11module github.com/open-component-model/ocm-controller
22
3- go 1.24.2
3+ go 1.24.4
44
55// ocm dependent re-writes.
66replace (
@@ -13,24 +13,25 @@ replace (
1313
1414require (
1515 cuelang.org/go v0.13.2
16- github.com/Masterminds/semver v1.5.0
1716 github.com/Masterminds/semver/v3 v3.4.0
18- github.com/containers/image/v5 v5.35 .0
17+ github.com/containers/image/v5 v5.36 .0
1918 github.com/cyphar/filepath-securejoin v0.4.1
2019 github.com/distribution/distribution/v3 v3.0.0
2120 github.com/fluxcd/helm-controller/api v1.3.0
2221 github.com/fluxcd/kustomize-controller/api v1.6.1
23- github.com/fluxcd/pkg/apis/event v0.17 .0
24- github.com/fluxcd/pkg/apis/meta v1.13 .0
25- github.com/fluxcd/pkg/http/fetch v0.16 .0
26- github.com/fluxcd/pkg/kustomize v1.18 .0
27- github.com/fluxcd/pkg/runtime v0.63 .0
28- github.com/fluxcd/pkg/tar v0.12 .0
22+ github.com/fluxcd/pkg/apis/event v0.18 .0
23+ github.com/fluxcd/pkg/apis/meta v1.18 .0
24+ github.com/fluxcd/pkg/http/fetch v0.17 .0
25+ github.com/fluxcd/pkg/kustomize v1.19 .0
26+ github.com/fluxcd/pkg/runtime v0.74 .0
27+ github.com/fluxcd/pkg/tar v0.13 .0
2928 github.com/fluxcd/source-controller/api v1.6.2
29+ github.com/go-logr/logr v1.4.3
3030 github.com/google/go-containerregistry v0.20.4-0.20250225234217-098045d5e61f
3131 github.com/mandelsoft/logging v0.0.0-20240618075559-fdca28a87b0a
3232 github.com/mandelsoft/spiff v1.7.0-beta-7
3333 github.com/mandelsoft/vfs v0.4.4
34+ github.com/mikefarah/yq/v4 v4.45.4
3435 github.com/mitchellh/hashstructure v1.1.0
3536 github.com/mitchellh/hashstructure/v2 v2.0.2
3637 github.com/onsi/gomega v1.37.0
@@ -43,13 +44,17 @@ require (
4344 github.com/vmware-labs/yaml-jsonpath v0.3.2
4445 github.com/xeipuuv/gojsonschema v1.2.0
4546 gopkg.in/op/go-logging.v1 v1.0.0-20160211212156-b2cb9fa56473
47+ gopkg.in/yaml.v3 v3.0.1
4648 helm.sh/helm/v3 v3.18.4
47- k8s.io/apimachinery v0.33.2
48- k8s.io/client-go v0.33.2
49+ k8s.io/api v0.33.3
50+ k8s.io/apiextensions-apiserver v0.33.3
51+ k8s.io/apimachinery v0.33.3
52+ k8s.io/client-go v0.33.3
4953 ocm.software/ocm v0.26.0
5054 sigs.k8s.io/controller-runtime v0.21.0
5155 sigs.k8s.io/e2e-framework v0.6.0
5256 sigs.k8s.io/kustomize/api v0.20.0
57+ sigs.k8s.io/yaml v1.5.0
5358)
5459
5560require (
@@ -113,6 +118,7 @@ require (
113118 github.com/aws/aws-sdk-go-v2/service/sts v1.33.21 // indirect
114119 github.com/aws/smithy-go v1.22.3 // indirect
115120 github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.9.1 // indirect
121+ github.com/beorn7/perks v1.0.1 // indirect
116122 github.com/blang/semver v3.5.1+incompatible // indirect
117123 github.com/blang/semver/v4 v4.0.0 // indirect
118124 github.com/buildkite/agent/v3 v3.97.0 // indirect
@@ -121,6 +127,7 @@ require (
121127 github.com/buildkite/roko v1.3.1 // indirect
122128 github.com/carapace-sh/carapace-shlex v1.0.1 // indirect
123129 github.com/cenkalti/backoff/v4 v4.3.0 // indirect
130+ github.com/cespare/xxhash/v2 v2.3.0 // indirect
124131 github.com/chai2010/gettext-go v1.0.3 // indirect
125132 github.com/chainguard-dev/git-urls v1.0.2 // indirect
126133 github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589 // indirect
@@ -137,18 +144,19 @@ require (
137144 github.com/containerd/stargz-snapshotter/estargz v0.16.3 // indirect
138145 github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
139146 github.com/containers/ocicrypt v1.2.1 // indirect
140- github.com/containers/storage v1.58 .0 // indirect
147+ github.com/containers/storage v1.59 .0 // indirect
141148 github.com/coreos/go-oidc/v3 v3.14.1 // indirect
142149 github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
