[0.9.0-rc.1] - 2026-06-02

🚀 Features

• Wire GPG signing handler into CLI builtin plugins (#2675)

🐛 Bug Fixes

• (cli) Eliminate flicker in transfer progress renderer (#2647)

📚 Dependencies

• (deps) Update module github.com/moby/moby/client to v0.4.1 (#2625)
• (deps) Update module ocm.software/open-component-model/bindings/go/configuration to v0.0.14 (#2677)
• (deps) Update ocm monorepo go module dependencies (#2664)
• (deps) Update kubernetes dependencies to v0.36.0 (#2654)
• (deps) Update module github.com/masterminds/semver/v3 to v3.5.0 (#2713)
• (deps) Update module github.com/klauspost/compress to v1.18.6 (#2693)
• (deps) Update module github.com/google/cel-go to v0.28.1 (#2698)
• (deps) Update module github.com/onsi/gomega to v1.40.0 (#2714)
• (deps) Update module github.com/shirou/gopsutil/v4 to v4.26.4 (#2695)
• (deps) Update module go.uber.org/zap to v1.28.0 (#2710)
• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to ef984a5 (#2690)
• (deps) Update module go.yaml.in/yaml/v4 to v4.0.0-rc.4 (#2697)
• (deps) Update module github.com/jedib0t/go-pretty/v6 to v6.7.10 (#2699)
• (deps) Update module github.com/fsnotify/fsnotify to v1.10.0 (#2706)
• (deps) Update ocm monorepo go module dependencies to 2e5bac0 (#2686)
• (deps) Update module github.com/onsi/ginkgo/v2 to v2.28.3 (#2700)

⚙️ Miscellaneous Tasks

• Apply patch for helm bug (#2722)

Quick installation and usage guide

CLI

Install the latest version of the OCM CLI:

curl -sfL https://ocm.software/install-cli.sh | bash

(For more installation options, see the installation guide.)

You can also run the OCM CLI in a container without installing it:

docker run --rm -t ghcr.io/open-component-model/cli:latest --help

See the container image guide for more details.

Controller

Install the latest version of the OCM Controllers into a Kubernetes cluster via Helm:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart \
--namespace ocm-k8s-toolkit-system \
--create-namespace

See the controller setup guide for more details.

Community & Contributors

This release we had a total of 4 contributors!
If you want to engage with us, check our community page!

Note

NOTE: Because this is the first canonically released single version in this repository, which is a deviation from the previous method of releasing ( cli/v0.x and kubernetes/controller/v0.x ), this release note now contains all commits from the begin of time; since there was no previous such tag v0.N.

