chore(deps): update dependency ocm to v0.23.0

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
ocm	minor	v0.21.0 -> v0.23.0

---

Release Notes

open-component-model/ocm (ocm)

v0.23.0

Compare Source

What's Changed

🐛 Bug Fixes

• fix: make sure that other resolve requests such as 400 are also returned as unknown errors so that OCM recognizes them by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1367
• fix: set the refresh token to password always by @​Skarlso in https://github.com/open-component-model/ocm/pull/1370
• fix: set the refresh token to password always by @​Skarlso in https://github.com/open-component-model/ocm/pull/1378

⬆️ Dependencies

• chore(deps): bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 in the go_modules group by @​dependabot in https://github.com/open-component-model/ocm/pull/1368
• chore(deps): bump the go group with 2 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1373
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 in the go_modules group by @​dependabot in https://github.com/open-component-model/ocm/pull/1371
• chore(deps): bump distroless/static-debian12 from to by @​dependabot in https://github.com/open-component-model/ocm/pull/1372
• fix: retract v0.22.0 in releases/v0.23 by @​ikhandamirov in https://github.com/open-component-model/ocm/pull/1404

🧰 Maintenance

9 changes

• chore: bump VERSION to 0.23.0-dev by @​ocmbot in https://github.com/open-component-model/ocm/pull/1360
• chore: remove wrong source path from blackduck-rapid-scan by @​morri-son in https://github.com/open-component-model/ocm/pull/1363
• chore: add secrets required for token generation by @​morri-son in https://github.com/open-component-model/ocm/pull/1361
• chore: update paths-ignore in lint_and_test workflow to be more specific by @​morri-son in https://github.com/open-component-model/ocm/pull/1384
• chore: remove paths-ignore from lint_and_test workflow for pull requests and pushes by @​morri-son in https://github.com/open-component-model/ocm/pull/1386
• chore: replace Black Duck scan workflow with a trigger workflow by @​morri-son in https://github.com/open-component-model/ocm/pull/1385
• docs: release on first day of the sprint by @​ikhandamirov in https://github.com/open-component-model/ocm/pull/1387
• chore: update Black Duck scan workflow reference to specific commit by @​morri-son in https://github.com/open-component-model/ocm/pull/1388
• chore: simplify secrets management in release workflow by inheriting … by @​morri-son in https://github.com/open-component-model/ocm/pull/1398

Full Changelog: open-component-model/ocm@v0.22...v0.23.0

v0.22.1

Compare Source

What's Changed

🐛 Bug Fixes

• fix: retract v0.22.0 in releases/v0.22 by @​ikhandamirov in https://github.com/open-component-model/ocm/pull/1403

🧰 Maintenance

• chore: bump VERSION to 0.22.1-dev by @​ocmbot in https://github.com/open-component-model/ocm/pull/1394

Full Changelog: open-component-model/ocm@v0.22.0...v0.22.1

v0.22.0

Compare Source

What's Changed

‼️ Breaking Changes

• chore!: add bdba trigger to release and exclude subchartsdemo as well as helminstaller / helmdemo from release by @​morri-son in https://github.com/open-component-model/ocm/pull/1343

🐛 Bug Fixes

• fix: always initialize the system certificate store for the oras client by @​Skarlso in https://github.com/open-component-model/ocm/pull/1359
• fix: downport: make sure that other resolve requests such as 400 are also retur… by @​ikhandamirov in https://github.com/open-component-model/ocm/pull/1379
• fix: set the refresh token to password always by @​Skarlso in https://github.com/open-component-model/ocm/pull/1381
• fix: inherit secret for Trigger BDBA Scan by @​ikhandamirov in https://github.com/open-component-model/ocm/pull/1382

⬆️ Dependencies

8 changes

• chore(deps): bump the go group with 10 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1316
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @​dependabot in https://github.com/open-component-model/ocm/pull/1322
• chore(deps): bump the go group across 1 directory with 16 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1338
• chore(deps): bump github.com/mandelsoft/spiff from 1.7.0-beta-6 to 1.7.0-beta-7 by @​dependabot in https://github.com/open-component-model/ocm/pull/1333
• chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 in the go_modules group by @​dependabot in https://github.com/open-component-model/ocm/pull/1328
• chore(deps): bump the go group with 2 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1342
• chore(deps): bump the go group with 12 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1354
• chore(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27 in the go_modules group by @​dependabot in https://github.com/open-component-model/ocm/pull/1357

🧰 Maintenance

• chore: bump VERSION to 0.22.0-dev by @​ocmbhttps://github.com/open-component-model/ocm/pull/1313l/1313
• chore: switch blackduck sca to pull_request_target by @​jakobmoellerdhttps://github.com/open-component-model/ocm/pull/1329l/1329
• chore: remove gosec from codeql and correct gosec linter annotations by @​morri-shttps://github.com/open-component-model/ocm/pull/1320l/1320
• remove PR comment by @​morri-shttps://github.com/open-component-model/ocm/pull/1336l/1336

Other Changes

• correct workflow by @​morri-shttps://github.com/open-component-model/ocm/pull/1325l/1325
• correct worklfow by @​morri-shttps://github.com/open-component-model/ocm/pull/1326l/1326
• Update codeql.yml by @​morri-shttps://github.com/open-component-model/ocm/pull/1330l/1330
• add upload by @​morri-shttps://github.com/open-component-model/ocm/pull/1337l/1337

Full Changelog: open-component-model/ocm@v0.21...v0.22.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.