diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 1e5f904a6f..9994df628c 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -14,7 +14,7 @@ 'git-submodules': { enabled: true, }, - 'updateNotScheduled': true, // Update branches that have already been created + 'updateNotScheduled': false, // Update branches that have already been created 'minimumReleaseAge': '28 days', 'branchPrefix': 'renovate/', 'gitAuthor': 'ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>', @@ -33,13 +33,14 @@ automerge: true, }, { + description: "Group golang versions (go directive + Docker images)", matchDatasources: ["golang-version"], + matchManagers: ["dockerfile"], + matchPackageNames: ["golang"], rangeStrategy: "bump", groupName: "Golang versions", groupSlug: "golang-versions", - schedule: [ - '* * * * 0' // At every minute on Sunday it is allowed to create branches - ], + minimumReleaseAge: null, }, { matchManagers: [ @@ -112,6 +113,10 @@ matchCategories: [ 'golang', ], + excludePackageNames: [ + 'go', + 'golang' + ], postUpdateOptions: [ 'gomodTidy', ], diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index be82572b53..f5a3dfa785 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -41,7 +41,7 @@ jobs: # Restore previous cache artifact if enabled - name: Restore renovate cache artifact if: ${{ github.event_name != 'workflow_dispatch' || inputs.repoCache != 'disabled' }} - uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # v11 + uses: dawidd6/action-download-artifact@0bd50d53a6d7fb5cb921e607957e9cc12b4ce392 # v12 continue-on-error: true with: name: ${{ env.cache_key }} diff --git a/kubernetes/controller/Dockerfile b/kubernetes/controller/Dockerfile index 4c7fa4f9ab..9e250710cc 100644 --- a/kubernetes/controller/Dockerfile +++ b/kubernetes/controller/Dockerfile @@ -1,5 +1,5 @@ # Build the manager binary -FROM --platform=${BUILDPLATFORM} golang:1.25@sha256:6cc2338c038bc20f96ab32848da2b5c0641bb9bb5363f2c33e9b7c8838f9a208 AS builder +FROM --platform=${BUILDPLATFORM} golang:1.25.5@sha256:0e82796be275aefaf73c5abe3d3646c09b557aba982e87a42b2e3ceccf0e0e75 AS builder ARG TARGETOS ARG TARGETARCH diff --git a/renovate-test.log b/renovate-test.log new file mode 100644 index 0000000000..3cffcb9fc5 --- /dev/null +++ b/renovate-test.log @@ -0,0 +1,823 @@ +DEBUG: Using RE2 regex engine +DEBUG: Parsing configs +DEBUG: No config file found on disk - skipping +DEBUG: No additional config file found specified - skipping +DEBUG: File config + "config": {} +DEBUG: Additional file config + "config": {} +DEBUG: CLI config + "config": {"repositories": ["morri-son/open-component-model"], "dryRun": "full"} +DEBUG: Env config + "config": {"hostRules": [], "token": "***********"} +DEBUG: Resolved global extends + "config": undefined +DEBUG: Combined config + "config": { + "hostRules": [], + "token": "***********", + "repositories": ["morri-son/open-component-model"], + "dryRun": "full" + } +DEBUG: Enabling forkProcessing while in non-autodiscover mode +DEBUG: Enabling onboardingNoDeps while in non-autodiscover mode +DEBUG: Found valid git version: 2.52.0 +DEBUG: Setting global hostRules +DEBUG: Using default github endpoint: https://api.github.com/ +DEBUG: hostRules: authentication already set for api.github.com +DEBUG: Using queue: host=api.github.com, concurrency=16 +(node:9) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities. +(Use `node --trace-deprecation ...` to show where the warning was created) +DEBUG: GET https://api.github.com/user/emails = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=167) +DEBUG: Cannot read user/emails endpoint on GitHub to retrieve gitAuthor +DEBUG: Platform config + "platformConfig": { + "hostType": "github", + "endpoint": "https://api.github.com/", + "isGHApp": false, + "isGhe": false, + "userDetails": { + "username": "morri-son", + "name": "Gerald Morrison", + "id": 67469729 + }, + "userEmail": null + }, + "renovateUsername": "morri-son" +DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules +DEBUG: Using baseDir: /tmp/renovate +DEBUG: Using cacheDir: /tmp/renovate/cache +DEBUG: Using containerbaseDir: /tmp/renovate/cache/containerbase +DEBUG: Initializing Renovate internal cache into /tmp/renovate/cache/renovate/renovate-cache-v1 +DEBUG: Commits limit = null +DEBUG: Setting global hostRules +DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules +DEBUG: validatePresets() +DEBUG: Reinitializing hostRules for repo +DEBUG: Clearing hostRules +DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules + INFO: Repository started (repository=morri-son/open-component-model) + "renovateVersion": "42.86.0" +DEBUG: Using localDir: /tmp/renovate/repos/github/morri-son/open-component-model (repository=morri-son/open-component-model) +DEBUG: PackageFiles.clear() - Package files deleted (repository=morri-son/open-component-model) +DEBUG: initRepo("morri-son/open-component-model") (repository=morri-son/open-component-model) +DEBUG: hostRules: authentication already set for api.github.com (repository=morri-son/open-component-model) +DEBUG: Using queue: host=api.github.com, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: morri-son/open-component-model default branch = feat/#695-helm-input-plugin-release (repository=morri-son/open-component-model) +DEBUG: Issues cache: Adding 0 issues to reconcile queue (repository=morri-son/open-component-model) +DEBUG: Using personal access token for git init (repository=morri-son/open-component-model) +DEBUG: fetchBranchCommits(): url=https://**redacted**@github.com/morri-son/open-component-model.git (repository=morri-son/open-component-model) +DEBUG: Resetting npmrc (repository=morri-son/open-component-model) +DEBUG: Resetting npmrc (repository=morri-son/open-component-model) +DEBUG: checkOnboarding() (repository=morri-son/open-component-model) +DEBUG: isOnboarded() (repository=morri-son/open-component-model) +DEBUG: findPr(renovate/configure, Configure Renovate, !open) (repository=morri-son/open-component-model) +DEBUG: PR cache: cached data not found, creating new cache (repository=morri-son/open-component-model) +DEBUG: PR cache: initial fetch (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://api.github.com/repos/morri-son/open-component-model/pulls?per_page=100&state=all&sort=updated&direction=desc&page=1 (etag="353b69f241b2674c6f8a2016160df9edd44e5e1b264568372946734042713389", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: PR cache: Filtered 0 PRs to 0 (user=morri-son) (repository=morri-son/open-component-model) +DEBUG: PR cache: getPrList success (repository=morri-son/open-component-model) + "pullsTotal": 0, + "requestsTotal": 1, + "apiQuotaAffected": true +DEBUG: findPr(renovate/configure, chore: Configure Renovate, !open) (repository=morri-son/open-component-model) +DEBUG: findFile(renovate.json) (repository=morri-son/open-component-model) +DEBUG: syncGit(): Initializing git repository into /tmp/renovate/repos/github/morri-son/open-component-model (repository=morri-son/open-component-model) +DEBUG: Performing blobless clone (repository=morri-son/open-component-model) +DEBUG: git clone completed (repository=morri-son/open-component-model) + "durationMs": 1752 +DEBUG: latest repository commit (repository=morri-son/open-component-model) + "latestCommit": { + "hash": "2ffe513ac4d4a9ff8a264edd81ba4f57845c1422", + "date": "2025-11-04T08:50:16+01:00", + "message": "Merge branch 'main' into feat/#695-helm-input-plugin-release", + "refs": "HEAD -> feat/#695-helm-input-plugin-release, origin/feat/#695-helm-input-plugin-release, origin/HEAD", + "body": "", + "author_name": "Gergely Brautigam", + "author_email": "gergely.brautigam@sap.com" + } +DEBUG: Current branch SHA: 2ffe513ac4d4a9ff8a264edd81ba4f57845c1422 (repository=morri-son/open-component-model) +DEBUG: findFile(renovate.json5) (repository=morri-son/open-component-model) +DEBUG: findFile(.github/renovate.json) (repository=morri-son/open-component-model) +DEBUG: findFile(.github/renovate.json5) (repository=morri-son/open-component-model) +DEBUG: Config file exists, fileName: .github/renovate.json5 (repository=morri-son/open-component-model) +DEBUG: Repo is onboarded (repository=morri-son/open-component-model) +DEBUG: Found .github/renovate.json5 config file (repository=morri-son/open-component-model) +DEBUG: Repository config (repository=morri-son/open-component-model) + "fileName": ".github/renovate.json5", + "config": { + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:recommended", + "config:best-practices", + "docker:pinDigests", + "group:kubernetes", + "group:goOpenapi", + "helpers:pinGitHubActionDigests", + "security:openssf-scorecard", + ":dependencyDashboard", + ":rebaseStalePrs" + ], + "git-submodules": {"enabled": true}, + "schedule": ["* * * * 0"], + "updateNotScheduled": true, + "minimumReleaseAge": "28 days", + "branchPrefix": "renovate/", + "gitAuthor": "ocmbot[bot] <125909804+ocmbot[bot]@users.noreply.github.com>", + "gitIgnoredAuthors": ["125909804+ocmbot[bot]@users.noreply.github.com"], + "prConcurrentLimit": 0, + "prHourlyLimit": 0, + "automerge": true, + "automergeType": "pr", + "separateMinorPatch": true, + "separateMultipleMajor": true, + "packageRules": [ + { + "matchManagers": ["gomod", "custom.regex"], + "matchPackageNames": [ + "sigs.k8s.io/controller-runtime", + "sigs.k8s.io/controller-tools", + "k8s.io/*", + "envtest" + ], + "groupName": "Kubernetes dependencies", + "groupSlug": "kubernetes-deps" + }, + { + "groupName": "Docker dependencies", + "groupSlug": "docker-deps", + "matchPackageNames": ["github.com/docker/{/,}**"] + }, + { + "groupName": "Golang X Repositories", + "groupSlug": "golang-x-repos", + "matchPackageNames": ["golang.org/x/{/,}**"] + }, + { + "groupName": "Google Golang Repositories", + "groupSlug": "google-golang-repos", + "matchPackageNames": ["google.golang.org/{/,}**"] + }, + { + "groupName": "Sigstore Repositories", + "groupSlug": "sigstore", + "matchPackageNames": ["github.com/sigstore/{/,}**"] + }, + { + "groupName": "spf13 repositories", + "groupSlug": "spf13", + "matchPackageNames": ["github.com/spf13/{/,}**"] + }, + { + "matchCategories": ["golang"], + "postUpdateOptions": ["gomodTidy"], + "enabled": true + }, + { + "matchManagers": ["gomod"], + "matchDepTypes": ["indirect"], + "matchUpdateTypes": ["major"], + "enabled": false + }, + { + "matchManagers": ["gomod"], + "groupName": "OCM Monorepo Go Module Dependencies", + "groupSlug": "ocm-monorepo", + "matchPackageNames": ["ocm.software/open-component-model/**"] + } + ], + "customDatasources": { + "envtest": { + "defaultRegistryUrlTemplate": "https://raw.githubusercontent.com/kubernetes-sigs/controller-tools/master/envtest-releases.yaml", + "format": "yaml", + "transformTemplates": [ + "{ \"releases\": $map($distinct($keys($.releases)), function($v){ {\"version\": $replace($v, /^v/, \"\")} }) }" + ] + } + }, + "customManagers": [ + { + "customType": "regex", + "managerFilePatterns": ["/(^|/)\\.env(\\.local)?$/"], + "matchStrings": [ + "# renovate: datasource=custom.envtest depName=envtest\\s+ENVTEST_K8S_VERSION=v?(?\\d+\\.\\d+\\.\\d+)" + ], + "datasourceTemplate": "custom.envtest", + "depNameTemplate": "envtest", + "versioningTemplate": "semver" + }, + { + "customType": "regex", + "managerFilePatterns": ["/(^|/)\\.env(\\.local)?$/"], + "matchStrings": [ + "# renovate: datasource=(?\\S+) depName=(?\\S+)\\s+.*?_VERSION=v?(?\\d+\\.\\d+\\.\\d+)" + ], + "versioningTemplate": "semver" + } + ], + "postUpgradeTasks": { + "commands": [ + "command -v go >/dev/null 2>&1 || exit 0; find . -name \"go.mod\" -type f -path '*/integration/*' -exec dirname {} \\; | while read dir; do echo \"Running explicit go mod tidy for integration test in $dir\"; cd \"$dir\" && go mod tidy && cd - > /dev/null; done" + ], + "fileFilters": ["**/go.mod", "**/go.sum"], + "executionMode": "branch" + } + } +DEBUG: migrateAndValidate() (repository=morri-son/open-component-model) +DEBUG: No config migration necessary (repository=morri-son/open-component-model) +DEBUG: Found repo ignorePaths (repository=morri-son/open-component-model) + "ignorePaths": [ + "**/node_modules/**", + "**/bower_components/**", + "**/vendor/**", + "**/examples/**", + "**/__tests__/**", + "**/test/**", + "**/tests/**", + "**/__fixtures__/**" + ] +DEBUG: No vulnerability alerts enabled for repo (repository=morri-son/open-component-model) +DEBUG: No vulnerability alerts found (repository=morri-son/open-component-model) +DEBUG: findIssue(Dependency Dashboard) (repository=morri-son/open-component-model) +DEBUG: No baseBranches (repository=morri-son/open-component-model) +DEBUG: extract() (repository=morri-son/open-component-model) +DEBUG: Setting current branch to feat/#695-helm-input-plugin-release (repository=morri-son/open-component-model) +DEBUG: latest commit (repository=morri-son/open-component-model) + "branchName": "feat/#695-helm-input-plugin-release", + "latestCommitDate": "2025-11-04T08:50:16+01:00", + "sha": "2ffe513ac4d4a9ff8a264edd81ba4f57845c1422" +DEBUG: Using file pattern: /(^|/)tasks/[^/]+\.ya?ml$/ for manager ansible (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)(galaxy|requirements)(\.ansible)?\.ya?ml$/ for manager ansible-galaxy (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.tool-versions$/ for manager asdf (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/).azuredevops/.+\.ya?ml$/ for manager azure-pipelines (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /azure.*pipelines?.*\.ya?ml$/ for manager azure-pipelines (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)batect(-bundle)?