Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 2, 2025

This PR contains the following updates:

Package Type Update Change OpenSSF
ocm.software/ocm require minor v0.33.0v0.34.3 OpenSSF Scorecard

Release Notes

open-component-model/ocm (ocm.software/ocm)

v0.34.3

Compare Source

What's Changed

⬆️ Dependencies
🧰 Maintenance

Full Changelog: open-component-model/ocm@v0.34.2...v0.34.3

v0.34.2

Compare Source

Warning

  • This library relies on replace statements in go.mod to pin specific module versions that introduced breaking changes.
  • These pinned replace directives must eventually be applied when consuming the library; omitting them can resolve to incompatible versions and cause build or runtime issues.
  • Ensure all required modules are pinned via replace to the versions declared by the project before building or releasing.

What's Changed

⬆️ Dependencies
🧰 Maintenance

Full Changelog: open-component-model/ocm@v0.34.1...v0.34.2

v0.34.1

What's Changed

⬆️ Dependencies
🧰 Maintenance

Full Changelog: open-component-model/ocm@v0.33...v0.34.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Dec 2, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 23 additional dependencies were updated

Details:

Package Change
github.com/aws/aws-sdk-go-v2/config v1.31.17 -> v1.31.20
github.com/aws/aws-sdk-go-v2/credentials v1.18.21 -> v1.18.24
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.4 -> v1.20.7
github.com/aws/aws-sdk-go-v2/service/ecr v1.51.2 -> v1.52.0
github.com/aws/aws-sdk-go-v2/service/s3 v1.90.0 -> v1.90.2
github.com/aws/aws-sdk-go-v2/service/sso v1.30.1 -> v1.30.3
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.5 -> v1.35.7
github.com/aws/aws-sdk-go-v2/service/sts v1.39.1 -> v1.40.2
github.com/docker/cli v28.5.2+incompatible -> v29.0.2+incompatible
github.com/go-openapi/analysis v0.24.0 -> v0.24.1
github.com/go-openapi/errors v0.22.3 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.2 -> v0.21.3
github.com/go-openapi/loads v0.23.1 -> v0.23.2
github.com/go-openapi/runtime v0.29.0 -> v0.29.2
github.com/go-openapi/spec v0.22.0 -> v0.22.1
github.com/go-openapi/strfmt v0.24.0 -> v0.25.0
github.com/go-openapi/swag/conv v0.25.1 -> v0.25.3
github.com/go-openapi/swag/typeutils v0.25.1 -> v0.25.3
github.com/go-openapi/validate v0.25.0 -> v0.25.1
github.com/sigstore/rekor v1.4.2 -> v1.4.3
golang.org/x/mod v0.29.0 -> v0.30.0
golang.org/x/oauth2 v0.32.0 -> v0.33.0
helm.sh/helm/v3 v3.19.0 -> v3.19.2

@renovate renovate bot changed the title fix(deps): update module ocm.software/ocm to v0.34.0 fix(deps): update module ocm.software/ocm to v0.34.0 - autoclosed Dec 2, 2025
@renovate renovate bot closed this Dec 2, 2025
@renovate renovate bot deleted the renovate/ocm.software-ocm-0.x branch December 2, 2025 13:01
@renovate renovate bot changed the title fix(deps): update module ocm.software/ocm to v0.34.0 - autoclosed fix(deps): update module ocm.software/ocm to v0.34.1 Dec 2, 2025
@renovate renovate bot reopened this Dec 2, 2025
@renovate renovate bot force-pushed the renovate/ocm.software-ocm-0.x branch 2 times, most recently from 66bcea1 to 86b86ce Compare December 2, 2025 17:13
@renovate
Copy link
Contributor Author

renovate bot commented Dec 15, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 47 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.4 -> 1.25.5
golang.org/x/text v0.31.0 -> v0.32.0
github.com/aws/aws-sdk-go-v2 v1.39.6 -> v1.41.0
github.com/aws/aws-sdk-go-v2/config v1.31.17 -> v1.32.5
github.com/aws/aws-sdk-go-v2/credentials v1.18.21 -> v1.19.5
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.16
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.4 -> v1.20.7
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.13 -> v1.4.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.13 -> v2.7.16
github.com/aws/aws-sdk-go-v2/service/ecr v1.51.2 -> v1.52.0
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.13 -> v1.13.16
github.com/aws/aws-sdk-go-v2/service/s3 v1.90.0 -> v1.90.2
github.com/aws/aws-sdk-go-v2/service/sso v1.30.1 -> v1.30.7
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.5 -> v1.35.12
github.com/aws/aws-sdk-go-v2/service/sts v1.39.1 -> v1.41.5
github.com/aws/smithy-go v1.23.2 -> v1.24.0
github.com/coreos/go-oidc/v3 v3.16.0 -> v3.17.0
github.com/docker/cli v28.5.2+incompatible -> v29.0.3+incompatible
github.com/go-openapi/analysis v0.24.0 -> v0.24.1
github.com/go-openapi/errors v0.22.3 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.2 -> v0.21.3
github.com/go-openapi/loads v0.23.1 -> v0.23.2
github.com/go-openapi/runtime v0.29.0 -> v0.29.2
github.com/go-openapi/spec v0.22.0 -> v0.22.1
github.com/go-openapi/strfmt v0.24.0 -> v0.25.0
github.com/go-openapi/swag/conv v0.25.1 -> v0.25.3
github.com/go-openapi/swag/typeutils v0.25.1 -> v0.25.3
github.com/go-openapi/validate v0.25.0 -> v0.25.1
github.com/google/go-containerregistry v0.20.6 -> v0.20.7
github.com/prometheus/common v0.67.2 -> v0.67.4
github.com/sigstore/fulcio v1.8.1 -> v1.8.4
github.com/sigstore/rekor v1.4.2 -> v1.4.3
github.com/sigstore/sigstore v1.9.6-0.20250729224751-181c5d3339b3 -> v1.10.3
github.com/spf13/cobra v1.10.1 -> v1.10.2
go.uber.org/zap v1.27.0 -> v1.27.1
golang.org/x/crypto v0.45.0 -> v0.46.0
golang.org/x/mod v0.29.0 -> v0.30.0
golang.org/x/oauth2 v0.32.0 -> v0.33.0
golang.org/x/sync v0.18.0 -> v0.19.0
golang.org/x/sys v0.38.0 -> v0.39.0
golang.org/x/term v0.37.0 -> v0.38.0
golang.org/x/tools v0.38.0 -> v0.39.0
google.golang.org/api v0.255.0 -> v0.257.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20251103181224-f26f9409b101 -> v0.0.0-20251213004720-97cd9d5aeac2
google.golang.org/grpc v1.76.0 -> v1.77.0
google.golang.org/protobuf v1.36.10 -> v1.36.11
helm.sh/helm/v3 v3.19.0 -> v3.19.2

@renovate renovate bot force-pushed the renovate/ocm.software-ocm-0.x branch from 86b86ce to 2181165 Compare December 17, 2025 10:03
@renovate renovate bot changed the title fix(deps): update module ocm.software/ocm to v0.34.1 fix(deps): update module ocm.software/ocm to v0.34.2 Dec 17, 2025
@renovate renovate bot force-pushed the renovate/ocm.software-ocm-0.x branch from 2181165 to 90dbd49 Compare December 23, 2025 13:35
@renovate renovate bot changed the title fix(deps): update module ocm.software/ocm to v0.34.2 fix(deps): update module ocm.software/ocm to v0.34.3 Dec 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant