0.35...bindings/go/oci/v0.0.36)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [x] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni41IiwidXBkYXRlZEluVmVyIjoiNDMuNzYuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…open-component-model#2004)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[umbrelladocs/action-linkspector](https://redirect.github.com/umbrelladocs/action-linkspector)
([changelog](https://redirect.github.com/umbrelladocs/action-linkspector/compare/652f85bc57bb1e7d4327260decc10aa68f7694c3..37c85bcde51b30bf929936502bac6bfb7e8f0a4d))
| action | digest | `652f85b` → `37c85bc` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/umbrelladocs/action-linkspector/badge)](https://securityscorecards.dev/viewer/?uri=github.com/umbrelladocs/action-linkspector)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…ent-model#2003)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| postgres | digest | `69e8582` → `98f32d2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Mar 18, 2026
…onent-model#2002)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang | stage | digest | `c7e98cc` → `c42e4d7` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzcuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant