fix(deps): update ocm monorepo go module dependencies to cb295d4#1338

Merged

ocmbot[bot] merged 1 commit into

mainfrom

renovate/ocm-monorepo

Dec 5, 2025

ocmbot Bot commented Dec 5, 2025

Contributor

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
ocm.software/open-component-model/bindings/go/descriptor/normalisation	require	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/descriptor/normalisation	indirect	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/descriptor/runtime	require	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/descriptor/runtime	indirect	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/input/utf8	indirect	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/input/utf8	require	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/rsa	require	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/rsa	indirect	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/signing	require	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/bindings/go/signing	indirect	digest	`24b8f80` -> `cb295d4`
ocm.software/open-component-model/cli	require	digest	`24b8f80` -> `cb295d4`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Configuration

📅 Schedule: Branch creation - At 10:00 PM and 12:00 AM through 06:59 AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.


          fix(deps): update ocm monorepo go module dependencies to cb295d4

d1bbddb

ocmbot Bot requested a review from a team as a code owner

December 5, 2025 00:32

ocmbot Bot enabled auto-merge (squash)

December 5, 2025 00:32

github-actions Bot added kind/bugfix kind/dependency size/m labels

matthiasbruns approved these changes

View reviewed changes

frewilhelm approved these changes

View reviewed changes

ocmbot Bot merged commit a05ead6 into main

66 checks passed

ocmbot Bot deleted the renovate/ocm-monorepo branch

December 5, 2025 07:48

matthiasbruns pushed a commit to matthiasbruns/open-component-model that referenced this pull request


          feat: cherry pick constructor changes from fix/743_add_cv_version_reg…

1f83369

…exp_constructor

fix(deps): update ocm monorepo go module dependencies to cb295d4 (open-component-model#1338)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/cli](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Signed-off-by: Matthias Bruns <git@matthiasbruns.com>

matthiasbruns pushed a commit to matthiasbruns/open-component-model that referenced this pull request


          feat: cherry pick constructor changes from fix/743_add_cv_version_reg…

78088ec

…exp_constructor

fix(deps): update ocm monorepo go module dependencies to cb295d4 (open-component-model#1338)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/cli](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Signed-off-by: Matthias Bruns <git@matthiasbruns.com>

matthiasbruns pushed a commit to matthiasbruns/open-component-model that referenced this pull request


          feat: cherry pick constructor changes from fix/743_add_cv_version_reg…

4c57925

…exp_constructor

fix(deps): update ocm monorepo go module dependencies to cb295d4 (open-component-model#1338)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/normalisation](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/descriptor/runtime](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/input/utf8](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/rsa](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/bindings/go/signing](https://redirect.github.com/open-component-model/open-component-model)
| indirect | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|
|
[ocm.software/open-component-model/cli](https://redirect.github.com/open-component-model/open-component-model)
| require | digest | `24b8f80` -> `cb295d4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/open-component-model/open-component-model/badge)](https://securityscorecards.dev/viewer/?uri=github.com/open-component-model/open-component-model)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

📅 **Schedule**: Branch creation - At 10:00 PM and 12:00 AM through 06:59
AM ( * 22,0-6 * * * ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Signed-off-by: Matthias Bruns <git@matthiasbruns.com>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bugfix kind/dependency size/m