Skip to content

fix(deps): update ocm monorepo go module dependencies#2152

Closed
ocmbot[bot] wants to merge 1 commit into
mainfrom
renovate/ocm-monorepo
Closed

fix(deps): update ocm monorepo go module dependencies#2152
ocmbot[bot] wants to merge 1 commit into
mainfrom
renovate/ocm-monorepo

Conversation

@ocmbot

@ocmbot ocmbot Bot commented Apr 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
ocm.software/open-component-model/bindings/go/cel indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/cel require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/ctf require minor v0.3.0v0.4.0 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/ctf indirect minor v0.3.0v0.4.0 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/normalisation require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/normalisation indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/runtime require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/runtime indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/input/utf8 indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/input/utf8 require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa indirect digest 15c61897045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa require digest 15c61897045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/signing require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/signing indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transfer indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transfer require digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transform indirect digest e1200707045dd6 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transform require digest e1200707045dd6 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

open-component-model/open-component-model (ocm.software/open-component-model/bindings/go/ctf)

v0.4.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 10:00 PM and 12:00 AM through 06:59 AM (* 22,0-6 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@ocmbot ocmbot Bot requested a review from a team as a code owner April 3, 2026 00:43
@github-actions github-actions Bot added kind/bugfix Bug kind/dependency dependency update, etc. size/m Medium labels Apr 3, 2026
@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch 16 times, most recently from 7036c01 to e8156e8 Compare April 7, 2026 10:32
@frewilhelm

Copy link
Copy Markdown
Contributor

I will investigate the regression

@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch from e8156e8 to 5240972 Compare April 7, 2026 10:54
@frewilhelm

Copy link
Copy Markdown
Contributor

The update of ocm.software/open-component-model/bindings/go/ctf v0.4.0 in bindings/go/oci/go.mod introduced the regression.

@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch from 5240972 to 3ff8731 Compare April 7, 2026 11:01
@frewilhelm

Copy link
Copy Markdown
Contributor

After using go work and reverting e2b46f9 the tests were running green again. That is why I suspect that this commit introduced a regression.

@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch 4 times, most recently from c8603ad to b4165b8 Compare April 8, 2026 07:57
@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch from b4165b8 to 66ff444 Compare April 8, 2026 08:03
morri-son pushed a commit to Skarlso/open-component-model that referenced this pull request Apr 8, 2026
…component-model#2174)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it


open-component-model@e2b46f9
introduced a change in
`ocm.software/open-component-model/bindings/go/ctf v0.4.0` that [breaks
tests](https://github.com/open-component-model/open-component-model/actions/runs/24078003573/job/70231212198?pr=2152)
in `bindings/go/oci/ctf`. A
[fix](open-component-model#2049)
is already in progress but it includes a bigger implementation that is
not ready to merge yet. This is why, this PR reverts the version bump
for that module for now.

#### Which issue(s) this PR fixes

Fixes open-component-model#2152 

#### Testing

Run `task test` and `task test/integration`

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
morri-son pushed a commit to morri-son/open-component-model that referenced this pull request Apr 14, 2026
…component-model#2174)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it


open-component-model@e2b46f9
introduced a change in
`ocm.software/open-component-model/bindings/go/ctf v0.4.0` that [breaks
tests](https://github.com/open-component-model/open-component-model/actions/runs/24078003573/job/70231212198?pr=2152)
in `bindings/go/oci/ctf`. A
[fix](open-component-model#2049)
is already in progress but it includes a bigger implementation that is
not ready to merge yet. This is why, this PR reverts the version bump
for that module for now.

#### Which issue(s) this PR fixes

Fixes open-component-model#2152 

#### Testing

Run `task test` and `task test/integration`

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>

Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
morri-son pushed a commit to morri-son/open-component-model that referenced this pull request Apr 15, 2026
…component-model#2174)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

open-component-model@e2b46f9
introduced a change in
`ocm.software/open-component-model/bindings/go/ctf v0.4.0` that [breaks
tests](https://github.com/open-component-model/open-component-model/actions/runs/24078003573/job/70231212198?pr=2152)
in `bindings/go/oci/ctf`. A
[fix](open-component-model#2049)
is already in progress but it includes a bigger implementation that is
not ready to merge yet. This is why, this PR reverts the version bump
for that module for now.

#### Which issue(s) this PR fixes

Fixes open-component-model#2152

#### Testing

Run `task test` and `task test/integration`

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bugfix Bug kind/dependency dependency update, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant