chore(deps): bump the go group with 4 updates (#152)

Bumps the go group with 4 updates:
[github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg),
[github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg),
[github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller)
and
[sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime).

Updates `github.com/fluxcd/pkg/runtime` from 0.59.0 to 0.60.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/3d6f759b7671a1ab0b3da5ee856de681d6f7532f"><code>3d6f759</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/931">#931</a> from
fluxcd/helm-v3.18.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/6c13e0fa71cf28e0e0b57121637ddc25efb4970c"><code>6c13e0f</code></a>
Update helm to v3.18.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/0e3c44ae07c5f757659d93be9030cccbb19b74f2"><code>0e3c44a</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/930">#930</a> from
fluxcd/controller-runtime-v0.21.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/10f34ae524ae9b7aa7c32b22b337eb4d096d71b1"><code>10f34ae</code></a>
Update controller-runtime to v0.21.0</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/69fd2d1e91bfb9a2f2b81c8ca36e08634ccea069"><code>69fd2d1</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/928">#928</a> from
fluxcd/auth-audience-cache-key</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/82fd6879ccad798275a617355a33fe167ea051b3"><code>82fd687</code></a>
[RFC-0010] Add provider audience to cache key and decouple packages</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/7a72e48536ab9762bb4127a39b46f2bf064e76a3"><code>7a72e48</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/927">#927</a> from
fluxcd/rfc-0010-feature-gate</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d1cd390ccab425d05ade7119e4db8dcf9d2ee847"><code>d1cd390</code></a>
[RFC-0010] Introduce feature gate for enabling object-level workload
identity</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/a556f82a7d5286b8f8ccc9c063ac61a2da3a26d0"><code>a556f82</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/926">#926</a> from
fluxcd/azure-int-tests</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d8a62c14d85dd39c1af74d654315d1623bbd5f28"><code>d8a62c1</code></a>
Enable scheduled Azure integration tests</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/runtime/v0.59.0...runtime/v0.60.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/fluxcd/pkg/ssa` from 0.47.0 to 0.48.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fluxcd/pkg/commit/3ba849f45645b7451a5501c53f7fddc48cb54604"><code>3ba849f</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/919">#919</a> from
fluxcd/auth-valid-registry</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/d89e633e83a8f8461c03c2823f4e65e1ca2703d5"><code>d89e633</code></a>
[RFC-0010] Validate artifact repository for all auth providers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/1985bd8e68a2aaee2341955fb8a2d3c2d5b50171"><code>1985bd8</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/918">#918</a> from
fluxcd/gogit-agnostic</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/5b6454abe7869e671b1e5fe362f71e201f34e935"><code>5b6454a</code></a>
Package git/gogit should be agnostic of providers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/00782ede38b76798df37d10b08734ce45815a5c2"><code>00782ed</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/917">#917</a> from
fluxcd/test-auth-providers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/3976c50177be24d486ab0812faf87f48bfdd7acc"><code>3976c50</code></a>
[RFC-0010] Add tests for auth providers</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/182841a21cfa3096699344e251b19222fb0c3fd3"><code>182841a</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/916">#916</a> from
fluxcd/cache-op-label</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/1e414501bfa5d894bcef0cb1952d60d9e1ab9a70"><code>1e41450</code></a>
Introduce operation label for cache event metric</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/aa3cde994a156463051ddc4211a8803b1dfe0d5c"><code>aa3cde9</code></a>
Merge pull request <a
href="https://redirect.github.com/fluxcd/pkg/issues/909">#909</a> from
fluxcd/auth-azure</li>
<li><a
href="https://github.com/fluxcd/pkg/commit/9e0e8bc25716f30115dcd58289ff1edc1d740288"><code>9e0e8bc</code></a>
[RFC-0010] Add azure auth library</li>
<li>Additional commits viewable in <a
href="https://github.com/fluxcd/pkg/compare/oci/v0.47.0...oci/v0.48.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/open-component-model/ocm-controller` from 0.26.0 to
