fix(deps): update module ocm.software/ocm to v0.26.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
ocm.software/ocm	require	minor	v0.24.0 -> v0.26.0

---

Release Notes

open-component-model/ocm (ocm.software/ocm)

v0.26.0

Compare Source

What's Changed

‼️ Breaking Changes

• chore!: migrate to native cobra library by @​Skarlso in https://github.com/open-component-model/ocm/pull/1504

🐛 Bug Fixes

7 changes

• fix: git access tar methods by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1454
• fix(revert): make sure that ref is an option in the gitHub AccessMethod (#​1406) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1460
• fix: allow spec compliant, but unusually ordered HELM Chart OCI Artifacts in HELM OCI Artifact downloader by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1470
• fix: allow pre-v3.7.0 HELM Charts in HELM OCI Artifact downloader by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1476
• fix: use the updated link checker fork by @​Skarlso in https://github.com/open-component-model/ocm/pull/1475
• fix: make sure that helm downloader does not overwrite chart with provenance data by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1481
• chore: fix correct filename for provenance file by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1492

⬆️ Dependencies

9 changes

• chore(deps): bump the go group with 7 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1452
• chore: pin cosign to commit to make sure we are security compliant by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1459
• chore(deps): bump the go group with 7 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1465
• chore(deps): bump the go group with 5 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1487
• chore(deps): bump distroless/static-debian12 from to by @​dependabot in https://github.com/open-component-model/ocm/pull/1486
• chore(deps): bump the go group with 7 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1493
• chore(deps): bump the go group with 10 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1502
• chore(deps): bump the go group with 8 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1513
• chore(deps): bump distroless/static-debian12 from to by @​dependabot in https://github.com/open-component-model/ocm/pull/1512

🧰 Maintenance

7 changes

• chore: bump VERSION to 0.26.0-dev by @​ocmbot in https://github.com/open-component-model/ocm/pull/1443
• chore: GitHub actions add permissions by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1449
• chore: sanitize log by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1450
• chore: adjust GHA permissions by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1451
• chore: remove winget by @​Skarlso in https://github.com/open-component-model/ocm/pull/1463
• chore: use ternary operator to avoid "skipped" integration test job by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1490
• docs: ecrplugin readme by @​ikhandamirov in https://github.com/open-component-model/ocm/pull/1482

Full Changelog: open-component-model/ocm@v0.25...v0.26.0

v0.25.0

Compare Source

What's Changed

🐛 Bug Fixes

6 changes

• fix(revert): make sure that ref is an option in the gitHub AccessMethod (#​1406) (#​1460) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1462
• fix: allow spec compliant, but unusually ordered HELM Chart OCI Artifacts in HELM OCI Artifact downloader (#​1470) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1471
• fix: allow pre-v3.7.0 HELM Charts in HELM OCI Artifact downloader (#​1476) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1477
• fix: make sure that helm downloader does not overwrite chart with provenance data (#​1481) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1483
• fix: correct filename for provenance file (#​1492) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1495
• fix: git access tar methods (#​1454) by @​frewilhelm in https://github.com/open-component-model/ocm/pull/1494

⬆️ Dependencies

• chore(deps): bump the go group with 10 updates by @​dependabhttps://github.com/open-component-model/ocm/pull/1426l/1426
• chore(deps): bump github.com/fluxcd/cli-utils from 0.36.0-flux.12 to 0.36.0-flux.13 by @​dependabhttps://github.com/open-component-model/ocm/pull/1427l/1427
• chore: update to go v1.24.2 by @​hilmahttps://github.com/open-component-model/ocm/pull/1432l/1432
• chore: golangci lint/v2 by @​hilmahttps://github.com/open-component-model/ocm/pull/1434l/1434
• chore(deps): bump the go group with 6 updates by @​dependabhttps://github.com/open-component-model/ocm/pull/1441l/1441

🧰 Maintenance

• chore: bump VERSION to 0.25.0-dev by @​ocmbhttps://github.com/open-component-model/ocm/pull/1424l/1424
• chore: pin to v0.5.1 by @​hilmahttps://github.com/open-component-model/ocm/pull/1430l/1430
• chore: run by @​hilmahttps://github.com/open-component-model/ocm/pull/1437l/1437
• chore: Pin GitHub Actions to commit SHAs by @​hilmahttps://github.com/open-component-model/ocm/pull/1440l/1440

Full Changelog: open-component-model/ocm@v0.24...v0.25.0

v0.24.1

Compare Source

What's Changed

🐛 Bug Fixes

• fix(revert): make sure that ref is an option in the gitHub AccessMethod (#​1406) (#​1460) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1461
• fix: allow spec compliant, but unusually ordered HELM Chart OCI Artifacts in HELM OCI Artifact downloader (#​1470) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1472
• fix: allow pre-v3.7.0 HELM Charts in HELM OCI Artifact downloader (#​1476) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1478
• fix: make sure that helm downloader does not overwrite chart with provenance data (#​1481) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1484

🧰 Maintenance

• chore: bump VERSION to 0.24.1-dev by @​ocmbot in https://github.com/open-component-model/ocm/pull/1444
• chore: fix correct filename for provenance file (#​1492) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1496

Full Changelog: open-component-model/ocm@v0.24.0...v0.24.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 54 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/auth	v0.15.0 -> v0.16.0
github.com/a8m/envsubst	v1.4.2 -> v1.4.3
github.com/alecthomas/participle/v2	v2.1.1 -> v2.1.4
github.com/aws/aws-sdk-go-v2	v1.36.3 -> v1.36.4
github.com/aws/aws-sdk-go-v2/config	v1.29.14 -> v1.29.16
github.com/aws/aws-sdk-go-v2/credentials	v1.17.67 -> v1.17.69
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.16.30 -> v1.16.31
github.com/aws/aws-sdk-go-v2/feature/s3/manager	v1.17.72 -> v1.17.79
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.3.34 -> v1.3.35
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.6.34 -> v2.6.35
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.3.34 -> v1.3.35
github.com/aws/aws-sdk-go-v2/service/ecr	v1.43.3 -> v1.44.2
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.7.0 -> v1.7.3
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.12.15 -> v1.12.16
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.18.15 -> v1.18.16
github.com/aws/aws-sdk-go-v2/service/s3	v1.79.2 -> v1.80.2
github.com/aws/aws-sdk-go-v2/service/sso	v1.25.3 -> v1.25.4
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.30.1 -> v1.30.2
github.com/aws/aws-sdk-go-v2/service/sts	v1.33.19 -> v1.33.21
github.com/aws/smithy-go	v1.22.2 -> v1.22.3
github.com/buildkite/agent/v3	v3.95.1 -> v3.97.0
github.com/coreos/go-oidc/v3	v3.13.0 -> v3.14.1
github.com/docker/cli	v28.0.4+incompatible -> v28.2.2+incompatible
github.com/docker/docker	v28.0.4+incompatible -> v28.2.2+incompatible
github.com/elliotchance/orderedmap	v1.7.1 -> v1.8.0
github.com/go-git/go-git/v5	v5.16.0 -> v5.16.2
github.com/goccy/go-json	v0.10.4 -> v0.10.5
github.com/goccy/go-yaml	v1.13.3 -> v1.17.1
github.com/grpc-ecosystem/grpc-gateway/v2	v2.26.1 -> v2.26.3
github.com/magiconair/properties	v1.8.9 -> v1.8.10
github.com/mikefarah/yq/v4	v4.45.1 -> v4.45.4
github.com/pelletier/go-toml/v2	v2.2.3 -> v2.2.4
github.com/redis/go-redis/v9	v9.7.3 -> v9.10.0
github.com/sigstore/cosign/v2	v2.5.0 -> v2.5.1-0.20250508191124-dfa6abe891e2
github.com/sigstore/fulcio	v1.6.6 -> v1.7.1
github.com/sigstore/sigstore	v1.9.3 -> v1.9.5
github.com/sigstore/sigstore-go	v0.7.1 -> v0.7.2
github.com/sigstore/timestamp-authority	v1.2.5 -> v1.2.6
gitlab.com/gitlab-org/api/client-go	v0.127.0 -> v0.128.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	v1.31.0 -> v1.32.0
google.golang.org/api	v0.228.0 -> v0.230.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250303144028-a0af3efb3deb -> v0.0.0-20250414145226-207652e42e2e
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250313205543-e70fdf4c4cb4 -> v0.0.0-20250414145226-207652e42e2e
google.golang.org/grpc	v1.71.1 -> v1.72.0
helm.sh/helm/v3	v3.17.3 -> v3.18.2
k8s.io/cli-runtime	v0.32.3 -> v0.33.1
k8s.io/kubectl	v0.32.2 -> v0.33.0
oras.land/oras-go/v2	v2.5.0 -> v2.6.0
dario.cat/mergo	v1.0.1 -> v1.0.2
github.com/google/go-containerregistry	v0.20.3 -> v0.20.4-0.20250225234217-098045d5e61f
github.com/prometheus/client_model	v0.6.1 -> v0.6.2
github.com/prometheus/common	v0.62.0 -> v0.63.0
github.com/spf13/afero	v1.12.0 -> v1.14.0
golang.org/x/oauth2	v0.29.0 -> v0.30.0