\.ya?ml$/ for manager batect (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)batect$/ for manager batect-wrapper (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)WORKSPACE(|\.bazel|\.bzlmod)$/ for manager bazel (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.WORKSPACE\.bazel$/ for manager bazel (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.bzl$/ for manager bazel (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/|\.)MODULE\.bazel$/ for manager bazel-module (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.bazelversion$/ for manager bazelisk (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.bicep$/ for manager bicep (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.?bitbucket-pipelines\.ya?ml$/ for manager bitbucket-pipelines (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)bitrise\.ya?ml$/ for manager bitrise (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /buildkite\.ya?ml/ for manager buildkite (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.buildkite/.+\.ya?ml$/ for manager buildkite (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)project\.toml$/ for manager buildpacks (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)bun\.lockb?$/ for manager bun (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)package\.json$/ for manager bun (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.bun-version$/ for manager bun-version (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Gemfile$/ for manager bundler (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.cake$/ for manager cake (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Cargo\.toml$/ for manager cargo (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.circleci/.+\.ya?ml$/ for manager circleci (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)cloudbuild\.ya?ml/ for manager cloudbuild (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Podfile$/ for manager cocoapods (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)([\w-]*)composer\.json$/ for manager composer (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)conanfile\.(txt|py)$/ for manager conan (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.copier-answers(\..+)?\.ya?ml/ for manager copier (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)cpanfile$/ for manager cpanfile (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^\.crow(?:/[^/]+)?\.ya?ml$/ for manager crow (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)(?:deps|bb)\.edn$/ for manager deps-edn (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)devbox\.json$/ for manager devbox (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^.devcontainer/devcontainer.json$/ for manager devcontainer (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^.devcontainer.json$/ for manager devcontainer (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)(?:docker-)?compose[^/]*\.ya?ml$/ for manager docker-compose (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/|\.)([Dd]ocker|[Cc]ontainer)file$/ for manager dockerfile (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)([Dd]ocker|[Cc]ontainer)file[^/]*$/ for manager dockerfile (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.drone\.yml$/ for manager droneci (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)fleet\.ya?ml/ for manager fleet (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(?:^|/)gotk-components\.ya?ml$/ for manager flux (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.fvm/fvm_config\.json$/ for manager fvm (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.fvmrc$/ for manager fvm (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.gitmodules$/ for manager git-submodules (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)(workflow-templates|\.(?:github|gitea|forgejo)/(?:workflows|actions))/.+\.ya?ml$/ for manager github-actions (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)action\.ya?ml$/ for manager github-actions (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.gitlab-ci\.ya?ml$/ for manager gitlabci (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.gitlab-ci\.ya?ml$/ for manager gitlabci-include (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)gleam.toml$/ for manager gleam (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)go\.mod$/ for manager gomod (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.gradle(\.kts)?$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)gradle\.properties$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)gradle/.+\.toml$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)buildSrc/.+\.kt$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.versions\.toml$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)versions.props$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)versions.lock$/ for manager gradle (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)gradle/wrapper/gradle-wrapper\.properties$/ for manager gradle-wrapper (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.cabal$/ for manager haskell-cabal (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)requirements\.ya?ml$/ for manager helm-requirements (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)values\.ya?ml$/ for manager helm-values (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)helmfile\.ya?ml(?:\.gotmpl)?$/ for manager helmfile (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)helmfile\.d/.+\.ya?ml(?:\.gotmpl)?$/ for manager helmfile (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Chart\.ya?ml$/ for manager helmv3 (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)bin/hermit$/ for manager hermit (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^Formula/[^/]+[.]rb$/ for manager homebrew (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.html?$/ for manager html (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)plugins\.(txt|ya?ml)$/ for manager jenkins (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)jsonnetfile\.json$/ for manager jsonnet-bundler (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^.+\.main\.kts$/ for manager kotlin-script (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)kustomization\.ya?ml$/ for manager kustomize (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)project\.clj$/ for manager leiningen (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/|\.)pom\.xml$/ for manager maven (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^(((\.mvn)|(\.m2))/)?settings\.xml$/ for manager maven (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.mvn/extensions\.xml$/ for manager maven (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|\/).mvn/wrapper/maven-wrapper.properties$/ for manager maven-wrapper (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|\/)mvnw(.cmd)?$/ for manager maven-wrapper (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)package\.js$/ for manager meteor (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Mintfile$/ for manager mint (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.?mise\.toml$/ for manager mise (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.?mise/config\.toml$/ for manager mise (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)mix\.exs$/ for manager mix (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)flake\.nix$/ for manager nix (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.node-version$/ for manager nodenv (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)package\.json$/ for manager npm (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)pnpm-workspace\.yaml$/ for manager npm (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.yarnrc\.yml$/ for manager npm (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.(?:cs|fs|vb)proj$/ for manager nuget (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.(?:props|targets)$/ for manager nuget (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)dotnet-tools\.json$/ for manager nuget (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)global\.json$/ for manager nuget (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.nvmrc$/ for manager nvm (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)src/main/features/.+\.json$/ for manager osgi (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)pyproject\.toml$/ for manager pep621 (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)[\w-]*requirements([-.]\w+)?\.(txt|pip)$/ for manager pip_requirements (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)setup\.py$/ for manager pip_setup (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Pipfile$/ for manager pipenv (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)pyproject\.toml$/ for manager pixi (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)pixi\.toml$/ for manager pixi (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)pyproject\.toml$/ for manager poetry (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.pre-commit-config\.ya?ml$/ for manager pre-commit (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)pubspec\.ya?ml$/ for manager pub (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Puppetfile$/ for manager puppet (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.python-version$/ for manager pyenv (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /.+\.container$/ for manager quadlet (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /.+\.image$/ for manager quadlet (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /.+\.volume$/ for manager quadlet (repository=morri-son/open-component-model) +DEBUG: Using file pattern: renovate.json for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: renovate.json5 for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .github/renovate.json for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .github/renovate.json5 for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .gitlab/renovate.json for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .gitlab/renovate.json5 for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .renovaterc for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .renovaterc.json for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: .renovaterc.json5 for manager renovate-config-presets (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.ruby-version$/ for manager ruby-version (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)runtime.txt$/ for manager runtime-version (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.sbt$/ for manager sbt (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /project/[^/]*\.scala$/ for manager sbt (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /project/build\.properties$/ for manager sbt (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)repositories$/ for manager sbt (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.scalafmt.conf$/ for manager scalafmt (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)setup\.cfg$/ for manager setup-cfg (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)Package\.swift/ for manager swift (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/*.tf for manager terraform (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/*.tofu for manager terraform (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.terraform-version$/ for manager terraform-version (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)terragrunt\.hcl$/ for manager terragrunt (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.terragrunt-version$/ for manager terragrunt-version (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.tflint\.hcl$/ for manager tflint-plugin (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^\.travis\.ya?ml$/ for manager travis (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /\.typ$/ for manager typst (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/ProjectSettings/ProjectVersion.txt for manager unity3d (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.vela\.ya?ml$/ for manager velaci (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)vendir\.yml$/ for manager vendir (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /^\.woodpecker(?:/[^/]+)?\.ya?ml$/ for manager woodpecker (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/tsconfig.json for manager regex (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/tsconfig.*.json for manager regex (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/tsconfig.json for manager regex (repository=morri-son/open-component-model) +DEBUG: Using file pattern: **/tsconfig.*.json for manager regex (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.env(\.local)?$/ for manager regex (repository=morri-son/open-component-model) +DEBUG: Using file pattern: /(^|/)\.env(\.local)?$/ for manager regex (repository=morri-son/open-component-model) +DEBUG: Matched 1 file(s) for manager bun: .github/scripts/package.json (repository=morri-son/open-component-model) +DEBUG: No bun lockfiles found (repository=morri-son/open-component-model) +DEBUG: Matched 3 file(s) for manager dockerfile: cli/Containerfile, kubernetes/controller/Dockerfile, kubernetes/controller/tilt.dockerfile (repository=morri-son/open-component-model) +DEBUG: Matched 16 file(s) for manager github-actions: .github/workflows/auto-label-ipcei.yaml, .github/workflows/ci.yml, .github/workflows/cli-release.yml, .github/workflows/cli.yml, .github/workflows/kubernetes-controller.yml, .github/workflows/markdown.yml, .github/workflows/openssf-scorecard.yml, .github/workflows/publish-helminput-plugin-component.yaml, .github/workflows/pull-request.yaml, .github/workflows/release-branch.yml, .github/workflows/release-candidate-version.yml, .github/workflows/release-go-submodule.yaml, .github/workflows/renovate.yml, .github/workflows/reuse_helper_tool.yaml, .github/workflows/stale.yaml, .github/workflows/trigger-blackduck-scan.yaml (repository=morri-son/open-component-model) +DEBUG: Matched 24 file(s) for manager gomod: bindings/go/blob/go.mod, bindings/go/configuration/go.mod, bindings/go/constructor/go.mod, bindings/go/credentials/go.mod, bindings/go/ctf/go.mod, bindings/go/dag/go.mod, bindings/go/descriptor/normalisation/go.mod, bindings/go/descriptor/runtime/go.mod, bindings/go/descriptor/v2/go.mod, bindings/go/generator/go.mod, bindings/go/helm/go.mod, bindings/go/input/dir/go.mod, bindings/go/input/file/go.mod, bindings/go/input/utf8/go.mod, bindings/go/oci/go.mod, bindings/go/oci/integration/go.mod, bindings/go/plugin/go.mod, bindings/go/repository/go.mod, bindings/go/rsa/go.mod, bindings/go/runtime/go.mod, bindings/go/signing/go.mod, cli/go.mod, cli/integration/go.mod, kubernetes/controller/go.mod (repository=morri-son/open-component-model) +DEBUG: Matched 2 file(s) for manager helm-values: bindings/go/helm/input/testdata/badchart/values.yaml, bindings/go/helm/input/testdata/mychart/values.yaml (repository=morri-son/open-component-model) +DEBUG: Matched 2 file(s) for manager helmv3: bindings/go/helm/input/testdata/badchart/Chart.yaml, bindings/go/helm/input/testdata/mychart/Chart.yaml (repository=morri-son/open-component-model) +DEBUG: Matched 6 file(s) for manager kustomize: kubernetes/controller/config/crd/kustomization.yaml, kubernetes/controller/config/default/kustomization.yaml, kubernetes/controller/config/manager/kustomization.yaml, kubernetes/controller/config/prometheus/kustomization.yaml, kubernetes/controller/config/rbac/kustomization.yaml, kubernetes/controller/config/samples/kustomization.yaml (repository=morri-son/open-component-model) +DEBUG: Matched 1 file(s) for manager npm: .github/scripts/package.json (repository=morri-son/open-component-model) +DEBUG: Matched 1 file(s) for manager renovate-config-presets: .github/renovate.json5 (repository=morri-son/open-component-model) +DEBUG: Matched 1 file(s) for manager regex: .env (repository=morri-son/open-component-model) +DEBUG: Matched 1 file(s) for manager regex: .env (repository=morri-son/open-component-model) +DEBUG: Found a multistage build stage name: certs (repository=morri-son/open-component-model) +DEBUG: RollingReleasesData - data written (repository=morri-son/open-component-model) +DEBUG: Skipping scratch (repository=morri-son/open-component-model) +DEBUG: Skipping alias COPY --from (repository=morri-son/open-component-model) + "image": "certs" +DEBUG: bindings/go/helm/input/testdata/badchart/values.yaml has no content (repository=morri-son/open-component-model) +DEBUG: Failed to find required fields in Chart.yaml (repository=morri-son/open-component-model, packageFile=bindings/go/helm/input/testdata/badchart/Chart.yaml) +DEBUG: npm file .github/scripts/package.json has name undefined (repository=morri-son/open-component-model) +DEBUG: Found a multistage build stage name: builder (repository=morri-son/open-component-model) +DEBUG: Skipping alias COPY --from (repository=morri-son/open-component-model) + "image": "builder" +DEBUG: bindings/go/helm/input/testdata/mychart/values.yaml has no content (repository=morri-son/open-component-model) +DEBUG: Failed to find required fields in Chart.yaml (repository=morri-son/open-component-model, packageFile=bindings/go/helm/input/testdata/mychart/Chart.yaml) +DEBUG: Detecting pnpm Workspaces (repository=morri-son/open-component-model) +DEBUG: Detecting workspaces (repository=morri-son/open-component-model) +DEBUG: Finding locked versions (repository=morri-son/open-component-model) +DEBUG: manager extract durations (ms) (repository=morri-son/open-component-model) + "managers": { + "bun": 3, + "renovate-config-presets": 16, + "regex": 17, + "helm-values": 34, + "helmv3": 37, + "dockerfile": 40, + "npm": 53, + "kustomize": 55, + "github-actions": 76, + "gomod": 87 + } +DEBUG: Found dockerfile package files (repository=morri-son/open-component-model) +DEBUG: Found github-actions package files (repository=morri-son/open-component-model) +DEBUG: Found gomod package files (repository=morri-son/open-component-model) +DEBUG: Found npm package files (repository=morri-son/open-component-model) +DEBUG: Found regex package files (repository=morri-son/open-component-model) +DEBUG: Found regex package files (repository=morri-son/open-component-model) +DEBUG: Found 46 package file(s) (repository=morri-son/open-component-model) + INFO: Dependency extraction complete (repository=morri-son/open-component-model, baseBranch=feat/#695-helm-input-plugin-release) + "stats": { + "managers": { + "dockerfile": {"fileCount": 3, "depCount": 4}, + "github-actions": {"fileCount": 16, "depCount": 119}, + "gomod": {"fileCount": 24, "depCount": 1163}, + "npm": {"fileCount": 1, "depCount": 1}, + "regex": {"fileCount": 2, "depCount": 6} + }, + "total": {"fileCount": 46, "depCount": 1293} + } +DEBUG: hostRules: no authentication for raw.githubusercontent.com (repository=morri-son/open-component-model) +DEBUG: Using queue: host=raw.githubusercontent.com, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: Dependency debian has unsupported/unversioned value bookworm-slim (versioning=docker) (repository=morri-son/open-component-model) +DEBUG: Dependency gcr.io/distroless/static has unsupported/unversioned value nonroot (versioning=docker) (repository=morri-son/open-component-model) +DEBUG: getDigest(https://index.docker.io, library/debian, bookworm-slim) (repository=morri-son/open-component-model) +DEBUG: getDigest(https://gcr.io, distroless/static, nonroot) (repository=morri-son/open-component-model) +DEBUG: getDigest(https://index.docker.io, library/alpine, undefined) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=proxy.golang.org, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://index.docker.io, library/debian, sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed01a17171529f706, head) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=index.docker.io, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://gcr.io, distroless/static, sha256:e8a4044e0b4ae4257efa45fc026c0bc30ad320d43bd4c1a7d5271bd241e386d0, head) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=gcr.io, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://index.docker.io, library/alpine, sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412, head) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=hub.docker.com, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: Marking 1 release(s) as pending, as they do not have a releaseTimestamp and we're running with minimumReleaseAgeBehaviour=timestamp-required (repository=morri-son/open-component-model) + "depName": "envtest", + "versions": ["1.35.0"], + "check": "minimumReleaseAge" +DEBUG: hostRules: google auth for https://gcr.io (repository=morri-son/open-component-model) +DEBUG: Using queue: host=sigs.k8s.io, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: Could not get Google access token, using no auth (repository=morri-son/open-component-model) + "registryHost": "https://gcr.io", + "dockerRepository": "distroless/static" +(node:9) MetadataLookupWarning: received unexpected error = All promises were rejected code = UNKNOWN +DEBUG: GET https://proxy.golang.org/github.com/santhosh-tekuri/jsonschema/v6/@v/v6.0.0-alpha.1.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=17) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/bahlo/generic-list-go/@v/v0.1.0.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=111) (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://gcr.io/v2/token?scope=repository%3Adistroless%2Fstatic%3Apull&service=gcr.io (etag=undefined, lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/santhosh-tekuri/jsonschema/v7/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=33) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/kubernetes-sigs/kustomize for module sigs.k8s.io/kustomize/kustomize (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/buger/jsonparser/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=62) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/bahlo/generic-list-go/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=55) (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://gcr.io/v2/distroless/static/manifests/sha256:e8a4044e0b4ae4257efa45fc026c0bc30ad320d43bd4c1a7d5271bd241e386d0 (etag=undefined, lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: sigs.k8s.io/kustomize/kustomize (go) - most recent release: 2019-10-24T00:03:01.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/opencontainers/go-digest/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=141) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=auth.docker.io, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://gcr.io, distroless/static, nonroot, head) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: dorny/paths-filter (github-tags) - most recent release: 2024-03-02T22:11:12.000Z (repository=morri-son/open-component-model) +(node:9) MetadataLookupWarning: received unexpected error = All promises were rejected code = UNKNOWN +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: http cache: saving https://gcr.io/v2/distroless/static/manifests/nonroot (etag=undefined, lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Got docker digest sha256:cba10d7abd3e203428e86f5b2d7fd5eb7d8987c387864ae4996cf97191b33764 (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://auth.docker.io/token?scope=repository%3Alibrary%2Falpine%3Apull&service=registry.docker.io (etag=undefined, lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://auth.docker.io/token?scope=repository%3Alibrary%2Fdebian%3Apull&service=registry.docker.io (etag=undefined, lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/davecgh/go-spew/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=112) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/opencontainers/image-spec/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=113) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/kr/text/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=112) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=ocm.software, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/stretchr/testify/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=130) (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://index.docker.io/v2/library/alpine/manifests/sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412 (etag="sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://index.docker.io/v2/library/debian/manifests/sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed01a17171529f706 (etag="sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed01a17171529f706", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://index.docker.io, library/alpine, latest, head) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/kr/text (go) - most recent release: 2020-02-14T20:31:06.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/kr/text (go) - most recent release: 2020-02-14T20:31:06.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/kr/text (go) - most recent release: 2020-02-14T20:31:06.000Z (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://index.docker.io, library/debian, bookworm-slim, head) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: open-component-model/ocm-setup-action (github-tags) - most recent release: 2023-09-25T13:13:06.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/invopop/jsonschema/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=128) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://index.docker.io/v2/library/alpine/manifests/latest (etag="sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Got docker digest sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62 (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://api.github.com/repos/davecgh/go-spew/commits?per_page=1 (etag=W/"467b3d75a8bc596e800ca88149cd9ef5a01d59f028c522c8ed39291231385ad5", lastModified=Thu, 30 Aug 2018 19:11:38 GMT) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/pmezard/go-difflib/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=113) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/golang.org/x/sync/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=121) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=golang.org, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/nlepage/go-tarfs/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1486) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/descriptor/normalisation (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://index.docker.io/v2/library/debian/manifests/bookworm-slim (etag="sha256:56ff6d36d4eb3db13a741b342ec466f121480b5edded42e4b7ee850ce7a418ee", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Got docker digest sha256:56ff6d36d4eb3db13a741b342ec466f121480b5edded42e4b7ee850ce7a418ee (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/mailru/easyjson/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=42) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/nlepage/go-tarfs (go) - most recent release: 2023-08-15T07:44:37.000Z (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/descriptor/runtime (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/blob/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1606) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/stretchr/objx/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=189) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/go.yaml.in/yaml/v2/@v/v2.0.0.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=188) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/wk8/go-ordered-map/v3/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=190) (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://api.github.com/repos/pmezard/go-difflib/commits?per_page=1 (etag=W/"a71be28fe288d9ceec99ad3786c5ea59b60546a0e795338f3ba4980434f93380", lastModified=Wed, 26 Dec 2018 10:54:42 GMT) (repository=morri-son/open-component-model) +DEBUG: Go module: golang.org/x/sync lookup import url https://go.googlesource.com/sync (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: GET https://proxy.golang.org/gopkg.in/yaml.v4/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=97) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/sigs.k8s.io/controller-tools/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=96) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/go.yaml.in/yaml/v2/@v/v2.1.0.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=97) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/blob (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/kubernetes-sigs/controller-tools for module sigs.k8s.io/controller-tools (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: arduino/setup-task (github-tags) - most recent release: 2024-02-06T10:21:35.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v2 not found for arduino/setup-task (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "arduino/setup-task", + "currentValue": "v2", + "datasource": "github-tags", + "newValue": "v2", + "bucket": undefined +DEBUG: Dependency agilepathway/pull-request-label-checker has unsupported/unversioned value latest (versioning=docker) (repository=morri-son/open-component-model) +DEBUG: getDigest(https://index.docker.io, agilepathway/pull-request-label-checker, latest) (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://index.docker.io, agilepathway/pull-request-label-checker, sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61, head) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/runtime/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1520) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://auth.docker.io/token?scope=repository%3Aagilepathway%2Fpull-request-label-checker%3Apull&service=registry.docker.io (etag=undefined, lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/dag/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1747) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/runtime (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://index.docker.io/v2/agilepathway/pull-request-label-checker/manifests/sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61 (etag="sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/dag (repository=morri-son/open-component-model) +DEBUG: getManifestResponse(https://index.docker.io, agilepathway/pull-request-label-checker, latest, head) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/go.yaml.in/yaml/v5/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=59) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=go.yaml.in, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/check.v1 (go) - most recent release: 2020-11-30T13:44:42.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/sigs.k8s.io/yaml/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=30) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/kr/pretty/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=31) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/kr/pretty (go) - most recent release: 2022-08-29T23:03:05.000Z (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/kubernetes-sigs/yaml for module sigs.k8s.io/yaml (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://index.docker.io/v2/agilepathway/pull-request-label-checker/manifests/latest (etag="sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61", lastModified=undefined) (repository=morri-son/open-component-model) +DEBUG: Got docker digest sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61 (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/golang.org/x/sys/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=109) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/!masterminds/semver/v3/@v/v3.0.0.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=40) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url _ for module go.yaml.in/yaml/v2 (repository=morri-son/open-component-model) +DEBUG: Go module: go.yaml.in/yaml/v2 lookup import url https://github.com/yaml/go-yaml (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/descriptor/v3/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1499) (repository=morri-son/open-component-model) +DEBUG: Go module: golang.org/x/sys lookup import url https://go.googlesource.com/sys (repository=morri-son/open-component-model) +DEBUG: Go lookup source url _ for module go.yaml.in/yaml/v3 (repository=morri-son/open-component-model) +DEBUG: Go module: go.yaml.in/yaml/v3 lookup import url https://github.com/yaml/go-yaml (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/!masterminds/semver/v4/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=353) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/descriptor/v2 (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/kr/text (go) - most recent release: 2020-02-14T20:31:06.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/rogpeppe/go-internal/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=698) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/repository/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1552) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/oci/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1497) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/repository (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/oci (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/nlepage/go-tarfs (go) - most recent release: 2023-08-15T07:44:37.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/kr/text (go) - most recent release: 2020-02-14T20:31:06.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/dlclark/regexp2/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=481) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/dlclark/regexp2 (go) - most recent release: 2024-12-31T19:52:57.000Z (repository=morri-son/open-component-model) +DEBUG: Dependency open-component-model/.github has unsupported/unversioned value main (versioning=docker) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-beta.1.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=18) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/veqryn/slog-context/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=31) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/golang.org/x/text/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=53) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-beta.2.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=20) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/go-logr/logr/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=55) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-alpha.2.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=20) (repository=morri-son/open-component-model) +DEBUG: Go module: golang.org/x/text lookup import url https://go.googlesource.com/text (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Using queue: host=oras.land, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/constructor/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=2278) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/configuration/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=2163) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/plugin/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=2147) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/ocm.software/open-component-model/bindings/go/ctf/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=2082) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-beta.3.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=40) (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/configuration (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/constructor (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/constructor (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/ctf (repository=morri-son/open-component-model) +DEBUG: Go lookup source url https://github.com/open-component-model/open-component-model for module ocm.software/open-component-model/bindings/go/plugin (repository=morri-son/open-component-model) +DEBUG: http cache: saving https://api.github.com/repos/open-component-model/.github/commits?per_page=1 (etag=W/"d2c2328c0833ae14874018f3f1ef9f0be02152be0bf53779e747bd0c0e49db0b", lastModified=Wed, 17 Dec 2025 10:23:38 GMT) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/Azure/go-ansiterm (go) - most recent release: 2025-01-02T03:35:03.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag(): No tags found for open-component-model/.github (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag main not found for open-component-model/.github (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "open-component-model/.github", + "currentValue": "main", + "datasource": "github-tags", + "newValue": "main", + "bucket": undefined +DEBUG: GET https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-alpha.1.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=17) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/!make!now!just/heredoc/v2/@v/v2.0.0.info = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=36) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/blang/semver/v5/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=54) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/blang/semver/v4 (go) - most recent release: 2020-05-24T15:15:11.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/gabriel-vasile/mimetype/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=42) (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/!make!now!just/heredoc/v3/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=36) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/MakeNowJust/heredoc (go) - most recent release: 2019-08-26T12:03:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/nlepage/go-tarfs (go) - most recent release: 2023-08-15T07:44:37.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/bahlo/generic-list-go (go) - most recent release: 2022-02-08T09:33:24.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/buger/jsonparser (go) - most recent release: 2021-01-08T09:37:36.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/cyberphone/json-canonicalization (go) - most recent release: 2024-12-13T10:21:44.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/davecgh/go-spew (go) - most recent release: 2018-02-21T23:26:28.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/dlclark/regexp2 (go) - most recent release: 2024-12-31T19:52:57.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/invopop/jsonschema (go) - most recent release: 2024-12-31T18:23:34.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/pmezard/go-difflib (go) - most recent release: 2016-01-10T10:55:54.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/wk8/go-ordered-map/v2 (go) - most recent release: 2023-06-27T17:54:31.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: gopkg.in/yaml.v3 (go) - most recent release: 2022-05-27T08:35:30.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/nlepage/go-tarfs (go) - most recent release: 2023-08-15T07:44:37.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/opencontainers/go-digest (go) - most recent release: 2020-05-14T01:46:00.000Z (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/Azure/go-ansiterm (go) - most recent release: 2025-01-02T03:35:03.000Z (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/helm.sh/helm/v5/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=55) (repository=morri-son/open-component-model) +DEBUG: Using queue: host=helm.sh, concurrency=16 (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/containerd/errdefs/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=67) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/containerd/errdefs (go) - most recent release: 2024-10-08T13:10:09.000Z (repository=morri-son/open-component-model) +DEBUG: Using the `tag_last_pushed` to determine the age of a release from Docker Hub. If this is a digest update, it may lead to inconsistent behaviour, showing the digest as newer than it actually is (repository=morri-son/open-component-model) + "documentationUrl": "https://github.com/renovatebot/renovate/issues/38659" +DEBUG: getLabels(https://index.docker.io, library/golang, latest) (repository=morri-son/open-component-model) +DEBUG: Docker Hub library image - skipping label lookup (repository=morri-son/open-component-model) +DEBUG: GET https://proxy.golang.org/github.com/chai2010/gettext-go/v2/@v/list = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=1518) (repository=morri-son/open-component-model) +DEBUG: Package abandonment detected: github.com/chai2010/gettext-go (go) - most recent release: 2024-04-10T05:39:05.000Z (repository=morri-son/open-component-model) +DEBUG: github/tags.findCommitOfTag: Tag v0.0.4 not found for open-component-model/open-component-model (repository=morri-son/open-component-model) +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "ocm.software/open-component-model/bindings/go/constructor", + "currentValue": "v0.0.0-20251024100521-a7be1bf5ce0d", + "datasource": "go", + "newValue": "v0.0.4", + "bucket": "patch" +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "ocm.software/open-component-model/bindings/go/constructor", + "currentValue": "v0.0.0-20251024100521-a7be1bf5ce0d", + "datasource": "go", + "newValue": "v0.0.4", + "bucket": "patch" +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "ocm.software/open-component-model/bindings/go/constructor", + "currentValue": "v0.0.0-20251024100521-a7be1bf5ce0d", + "datasource": "go", + "newValue": "v0.0.4", + "bucket": "patch" +DEBUG: Could not determine new digest for update. (repository=morri-son/open-component-model) + "packageName": "ocm.software/open-component-model/bindings/go/constructor", + "currentValue": "v0.0.0-20251024100521-a7be1bf5ce0d", + "datasource": "go", + "newValue": "v0.0.4", + "bucket": "patch" +^C \ No newline at end of file