[0.8.0] - promoted from [0.8.0-rc.1] on 2026-06-02

🚀 Features

• Migrate configuration v1 (#35)
• Setup the OCM CLI with Cobra and automatically generate its reference documentation (#50)
• Logging flags for configurable logging in the CLI (#83)
• Add component references to CLI internals (#86)
• Setup get component version command (#82)
• Introduce file / path flag (#242)
• Update the cli to use the latest plugin package (#284)
• Add component version command (#189)
• Ocm version command (#354)
• ocm download resource command (#372)
• Configuration for file-system config types for plugins and internal plugins (#390)
• (cli) Update to use repository module (#439)
• (cli) Build and create a CTF containing the OCM CLI with multiple Architectures and Operating Systems (#413)
• Add dir input to cli (#450)
• Download plugins from a component version (#473)
• (cli) Add plugin shutdown timeout flag (#569)
• (cli) Add tree renderer (#511)
• (cli) Add support for default plugin directory flag (#570)
• (cli) Json/yaml graph renderer (#574)
• Dir and file updates to support working dir (#591)
• (565) Relative file pointers dir input e2e (#613)
• Setup helm blob transformer that can extract OCI layouts (#530)
• (cli) [breaking] Ocm get cv --recursive (#604)
• Add support for OCI repository pattern for add component version (#628)
• (verification) Update resolver handling for component verification (#872)
• Adjust cli to updated constructor (and plugins and credentials) (#889)
• (cli) Sign/verify support (#895)
• Add component construction with external references (#1009)
• Create a migration infrastructure for context and configuration v1=>v2 (#1014)
• Component lister internal plugin for CTF (#1045)
• (cli) Resolver integration (#1053)
• (cli) Add support for multi-architecture container images (#1058)
• (ci) Overhaul CLI workflow for enhanced artifact generation and publishing (#1073)
• Component version resolution service (#1055)
• ocm get cv <ctf_dir> (#1068)
• (697) Recursive cleanup (#1076)
• Improve download plugin UX and add help for helm input plugin (#1144)
• Adjust resolution service to provide repositories and component versions (#1145)
• Add command to manage plugins (#1190)
• (scheme) Expose scheme retrieval methods for internal plugins (#1268)
• Add JSON Schema generator for Go structs (#1219)
• (manager) Add GetJSONSchemaForRepositorySpecification method (#1283)
• Migrate the component version controller to v2 (#1188)
• Migrate the repository controller to ocm v2 (#1322)
• Minimal transfer command implementation (#1405)
• Add event source for triggering component version objects (#1433)
• [breaking] Migrating the resource controller to use v2 (#1452)
• Recursive cv transfer support (#1506)
• Migrate the deployment controller to v2 (#1563)
• (helm) Add helm chart with updated E2E test workflow (#1670)
• (hacks) Update KRO to v0.8.1 (#1679)
• Transfer local blobs by default (#1669)
• (624) Implement apply sets from kro for deployer #624 (#1335)
• Add component reference resolvers to the controller (#1635)
• Use new resource repo bindings for oci (#1718)
• (cli) Add describe command for detailing OCM entities and metadata (#1554)
• Add progress tracking for transformation execution (#1702)
• [breaking] Make OCM configurations propagate through resource reference (#1752)
• (850) Remove kro permissions and create a small guide to update their permissions if necessary (#1750)
• Register helm as inbuilt input plugin (#1756)
• Oci artifact cli (#1684)
• Oci artifact uploader (#1765)
• Warn instead of info if upload-as is ociArtifact and copy-resources is missing (#1824)
• Remove compref package from cli (#1941)
• (883) Helm transfer cli (#1846)
• (docs) Use same diagram as on the website with proper light/dark support (#1955)
• Whitelist ocm config types (#1998)
• Update toOCI to handle OCI and localBlob transparently (#1943)
• (913) [breaking] Object in status field (#2008)
• Register helm digest processor plugin (#2076)
• Add --transfer-spec flag for two-step transfer workflow (#2077)
• Rename ocm-resource-repository subsystem to access in describe types (#2083)
• Increase resolver worker queue length from 100 to 1000 (#2085)
• Const with reference digest (#2084)
• (cli) Add full PEM encoding support for signing and verifying component versions (#2147)
• (controller) Move configuration from internal to pkg (#2281)
• 911 helm resource repo (#2130)
• Add conversion webhook to the controller (#2274)
• (cli) Add progress renderer with phase tracking and animated vis… (#2132)
• Make event subscriber buffer size configurable (#2282)
• Remove the config folder and generate rbac and crds with helm templating enabled (#2363)
• Add how-to about verifying component versions with controllers (#2407)
• (cli) Add version update notification (#2491)
• (cli) Integrate cosign signing handler [2/2] (#2346)
• [breaking] Migrate transfer and controller bindings to runtime.Typed credentials (gate 7) (#2616)
• Cli credentials rollout (#2642)
• Unified release flow for a single github release version (#2468)

🐛 Bug Fixes

• Fixup golangci v2 run (#155)
• Make it so that locations without plugins don't generate warning messages (#214)
• Default log level to info (#222)
• Concurrent intermediary step to ensure we install once and then run concurrently (#301)
• Set the temp folder flag on change (#441)
• Make sure we do not ignore defer without a named return (#449)
• Support plain http in component repository (#484)
• (cli) Correct default value for --logoutput in CLI docs (#571)
• Use environment property if defined and fall back to gh otherwise (#588)
• Run plugin download integration separately as a go module (#581)
• (ci) Properly generate and add repo checkout to generate (#610)
• (ci) Properly generate and add repo checkout to generate (#611)
• (ci) Properly generate and add repo checkout to generate (#612)
• (cli) Fixup / refactor filesystem config handling (#615)
• (ci) Streamline docker build and push process for multi-architecture support (#698)
• (tests) Improve resource reconciliation and cleanup logic (#827)
• (tests) Increase default operation timeout for Kubernetes tests (#853)
• (ctf) Add support for recognizing additional CTF archive files: tar.gz, tgz, tar (#651) (#882)
• In some cases golangci-lint will fail parsing a comment with a URL (#888)
• (oci) Fix repository detection for OCI URLs with IP addresses (#894)
• Use cobra.Finalize instead of PersistentPostRunE (#984)
• (cli) Multi ctf repo race (#965)
• Linting controller after upgrade to golangci lint 2.5.0 (#1007)
• Typo in docs (#1024)
• Use the correct credential configuration in download test (#1038)
• Ward against nil error if resource is not filled in (#1069)
• Revert changing the CLI image to debian (#1102)
• Add dynamic RESTMapper integration and improve defaulting for unstructured resources in deployer_controller (#1104)
• Ensure verbose logs during tests for better diagnostics (#1186)
• (cmd) Improve error message for rendering components (#1217)
• Add subPath to OCI repository spec implementation (#1231)
• (737) Handle credentials resolution correctly (#1191)
• (oci) Update dependencies to simplified plugin registration (#1325)
• Helm input plugin validation fix (#1336)
• (controllers) Usage of k8s secret dockerconfigjson (#1353)
• Use the latest runtime package to fix the none deterministic failure (#1392)
• 743 add semver check cli tests (#1341)
• Rm nested fields and descriptor scheme (#1391)
• (controller) Resource lookup by reference in deployer (#1400)
• (cmd) Correct transformation type assignment in upload metadata (#1407)
• (revert) "chore(deps): update module github.com/mikefarah/yq/v4 to v4.48.2 (#1418)" (#1441)
• Make sure correct resource identity type is used (#1447)
• (controllers) Do not return an error when digest is not available (#1503)
• Pin the node version to 1.34 so it does not upgrade to an unsupported version (#1520)
• Prepare for having more than one listener for the resource channel (#1528)
• Pin the kube version for kind in the .env file (#1521)
• Remove double checking of config (#1629)
• Ignore shutdown try if the process is already done (#1662)
• Transfer localblobs with relation external (#1729)
• Use a runtime.Type type switch instead of a string match (#1760)
• Update the configuration to 0.0.10 and fix the resolver prepending a catch-all incorrectly (#1773)
• Use the right k8sClient in the repository suite (#1797)
• Transformer carry over signatures (#1798)
• Various cli fixes on transfer and construction behavior (#1807)
• Oci upload behavior (#1806)
• Context being cancelled prematurely and adjusting flux api version for objects (#1830)
• Update the chart name to chart to push under kubernetes/controller/chart (#1848)
• (1776) Ctf detection on windows absolute paths (#1792)
• (cli) Transfer respect resolvers (#1888)
• Release note creation (#1893)
• (1388) Fix auto decompress for download resources (#1800)
• Testdata location in cli tests (#1921)
• ServiceAccount name in custom RBAC documentation (#1935)
• Error checking and prune bool check upon HasPruned and removed some dead code (#1897)
• [breaking] Move verification to resolution service (#1707)
• Register oci type instead of AnyConsumerIdentityType (#1890)
• AddComponentVersion was writing to the same file (#2013)
• Usage of corr...

Note

NOTE: Because this is the first canonically released single version in this repository, which is a deviation from the previous method of releasing ( cli/v0.x and kubernetes/controller/v0.x ), this release note now contains all commits from the begin of time; since there was no previous such tag v0.N.

[0.8.0-rc.1] - 2026-05-27

🚀 Features

• Migrate configuration v1 (#35)
• Setup the OCM CLI with Cobra and automatically generate its reference documentation (#50)
• Logging flags for configurable logging in the CLI (#83)
• Add component references to CLI internals (#86)
• Setup get component version command (#82)
• Introduce file / path flag (#242)
• Update the cli to use the latest plugin package (#284)
• Add component version command (#189)
• Ocm version command (#354)
• ocm download resource command (#372)
• Configuration for file-system config types for plugins and internal plugins (#390)
• (cli) Update to use repository module (#439)
• (cli) Build and create a CTF containing the OCM CLI with multiple Architectures and Operating Systems (#413)
• Add dir input to cli (#450)
• Download plugins from a component version (#473)
• (cli) Add plugin shutdown timeout flag (#569)
• (cli) Add tree renderer (#511)
• (cli) Add support for default plugin directory flag (#570)
• (cli) Json/yaml graph renderer (#574)
• Dir and file updates to support working dir (#591)
• (565) Relative file pointers dir input e2e (#613)
• Setup helm blob transformer that can extract OCI layouts (#530)
• (cli) [breaking] Ocm get cv --recursive (#604)
• Add support for OCI repository pattern for add component version (#628)
• (verification) Update resolver handling for component verification (#872)
• Adjust cli to updated constructor (and plugins and credentials) (#889)
• (cli) Sign/verify support (#895)
• Add component construction with external references (#1009)
• Create a migration infrastructure for context and configuration v1=>v2 (#1014)
• Component lister internal plugin for CTF (#1045)
• (cli) Resolver integration (#1053)
• (cli) Add support for multi-architecture container images (#1058)
• (ci) Overhaul CLI workflow for enhanced artifact generation and publishing (#1073)
• Component version resolution service (#1055)
• ocm get cv <ctf_dir> (#1068)
• (697) Recursive cleanup (#1076)
• Improve download plugin UX and add help for helm input plugin (#1144)
• Adjust resolution service to provide repositories and component versions (#1145)
• Add command to manage plugins (#1190)
• (scheme) Expose scheme retrieval methods for internal plugins (#1268)
• Add JSON Schema generator for Go structs (#1219)
• (manager) Add GetJSONSchemaForRepositorySpecification method (#1283)
• Migrate the component version controller to v2 (#1188)
• Migrate the repository controller to ocm v2 (#1322)
• Minimal transfer command implementation (#1405)
• Add event source for triggering component version objects (#1433)
• [breaking] Migrating the resource controller to use v2 (#1452)
• Recursive cv transfer support (#1506)
• Migrate the deployment controller to v2 (#1563)
• (helm) Add helm chart with updated E2E test workflow (#1670)
• (hacks) Update KRO to v0.8.1 (#1679)
• Transfer local blobs by default (#1669)
• (624) Implement apply sets from kro for deployer #624 (#1335)
• Add component reference resolvers to the controller (#1635)
• Use new resource repo bindings for oci (#1718)
• (cli) Add describe command for detailing OCM entities and metadata (#1554)
• Add progress tracking for transformation execution (#1702)
• [breaking] Make OCM configurations propagate through resource reference (#1752)
• (850) Remove kro permissions and create a small guide to update their permissions if necessary (#1750)
• Register helm as inbuilt input plugin (#1756)
• Oci artifact cli (#1684)
• Oci artifact uploader (#1765)
• Warn instead of info if upload-as is ociArtifact and copy-resources is missing (#1824)
• Remove compref package from cli (#1941)
• (883) Helm transfer cli (#1846)
• (docs) Use same diagram as on the website with proper light/dark support (#1955)
• Whitelist ocm config types (#1998)
• Update toOCI to handle OCI and localBlob transparently (#1943)
• (913) [breaking] Object in status field (#2008)
• Register helm digest processor plugin (#2076)
• Add --transfer-spec flag for two-step transfer workflow (#2077)
• Rename ocm-resource-repository subsystem to access in describe types (#2083)
• Increase resolver worker queue length from 100 to 1000 (#2085)
• Const with reference digest (#2084)
• (cli) Add full PEM encoding support for signing and verifying component versions (#2147)
• (controller) Move configuration from internal to pkg (#2281)
• 911 helm resource repo (#2130)
• Add conversion webhook to the controller (#2274)
• (cli) Add progress renderer with phase tracking and animated vis… (#2132)
• Make event subscriber buffer size configurable (#2282)
• Remove the config folder and generate rbac and crds with helm templating enabled (#2363)
• Add how-to about verifying component versions with controllers (#2407)
• (cli) Add version update notification (#2491)
• (cli) Integrate cosign signing handler [2/2] (#2346)
• [breaking] Migrate transfer and controller bindings to runtime.Typed credentials (gate 7) (#2616)
• Cli credentials rollout (#2642)
• Unified release flow for a single github release version (#2468)