150+ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
143151 github.com/davidmz/go-pageant v1.0.2 // indirect
144152 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
145153 github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352 // indirect
146154 github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
147155 github.com/dimchansky/utfbom v1.1.1 // indirect
148156 github.com/distribution/reference v0.6.0 // indirect
149- github.com/docker/cli v28.2 .2+incompatible // indirect
157+ github.com/docker/cli v28.3 .2+incompatible // indirect
150158 github.com/docker/distribution v2.8.3+incompatible // indirect
151- github.com/docker/docker v28.2 .2+incompatible // indirect
159+ github.com/docker/docker v28.3 .2+incompatible // indirect
152160 github.com/docker/docker-credential-helpers v0.9.3 // indirect
153161 github.com/docker/go v1.5.1-1.0.20160303222718-d30aec9fd63c // indirect
154162 github.com/docker/go-connections v0.5.0 // indirect
@@ -157,24 +165,25 @@ require (
157165 github.com/docker/go-units v0.5.0 // indirect
158166 github.com/dprotaso/go-yit v0.0.0-20191028211022-135eb7262960 // indirect
159167 github.com/elliotchance/orderedmap v1.8.0 // indirect
160- github.com/emicklei/go-restful/v3 v3.12.1 // indirect
168+ github.com/emicklei/go-restful/v3 v3.12.2 // indirect
161169 github.com/emirpasic/gods v1.18.1 // indirect
162170 github.com/evanphx/json-patch v5.9.11+incompatible // indirect
163171 github.com/evanphx/json-patch/v5 v5.9.11 // indirect
164172 github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
165173 github.com/fatih/color v1.18.0 // indirect
166174 github.com/felixge/httpsnoop v1.0.4 // indirect
167- github.com/fluxcd/cli-utils v0.36.0-flux.13 // indirect
175+ github.com/fluxcd/cli-utils v0.36.0-flux.14 // indirect
168176 github.com/fluxcd/flux2/v2 v2.5.1 // indirect
169177 github.com/fluxcd/image-automation-controller/api v0.40.0 // indirect
170178 github.com/fluxcd/image-reflector-controller/api v0.34.0 // indirect
171179 github.com/fluxcd/notification-controller/api v1.5.0 // indirect
172180 github.com/fluxcd/pkg/apis/acl v0.7.0 // indirect
173- github.com/fluxcd/pkg/apis/kustomize v1.10 .0 // indirect
181+ github.com/fluxcd/pkg/apis/kustomize v1.11 .0 // indirect
174182 github.com/fluxcd/pkg/envsubst v1.4.0 // indirect
175- github.com/fluxcd/pkg/sourceignore v0.12 .0 // indirect
183+ github.com/fluxcd/pkg/sourceignore v0.13 .0 // indirect
176184 github.com/fluxcd/pkg/ssa v0.48.0 // indirect
177185 github.com/fluxcd/pkg/version v0.7.0 // indirect
186+ github.com/fsnotify/fsnotify v1.9.0 // indirect
178187 github.com/fvbommel/sortorder v1.1.0 // indirect
179188 github.com/fxamacker/cbor/v2 v2.8.0 // indirect
180189 github.com/ghodss/yaml v1.0.0 // indirect
@@ -187,27 +196,35 @@ require (
187196 github.com/go-jose/go-jose/v3 v3.0.4 // indirect
188197 github.com/go-jose/go-jose/v4 v4.1.0 // indirect
189198 github.com/go-logr/stdr v1.2.2 // indirect
199+ github.com/go-logr/zapr v1.3.0 // indirect
190200 github.com/go-openapi/analysis v0.23.0 // indirect
191201 github.com/go-openapi/errors v0.22.1 // indirect
202+ github.com/go-openapi/jsonpointer v0.21.1 // indirect
203+ github.com/go-openapi/jsonreference v0.21.0 // indirect
192204 github.com/go-openapi/loads v0.22.0 // indirect
193205 github.com/go-openapi/runtime v0.28.0 // indirect
194206 github.com/go-openapi/spec v0.21.0 // indirect
195207 github.com/go-openapi/strfmt v0.23.0 // indirect
208+ github.com/go-openapi/swag v0.23.1 // indirect
196209 github.com/go-openapi/validate v0.24.0 // indirect
197210 github.com/go-test/deep v1.1.1 // indirect
198211 github.com/go-viper/mapstructure/v2 v2.3.0 // indirect
199212 github.com/gobwas/glob v0.2.3 // indirect
200213 github.com/goccy/go-json v0.10.5 // indirect
201- github.com/goccy/go-yaml v1.17.1 // indirect
214+ github.com/goccy/go-yaml v1.18.0 // indirect
215+ github.com/gogo/protobuf v1.3.2 // indirect
202216 github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
217+ github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
203218 github.com/golang/snappy v0.0.4 // indirect
204219 github.com/google/btree v1.1.3 // indirect
205220 github.com/google/certificate-transparency-go v1.3.1 // indirect
206- github.com/google/gnostic-models v0.6.9 // indirect
221+ github.com/google/gnostic-models v0.7.0 // indirect
222+ github.com/google/go-cmp v0.7.0 // indirect
207223 github.com/google/go-github/v45 v45.2.0 // indirect
208224 github.com/google/go-github/v50 v50.2.0 // indirect
209225 github.com/google/go-querystring v1.1.0 // indirect
210226 github.com/google/s2a-go v0.1.9 // indirect
227+ github.com/google/uuid v1.6.0 // indirect
211228 github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
212229 github.com/googleapis/gax-go/v2 v2.14.1 // indirect
213230 github.com/gorilla/handlers v1.5.2 // indirect
@@ -219,7 +236,7 @@ require (
219236 github.com/hashicorp/errwrap v1.1.0 // indirect
220237 github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
221238 github.com/hashicorp/go-multierror v1.1.1 // indirect
222- github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
239+ github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
223240 github.com/hashicorp/go-rootcerts v1.0.2 // indirect
224241 github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
225242 github.com/hashicorp/go-version v1.7.0 // indirect
@@ -231,13 +248,16 @@ require (
231248 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
232249 github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 // indirect
233250 github.com/jinzhu/copier v0.4.0 // indirect
251+ github.com/josharian/intern v1.0.0 // indirect
252+ github.com/json-iterator/go v1.1.12 // indirect
234253 github.com/kevinburke/ssh_config v1.2.0 // indirect
235254 github.com/klauspost/compress v1.18.0 // indirect
236255 github.com/klauspost/cpuid/v2 v2.2.10 // indirect
237256 github.com/klauspost/pgzip v1.2.6 // indirect
238257 github.com/letsencrypt/boulder v0.0.0-20241010192615-6692160cedfa // indirect
239258 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
240259 github.com/magiconair/properties v1.8.10 // indirect
260+ github.com/mailru/easyjson v0.9.0 // indirect
241261 github.com/mandelsoft/filepath v0.0.0-20240223090642-3e2777258aa3 // indirect
242262 github.com/mandelsoft/goutils v0.0.0-20241005173814-114fa825bbdc // indirect
243263 github.com/marstr/guid v1.1.0 // indirect
@@ -259,9 +279,12 @@ require (
259279 github.com/moby/sys/sequential v0.6.0 // indirect
260280 github.com/moby/sys/user v0.4.0 // indirect
261281 github.com/moby/term v0.5.2 // indirect
282+ github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
283+ github.com/modern-go/reflect2 v1.0.2 // indirect
262284 github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
263285 github.com/morikuni/aec v1.0.0 // indirect
264286 github.com/mozillazg/docker-credential-acr-helper v0.4.0 // indirect
287+ github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
265288 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
266289 github.com/oklog/ulid v1.3.1 // indirect
267290 github.com/oleiade/reflections v1.1.0 // indirect
@@ -272,7 +295,12 @@ require (
272295 github.com/pelletier/go-toml/v2 v2.2.4 // indirect
273296 github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
274297 github.com/pjbgf/sha1cd v0.3.2 // indirect
298+ github.com/pkg/errors v0.9.1 // indirect
275299 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
300+ github.com/prometheus/client_golang v1.22.0 // indirect
301+ github.com/prometheus/client_model v0.6.2 // indirect
302+ github.com/prometheus/common v0.65.0 // indirect
303+ github.com/prometheus/procfs v0.17.0 // indirect
276304 github.com/redis/go-redis/extra/rediscmd/v9 v9.5.3 // indirect
277305 github.com/redis/go-redis/extra/redisotel/v9 v9.5.3 // indirect
278306 github.com/redis/go-redis/v9 v9.10.0 // indirect
@@ -298,6 +326,7 @@ require (
298326 github.com/spf13/afero v1.14.0 // indirect
299327 github.com/spf13/cast v1.7.1 // indirect
300328 github.com/spf13/cobra v1.9.1 // indirect
329+ github.com/spf13/pflag v1.0.6 // indirect
301330 github.com/spf13/viper v1.20.1 // indirect
302331 github.com/spiffe/go-spiffe/v2 v2.5.0 // indirect
303332 github.com/subosito/gotenv v1.6.0 // indirect
@@ -329,94 +358,61 @@ require (
329358 go.opentelemetry.io/contrib/bridges/prometheus v0.57.0 // indirect
330359 go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 // indirect
331360 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect
332- go.opentelemetry.io/otel v1.35 .0 // indirect
361+ go.opentelemetry.io/otel v1.37 .0 // indirect
333362 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.8.0 // indirect
334363 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.8.0 // indirect
335364 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.32.0 // indirect
336365 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.32.0 // indirect
337366 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 // indirect
338367 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 // indirect
339- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.33 .0 // indirect
368+ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35 .0 // indirect
340369 go.opentelemetry.io/otel/exporters/prometheus v0.54.0 // indirect
341370 go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.8.0 // indirect
342371 go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.32.0 // indirect
343372 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.32.0 // indirect
344373 go.opentelemetry.io/otel/log v0.8.0 // indirect
345- go.opentelemetry.io/otel/metric v1.35 .0 // indirect
374+ go.opentelemetry.io/otel/metric v1.37 .0 // indirect
346375 go.opentelemetry.io/otel/sdk v1.35.0 // indirect
347376 go.opentelemetry.io/otel/sdk/log v0.8.0 // indirect
348377 go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
349- go.opentelemetry.io/otel/trace v1.35 .0 // indirect
378+ go.opentelemetry.io/otel/trace v1.37 .0 // indirect
350379 go.opentelemetry.io/proto/otlp v1.5.0 // indirect
351380 go.step.sm/crypto v0.61.0 // indirect
381+ go.uber.org/multierr v1.11.0 // indirect
382+ go.uber.org/zap v1.27.0 // indirect
352383 go.yaml.in/yaml/v2 v2.4.2 // indirect
353- go.yaml.in/yaml/v3 v3.0.3 // indirect
384+ go.yaml.in/yaml/v3 v3.0.4 // indirect
385+ golang.org/x/crypto v0.40.0 // indirect
354386 golang.org/x/exp v0.0.0-20250305212735-054e65f0b394 // indirect
355387 golang.org/x/mod v0.25.0 // indirect
356- golang.org/x/sync v0.15.0 // indirect
388+ golang.org/x/net v0.41.0 // indirect
389+ golang.org/x/oauth2 v0.30.0 // indirect
390+ golang.org/x/sync v0.16.0 // indirect
391+ golang.org/x/sys v0.34.0 // indirect
392+ golang.org/x/term v0.33.0 // indirect
393+ golang.org/x/text v0.27.0 // indirect
394+ golang.org/x/time v0.12.0 // indirect
395+ gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
357396 google.golang.org/api v0.230.0 // indirect
358397 google.golang.org/genproto/googleapis/api v0.0.0-20250414145226-207652e42e2e // indirect
359398 google.golang.org/genproto/googleapis/rpc v0.0.0-20250414145226-207652e42e2e // indirect
360- google.golang.org/grpc v1.72.0 // indirect
399+ google.golang.org/grpc v1.72.2 // indirect
400+ google.golang.org/protobuf v1.36.6 // indirect
361401 gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
402+ gopkg.in/inf.v0 v0.9.1 // indirect
362403 gopkg.in/ini.v1 v1.67.0 // indirect
363404 gopkg.in/warnings.v0 v0.1.2 // indirect
405+ gopkg.in/yaml.v2 v2.4.0 // indirect
364406 k8s.io/cli-runtime v0.33.2 // indirect
407+ k8s.io/component-base v0.33.3 // indirect
408+ k8s.io/klog/v2 v2.130.1 // indirect
409+ k8s.io/kube-openapi v0.0.0-20250701173324-9bd5c66d9911 // indirect
365410 k8s.io/kubectl v0.33.2 // indirect
411+ k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 // indirect
366412 oras.land/oras-go/v2 v2.6.0 // indirect
413+ sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
367414 sigs.k8s.io/kustomize/kyaml v0.20.0 // indirect
368415 sigs.k8s.io/randfill v1.0.0 // indirect
369416 sigs.k8s.io/release-utils v0.11.1 // indirect
370- )
371-
372- require (
373- github.com/beorn7/perks v1.0.1 // indirect
374- github.com/cespare/xxhash/v2 v2.3.0 // indirect
375- github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
376- github.com/fsnotify/fsnotify v1.8.0 // indirect
377- github.com/go-logr/logr v1.4.3
378- github.com/go-logr/zapr v1.3.0 // indirect
379- github.com/go-openapi/jsonpointer v0.21.0 // indirect
380- github.com/go-openapi/jsonreference v0.21.0 // indirect
381- github.com/go-openapi/swag v0.23.1 // indirect
382- github.com/gogo/protobuf v1.3.2 // indirect
383- github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
384- github.com/google/go-cmp v0.7.0 // indirect
385- github.com/google/uuid v1.6.0 // indirect
386- github.com/josharian/intern v1.0.0 // indirect
387- github.com/json-iterator/go v1.1.12 // indirect
388- github.com/mailru/easyjson v0.9.0 // indirect
389- github.com/mikefarah/yq/v4 v4.45.4
390- github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
391- github.com/modern-go/reflect2 v1.0.2 // indirect
392- github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
393- github.com/pkg/errors v0.9.1 // indirect
394- github.com/prometheus/client_golang v1.22.0 // indirect
395- github.com/prometheus/client_model v0.6.2 // indirect
396- github.com/prometheus/common v0.63.0 // indirect
397- github.com/prometheus/procfs v0.15.1 // indirect
398- github.com/spf13/pflag v1.0.6 // indirect
399- go.uber.org/multierr v1.11.0 // indirect
400- go.uber.org/zap v1.27.0 // indirect
401- golang.org/x/crypto v0.39.0 // indirect
402- golang.org/x/net v0.41.0 // indirect
403- golang.org/x/oauth2 v0.30.0 // indirect
404- golang.org/x/sys v0.33.0 // indirect
405- golang.org/x/term v0.32.0 // indirect
406- golang.org/x/text v0.26.0 // indirect
407- golang.org/x/time v0.11.0 // indirect
408- gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
409- google.golang.org/protobuf v1.36.6 // indirect
410- gopkg.in/inf.v0 v0.9.1 // indirect
411- gopkg.in/yaml.v2 v2.4.0
412- gopkg.in/yaml.v3 v3.0.1
413- k8s.io/api v0.33.2
414- k8s.io/apiextensions-apiserver v0.33.2
415- k8s.io/component-base v0.33.2 // indirect
416- k8s.io/klog/v2 v2.130.1 // indirect
417- k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
418- k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e // indirect
419- sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
420417 sigs.k8s.io/structured-merge-diff/v4 v4.7.0 // indirect
421- sigs.k8s.io/yaml v1.5.0
422418)
0 commit comments