0.26.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-component-model/ocm-controller/releases">github.com/open-component-model/ocm-controller's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.1</h2>
<h1>Release v0.26.1</h1>
<ul>
<li>Registry Deployment template now gets image info from values.yaml
(<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/660">#660</a>)</li>
<li>chore: refactoring the signing test to make it more robust (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/657">#657</a>)</li>
<li>fix: update the used repository name (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/656">#656</a>)</li>
<li>fix: add extra identity to the resource lookup reference (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/655">#655</a>)</li>
<li>adjust GHA to trigger on PR and not pull_request_target (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/653">#653</a>)</li>
<li>Enable e2e GHA workflow to be executed manually (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/650">#650</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>update slack GHA (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/651">#651</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/661">#661</a>)</li>
<li>chore(deps): bump the go group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/654">#654</a>)</li>
<li>chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/648">#648</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/646">#646</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/643">#643</a>)</li>
<li>chore(deps): bump the go_modules group across 1 directory with 4
updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/641">#641</a>)</li>
<li>chore(deps): bump the go group across 1 directory with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/637">#637</a>)</li>
</ul>
<!-- raw HTML omitted -->
<h2>⬆️ Dependencies</h2>
<!-- raw HTML omitted -->
<ul>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/661">#661</a>)</li>
<li>chore(deps): bump the go group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/654">#654</a>)</li>
<li>chore(deps): bump the go group with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/648">#648</a>)</li>
<li>chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/646">#646</a>)</li>
<li>chore(deps): bump the go group with 4 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/643">#643</a>)</li>
<li>chore(deps): bump the go_modules group across 1 directory with 4
updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/641">#641</a>)</li>
<li>chore(deps): bump the go group across 1 directory with 7 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/637">#637</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/64957cd05a5c3547566740d137bc3f2b6e53aafb"><code>64957cd</code></a>
chore: release for v0.26.1</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/8bf728786d027f38b4fcea48685e9f37fed8e362"><code>8bf7287</code></a>
Registry Deployment template now gets image info from values.yaml (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/660">#660</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/4119ac2b4e9071ff8db2258a6d168b01dd5710d6"><code>4119ac2</code></a>
chore(deps): bump the go group with 5 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/661">#661</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/6a25a2bbef89198e8c81e79d91dd2097e0b82ead"><code>6a25a2b</code></a>
chore(deps): bump github/codeql-action from 3.28.17 to 3.28.18 in the ci
grou...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/24e78de0dae94c6ea224b9c9444e01f62b6a52ba"><code>24e78de</code></a>
chore(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 in the ci
group (...</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/ef8d7d688621718137c7f72829b1eec614b5d5c9"><code>ef8d7d6</code></a>
chore: refactoring the signing test to make it more robust (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/657">#657</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/c0b9d07bda358340699d3be4ff0992f9bd4d2824"><code>c0b9d07</code></a>
fix: update the used repository name (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/656">#656</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/2f8784e23989be1d9b5e3b3582ddd33398860e4c"><code>2f8784e</code></a>
fix: add extra identity to the resource lookup reference (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/655">#655</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/494a0e70fc8b45cca5991fdbf769b244c746f3af"><code>494a0e7</code></a>
