Skip to content

fix(deps): update ocm monorepo go module dependencies#2235

Closed
ocmbot[bot] wants to merge 1 commit into
mainfrom
renovate/ocm-monorepo
Closed

fix(deps): update ocm monorepo go module dependencies#2235
ocmbot[bot] wants to merge 1 commit into
mainfrom
renovate/ocm-monorepo

Conversation

@ocmbot

@ocmbot ocmbot Bot commented Apr 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
ocm.software/open-component-model/bindings/go/cel indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/cel require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/ctf require minor v0.3.0v0.4.0 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/ctf indirect minor v0.3.0v0.4.0 OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/normalisation require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/normalisation indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/runtime require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/descriptor/runtime indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/helm indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/input/utf8 indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/input/utf8 require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/rsa indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/signing require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/signing indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transfer indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transfer require digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transform indirect digest 69b3fc6fa0b74c OpenSSF Scorecard
ocm.software/open-component-model/bindings/go/transform require digest 69b3fc6fa0b74c OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

open-component-model/open-component-model (ocm.software/open-component-model/bindings/go/ctf)

v0.4.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 10:00 PM and 12:00 AM through 06:59 AM (* 22,0-6 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@ocmbot

ocmbot Bot commented Apr 10, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: bindings/go/transfer/integration/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
go.opentelemetry.io/otel v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/metric v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/trace v1.42.0 -> v1.43.0

@ocmbot ocmbot Bot requested a review from a team as a code owner April 10, 2026 00:56
@netlify

netlify Bot commented Apr 10, 2026

Copy link
Copy Markdown

Deploy Preview for ocm-website canceled.

Name Link
🔨 Latest commit a9a231c
🔍 Latest deploy log https://app.netlify.com/projects/ocm-website/deploys/69d8b685776da1000834392b

morri-son
morri-son previously approved these changes Apr 10, 2026

@frewilhelm frewilhelm left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to revert the bump of the ctf module

@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch 5 times, most recently from d4b2b3a to 4243eeb Compare April 10, 2026 08:26
@ocmbot ocmbot Bot force-pushed the renovate/ocm-monorepo branch from 4243eeb to a9a231c Compare April 10, 2026 08:36
frewilhelm added a commit that referenced this pull request Apr 10, 2026
Reverted `ocm.software/open-component-model/bindings/go/ctf` from
`v0.4.0` back to `v0.3.0` in all 9 consuming modules and ran `go mod
tidy` in each.

Fixes #2235

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
morri-son pushed a commit to morri-son/open-component-model that referenced this pull request Apr 14, 2026
…n-component-model#2237)

Reverted `ocm.software/open-component-model/bindings/go/ctf` from
`v0.4.0` back to `v0.3.0` in all 9 consuming modules and ran `go mod
tidy` in each.

Fixes open-component-model#2235

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>

Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
morri-son pushed a commit to morri-son/open-component-model that referenced this pull request Apr 15, 2026
…n-component-model#2237)

Reverted `ocm.software/open-component-model/bindings/go/ctf` from
`v0.4.0` back to `v0.3.0` in all 9 consuming modules and ran `go mod
tidy` in each.

Fixes open-component-model#2235

---------

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>
Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bugfix Bug kind/dependency dependency update, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants