chore(deps): Fix #2192 (update ocm monorepo go module dependencies) (no ctf) by frewilhelm · Pull Request #2194 · open-component-model/open-component-model

frewilhelm · 2026-04-09T05:57:15Z

What this PR does / why we need it

#2192 wants to bump. bindings/go/ctf again. However, this bump breaks other modules until the respective PR (#2049) is merged. That is why this PR reverts the version bump for this module. We might need to do this until the other PR is merged.

Fixes #2192

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>

coderabbitai · 2026-04-09T05:57:31Z

Warning

Rate limit exceeded

@frewilhelm has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 2 minutes and 59 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 2 minutes and 59 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7f084490-dc13-4f5a-a705-ec2406ac1df1

📥 Commits

Reviewing files that changed from the base of the PR and between f5d844f and 1c79532.

⛔ Files ignored due to path filters (2)

bindings/go/helm/go.sum is excluded by !**/*.sum
cli/integration/go.sum is excluded by !**/*.sum

📒 Files selected for processing (2)

bindings/go/helm/go.mod
cli/integration/go.mod

📝 Walkthrough

Walkthrough

Updates Open Component Model Go module bindings across 18 go.mod files, bumping pseudo-versions for dependencies like descriptor/normalisation, descriptor/runtime, helm, signing, and transform from commit 5b24debae3cf to 69b3fc617615.

Changes

Cohort / File(s)	Summary
Descriptor bindings `bindings/go/descriptor/normalisation/go.mod`, `bindings/go/constructor/go.mod`, `bindings/go/helm/go.mod`, `bindings/go/signing/go.mod`, `bindings/go/oci/go.mod`	Bumped `descriptor/runtime` pseudo-version; normalisation and constructor also updated `descriptor/normalisation`.
Input modules `bindings/go/input/dir/go.mod`, `bindings/go/input/file/go.mod`, `bindings/go/input/utf8/go.mod`	Updated indirect dependencies for `descriptor/normalisation` and `descriptor/runtime` to newer pseudo-version.
OCI and plugin modules `bindings/go/oci/integration/go.mod`, `bindings/go/plugin/go.mod`, `bindings/go/repository/go.mod`, `bindings/go/rsa/go.mod`	Bumped `descriptor/runtime`; plugin module also updated `descriptor/normalisation` and `signing`.
Transfer and transform `bindings/go/transfer/go.mod`, `bindings/go/transfer/integration/go.mod`, `bindings/go/transform/go.mod`	Updated multiple direct and indirect dependencies including `descriptor/runtime`, `cel`, `helm`, `signing`, and `transform` to newer pseudo-versions.
CLI modules `cli/go.mod`, `cli/integration/go.mod`, `kubernetes/controller/go.mod`	Broadly updated descriptor, helm, input, rsa, signing, transfer, and transform bindings to consistent newer pseudo-version across dependencies.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

PR #2174: Continues the same pattern of bumping OCM Go module bindings (descriptor/runtime, descriptor/normalisation) to newer commits in the same modules.

Suggested reviewers

jakobmoellerdev
fabianburth

Poem

🐰 Hop along the version trail,
Dependencies now scale!
From debae to fc617,
OCM bindings soar up to heaven,
Update complete, no need to wail!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: updating OCM monorepo Go module dependencies while explicitly excluding the ctf module, directly addressing issue `#2192`.
Description check	✅ Passed	The description explains the PR's purpose: reverting the bindings/go/ctf version bump that was introduced to fix `#2192` because it breaks other modules until PR `#2049` is merged.
Linked Issues check	✅ Passed	The PR successfully addresses the objective from `#2192` by updating multiple Go module dependencies (cel, descriptor/normalisation, descriptor/runtime, helm, input/utf8, rsa, signing, transfer, transform) to newer versions while strategically excluding the ctf module bump.
Out of Scope Changes check	✅ Passed	All changes are in-scope: go.mod files across bindings/go modules and cli/kubernetes are updated to synchronize dependency versions. The intentional exclusion of bindings/go/ctf version bump is a deliberate scope decision, not an out-of-scope change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

…dule dependencies) (no ctf) (open-component-model#2194)  #### What this PR does / why we need it open-component-model#2192 wants to bump. `bindings/go/ctf` again. However, this bump breaks other modules until the respective PR (open-component-model#2049) is merged. That is why this PR reverts the version bump for this module. We might need to do this until the other PR is merged. Fixes open-component-model#2192 --------- Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com> Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com> Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>

ocmbot Bot and others added 2 commits April 9, 2026 00:38

fix(deps): update ocm monorepo go module dependencies

563ff38

revert module bump of bindings/go/ctf

4ee647d

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>

frewilhelm requested a review from a team as a code owner April 9, 2026 05:57

github-actions Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Apr 9, 2026

github-actions Bot added the size/m Medium label Apr 9, 2026

frewilhelm changed the title ~~chore(deps): Fix 2192~~ chore(deps): Fix #2192 (update ocm monorepo go module dependencies) Apr 9, 2026

frewilhelm changed the title ~~chore(deps): Fix #2192 (update ocm monorepo go module dependencies)~~ chore(deps): Fix #2192 (update ocm monorepo go module dependencies) (no ctf) Apr 9, 2026

Merge branch 'main' into fix-2192

f5d844f

frewilhelm mentioned this pull request Apr 9, 2026

fix(deps): update ocm monorepo go module dependencies #2192

Closed

1 task

Skarlso approved these changes Apr 9, 2026

View reviewed changes

Merge branch 'main' into fix-2192

1c79532

morri-son approved these changes Apr 9, 2026

View reviewed changes

morri-son merged commit 6aa6e45 into open-component-model:main Apr 9, 2026
84 of 85 checks passed

coderabbitai Bot mentioned this pull request Apr 16, 2026

feat: 911 helm resource repo #2130

Merged

1 task

This was referenced Apr 28, 2026

fix(deps): fixes update ocm monorepo go module dependencies (patch) (#2331) #2401

Merged

feat(cli): integrate cosign signing handler [2/2] #2346

Merged

coderabbitai Bot mentioned this pull request May 26, 2026

fix(transfer): update dependencies for Open Component Model bindings #2643

Merged

coderabbitai Bot mentioned this pull request Jun 10, 2026

feat(replication): create the workerpool for the transfer resolution service #2750

Open

5 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Fix #2192 (update ocm monorepo go module dependencies) (no ctf)#2194

chore(deps): Fix #2192 (update ocm monorepo go module dependencies) (no ctf)#2194
morri-son merged 4 commits into
open-component-model:mainfrom
frewilhelm:fix-2192

frewilhelm commented Apr 9, 2026

Uh oh!

coderabbitai Bot commented Apr 9, 2026 •

edited

Loading

Rate limit exceeded

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

frewilhelm commented Apr 9, 2026

What this PR does / why we need it

Uh oh!

coderabbitai Bot commented Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Rate limit exceeded

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

coderabbitai Bot commented Apr 9, 2026 •

edited

Loading