chore(deps): bump the go group with 2 updates (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/654">#654</a>)</li>
<li><a
href="https://github.com/open-component-model/ocm-controller/commit/715b305ef6580bb7d023cffb8db60718c415e182"><code>715b305</code></a>
adjust GHA to trigger on PR and not pull_request_target (<a
href="https://redirect.github.com/open-component-model/ocm-controller/issues/653">#653</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-component-model/ocm-controller/compare/v0.26.0...v0.26.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `sigs.k8s.io/controller-runtime` from 0.20.4 to 0.21.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kubernetes-sigs/controller-runtime/releases">sigs.k8s.io/controller-runtime's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.0</h2>
<h2>Highlights</h2>
<ul>
<li>Bump to Kubernetes v1.33 libraries</li>
<li>Improvements for priority queue (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2374">#2374</a>)</li>
<li>envtest now has an option to download envtest binaries (can be used
to replace setup-envtest depending on use case)</li>
<li>Metric improvements: native histograms, all Go runtime metrics are
enabled now</li>
<li>Various bug fixes</li>
<li>New reviewers: <a
href="https://github.com/troy0820"><code>@​troy0820</code></a>, <a
href="https://github.com/JoelSpeed"><code>@​JoelSpeed</code></a>!!</li>
</ul>
<h2>:warning: Breaking Changes</h2>
<ul>
<li>Bump to k8s.io/* v0.33.0 and Go 1.24 (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3104">#3104</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3142">#3142</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3161">#3161</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3204">#3204</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3215">#3215</a>)</li>
<li>config: Stop enabling client-side ratelimiter by default (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3119">#3119</a>)
<ul>
<li>Previous behavior can be preserved by setting QPS 20 and Burst 30 on
the rest.Config</li>
</ul>
</li>
<li>controller: NewUnmanaged/NewTypedUnmanaged: Stop requiring a manager
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3141">#3141</a>)</li>
<li>reconcile: Deprecate <code>Result.Requeue</code> (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3107">#3107</a>)</li>
</ul>
<h2>:sparkles: New Features</h2>
<ul>
<li>controller: priority queue:
<ul>
<li>Add debug logging for the state of the priority queue (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3075">#3075</a>)</li>
<li>Add priority label to queue depth metric (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3156">#3156</a>)</li>
<li>Leverage IsInInitialList (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3162">#3162</a>)</li>
<li>Remove redundant WithLowPriorityWhenUnchanged in builder (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3168">#3168</a>)</li>
<li>Retain the priority after Reconcile (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3167">#3167</a>)</li>
<li>Set priority automatically in handlers (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3111">#3111</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3152">#3152</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3160">#3160</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3174">#3174</a>)</li>
</ul>
</li>
<li>envtest: Add Environment.KubeConfig field (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2278">#2278</a>)</li>
<li>envtest: Add option to download envtest binaries (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3135">#3135</a>
<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3137">#3137</a>)</li>
<li>events: Add IsInInitialList to TypedCreateEvent (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3162">#3162</a>)</li>
<li>log/zap: Enable panic log level (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3186">#3186</a>)</li>
<li>logging: Adopt WarningHandlerWithContext (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3176">#3176</a>)</li>
<li>logging: Improve logging by adopting contextual logging (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3149">#3149</a>)</li>
<li>metrics: Adopt native histograms (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3165">#3165</a>)</li>
<li>metrics: Expose all Go runtime metrics (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3070">#3070</a>)</li>
</ul>
<h2>:bug: Bug Fixes</h2>
<ul>
<li>apiutil: restmapper: Respect preferred version (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3151">#3151</a>)</li>
<li>builder: webhook: Fix custom path for webhook conflicts (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3102">#3102</a>)</li>
<li>cache: Clone maps to prevent data races when concurrently creating
caches using the same options (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3078">#3078</a>)</li>
<li>cache: Stop accumulating lists in multi-namespace cache
implementation (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3195">#3195</a>)</li>
<li>cache: List out of global cache when present and necessary (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3126">#3126</a>)</li>
<li>client: Return error if pagination is used with the cached client
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3134">#3134</a>)</li>
<li>controller: Support WaitForSync in TypedSyncingSource (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3084">#3084</a>)</li>
<li>controller: priority queue: Fix behavior of rate limit option in
priorityqueue.AddWithOpts (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3103">#3103</a>)</li>
<li>controller: priority queue: Yet another queue_depth metric fix (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3085">#3085</a>)</li>
<li>controllerutil: CreateOrUpdate: Avoid panic when the MutateFn is nil
(<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2828">#2828</a>)</li>
<li>envtest: Fix nil pointer exception in Stop() (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3153">#3153</a>)</li>
<li>fake client: Fix data races when writing to the scheme (<a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3143">#3143</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/71f7db556ca57ce7ea6563f77d739f0d2a54233a"><code>71f7db5</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3225">#3225</a>
from troy0820/troy0820/prepare-for-0.21-release</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/52d877980141158c8af88130e41871914f7fc637"><code>52d8779</code></a>
update README with go version</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/ab37f743f2984246733a64c5022e032858706722"><code>ab37f74</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3223">#3223</a>
from troy0820/troy0820/return-warnings-on-webhooks</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/250a88f32be66f707e3df2f7e4362635ce8e2250"><code>250a88f</code></a>
return warnings on webhooks</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/85ee7a9efa4b4cec8e8ef473e3ed1d7adf8dc132"><code>85ee7a9</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3217">#3217</a>
from kubernetes-sigs/dependabot/github_actions/all-g...</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/81f1fae65d9157e3b0ea373b25656deaedef585e"><code>81f1fae</code></a>
:seedling: Bump the all-github-actions group across 1 directory with 3
updates</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/d9a22747a537c9f621723274affefad496285503"><code>d9a2274</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3187">#3187</a>
from dongjiang1989/update-golangci-lint-v2</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/9c382112827c5176ee779efa8d10c45a1a82e2a5"><code>9c38211</code></a>
update golangci-lint to v2</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/9b5f6a71e9d69c1a25993d049dc9e8c3934ea972"><code>9b5f6a7</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3208">#3208</a>
from troy0820/troy0820/api-machinery-marshal</li>
<li><a
href="https://github.com/kubernetes-sigs/controller-runtime/commit/b3278df01d2392272139029458ffe433d74683d6"><code>b3278df</code></a>
use sigs.k8s.io/json to unmarshal in fakeclient</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.4...v0.21.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -19,20 +19,20 @@ require (
 	github.com/fluxcd/kustomize-controller/api v1.5.1
 	github.com/fluxcd/notification-controller/api v1.5.0
 	github.com/fluxcd/pkg/apis/meta v1.12.0
-	github.com/fluxcd/pkg/runtime v0.59.0
-	github.com/fluxcd/pkg/ssa v0.47.0
+	github.com/fluxcd/pkg/runtime v0.60.0
+	github.com/fluxcd/pkg/ssa v0.48.0
 	github.com/fluxcd/pkg/version v0.7.0
 	github.com/fluxcd/source-controller/api v1.5.0
 	github.com/open-component-model/git-controller v0.12.1
-	github.com/open-component-model/ocm-controller v0.26.0
+	github.com/open-component-model/ocm-controller v0.26.1
 	github.com/open-component-model/replication-controller v0.13.1
 	k8s.io/api v0.33.1
 	k8s.io/apiextensions-apiserver v0.33.1
 	k8s.io/apimachinery v0.33.1
 	k8s.io/cli-runtime v0.33.1
 	k8s.io/client-go v0.33.1
 	ocm.software/ocm v0.24.0
-	sigs.k8s.io/controller-runtime v0.20.4
+	sigs.k8s.io/controller-runtime v0.21.0
 	sigs.k8s.io/e2e-framework v0.6.0
 	sigs.k8s.io/kustomize/api v0.19.0
 	sigs.k8s.io/yaml v1.4.0
@@ -62,8 +62,8 @@ require (
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/ProtonMail/go-crypto v1.1.6 // indirect
 	github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
-	github.com/a8m/envsubst v1.4.2 // indirect
-	github.com/alecthomas/participle/v2 v2.1.1 // indirect
+	github.com/a8m/envsubst v1.4.3 // indirect
+	github.com/alecthomas/participle/v2 v2.1.4 // indirect
 	github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.5 // indirect
 	github.com/alibabacloud-go/cr-20160607 v1.0.1 // indirect
 	github.com/alibabacloud-go/cr-20181201 v1.0.10 // indirect
@@ -142,7 +142,7 @@ require (
 	github.com/docker/go-metrics v0.0.1 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
-	github.com/elliotchance/orderedmap v1.7.1 // indirect
+	github.com/elliotchance/orderedmap v1.8.0 // indirect
 	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/evanphx/json-patch v5.9.0+incompatible // indirect
@@ -152,8 +152,8 @@ require (
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fluxcd/pkg/apis/acl v0.7.0 // indirect
 	github.com/fluxcd/pkg/apis/kustomize v1.10.0 // indirect
-	github.com/fluxcd/pkg/kustomize v1.16.0 // indirect
-	github.com/fluxcd/pkg/tar v0.11.0 // indirect
+	github.com/fluxcd/pkg/kustomize v1.17.0 // indirect
+	github.com/fluxcd/pkg/tar v0.12.0 // indirect
 	github.com/fsnotify/fsnotify v1.8.0 // indirect
 	github.com/fvbommel/sortorder v1.1.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
@@ -165,7 +165,7 @@ require (
 	github.com/go-git/go-billy/v5 v5.6.2 // indirect
 	github.com/go-git/go-git/v5 v5.16.0 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.4 // indirect
-	github.com/go-jose/go-jose/v4 v4.0.5 // indirect
+	github.com/go-jose/go-jose/v4 v4.1.0 // indirect
 	github.com/go-logr/logr v1.4.2 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-openapi/analysis v0.23.0 // indirect
@@ -181,8 +181,8 @@ require (
 	github.com/go-test/deep v1.1.1 // indirect
 	github.com/go-viper/mapstructure/v2 v2.2.1 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
-	github.com/goccy/go-json v0.10.4 // indirect
-	github.com/goccy/go-yaml v1.13.3 // indirect
+	github.com/goccy/go-json v0.10.5 // indirect
+	github.com/goccy/go-yaml v1.17.1 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
 	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
@@ -226,7 +226,7 @@ require (
 	github.com/klauspost/pgzip v1.2.6 // indirect
 	github.com/letsencrypt/boulder v0.0.0-20241010192615-6692160cedfa // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
-	github.com/magiconair/properties v1.8.9 // indirect
+	github.com/magiconair/properties v1.8.10 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/mandelsoft/filepath v0.0.0-20240223090642-3e2777258aa3 // indirect
 	github.com/mandelsoft/goutils v0.0.0-20241005173814-114fa825bbdc // indirect
@@ -237,7 +237,7 @@ require (
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mattn/go-runewidth v0.0.16 // indirect
 	github.com/miekg/pkcs11 v1.1.1 // indirect
-	github.com/mikefarah/yq/v4 v4.45.1 // indirect
+	github.com/mikefarah/yq/v4 v4.45.4 // indirect
 	github.com/mitchellh/copystructure v1.2.0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
@@ -267,7 +267,7 @@ require (
 	github.com/opencontainers/runtime-spec v1.2.1 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
 	github.com/pborman/uuid v1.2.1 // indirect
-	github.com/pelletier/go-toml/v2 v2.2.3 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
 	github.com/pjbgf/sha1cd v0.3.2 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
@@ -340,15 +340,15 @@ require (
 	go.opentelemetry.io/proto/otlp v1.5.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/crypto v0.37.0 // indirect
+	golang.org/x/crypto v0.38.0 // indirect
 	golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67 // indirect
 	golang.org/x/mod v0.24.0 // indirect
-	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/net v0.40.0 // indirect
 	golang.org/x/oauth2 v0.29.0 // indirect
-	golang.org/x/sync v0.13.0 // indirect
-	golang.org/x/sys v0.32.0 // indirect
-	golang.org/x/term v0.31.0 // indirect
-	golang.org/x/text v0.24.0 // indirect
+	golang.org/x/sync v0.14.0 // indirect
+	golang.org/x/sys v0.33.0 // indirect
+	golang.org/x/term v0.32.0 // indirect
+	golang.org/x/text v0.25.0 // indirect
 	golang.org/x/time v0.11.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
 	google.golang.org/api v0.228.0 // indirect