🐛 Bug Fixes

• Fixup golangci v2 run (#155)
• Make it so that locations without plugins don't generate warning messages (#214)
• Default log level to info (#222)
• Concurrent intermediary step to ensure we install once and then run concurrently (#301)
• Set the temp folder flag on change (#441)
• Make sure we do not ignore defer without a named return (#449)
• Support plain http in component repository (#484)
• (cli) Correct default value for --logoutput in CLI docs (#571)
• Use environment property if defined and fall back to gh otherwise (#588)
• Run plugin download integration separately as a go module (#581)
• (ci) Properly generate and add repo checkout to generate (#610)
• (ci) Properly generate and add repo checkout to generate (#611)
• (ci) Properly generate and add repo checkout to generate (#612)
• (cli) Fixup / refactor filesystem config handling (#615)
• (ci) Streamline docker build and push process for multi-architecture support (#698)
• (tests) Improve resource reconciliation and cleanup logic (#827)
• (tests) Increase default operation timeout for Kubernetes tests (#853)
• (ctf) Add support for recognizing additional CTF archive files: tar.gz, tgz, tar (#651) (#882)
• In some cases golangci-lint will fail parsing a comment with a URL (#888)
• (oci) Fix repository detection for OCI URLs with IP addresses (#894)
• Use cobra.Finalize instead of PersistentPostRunE (#984)
• (cli) Multi ctf repo race (#965)
• Linting controller after upgrade to golangci lint 2.5.0 (#1007)
• Typo in docs (#1024)
• Use the correct credential configuration in download test (#1038)
• Ward against nil error if resource is not filled in (#1069)
• Revert changing the CLI image to debian (#1102)
• Add dynamic RESTMapper integration and improve defaulting for unstructured resources in deployer_controller (#1104)
• Ensure verbose logs during tests for better diagnostics (#1186)
• (cmd) Improve error message for rendering components (#1217)
• Add subPath to OCI repository spec implementation (#1231)
• (737) Handle credentials resolution correctly (#1191)
• (oci) Update dependencies to simplified plugin registration (#1325)
• Helm input plugin validation fix (#1336)
• (controllers) Usage of k8s secret dockerconfigjson (#1353)
• Use the latest runtime package to fix the none deterministic failure (#1392)
• 743 add semver check cli tests (#1341)
• Rm nested fields and descriptor scheme (#1391)
• (controller) Resource lookup by reference in deployer (#1400)
• (cmd) Correct transformation type assignment in upload metadata (#1407)
• (revert) "chore(deps): update module github.com/mikefarah/yq/v4 to v4.48.2 (#1418)" (#1441)
• Make sure correct resource identity type is used (#1447)
• (controllers) Do not return an error when digest is not available (#1503)
• Pin the node version to 1.34 so it does not upgrade to an unsupported version (#1520)
• Prepare for having more than one listener for the resource channel (#1528)
• Pin the kube version for kind in the .env file (#1521)
• Remove double checking of config (#1629)
• Ignore shutdown try if the process is already done (#1662)
• Transfer localblobs with relation external (#1729)
• Use a runtime.Type type switch instead of a string match (#1760)
• Update the configuration to 0.0.10 and fix the resolver prepending a catch-all incorrectly (#1773)
• Use the right k8sClient in the repository suite (#1797)
• Transformer carry over signatures (#1798)
• Various cli fixes on transfer and construction behavior (#1807)
• Oci upload behavior (#1806)
• Context being cancelled prematurely and adjusting flux api version for objects (#1830)
• Update the chart name to chart to push under kubernetes/controller/chart (#1848)
• (1776) Ctf detection on windows absolute paths (#1792)
• (cli) Transfer respect resolvers (#1888)
• Release note creation (#1893)
• (1388) Fix auto decompress for download resources (#1800)
• Testdata location in cli tests (#1921)
• ServiceAccount name in custom RBAC documentation (#1935)
• Error checking and prune bool check upon HasPruned and removed some dead code (#1897)
• [breaking] Move verification to resolution service (#1707)
• Register oci type instead of AnyConsumerIdentityType (#1890)
• AddComponentVersion was writing to the same file (#2013)
• Usage of correct scheme when converti...

[kubernetes/controller/v0.7.0] - promoted from [kubernetes/controller/v0.7.0-rc.2] on 2026-05-27

📚 Dependencies

• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to 89c0426 (#2447)
• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to 7d0d8d1 (#2454)
• (deps) Update golang x repositories (minor) (#2477)
• (deps) Update module github.com/docker/cli to v29.4.0+incompatible (#2478)
• (deps) Update module github.com/google/cel-go to v0.28.0 (#2479)
• (deps) Update gcr.io/distroless/static:nonroot docker digest to 963fa6c (#2551)
• (deps) Update module cel.dev/expr to v0.25.2 (#2524)
• (deps) Update module sigs.k8s.io/release-utils to v0.12.4 (#2537)
• (deps) Update kubernetes dependencies (#2534)
• (deps) Update go-openapi packages (#2538)
• (deps) Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.0 (#2550)
• (deps) Renovate/patch golang versions 1.26.3 (#2556)

⚙️ Miscellaneous Tasks

• (website) Adjust onboarding guide (#2496)

📚 Documentation

• (docs) Add support for .dockerconfigjson format in docstring (#2457)
• (docs) Add onboarding and how we work guide (#2444)

Quick installation and usage guide

To install the latest version of the OCM Controllers into an existing kubernetes cluster,
you can use our Helm chart:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart --namespace ocm-k8s-toolkit-system --create-namespace

Check out our guide on how to set up
OCM Controller environments for more details.

Community & Contributors

This release we had a total of 4 contributors!
If you want to engage with us, check our community page!

[cli/v0.7.0] - promoted from [cli/v0.7.0-rc.2] on 2026-05-27

🚀 Features

• (cli) Add version update notification (#2491)

🐛 Bug Fixes

• (cli) Remove duplicate v prefix in version check URL (#2555)

📚 Dependencies

• (deps) Update ocm monorepo go module dependencies to 55909b1 (#2438)
• (deps) Update debian:bookworm-slim docker digest to 67b30a6 (#2472)
• (deps) Update testcontainers-go monorepo to v0.42.0 (#2480)
• (deps) Update module github.com/google/cel-go to v0.28.0 (#2479)
• (deps) Update module cel.dev/expr to v0.25.2 (#2524)
• (deps) Update module github.com/mattn/go-runewidth to v0.0.23 (#2530)
• (deps) Update kubernetes dependencies (#2534)
• (deps) Update module github.com/jedib0t/go-pretty/v6 to v6.7.9 (#2535)
• (deps) Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.68.0 (#2547)
• (deps) Update go-openapi packages (#2538)
• (deps) Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.0 (#2550)
• (deps) Renovate/patch golang versions 1.26.3 (#2556)
• (deps) Update module github.com/docker/go-connections to v0.7.0 (#2542)

📚 Documentation

• (docs) Add onboarding and how we work guide (#2444)

Test

• (cli) UpperCamelCase - add input type casing tests for all input types in CLI (#2071)

Quick installation and usage guide

To install the latest version of OCM, you can use the following command:

curl -sfL https://ocm.software/install-cli.sh | bash

(For more installation options, check out our installation guide.)

You can also use our container to run OCM without installing it:

docker run -t ghcr.io/open-component-model/cli:latest --help

Check out our guide on how to use the
OCM CLI container image for more details.

Community & Contributors

This release we had a total of 5 contributors!
If you want to engage with us, check our community page!

[kubernetes/controller/v0.7.0-rc.2] - 2026-05-20

📚 Dependencies

• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to 89c0426 (#2447)
• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to 7d0d8d1 (#2454)
• (deps) Update golang x repositories (minor) (#2477)
• (deps) Update module github.com/docker/cli to v29.4.0+incompatible (#2478)
• (deps) Update module github.com/google/cel-go to v0.28.0 (#2479)
• (deps) Update gcr.io/distroless/static:nonroot docker digest to 963fa6c (#2551)
• (deps) Update module cel.dev/expr to v0.25.2 (#2524)
• (deps) Update module sigs.k8s.io/release-utils to v0.12.4 (#2537)
• (deps) Update kubernetes dependencies (#2534)
• (deps) Update go-openapi packages (#2538)
• (deps) Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.0 (#2550)
• (deps) Renovate/patch golang versions 1.26.3 (#2556)

⚙️ Miscellaneous Tasks

• (website) Adjust onboarding guide (#2496)

📚 Documentation

• (docs) Add support for .dockerconfigjson format in docstring (#2457)
• (docs) Add onboarding and how we work guide (#2444)

Quick installation and usage guide

To install the latest version of the OCM Controllers into an existing kubernetes cluster,
you can use our Helm chart:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart --namespace ocm-k8s-toolkit-system --create-namespace

Check out our guide on how to set up
OCM Controller environments for more details.

Community & Contributors

This release we had a total of 4 contributors!
If you want to engage with us, check our community page!

[cli/v0.7.0-rc.2] - 2026-05-20

🚀 Features

• (cli) Add version update notification (#2491)

🐛 Bug Fixes

• (cli) Remove duplicate v prefix in version check URL (#2555)

📚 Dependencies

• (deps) Update ocm monorepo go module dependencies to 55909b1 (#2438)
• (deps) Update debian:bookworm-slim docker digest to 67b30a6 (#2472)
• (deps) Update testcontainers-go monorepo to v0.42.0 (#2480)
• (deps) Update module github.com/google/cel-go to v0.28.0 (#2479)
• (deps) Update module cel.dev/expr to v0.25.2 (#2524)
• (deps) Update module github.com/mattn/go-runewidth to v0.0.23 (#2530)
• (deps) Update kubernetes dependencies (#2534)
• (deps) Update module github.com/jedib0t/go-pretty/v6 to v6.7.9 (#2535)
• (deps) Update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.68.0 (#2547)
• (deps) Update go-openapi packages (#2538)
• (deps) Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.0 (#2550)
• (deps) Renovate/patch golang versions 1.26.3 (#2556)
• (deps) Update module github.com/docker/go-connections to v0.7.0 (#2542)

📚 Documentation

• (docs) Add onboarding and how we work guide (#2444)

Test

• (cli) UpperCamelCase - add input type casing tests for all input types in CLI (#2071)

Quick installation and usage guide

To install the latest version of OCM, you can use the following command:

curl -sfL https://ocm.software/install-cli.sh | bash

(For more installation options, check out our installation guide.)

You can also use our container to run OCM without installing it:

docker run -t ghcr.io/open-component-model/cli:latest --help

Check out our guide on how to use the
OCM CLI container image for more details.

Community & Contributors

This release we had a total of 5 contributors!
If you want to engage with us, check our community page!

[kubernetes/controller/v0.6.0] - promoted from [kubernetes/controller/v0.6.0-rc.1] on 2026-05-19

🚀 Features

• Remove the config folder and generate rbac and crds with helm templating enabled (#2363)
• Add how-to about verifying component versions with controllers (#2407)

🐛 Bug Fixes

• Use unused values from the helm values section (#2376)
• Update module ocm.software/open-component-model/bindings/go/oci to v0.0.40 (#2331) (#2352)

📚 Dependencies

• (deps) Update ocm monorepo go module dependencies to 6c826cf (#2369)
• (deps) Update ocm monorepo go module dependencies to 9db63a2 (#2372)
• (deps) Update ocm monorepo go module dependencies to 5236fa6 (#2382)
• (deps) Update github.com/opencontainers/go-digest digest to acc66fb (#2390)
• (deps) Update module github.com/docker/cli to v29.3.1+incompatible (#2393)
• (deps) Update module golang.org/x/sys to v0.43.0 (#2395)
• (deps) Bump version modules in controller (#2402)
• (deps) Update ocm monorepo go module dependencies to 4fdf352 (#2385)
• (deps) Fix update module ocm.software/open-component-model/bindings/go/credentials to v0.0.10 (#2331) (#2410)
• (deps) Update ocm monorepo go module dependencies to bf0b7e5 (#2412)
• (deps) Update module github.com/fxamacker/cbor/v2 to v2.9.1 (#2424)
• (deps) Update github.com/google/pprof digest to 545e8a4 (#2422)
• (deps) Update ocm monorepo go module dependencies to cae869f (#2415)

⚙️ Miscellaneous Tasks

• Controller - update LocalBlob/v1 type assertions to UpperCamelCase [4/4] (#2326)
• Fix CVE-2026-33186 for grpc go below 1.80.1 (#2443)

📚 Documentation

• (docs) Sync contributing guides (#2285)

Quick installation and usage guide

To install the latest version of the OCM Controllers into an existing kubernetes cluster,
you can use our Helm chart:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart --namespace ocm-k8s-toolkit-system --create-namespace

Check out our guide on how to set up
OCM Controller environments for more details.

Community & Contributors

This release we had a total of 4 contributors!
If you want to engage with us, check our community page!

[cli/v0.6.0] - promoted from [cli/v0.6.0-rc.1] on 2026-05-19

🐛 Bug Fixes

• Update module ocm.software/open-component-model/bindings/go/oci to v0.0.40 (#2331) (#2352)

📚 Dependencies

• (deps) Update ocm monorepo go module dependencies to 6c826cf (#2369)
• (deps) Update ocm monorepo go module dependencies to 9db63a2 (#2372)
• (deps) Update ocm monorepo go module dependencies to 5236fa6 (#2382)
• (deps) Update module golang.org/x/sys to v0.43.0 (#2395)
• (deps) Update module github.com/moby/patternmatcher to v0.6.1 (#2392)
• (deps) Fixes update ocm monorepo go module dependencies (patch) (#2331) (#2401)
• (deps) Update ocm monorepo go module dependencies to 4fdf352 (#2385)
• (deps) Fix update module ocm.software/open-component-model/bindings/go/credentials to v0.0.10 (#2331) (#2410)
• (deps) Update ocm monorepo go module dependencies to bf0b7e5 (#2412)
• (deps) Update module github.com/fxamacker/cbor/v2 to v2.9.1 (#2424)
• (deps) Update github.com/lufia/plan9stats digest to c963978 (#2423)
• (deps) Update ocm monorepo go module dependencies to cae869f (#2415)

⚙️ Miscellaneous Tasks

• Cli - update LocalBlob/v1 assertions to UpperCamelCase [3/4] (#2325)
• Fix CVE-2026-33186 for grpc go below 1.80.1 (#2443)

📚 Documentation

• (docs) Sync contributing guides (#2285)

Quick installation and usage guide

To install the latest version of OCM, you can use the following command:

curl -sfL https://ocm.software/install-cli.sh | bash

(For more installation options, check out our installation guide.)

You can also use our container to run OCM without installing it:

docker run -t ghcr.io/open-component-model/cli:latest --help

Check out our guide on how to use the
OCM CLI container image for more details.

Community & Contributors

This release we had a total of 4 contributors!
If you want to engage with us, check our community page!

[kubernetes/controller/v0.6.0-rc.1] - 2026-05-08

🚀 Features

• Remove the config folder and generate rbac and crds with helm templating enabled (#2363)
• Add how-to about verifying component versions with controllers (#2407)

🐛 Bug Fixes

• Use unused values from the helm values section (#2376)
• Update module ocm.software/open-component-model/bindings/go/oci to v0.0.40 (#2331) (#2352)

📚 Dependencies

• (deps) Update ocm monorepo go module dependencies to 6c826cf (#2369)
• (deps) Update ocm monorepo go module dependencies to 9db63a2 (#2372)
• (deps) Update ocm monorepo go module dependencies to 5236fa6 (#2382)
• (deps) Update github.com/opencontainers/go-digest digest to acc66fb (#2390)
• (deps) Update module github.com/docker/cli to v29.3.1+incompatible (#2393)
• (deps) Update module golang.org/x/sys to v0.43.0 (#2395)
• (deps) Bump version modules in controller (#2402)
• (deps) Update ocm monorepo go module dependencies to 4fdf352 (#2385)
• (deps) Fix update module ocm.software/open-component-model/bindings/go/credentials to v0.0.10 (#2331) (#2410)
• (deps) Update ocm monorepo go module dependencies to bf0b7e5 (#2412)
• (deps) Update module github.com/fxamacker/cbor/v2 to v2.9.1 (#2424)
• (deps) Update github.com/google/pprof digest to 545e8a4 (#2422)
• (deps) Update ocm monorepo go module dependencies to cae869f (#2415)

⚙️ Miscellaneous Tasks

• Controller - update LocalBlob/v1 type assertions to UpperCamelCase [4/4] (#2326)
• Fix CVE-2026-33186 for grpc go below 1.80.1 (#2443)

📚 Documentation

• (docs) Sync contributing guides (#2285)

Quick installation and usage guide

To install the latest version of the OCM Controllers into an existing kubernetes cluster,
you can use our Helm chart:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart --namespace ocm-k8s-toolkit-system --create-namespace

Check out our guide on how to set up
OCM Controller environments for more details.

Community & Contributors

This release we had a total of 4 contributors!
If you want to engage with us, check our community page!