Skip to content

chore(deps): update module github.com/go-ini/ini to v1.67.2#331

Closed
frewilhelm wants to merge 1 commit into
mainfrom
renovate/github.com-go-ini-ini-1.67.x
Closed

chore(deps): update module github.com/go-ini/ini to v1.67.2#331
frewilhelm wants to merge 1 commit into
mainfrom
renovate/github.com-go-ini-ini-1.67.x

Conversation

@frewilhelm

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Type Update Change OpenSSF
github.com/go-ini/ini indirect patch v1.67.0v1.67.2 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

go-ini/ini (github.com/go-ini/ini)

v1.67.2: 1.67.2

Compare Source

What's Changed

Full Changelog: go-ini/ini@v1.67.1...v1.67.2

v1.67.1: 1.67.1

Compare Source

What's Changed

New Contributors

Full Changelog: go-ini/ini@v1.67.0...v1.67.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@frewilhelm

Copy link
Copy Markdown
Owner Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: website/hack/generate-cli-docs/go.sum
Command failed: go get -t ./...
go: github.com/go-ini/ini@v1.67.2: parsing go.mod:
	module declares its path as: gopkg.in/ini.v1
	        but was required as: github.com/go-ini/ini

@frewilhelm frewilhelm closed this Jun 8, 2026
@frewilhelm frewilhelm deleted the renovate/github.com-go-ini-ini-1.67.x branch June 8, 2026 12:26
jakobmoellerdev pushed a commit that referenced this pull request Jun 8, 2026
…n-component-model#2780)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | OpenSSF |
|---|---|---|---|---|---|
|
[renovatebot/github-action](https://redirect.github.com/renovatebot/github-action)
| action | patch | `v46.1.13` → `v46.1.14` | `v46.1.15` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/renovatebot/github-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/renovatebot/github-action)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>renovatebot/github-action (renovatebot/github-action)</summary>

###
[`v46.1.14`](https://redirect.github.com/renovatebot/github-action/releases/tag/v46.1.14)

[Compare
Source](https://redirect.github.com/renovatebot/github-action/compare/v46.1.13...v46.1.14)

##### Documentation

- Revise Fine-grained Personal Access Tokens section
([#&#8203;1030](https://redirect.github.com/renovatebot/github-action/issues/1030))
([fef7882](https://redirect.github.com/renovatebot/github-action/commit/fef7882e2c7377fd438898944dd399f6d7be271e))
- set `RENOVATE_PLATFORM_COMMIT` to `enabled`
([#&#8203;1029](https://redirect.github.com/renovatebot/github-action/issues/1029))
([9d07dfa](https://redirect.github.com/renovatebot/github-action/commit/9d07dfa4f7a8ee66518d1b08f33ae9814d244dda))
- update references to renovatebot/github-action to v46.1.13
([9a41b99](https://redirect.github.com/renovatebot/github-action/commit/9a41b990c5902829643afc33fd4d5a6f536b36cf))

##### Miscellaneous Chores

- cleanup
([8abcd0e](https://redirect.github.com/renovatebot/github-action/commit/8abcd0e9f084bb83d0df844052c4b31b39f60ef2))
- **deps:** update commitlint monorepo to v20.5.3
([a4e124d](https://redirect.github.com/renovatebot/github-action/commit/a4e124de37c0841853e802687889d3ddb86e4f54))
- **deps:** update dependency globals to v17.6.0
([d5ca6d4](https://redirect.github.com/renovatebot/github-action/commit/d5ca6d4cf379c9db32366fd12dfb619d7baffa36))
- **deps:** update dependency typescript-eslint to v8.59.1
([1dd2319](https://redirect.github.com/renovatebot/github-action/commit/1dd2319cb41680fb027ac17b8703e7fdb3f35e35))
- enable pnpm `minimumReleaseAge`
([00a8327](https://redirect.github.com/renovatebot/github-action/commit/00a83273b5ee2973abb913a7bc81e3ee6cbcebd2))

##### Build System

- **deps:** lock file maintenance
([f6821a2](https://redirect.github.com/renovatebot/github-action/commit/f6821a23ac87497dc0625f5c60001d5eb85d23ef))

