Skip to content

fix(deps): fixes update ocm monorepo go module dependencies (patch) (#2331)#2401

Merged
frewilhelm merged 4 commits into
open-component-model:mainfrom
frewilhelm:fix-2331-2
Apr 28, 2026
Merged

fix(deps): fixes update ocm monorepo go module dependencies (patch) (#2331)#2401
frewilhelm merged 4 commits into
open-component-model:mainfrom
frewilhelm:fix-2331-2

Conversation

@frewilhelm

@frewilhelm frewilhelm commented Apr 28, 2026

Copy link
Copy Markdown
Contributor

What this PR does / why we need it

Fixes dependency issues introduced by the automated Renovate dependency update in #2331.

Renovate bumped bindings/go/runtime to v0.0.8 and bindings/go/descriptor/v2 to v2.0.3-alpha3 in some modules, but left descriptor/runtime and descriptor/normalisation still pinned to the old descriptor/v2 v2.0.1-alpha9. Since v2.0.3-alpha3 includes the LocalBlob UpperCamelCase rename (#2323), modules depending on both descriptor/runtime (at v2.0.1-alpha9) and descriptor/v2 (at v2.0.3-alpha3) had an incompatible version mismatch.

The fix updates descriptor/runtime and descriptor/normalisation to also require descriptor/v2 v2.0.3-alpha3, then propagates the aligned versions to all downstream consumers across the workspace.

Which issue(s) this PR fixes

Related to #2331

@frewilhelm frewilhelm requested a review from a team as a code owner April 28, 2026 08:53
@netlify

netlify Bot commented Apr 28, 2026

Copy link
Copy Markdown

Deploy Preview for ocm-website ready!

Name Link
🔨 Latest commit f634897
🔍 Latest deploy log https://app.netlify.com/projects/ocm-website/deploys/69f084ef224809000874c44e
😎 Deploy Preview https://deploy-preview-2401--ocm-website.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions github-actions Bot added kind/bugfix Bug kind/dependency dependency update, etc. labels Apr 28, 2026
@coderabbitai

coderabbitai Bot commented Apr 28, 2026

Copy link
Copy Markdown
Contributor
📝 Walkthrough

Walkthrough

This pull request updates Go module dependency versions across 26 go.mod files in the OCM bindings and CLI packages. Primary version bumps include bindings/go/runtime from v0.0.7 to v0.0.8, configuration from v0.0.12 to v0.0.13, and descriptor/v2 from v2.0.1-alpha9 to v2.0.3-alpha3, with descriptor-related modules advanced to newer pseudo-versions.

Changes

Cohort / File(s) Summary
Core Runtime & Configuration Bindings
bindings/go/blob/go.mod, bindings/go/configuration/go.mod, bindings/go/descriptor/v2/go.mod, bindings/go/generator/go.mod, bindings/go/transform/go.mod
Bumped runtime from v0.0.7 to v0.0.8; configuration incremented to v0.0.13 where applicable.
Descriptor & Normalization Modules
bindings/go/descriptor/normalisation/go.mod, bindings/go/descriptor/runtime/go.mod, bindings/go/signing/go.mod
Advanced descriptor/normalisation and descriptor/runtime to newer pseudo-versions; upgraded descriptor/v2 from v2.0.1-alpha9 to v2.0.3-alpha3 across modules.
Input & Storage Bindings
bindings/go/input/dir/go.mod, bindings/go/input/file/go.mod, bindings/go/input/utf8/go.mod, bindings/go/credentials/go.mod, bindings/go/ctf/go.mod, bindings/go/oci/go.mod
Updated runtime to v0.0.8 and configuration to v0.0.13; synced indirect descriptor dependencies to newer versions across all input variants.
Repository & Plugin Bindings
bindings/go/repository/go.mod, bindings/go/plugin/go.mod, bindings/go/rsa/go.mod, bindings/go/oci/integration/go.mod, bindings/go/helm/go.mod
Bumped configuration, descriptor/runtime, descriptor/v2, and runtime versions consistently; aligned indirect dependencies to match other modules.
Transfer & CLI Modules
bindings/go/transfer/go.mod, bindings/go/transfer/integration/go.mod, cli/go.mod, cli/integration/go.mod, kubernetes/controller/go.mod
Comprehensive dependency updates across transfer, CLI, and Kubernetes controller modules; bumped cel and signing to newer pseudo-versions alongside core module version increments.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

Suggested labels

kind/chore, kind/dependency, size/m

Suggested reviewers

  • morri-son
  • Skarlso
  • fabianburth

Poem

🐰 A hop through the versions we go,
From v0.0.7 to v0.0.8, steady and slow,
Configuration rises to v0.0.13's height,
Descriptor v2 moves to alpha3 light,
Twenty-six modules dance in the night! 🌙

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly describes the main change: updating Go module dependencies across the monorepo to a patch version, which aligns with the comprehensive dependency version bumps shown in all modified go.mod files.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description check ✅ Passed The PR description clearly explains the dependency version mismatch issue, identifies the root cause from PR #2331, describes the specific versions involved, and explains the fix strategy.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions Bot added the size/l Large label Apr 28, 2026
@frewilhelm

Copy link
Copy Markdown
Contributor Author

We need #2402 to land first

frewilhelm added a commit that referenced this pull request Apr 28, 2026
We need to merge
#2402
first because
#2401
is failing as the localblob changes are not present on the controller
image yet

```
  status:
    conditions:
    - lastTransitionTime: "2026-04-28T09:04:15Z"
      message: 'failed to download resource: failed to resolve access type: unsupported
        type: LocalBlob/v1'
```

Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
@frewilhelm frewilhelm enabled auto-merge (squash) April 28, 2026 10:42
@frewilhelm frewilhelm merged commit 19d2aca into open-component-model:main Apr 28, 2026
98 of 99 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bugfix Bug kind/dependency dependency update, etc. size/l Large

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants