fix(deps): update module ocm.software/ocm to v0.32.0 #10

renovate · 2025-09-25T03:28:38Z

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
ocm.software/ocm	require	minor	`v0.29.1` -> `v0.32.0`

Release Notes

open-component-model/ocm (ocm.software/ocm)

`v0.32.0`

Compare Source

What's Changed

🐛 Bug Fixes

fix: update swag import to use conv package by @morri-son in #1625

⬆️ Dependencies

chore(deps): Supersedes Dependabot PR #1620 after fixing linter issues by @morri-son in #1626
chore(deps): bump the go group with 10 updates by @dependabot[bot] in #1630
chore(deps): bump distroless/static-debian12 from to by @morri-son in #1635

🧰 Maintenance

chore: bump VERSION to 0.32.0-dev by @ocmbot[bot] in #1624

Full Changelog: open-component-model/ocm@v0.31...v0.32.0

`v0.31.0`

Compare Source

What's Changed

‼️ Breaking Changes

fix!: unwrap standard transfer handler and fix spiff handler by @fabianburth in #1501

🧰 Maintenance

chore: bump VERSION to 0.31.0-dev by @ocmbot[bot] in #1614

Full Changelog: open-component-model/ocm@v0.30...v0.31.0

`v0.30.0`

Compare Source

What's Changed

‼️ Breaking Changes

fix!: unwrap standard transfer handler and fix spiff handler (#1501) by @fabianburth in #1617

🚀 Features

feat: configurable preference for relative access creation for uploader by @mandelsoft in #1412

🐛 Bug Fixes

fix(ci): correct artifact download path in release workflow to ensure proper recognition by @jakobmoellerdev in #1594
fix: revert "chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to… by @fabianburth in #1598

⬆️ Dependencies

chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group by @dependabot[bot] in #1597
chore(deps): bump github.com/fluxcd/cli-utils from 0.36.0-flux.14 to 0.36.0-flux.15 by @dependabot[bot] in #1601
chore(deps): bump distroless/static-debian12 from to by @dependabot[bot] in #1599
chore: update Go version to 1.25.1 by @fabianburth in #1609

🧰 Maintenance

chore: update Nix installer package to version 2.31.0 in flake_vendorhash workflow by @jakobmoellerdev in #1593
chore: bump VERSION to 0.30.0-dev by @ocmbot[bot] in #1592

Full Changelog: open-component-model/ocm@v0.29...v0.30.0

Configuration

📅 Schedule: Branch creation - "after 07:30am,before 07:15pm,every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-10-23T07:43:17Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

75 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go`	`v0.121.2` -> `v0.121.6`
`cloud.google.com/go/auth`	`v0.16.2` -> `v0.16.5`
`cloud.google.com/go/compute/metadata`	`v0.7.0` -> `v0.8.0`
`cloud.google.com/go/spanner`	`v1.82.0` -> `v1.84.1`
`cloud.google.com/go/storage`	`v1.55.0` -> `v1.56.1`
`github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp`	`v1.5.2` -> `v1.5.3`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.27.0` -> `v1.29.0`
`github.com/aws/aws-sdk-go-v2`	`v1.38.1` -> `v1.39.2`
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`	`v1.7.0` -> `v1.7.1`
`github.com/aws/aws-sdk-go-v2/config`	`v1.31.2` -> `v1.31.11`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.18.6` -> `v1.18.15`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.4` -> `v1.18.9`
`github.com/aws/aws-sdk-go-v2/feature/s3/manager`	`v1.19.0` -> `v1.19.9`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.4` -> `v1.4.9`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.4` -> `v2.7.9`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.4` -> `v1.4.9`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.49.2` -> `v1.50.5`
`github.com/aws/aws-sdk-go-v2/service/ecrpublic`	`v1.31.2` -> `v1.33.2`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.0` -> `v1.13.1`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.8.4` -> `v1.8.9`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.4` -> `v1.13.9`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.4` -> `v1.19.9`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.87.1` -> `v1.88.3`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.28.2` -> `v1.29.5`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.33.2` -> `v1.35.1`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.38.0` -> `v1.38.6`
`github.com/aws/smithy-go`	`v1.22.5` -> `v1.23.0`
`github.com/awslabs/amazon-ecr-credential-helper/ecr-login`	`v0.9.1` -> `v0.10.1`
`github.com/buildkite/agent/v3`	`v3.102.1` -> `v3.104.0`
`github.com/buildkite/go-pipeline`	`v0.14.0` -> `v0.15.0`
`github.com/buildkite/roko`	`v1.3.1` -> `v1.4.0`
`github.com/cenkalti/backoff/v5`	`v5.0.2` -> `v5.0.3`
`github.com/cncf/xds/go`	`v0.0.0-20250326154945-ae57f3c0d45f` -> `v0.0.0-20250501225837-2ac532fd4443`
`github.com/containers/image/v5`	`v5.36.1` -> `v5.36.2`
`github.com/docker/docker`	`v28.3.3+incompatible` -> `v28.4.0+incompatible`
`github.com/go-jose/go-jose/v4`	`v4.0.5` -> `v4.1.2`
`github.com/go-openapi/errors`	`v0.22.1` -> `v0.22.3`
`github.com/go-openapi/strfmt`	`v0.23.0` -> `v0.24.0`
`github.com/go-openapi/swag`	`v0.23.1` -> `v0.24.1`
`github.com/googleapis/gax-go/v2`	`v2.14.2` -> `v2.15.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.27.1` -> `v2.27.2`
`github.com/mikefarah/yq/v4`	`v4.47.1` -> `v4.47.2`
`github.com/redis/go-redis/v9`	`v9.12.1` -> `v9.14.0`
`github.com/secure-systems-lab/go-securesystemslib`	`v0.9.0` -> `v0.9.1`
`github.com/sigstore/cosign/v2`	`v2.5.3` -> `v2.6.0`
`github.com/sigstore/rekor`	`v1.4.0` -> `v1.4.2`
`github.com/sigstore/rekor-tiles`	`v0.1.7-0.20250624231741-98cd4a77300f` -> `v0.1.11`
`github.com/sigstore/sigstore`	`v1.9.5` -> `v1.9.6-0.20250729224751-181c5d3339b3`
`github.com/sigstore/sigstore-go`	`v1.1.0` -> `v1.1.2`
`github.com/sigstore/timestamp-authority`	`v1.2.8` -> `v1.2.9`
`github.com/spiffe/go-spiffe/v2`	`v2.5.0` -> `v2.6.0`
`github.com/transparency-dev/tessera`	`v0.2.1-0.20250610150926-8ee4e93b2823` -> `v1.0.0-rc3`
`github.com/ulikunitz/xz`	`v0.5.14` -> `v0.5.15`
`gitlab.com/gitlab-org/api/client-go`	`v0.134.0` -> `v0.143.3`
`go.mongodb.org/mongo-driver`	`v1.17.1` -> `v1.17.4`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.36.0` -> `v1.38.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.61.0` -> `v0.62.0`
`go.opentelemetry.io/otel`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk`	`v1.37.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.36.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.37.0` -> `v1.38.0`
`golang.org/x/exp`	`v0.0.0-20250408133849-7e4ce0ab07d0` -> `v0.0.0-20250620022241-b7579e27df2b`
`golang.org/x/mod`	`v0.27.0` -> `v0.28.0`
`golang.org/x/net`	`v0.43.0` -> `v0.44.0`
`golang.org/x/oauth2`	`v0.30.0` -> `v0.31.0`
`google.golang.org/api`	`v0.242.0` -> `v0.248.0`
`google.golang.org/genproto`	`v0.0.0-20250505200425-f936aa4a68b2` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20250818200422-3122310a409c`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20250818200422-3122310a409c`
`google.golang.org/grpc`	`v1.73.0` -> `v1.75.0`
`google.golang.org/protobuf`	`v1.36.8` -> `v1.36.9`
`k8s.io/cli-runtime`	`v0.34.0` -> `v0.34.1`
`sigs.k8s.io/release-utils`	`v0.12.0` -> `v0.12.1`

renovate bot force-pushed the renovate/ocm.software-ocm-0.x branch from 80716db to b5b4e1f Compare October 7, 2025 04:06

renovate bot changed the title ~~fix(deps): update module ocm.software/ocm to v0.30.0~~ fix(deps): update module ocm.software/ocm to v0.31.0 Oct 7, 2025

fix(deps): update module ocm.software/ocm to v0.32.0

11d87e5

renovate bot force-pushed the renovate/ocm.software-ocm-0.x branch from b5b4e1f to 11d87e5 Compare October 23, 2025 07:43

renovate bot changed the title ~~fix(deps): update module ocm.software/ocm to v0.31.0~~ fix(deps): update module ocm.software/ocm to v0.32.0 Oct 23, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update module ocm.software/ocm to v0.32.0 #10

fix(deps): update module ocm.software/ocm to v0.32.0 #10

Uh oh!

renovate bot commented Sep 25, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 23, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fix(deps): update module ocm.software/ocm to v0.32.0 #10

Are you sure you want to change the base?

fix(deps): update module ocm.software/ocm to v0.32.0 #10

Uh oh!

Conversation

renovate bot commented Sep 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.32.0

What's Changed

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.31.0

What's Changed

‼️ Breaking Changes

🧰 Maintenance

v0.30.0

What's Changed

‼️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

Configuration

Uh oh!

renovate bot commented Oct 23, 2025

ℹ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Sep 25, 2025 •

edited

Loading

`v0.32.0`

`v0.31.0`

`v0.30.0`