##### Continuous Integration

- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.160.7
([1189f69](https://redirect.github.com/renovatebot/github-action/commit/1189f69d1f9835d1c90b27a3b0f679e21f0e1d20))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.162.0
([43d0a48](https://redirect.github.com/renovatebot/github-action/commit/43d0a48b2590acc66b04f9c04fe44d8b66210d76))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.0
([61a1654](https://redirect.github.com/renovatebot/github-action/commit/61a1654b1a1e4ce5e9bb0905af986b1357b0d427))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.1
([4226876](https://redirect.github.com/renovatebot/github-action/commit/42268768581691fe71bebc5d4a54e979b343d643))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.2
([b3318e0](https://redirect.github.com/renovatebot/github-action/commit/b3318e0a24aa6e5849ee6e2783ae9d048b8ffb3e))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.163.4
([09fe3e9](https://redirect.github.com/renovatebot/github-action/commit/09fe3e9361ed5b46f5871b3d3d30b89138fb8cd7))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.164.0
([5736585](https://redirect.github.com/renovatebot/github-action/commit/5736585dd1f36606bb51e36580751eb8b2f927aa))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.164.1
([8b164cc](https://redirect.github.com/renovatebot/github-action/commit/8b164cce79c2d3e1b0378b414055aa32c2e2396b))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.164.2
([44728cc](https://redirect.github.com/renovatebot/github-action/commit/44728cc6496f5d57c674def5fe4437bf43dfb744))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.165.0
([bde1da1](https://redirect.github.com/renovatebot/github-action/commit/bde1da1de34c74300c4145d5d36145ab0ac403a3))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.166.0
([#&#8203;1031](https://redirect.github.com/renovatebot/github-action/issues/1031))
([4b957d1](https://redirect.github.com/renovatebot/github-action/commit/4b957d1cabe8967b8d3d4d1d5e72c336f93acc2c))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.166.2
([499cfeb](https://redirect.github.com/renovatebot/github-action/commit/499cfeb9d6d64e295dbabdc03d6811302dfb44d0))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.166.3
([fe8a943](https://redirect.github.com/renovatebot/github-action/commit/fe8a9436e271c3ae9d0134419fbbbf57fe901665))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.167.0
([f8ca6db](https://redirect.github.com/renovatebot/github-action/commit/f8ca6db77039c7b2df300bf1c0008bb6ca48feb9))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.168.4
([2e15d66](https://redirect.github.com/renovatebot/github-action/commit/2e15d66203e5e5669337f080d41d707e2e30245c))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.168.5
([a87ee3d](https://redirect.github.com/renovatebot/github-action/commit/a87ee3d8ae59775aeabb41bff8b9dffa2a9850dd))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.168.6
([683e7dd](https://redirect.github.com/renovatebot/github-action/commit/683e7dd082e83899dad9e727c8b22e9c472523eb))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.169.0
([f6166e7](https://redirect.github.com/renovatebot/github-action/commit/f6166e7f7b6e4e444589ac774306a55697362bed))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.169.4
([f1f81f9](https://redirect.github.com/renovatebot/github-action/commit/f1f81f959e2f65dfc38f6a71c5720914ad73c37c))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.0
([5473f54](https://redirect.github.com/renovatebot/github-action/commit/5473f54a8f760978d6a2cec08a5e261ce8f0b35e))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.12
([b47aa13](https://redirect.github.com/renovatebot/github-action/commit/b47aa135111049a8f220c25f98f281cac991a585))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.13
([7e8834d](https://redirect.github.com/renovatebot/github-action/commit/7e8834d80efbe46cdcd336f7d8335e94bf5d85e6))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.14
([9b5f9e6](https://redirect.github.com/renovatebot/github-action/commit/9b5f9e6c8f97c2064cef2ba7b7459f424722c8f6))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.15
([98631e8](https://redirect.github.com/renovatebot/github-action/commit/98631e88b8dfa52ea1da739e21e1969f04e88051))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.16
([ab997a9](https://redirect.github.com/renovatebot/github-action/commit/ab997a9588a5a8c80507974d19166d0db4087947))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.17
([24a51e0](https://redirect.github.com/renovatebot/github-action/commit/24a51e0fd8b1677ce32e8c45c661af3f0b5680c6))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.18
([f82d2cd](https://redirect.github.com/renovatebot/github-action/commit/f82d2cd716eb8043a8f8d8458cdcff924d64e4a1))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.19
([3d684f2](https://redirect.github.com/renovatebot/github-action/commit/3d684f2e0788a79e4b276480aaf841539b1899de))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.20
([d7afc6b](https://redirect.github.com/renovatebot/github-action/commit/d7afc6be62e2f314c2e76e6310125bf53563e19d))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.3
([306f0c9](https://redirect.github.com/renovatebot/github-action/commit/306f0c9105ab6cd95a0d354b1539d51731646012))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.8
([f0eea19](https://redirect.github.com/renovatebot/github-action/commit/f0eea19bf3bb50cd26effe5e04e7d78d4c7f56b3))
- **deps:** update ghcr.io/renovatebot/renovate docker tag to v43.170.9
([f3af74e](https://redirect.github.com/renovatebot/github-action/commit/f3af74eb2fa5d6b11658e5b26cf601faf2963d37))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTQuNiIsInVwZGF0ZWRJblZlciI6IjQzLjIxNC42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
frewilhelm pushed a commit that referenced this pull request Jun 9, 2026
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) |
[`v0.50.0` →
`v0.51.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.50.0...refs/tags/v0.51.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.51.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.50.0/v0.51.0?slim=true)
|
| [golang.org/x/mod](https://pkg.go.dev/golang.org/x/mod) | [`v0.35.0` →
`v0.36.0`](https://cs.opensource.google/go/x/mod/+/refs/tags/v0.35.0...refs/tags/v0.36.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fmod/v0.36.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fmod/v0.35.0/v0.36.0?slim=true)
|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.53.0` →
`v0.54.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.53.0...refs/tags/v0.54.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.54.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.53.0/v0.54.0?slim=true)
|
| [golang.org/x/term](https://pkg.go.dev/golang.org/x/term) | [`v0.42.0`
→
`v0.43.0`](https://cs.opensource.google/go/x/term/+/refs/tags/v0.42.0...refs/tags/v0.43.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fterm/v0.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fterm/v0.42.0/v0.43.0?slim=true)
|
| [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.36.0`
→
`v0.37.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.36.0...refs/tags/v0.37.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.37.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.36.0/v0.37.0?slim=true)
|
| [golang.org/x/tools](https://pkg.go.dev/golang.org/x/tools) |
[`v0.44.0` →
`v0.45.0`](https://cs.opensource.google/go/x/tools/+/refs/tags/v0.44.0...refs/tags/v0.45.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftools/v0.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftools/v0.44.0/v0.45.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Only on Sunday (`* * * * 0`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTQuMiIsInVwZGF0ZWRJblZlciI6IjQzLjIxNC42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
frewilhelm pushed a commit that referenced this pull request Jun 9, 2026
…-model#2785)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| devDependencies | patch | [`25.9.1` →
`25.9.2`](https://renovatebot.com/diffs/npm/@types%2fnode/25.9.1/25.9.2)
| [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/DefinitelyTyped/DefinitelyTyped/badge)](https://securityscorecards.dev/viewer/?uri=github.com/DefinitelyTyped/DefinitelyTyped)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTYuMiIsInVwZGF0ZWRJblZlciI6IjQzLjIxNi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
frewilhelm pushed a commit that referenced this pull request Jun 9, 2026
…-model#2748)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `cfe4d0a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/constructor](https://redirect.github.com/open-component-model/open-component-model)
| indirect | patch | `v0.0.9` → `v0.0.10` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/constructor](https://redirect.github.com/open-component-model/open-component-model)
| require | patch | `v0.0.9` → `v0.0.10` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `f40aef5` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `2be2fc9` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `f40aef5` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `7cf81b6` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `c7e5118` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `f87378c` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `c7e5118` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/gpg](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `9cd4df8` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/gpg](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `9cd4df8` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `e4d3ffb` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `fdc0404` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `e4d3ffb` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/oci](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `a86d984` → `41ae441` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `67a18b8` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `2f5bcd0` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `f40aef5` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `c7e5118` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `c7e5118` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `f87378c` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/sigstore](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/sigstore](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/sigstore](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `7cf81b6` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transfer](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transfer](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `aae701a` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1c17fcd` → `60a770f` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At 10:00 PM and 12:00 AM through 06:59 AM (`* 22,0-6 * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjIxNi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
frewilhelm pushed a commit that referenced this pull request Jun 9, 2026
…pen-component-model#2788)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[open-component-model/.github](https://redirect.github.com/open-component-model/.github)
([changelog](https://redirect.github.com/open-component-model/.github/compare/075c873649c1b5b4bbf0b4a0947ecf6eb2e8c538..6bd35dc7288d47e80637bc994f7212be4543258a))
| action | digest | `075c873` → `6bd35dc` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/.github/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/.github)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTYuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Jun 9, 2026
…el#2796)

This PR contains the following updates:

| Package | Type | Update | Change | Pending | OpenSSF |
|---|---|---|---|---|---|
| [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | action |
patch | `v2.8.6` → `v2.8.7` | `v2.8.8` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/fluxcd/flux2/badge)](https://securityscorecards.dev/viewer/?uri=github.com/fluxcd/flux2)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>fluxcd/flux2 (fluxcd/flux2)</summary>

###
[`v2.8.7`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.8.7)

[Compare
Source](https://redirect.github.com/fluxcd/flux2/compare/v2.8.6...v2.8.7)

##### Highlights

Flux v2.8.7 is a patch release that includes a bug fix in
kustomize-controller, a CVE fix in source-controller and
image-automation-controller via go-git v5.19.0, and dependency updates.
Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the [Upgrade Procedure for Flux
v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a
smooth upgrade from Flux v2.6 to the latest version.

Fixes:

- Fix management of objects annotated with
`kustomize.toolkit.fluxcd.io/ssa: IfNotPresent` where non-namespaced
resources were being deleted and recreated on each reconciliation
(kustomize-controller)

Improvements:

- Update go-git to v5.19.0 which fixes
[CVE-2026-45022](https://redirect.github.com/advisories/GHSA-389r-gv7p-r3rp)
(source-controller, image-automation-controller)
- Update fluxcd/pkg dependencies (source-controller,
kustomize-controller, image-automation-controller)

##### Components changelog

- helm-controller
[v1.5.4](https://redirect.github.com/fluxcd/helm-controller/blob/v1.5.4/CHANGELOG.md)
- image-automation-controller
[v1.1.3](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.1.3/CHANGELOG.md)
- kustomize-controller
[v1.8.5](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.8.5/CHANGELOG.md)
- notification-controller
[v1.8.4](https://redirect.github.com/fluxcd/notification-controller/blob/v1.8.4/CHANGELOG.md)
- source-controller
[v1.8.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.8.4/CHANGELOG.md)

##### CLI changelog

- Update toolkit components by
[@&#8203;fluxcdbot](https://redirect.github.com/fluxcdbot) in
[#&#8203;5891](https://redirect.github.com/fluxcd/flux2/pull/5891)

**Full Changelog**:
<fluxcd/flux2@v2.8.6...v2.8.7>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTYuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Jun 10, 2026
…pen-component-model#2805)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token)
| action | minor | `v3.1.1` → `v3.2.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/actions/create-github-app-token/badge)](https://securityscorecards.dev/viewer/?uri=github.com/actions/create-github-app-token)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Release Notes

<details>
<summary>actions/create-github-app-token
(actions/create-github-app-token)</summary>

###
[`v3.2.0`](https://redirect.github.com/actions/create-github-app-token/releases/tag/v3.2.0)

[Compare
Source](https://redirect.github.com/actions/create-github-app-token/compare/v3.1.1...v3.2.0)

##### Features

- add support for enterprise-level GitHub Apps
([#&#8203;263](https://redirect.github.com/actions/create-github-app-token/issues/263))
([952a2a7](https://redirect.github.com/actions/create-github-app-token/commit/952a2a7073df6bfa5f49bc469ec895b6ec1acea4))
- support full repository names in `repositories` input
([#&#8203;372](https://redirect.github.com/actions/create-github-app-token/issues/372))
([85eb8dd](https://redirect.github.com/actions/create-github-app-token/commit/85eb8dd41472213aed25d1a126460e0069138ab6))

##### Bug Fixes

- **deps:** bump
[@&#8203;actions/core](https://redirect.github.com/actions/core) from
3.0.0 to 3.0.1 in the production-dependencies group
([#&#8203;364](https://redirect.github.com/actions/create-github-app-token/issues/364))
([43e5c34](https://redirect.github.com/actions/create-github-app-token/commit/43e5c345bfd4d4f3ecea019ad0042001a09dd857))
- validate private-key input
([#&#8203;376](https://redirect.github.com/actions/create-github-app-token/issues/376))
([f24bbd8](https://redirect.github.com/actions/create-github-app-token/commit/f24bbd89643991c0de27ae823c01791b2c6bafdd))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTcuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Skarlso pushed a commit that referenced this pull request Jun 10, 2026
…-model#2804)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/cel](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/credentials](https://redirect.github.com/open-component-model/open-component-model)
| require | patch | `v0.0.12` → `v0.0.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/credentials](https://redirect.github.com/open-component-model/open-component-model)
| indirect | patch | `v0.0.12` → `v0.0.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `3782e7b` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `3782e7b` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `3782e7b` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `3782e7b` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/gpg](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/gpg](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/helm](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/oci](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/sigstore](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/sigstore](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transfer](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transfer](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/transform](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `1aefd34` → `e2b1602` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At 10:00 PM and 12:00 AM through 06:59 AM (`* 22,0-6 * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTcuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
frewilhelm pushed a commit that referenced this pull request Jun 10, 2026
…open-component-model#2806)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[umbrelladocs/action-linkspector](https://redirect.github.com/umbrelladocs/action-linkspector)
([changelog](https://redirect.github.com/umbrelladocs/action-linkspector/compare/036f295d12b67b0c4b445bc83db0538afb78db69..15f97e56ba84c3f637f2b35035c159c871ae6bb3))
| action | digest | `036f295` → `15f97e5` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/umbrelladocs/action-linkspector/badge)](https://securityscorecards.dev/viewer/?uri=github.com/umbrelladocs/action-linkspector)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/331) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTguMCIsInVwZGF0ZWRJblZlciI6IjQzLjIxOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant