Skip to content

fix(deps): update ocm monorepo go module dependencies#2192

Closed
ocmbot[bot] wants to merge 1 commit into
mainfrom
renovate/ocm-monorepo
Closed

fix(deps): update ocm monorepo go module dependencies#2192
ocmbot[bot] wants to merge 1 commit into
mainfrom
renovate/ocm-monorepo

Conversation

@ocmbot

@ocmbot ocmbot Bot commented Apr 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
ocm.software/open-component-model/bindings/go/cel indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/cel require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/ctf require minor v0.3.0v0.4.0 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/ctf indirect minor v0.3.0v0.4.0 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/normalisation require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/normalisation indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/runtime require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/runtime indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm require digest e120070f351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/input/utf8 indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/input/utf8 require digest e120070f351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/signing require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/signing indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transfer indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transfer require digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transform indirect digest 5b24debf351ab5 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transform require digest 5b24debf351ab5 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

open-component-model/open-component-model (ocm.software/open-component-model/bindings/go/ctf)

v0.4.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 10:00 PM and 12:00 AM through 06:59 AM (* 22,0-6 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@ocmbot ocmbot Bot requested a review from a team as a code owner April 9, 2026 00:38
@github-actions github-actions Bot added kind/bugfix Bug kind/dependency dependency update, etc. size/m Medium labels Apr 9, 2026
ocm.software/open-component-model/bindings/go/credentials v0.0.9
ocm.software/open-component-model/bindings/go/ctf v0.3.0
ocm.software/open-component-model/bindings/go/descriptor/runtime v0.0.0-20260407102747-5b24debae3cf
ocm.software/open-component-model/bindings/go/ctf v0.4.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to revert this module bump

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Created a fix in #2194

@frewilhelm frewilhelm self-assigned this Apr 9, 2026
@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch from 563ff38 to 094366e Compare April 9, 2026 05:54
@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch 2 times, most recently from afb13b5 to f8a5b84 Compare April 9, 2026 06:09
@ocmbot

ocmbot Bot commented Apr 9, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: bindings/go/transfer/integration/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
go.opentelemetry.io/otel v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/metric v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/trace v1.42.0 -> v1.43.0

@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch from f8a5b84 to b5b2cdb Compare April 9, 2026 06:15
morri-son pushed a commit that referenced this pull request Apr 9, 2026
…no ctf) (#2194)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

#2192 wants to bump. `bindings/go/ctf` again. However, this bump breaks
other modules until the respective PR (#2049) is merged. That is why
this PR reverts the version bump for this module. We might need to do
this until the other PR is merged.

Fixes #2192

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
morri-son pushed a commit to morri-son/open-component-model that referenced this pull request Apr 14, 2026
…dule dependencies) (no ctf) (open-component-model#2194)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

open-component-model#2192 wants to bump. `bindings/go/ctf` again. However, this bump breaks
other modules until the respective PR (open-component-model#2049) is merged. That is why
this PR reverts the version bump for this module. We might need to do
this until the other PR is merged.

Fixes open-component-model#2192

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>

Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
morri-son pushed a commit to morri-son/open-component-model that referenced this pull request Apr 15, 2026
…dule dependencies) (no ctf) (open-component-model#2194)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

open-component-model#2192 wants to bump. `bindings/go/ctf` again. However, this bump breaks
other modules until the respective PR (open-component-model#2049) is merged. That is why
this PR reverts the version bump for this module. We might need to do
this until the other PR is merged.

Fixes open-component-model#2192

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bugfix Bug kind/dependency dependency update, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant