chore(deps): bump the go group with 6 updates (#155)

Bumps the go group with 6 updates:

| Package | From | To |
| --- | --- | --- |
|
[github.com/fluxcd/image-automation-controller/api](https://github.com/fluxcd/image-automation-controller)
| `0.41.0` | `0.41.1` |
|
[github.com/fluxcd/image-reflector-controller/api](https://github.com/fluxcd/image-reflector-controller)
| `0.35.1` | `0.35.2` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) |
`1.12.0` | `1.13.0` |
|
[github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller)
| `1.6.0` | `1.6.1` |
|
[github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller)
| `0.26.1` | `0.26.2` |
| [ocm.software/ocm](https://github.com/open-component-model/ocm) |
`0.24.0` | `0.25.0` |

Updates `github.com/fluxcd/image-automation-controller/api` from 0.41.0
to 0.41.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-automation-controller/releases">github.com/fluxcd/image-automation-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v0.41.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/image-automation-controller/blob/v0.41.1/CHANGELOG.md">v0.41.1
changelog</a></p>
<h2>Container images</h2>
<ul>

<li><code>docker.io/fluxcd/image-automation-controller:v0.41.1</code></li>
<li><code>ghcr.io/fluxcd/image-automation-controller:v0.41.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-automation-controller/blob/main/CHANGELOG.md">github.com/fluxcd/image-automation-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>0.41.1</h2>
<p><strong>Release date:</strong> 2025-06-13</p>
<p>This patch release comes with a fix for the <code>knownhosts: key
mismatch</code> error.</p>
<p>Fixes:</p>
<ul>
<li>Fix <code>knownhosts key mismatch</code> regression bug
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/923">#923</a></li>
<li>Upgrade dependencies (includes
<code>github.com/go-git/go-git/v5</code> <code>v5.16.2</code>)
<a
href="https://redirect.github.com/fluxcd/image-automation-controller/pull/919">#919</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/b8e667d558af620c45fa41038acba6ed10643f27"><code>b8e667d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/926">#926</a>
from fluxcd/release-v0.41.1</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/d8366598f0c82c5797139985e53ba50ecaf3d223"><code>d836659</code></a>
Release v0.41.1</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/a4fbfa885b159bbe13ae74c5907202f2f08e6b10"><code>a4fbfa8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/923">#923</a>
from fluxcd/fix-host-keys</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/009d764d7f176c7e7445c88f768e0e0bad5ed9c3"><code>009d764</code></a>
Upgrade dependencies</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/42af3383fce60545d76caabcb09ad9aa3fee57ce"><code>42af338</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/919">#919</a>
from fluxcd/upgrade-deps</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/17e585c90d764d95c68c0c23be475f4008c6472e"><code>17e585c</code></a>
Upgrade dependencies</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/45e34fd5b3b51966bdb9bbb24bed26853e71fb60"><code>45e34fd</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-automation-controller/issues/918">#918</a>
from fluxcd/dependabot-up</li>
<li><a
href="https://github.com/fluxcd/image-automation-controller/commit/48e677ab260918a02ac07cd68872fd8302634a33"><code>48e677a</code></a>
Update dependabot config</li>
<li>See full diff in <a
href="https://github.com/fluxcd/image-automation-controller/compare/v0.41.0...v0.41.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/image-reflector-controller/api` from 0.35.1
to 0.35.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-reflector-controller/releases">github.com/fluxcd/image-reflector-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v0.35.2</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/image-reflector-controller/blob/v0.35.2/CHANGELOG.md">v0.35.2
changelog</a></p>
<h2>Container images</h2>
<ul>

<li><code>docker.io/fluxcd/image-reflector-controller:v0.35.2</code></li>
<li><code>ghcr.io/fluxcd/image-reflector-controller:v0.35.2</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md">github.com/fluxcd/image-reflector-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>0.35.2</h2>
<p><strong>Release date:</strong> 2025-06-13</p>
<p>This prerelease fixes authentication for
<a
href="https://fluxcd.io/flux/integrations/aws/#for-amazon-public-elastic-container-registry">public
ECR repositories</a>.</p>
<p>Fixes:</p>
<ul>
<li>Fix authentication for public ECR
<a
href="https://redirect.github.com/fluxcd/image-reflector-controller/pull/782">#782</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/b65e8a04938b13850193b1ddc9ff89c2b68c1a9c"><code>b65e8a0</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/783">#783</a>
from fluxcd/release-v0.35.2</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/12c55242b97c7610e7fd9017edc0d889e4ef53dd"><code>12c5524</code></a>
Release v0.35.2</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/641838e7501a5b048f9a20d1463d3348b363937b"><code>641838e</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/image-reflector-controller/issues/782">#782</a>
from fluxcd/upgrade-auth</li>
<li><a
href="https://github.com/fluxcd/image-reflector-controller/commit/8f16f402ddbc4bdafe57a3d54c138751f3592abd"><code>8f16f40</code></a>
Upgrade fluxcd/pkg/auth</li>
<li>See full diff in <a
href="https://github.com/fluxcd/image-reflector-controller/compare/v0.35.1...v0.35.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/apis/meta` from 1.12.0 to 1.13.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/246bc825f6faeb9776e93e0351c1df11696f9b10"><code>246bc82</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/942">#942</a> from
fluxcd/force-annotation</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/86ef319f221ca438e83c831477e1ca7cb62ed28d"><code>86ef319</code></a>
Introduce reconcile.fluxcd.io/forceAt annotation</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9be33b344d23d6e82b7973f7b580302763f188fd"><code>9be33b3</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/941">#941</a> from
fluxcd/crypto-v0.39.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/895721986d4b1e2520b9a62710483fc85dedd380"><code>8957219</code></a>
Update <code>golang.org/x/crypto</code> to v0.39.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/406c48d1b555b6a867415b2443e360a3d5731da0"><code>406c48d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/940">#940</a> from
fluxcd/release-git-pkgs</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/229800534c82247702fc5043ef3ae1e1efd39574"><code>2298005</code></a>
Release git/v0.32.0 and git/gogit/v0.34.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/47a1b23f1202129a4760fdba5babe6cb776331d7"><code>47a1b23</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/938">#938</a> from
fluxcd/public-ecr</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a0d4442b2429470fdfd8d3c614865239bec2764c"><code>a0d4442</code></a>
Fix support for public.ecr.aws</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/53c7b2dc6abc5ce218296f0928fb81eb4e1ad8a3"><code>53c7b2d</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/939">#939</a> from
kane8n/update-go-git</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/77f008cd0d04bac28aac048da7facf0f99b5c513"><code>77f008c</code></a>
update go-git</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/apis/meta/v1.12.0...apis/meta/v1.13.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/source-controller/api` from 1.6.0 to 1.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/source-controller/releases">github.com/fluxcd/source-controller/api's
releases</a>.</em></p>
<blockquote>
<h2>v1.6.1</h2>
<h2>Changelog</h2>
<p><a
href="https://github.com/fluxcd/source-controller/blob/v1.6.1/CHANGELOG.md">v1.6.1
changelog</a></p>
<h2>Container images</h2>
<ul>
<li><code>docker.io/fluxcd/source-controller:v1.6.1</code></li>
<li><code>ghcr.io/fluxcd/source-controller:v1.6.1</code></li>
</ul>
<p>Supported architectures: <code>linux/amd64</code>,
<code>linux/arm64</code> and <code>linux/arm/v7</code>.</p>
<p>The container images are built on GitHub hosted runners and are
signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the
<a href="https://fluxcd.io/flux/security/">security
documentation</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md">github.com/fluxcd/source-controller/api's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.1</h2>
<p><strong>Release date:</strong> 2025-06-13</p>
<p>This patch release comes with a fix for the <code>knownhosts: key
mismatch</code>
error in the <code>GitRepository</code> API when using SSH
authentication, and
a fix for authentication with
<a
href="https://fluxcd.io/flux/integrations/aws/#for-amazon-public-elastic-container-registry">public
ECR repositories</a>
in the <code>OCIRepository</code> API.</p>
<p>Fix:</p>
<ul>
<li>Fix authentication for public ECR
<a
href="https://redirect.github.com/fluxcd/source-controller/pull/1825">#1825</a></li>
<li>Fix <code>knownhosts key mismatch</code> regression bug
<a
href="https://redirect.github.com/fluxcd/source-controller/pull/1829">#1829</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/source-controller/commit/968eb2b7241930ebbe4dfb5e0af8c1f24280dd01"><code>968eb2b</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1832">#1832</a>
from fluxcd/release-v1.6.1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/15ac411e49a3367ae7bc8caff4f49dbb3e7ba09c"><code>15ac411</code></a>
Release v1.6.1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/7922d124e74a28b3ba084c45bb9383b5324cdaf0"><code>7922d12</code></a>
Add changelog entry for v1.6.1</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/3cfe485231b5395f2844d8acf096c4d5b2535924"><code>3cfe485</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1830">#1830</a>
from fluxcd/backport-1829-to-release/v1.6.x</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/d35cd7dd1e36829148d731d5d7fa333c504c0a89"><code>d35cd7d</code></a>
Upgrade dependencies</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/75cc1ded94d1d10b948400ffb3127c571a46a07c"><code>75cc1de</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/source-controller/issues/1826">#1826</a>
from fluxcd/backport-1825-to-release/v1.6.x</li>
<li><a
href="https://github.com/fluxcd/source-controller/commit/53faf1794abfacefaf93dcffea5931f167390759"><code>53faf17</code></a>
Upgrade dependencies</li>
<li>See full diff in <a
href="https://github.com/fluxcd/source-controller/compare/v1.6.0...v1.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/open-component-model/ocm-controller` from 0.26.1 to
0.26.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm-controller/releases">github.com/open-component-model/ocm-controller's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.2</h2>
<h1>Release v0.26.2</h1>
<ul>
<li>Allow add of labels to clusterrole (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/669">#669</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>chore(deps): bump helm.sh/helm/v3 from 3.18.1 to 3.18.2 in the go
group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/671">#671</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/667">#667</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/666">#666</a>)</li>
</ul>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): bump helm.sh/helm/v3 from 3.18.1 to 3.18.2 in the go
group (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/671">#671</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/667">#667</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/666">#666</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/62f9ecd061796e112655774b83ea7512ad4b3a6d"><code>62f9ecd</code></a>
chore: release notes for v0.26.2 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/672">#672</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/26970ef905d9d8348c6cc7407951248cc4509821"><code>26970ef</code></a>
Allow add of labels to clusterrole (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/669">#669</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/b4aabb6164fe6bb3848d7a9b63e9d4218d582b81"><code>b4aabb6</code></a>
chore(deps): bump helm.sh/helm/v3 from 3.18.1 to 3.18.2 in the go group
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/671">#671</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/1ca7bbc176ddcd86945d0cb307ccd3c351fad772"><code>1ca7bbc</code></a>
chore(deps): bump github/codeql-action from 3.28.18 to 3.28.19 in the ci
grou...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/4ae94bf915a7d5cd0b5187ebbf6982e461a15b6f"><code>4ae94bf</code></a>
chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/667">#667</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/2c2b42a62b6e83471022300396c8521be3801c1a"><code>2c2b42a</code></a>
chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/666">#666</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/3bfe8df2ed7d02878790e4a39532c6cb99b9a8ec"><code>3bfe8df</code></a>
chore: release for v0.26.1 (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/665">#665</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/63090039886487b6f802b74aa9555b58f9ecfca4"><code>6309003</code></a>
Move to version 3 of registry, addressing SAP compliance concerns. (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/664">#664</a>)</li>
<li>See full diff in <a
href="https://github.com/open-component-model/ocm-controller/compare/v0.26.1...v0.26.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `ocm.software/ocm` from 0.24.0 to 0.25.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm/releases">ocm.software/ocm's
releases</a>.</em></p>
<blockquote>
<h2>v0.25.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🐛 Bug Fixes</h3>
<!-- raw HTML omitted -->
<ul>
<li>fix(revert): make sure that ref is an option in the gitHub
AccessMethod (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1406">#1406</a>)
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1460">#1460</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1462">open-component-model/ocm#1462</a></li>
<li>fix: allow spec compliant, but unusually ordered HELM Chart OCI
Artifacts in HELM OCI Artifact downloader (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1470">#1470</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1471">open-component-model/ocm#1471</a></li>
<li>fix: allow pre-v3.7.0 HELM Charts in HELM OCI Artifact downloader
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1476">#1476</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1477">open-component-model/ocm#1477</a></li>
<li>fix: make sure that helm downloader does not overwrite chart with
provenance data (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1481">#1481</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1483">open-component-model/ocm#1483</a></li>
<li>fix: correct filename for provenance file (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1492">#1492</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1495">open-component-model/ocm#1495</a></li>
<li>fix: git access tar methods (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1454">#1454</a>)
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1494">open-component-model/ocm#1494</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>⬆️ Dependencies</h3>
<ul>
<li>chore(deps): bump the go group with 10 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1426">open-component-model/ocm#1426</a></li>
<li>chore(deps): bump github.com/fluxcd/cli-utils from 0.36.0-flux.12 to
0.36.0-flux.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1427">open-component-model/ocm#1427</a></li>
<li>chore: update to go v1.24.2 by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1432">open-component-model/ocm#1432</a></li>
<li>chore: golangci lint/v2 by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1434">open-component-model/ocm#1434</a></li>
<li>chore(deps): bump the go group with 6 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1441">open-component-model/ocm#1441</a></li>
</ul>
<h3>🧰 Maintenance</h3>
<ul>
<li>chore: bump VERSION to 0.25.0-dev by <a
href="https://github.com/ocmbot"><code>@​ocmbot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1424">open-component-model/ocm#1424</a></li>
<li>chore: pin to v0.5.1 by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1430">open-component-model/ocm#1430</a></li>
<li>chore: run by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1437">open-component-model/ocm#1437</a></li>
<li>chore: Pin GitHub Actions to commit SHAs by <a
href="https://github.com/hilmarf"><code>@​hilmarf</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1440">open-component-model/ocm#1440</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/open-component-model/ocm/compare/v0.24...v0.25.0">https://github.com/open-component-model/ocm/compare/v0.24...v0.25.0</a></p>
<h2>v0.25.0-rc.6</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🐛 Bug Fixes</h3>
<!-- raw HTML omitted -->
<ul>
<li>fix(revert): make sure that ref is an option in the gitHub
AccessMethod (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1406">#1406</a>)
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1460">#1460</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1462">open-component-model/ocm#1462</a></li>
<li>fix: allow spec compliant, but unusually ordered HELM Chart OCI
Artifacts in HELM OCI Artifact downloader (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1470">#1470</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1471">open-component-model/ocm#1471</a></li>
<li>fix: allow pre-v3.7.0 HELM Charts in HELM OCI Artifact downloader
(<a
href="https://redirect.github.com/open-component-model/ocm/issues/1476">#1476</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1477">open-component-model/ocm#1477</a></li>
<li>fix: make sure that helm downloader does not overwrite chart with
provenance data (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1481">#1481</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1483">open-component-model/ocm#1483</a></li>
<li>fix: correct filename for provenance file (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1492">#1492</a>)
by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1495">open-component-model/ocm#1495</a></li>
<li>fix: git access tar methods (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1454">#1454</a>)
by <a href="https://github.com/frewilhelm"><code>@​frewilhelm</code></a>
in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1494">open-component-model/ocm#1494</a></li>
</ul>
<!-- raw HTML omitted -->
<h3>⬆️ Dependencies</h3>
<ul>
<li>chore(deps): bump the go group with 10 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/open-component-model/ocm/pull/1426">open-component-model/ocm#1426</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm/commit/6b6b504224faea70f3b8d4abace9df5c9031f623"><code>6b6b504</code></a>
chore: Pin GitHub Actions to commit SHAs (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1440">#1440</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/a5335111a7ae6fc51d33d3c9f1bc6d95e7d22caa"><code>a533511</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1442">#1442</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/4b2be1fd1440cd6651bd4f1e13ed50926c887d7f"><code>4b2be1f</code></a>
chore(deps): bump the go group with 6 updates (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1441">#1441</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/db2b500e0089f65c3e05d1d5059d109fb1dffb4a"><code>db2b500</code></a>
chore: run <code>nix flake update</code> (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1437">#1437</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/ffcd569c5310a3d649fd95a2668d6e2e220227e2"><code>ffcd569</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1436">#1436</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/56fdcbece2c35e6f8b5f9dce2a0ef8f8cad4f98a"><code>56fdcbe</code></a>
chore: switch to stable 24.11 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1435">#1435</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/cb5eaee980f7417e75d83670f4d4342f2706d6a3"><code>cb5eaee</code></a>
chore: golangci lint/v2 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1434">#1434</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/835d0ebc9b8b9c3af0cb82f1a2eb9f9705057c47"><code>835d0eb</code></a>
chore: update to go v1.24.2 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1432">#1432</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/eb496f057d0ab25800ab3aae68fb29c83c977340"><code>eb496f0</code></a>
chore: pin <code>mdref</code> to v0.5.1 (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1430">#1430</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm/commit/33363129f728e44a98de59594a7ac54fc49e7301"><code>3336312</code></a>
chore: update 'flake.nix' (<a
href="https://redirect.github.com/open-component-model/ocm/issues/1428">#1428</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm/compare/v0.24...v0.25">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -1,8 +1,6 @@
 module github.com/open-component-model/ocm-e2e-framework
 
-go 1.24.0
-
-toolchain go1.24.2
+go 1.24.2
 
 replace github.com/opencontainers/go-digest => github.com/opencontainers/go-digest v1.0.1-0.20220411205349-bde1400a84be
 
@@ -14,24 +12,24 @@ require (
 	github.com/fluxcd/cli-utils v0.36.0-flux.13
 	github.com/fluxcd/flux2/v2 v2.6.1
 	github.com/fluxcd/helm-controller/api v1.3.0
-	github.com/fluxcd/image-automation-controller/api v0.41.0
-	github.com/fluxcd/image-reflector-controller/api v0.35.1
+	github.com/fluxcd/image-automation-controller/api v0.41.1
+	github.com/fluxcd/image-reflector-controller/api v0.35.2
 	github.com/fluxcd/kustomize-controller/api v1.6.0
 	github.com/fluxcd/notification-controller/api v1.6.0
-	github.com/fluxcd/pkg/apis/meta v1.12.0
+	github.com/fluxcd/pkg/apis/meta v1.13.0
 	github.com/fluxcd/pkg/runtime v0.60.0
 	github.com/fluxcd/pkg/ssa v0.48.0
 	github.com/fluxcd/pkg/version v0.7.0
-	github.com/fluxcd/source-controller/api v1.6.0
+	github.com/fluxcd/source-controller/api v1.6.1
 	github.com/open-component-model/git-controller v0.12.1
-	github.com/open-component-model/ocm-controller v0.26.1
+	github.com/open-component-model/ocm-controller v0.26.2
 	github.com/open-component-model/replication-controller v0.13.1
 	k8s.io/api v0.33.1
 	k8s.io/apiextensions-apiserver v0.33.1
 	k8s.io/apimachinery v0.33.1
 	k8s.io/cli-runtime v0.33.1
 	k8s.io/client-go v0.33.1
-	ocm.software/ocm v0.24.0
+	ocm.software/ocm v0.25.0
 	sigs.k8s.io/controller-runtime v0.21.0
 	sigs.k8s.io/e2e-framework v0.6.0
 	sigs.k8s.io/kustomize/api v0.19.0
@@ -42,9 +40,9 @@ require (
 	cloud.google.com/go/auth v0.15.0 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
 	cloud.google.com/go/compute/metadata v0.6.0 // indirect
+	cuelabs.dev/go/oci/ociregistry v0.0.0-20250304105642-27e071d2c9b1 // indirect
 	dario.cat/mergo v1.0.1 // indirect
 	github.com/42wim/httpsig v1.2.2 // indirect
-	github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect
 	github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.15.2 // indirect
 	github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
@@ -82,18 +80,18 @@ require (
 	github.com/aws/aws-sdk-go-v2/config v1.29.14 // indirect
 	github.com/aws/aws-sdk-go-v2/credentials v1.17.67 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.72 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.74 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.43.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.44.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.31.2 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 // indirect
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.79.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.79.3 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sts v1.33.19 // indirect
@@ -124,7 +122,7 @@ require (
 	github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 // indirect
 	github.com/containers/ocicrypt v1.2.1 // indirect
 	github.com/containers/storage v1.58.0 // indirect
-	github.com/coreos/go-oidc/v3 v3.13.0 // indirect
+	github.com/coreos/go-oidc/v3 v3.14.1 // indirect
 	github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467 // indirect
 	github.com/cyphar/filepath-securejoin v0.4.1 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
@@ -134,18 +132,18 @@ require (
 	github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7 // indirect
 	github.com/dimchansky/utfbom v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v28.0.4+incompatible // indirect
+	github.com/docker/cli v28.1.1+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
-	github.com/docker/docker v28.0.4+incompatible // indirect
+	github.com/docker/docker v28.1.1+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.9.3 // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
-	github.com/docker/go-metrics v0.0.1 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/elliotchance/orderedmap v1.8.0 // indirect
 	github.com/emicklei/go-restful/v3 v3.12.2 // indirect
+	github.com/emicklei/proto v1.14.0 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
-	github.com/evanphx/json-patch v5.9.0+incompatible // indirect
+	github.com/evanphx/json-patch v5.9.11+incompatible // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
 	github.com/fatih/color v1.18.0 // indirect
@@ -166,7 +164,7 @@ require (
 	github.com/go-git/go-git/v5 v5.16.0 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.4 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.0 // indirect
-	github.com/go-logr/logr v1.4.2 // indirect
+	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-openapi/analysis v0.23.0 // indirect
 	github.com/go-openapi/errors v0.22.1 // indirect
@@ -200,7 +198,6 @@ require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.6 // indirect
 	github.com/googleapis/gax-go/v2 v2.14.1 // indirect
-	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gowebpki/jcs v1.0.1 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
@@ -246,6 +243,7 @@ require (
 	github.com/moby/docker-image-spec v1.3.1 // indirect
 	github.com/moby/locker v1.0.1 // indirect
 	github.com/moby/spdystream v0.5.0 // indirect
+	github.com/moby/sys/atomicwriter v0.1.0 // indirect
 	github.com/moby/sys/capability v0.4.0 // indirect
 	github.com/moby/sys/mountinfo v0.7.2 // indirect
 	github.com/moby/sys/sequential v0.6.0 // indirect
@@ -275,7 +273,8 @@ require (
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.63.0 // indirect
 	github.com/prometheus/procfs v0.16.1 // indirect
-	github.com/redis/go-redis/v9 v9.7.3 // indirect
+	github.com/protocolbuffers/txtpbfmt v0.0.0-20250129171521-feedd8250727 // indirect
+	github.com/redis/go-redis/v9 v9.8.0 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/ryanuber/go-glob v1.0.0 // indirect
@@ -289,14 +288,14 @@ require (
 	github.com/sigstore/fulcio v1.6.6 // indirect
 	github.com/sigstore/protobuf-specs v0.4.1 // indirect
 	github.com/sigstore/rekor v1.3.10 // indirect
-	github.com/sigstore/sigstore v1.9.3 // indirect
+	github.com/sigstore/sigstore v1.9.4 // indirect
 	github.com/sigstore/sigstore-go v0.7.1 // indirect
 	github.com/sigstore/timestamp-authority v1.2.5 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/skeema/knownhosts v1.3.1 // indirect
 	github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
-	github.com/spf13/afero v1.12.0 // indirect
+	github.com/spf13/afero v1.14.0 // indirect
 	github.com/spf13/cast v1.7.1 // indirect
 	github.com/spf13/cobra v1.9.1 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect
@@ -363,13 +362,12 @@ require (
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	helm.sh/helm/v3 v3.17.3 // indirect
+	helm.sh/helm/v3 v3.18.2 // indirect
 	k8s.io/component-base v0.33.1 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
 	k8s.io/kubectl v0.33.0 // indirect
 	k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e // indirect
-	oras.land/oras-go v1.2.6 // indirect
 	oras.land/oras-go/v2 v2.5.0 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
 	sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect