fix(deps): update dependencies (minor) to v0.47.0 by renovate[bot] · Pull Request #79 · opendefensecloud/ocm-kit

renovate · 2026-07-06T02:47:48Z

This PR contains the following updates:

Package	Change	Age	Confidence
ocm	`v0.44.0` → `v0.47.0`
ocm.software/ocm	`v0.44.0` → `v0.47.0`

Release Notes

open-component-model/ocm (ocm)

`v0.47.0`

Compare Source

What's Changed

🐛 Bug Fixes

fix: builds for different platforms by @frewilhelm in #2024

⬆️ Dependencies

chore(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.6 to 2.1.0 by @dependabot[bot] in #2025
chore(deps): bump the go group with 12 updates by @dependabot[bot] in #2029
chore(deps): update oras-go to 1.6.2 by @matthiasbruns in #2036
chore(deps): bump the go group across 1 directory with 10 updates by @dependabot[bot] in #2038
chore(deps): bump cosign and fulcio by @frewilhelm in #2040

🧰 Maintenance

chore: bump VERSION to 0.47.0-dev by @ocmbot[bot] in #2021

Full Changelog: open-component-model/ocm@v0.46...v0.47.0

`v0.46.0`

Compare Source

What's Changed

🚀 Features

feat: close persistent references held on a context by @Skarlso in #1923

🐛 Bug Fixes

fix: incompatibilities between v1 and v2 by @frewilhelm in #1992

⬆️ Dependencies

chore(deps): bump the go group with 12 updates by @dependabot[bot] in #2012
chore(deps): bump the go group across 1 directory with 5 updates by @dependabot[bot] in #2017

🧰 Maintenance

chore: bump VERSION to 0.46.0-dev by @ocmbot[bot] in #2007
chore: add env-var gated repository-exist call by @frewilhelm in #1996
chore(GHA): remove checkout action to fix #2014 by @frewilhelm in #2015

Full Changelog: open-component-model/ocm@v0.45...v0.46.0

`v0.45.0`

Compare Source

What's Changed

🐛 Bug Fixes

fix(brew): generate canonical Formula/ocm.rb alongside versioned pin by @fabianburth in #1997
fix(s3): handle 301 redirect in bucket region detection by @jakobmoellerdev in #2000

⬆️ Dependencies

chore(deps): bump the go group with 18 updates by @dependabot[bot] in #1994
chore: use go 1.26.4 by @frewilhelm in #2003
chore(deps): bump the go group with 21 updates by @dependabot[bot] in #2004

🧰 Maintenance

chore: bump VERSION to 0.45.0-dev by @ocmbot[bot] in #1986
chore(fix): update coc to linux foundation eu by @Skarlso in #1987
chore: use ubuntu-latest instead of large_runner runner by @frewilhelm in #1989
chore(releases-045): cherry-pick: add env-var gated repository-exist call (#1996) by @frewilhelm in #2010

New Contributors

@knp-sap made their first contribution in #1946

Full Changelog: open-component-model/ocm@v0.44...v0.45.0

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 5am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-07-06T02:47:50Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

95 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/auth`	`v0.19.0` -> `v0.20.0`
`github.com/aws/aws-sdk-go-v2`	`v1.41.12` -> `v1.42.1`
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`	`v1.7.13` -> `v1.7.14`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.23` -> `v1.32.29`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.19.22` -> `v1.19.28`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.28` -> `v1.18.30`
`github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager`	`v0.2.8` -> `v0.3.1`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.28` -> `v1.4.30`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.28` -> `v2.7.30`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.29` -> `v1.4.31`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.58.3` -> `v1.59.0`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.12` -> `v1.13.13`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.9.21` -> `v1.9.23`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.28` -> `v1.13.30`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.28` -> `v1.19.31`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.103.2` -> `v1.105.0`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.1.4` -> `v1.4.0`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.31.2` -> `v1.32.0`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.36.5` -> `v1.37.0`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.43.2` -> `v1.44.0`
`github.com/aws/smithy-go`	`v1.27.1` -> `v1.27.3`
`github.com/buildkite/agent/v3`	`v3.118.0` -> `v3.127.2`
`github.com/buildkite/go-pipeline`	`v0.16.0` -> `v0.17.1`
`github.com/containerd/containerd/v2`	`v2.3.1` -> `v2.3.3`
`github.com/coreos/go-oidc/v3`	`v3.17.0` -> `v3.18.0`
`github.com/docker/cli`	`v29.5.3+incompatible` -> `v29.6.1+incompatible`
`github.com/fsnotify/fsnotify`	`v1.9.0` -> `v1.10.1`
`github.com/go-chi/chi/v5`	`v5.2.5` -> `v5.3.0`
`github.com/go-openapi/analysis`	`v0.25.0` -> `v0.25.2`
`github.com/go-openapi/errors`	`v0.22.7` -> `v0.22.8`
`github.com/go-openapi/jsonpointer`	`v0.22.5` -> `v0.23.1`
`github.com/go-openapi/jsonreference`	`v0.21.5` -> `v0.21.6`
`github.com/go-openapi/loads`	`v0.23.3` -> `v0.24.0`
`github.com/go-openapi/runtime`	`v0.29.4` -> `v0.32.4`
`github.com/go-openapi/spec`	`v0.22.4` -> `v0.22.6`
`github.com/go-openapi/strfmt`	`v0.26.3` -> `v0.26.4`
`github.com/go-openapi/swag`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/cmdutils`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/conv`	`v0.26.0` -> `v0.27.0`
`github.com/go-openapi/swag/fileutils`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/jsonname`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/jsonutils`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/loading`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/mangling`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/netutils`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/stringutils`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/swag/typeutils`	`v0.26.0` -> `v0.27.0`
`github.com/go-openapi/swag/yamlutils`	`v0.26.0` -> `v0.26.1`
`github.com/go-openapi/validate`	`v0.25.2` -> `v0.26.0`
`github.com/goccy/go-json`	`v0.10.5` -> `v0.10.6`
`github.com/google/go-containerregistry`	`v0.21.3` -> `v0.21.6`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.14` -> `v0.3.16`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.28.0` -> `v2.29.0`
`github.com/in-toto/attestation`	`v1.1.2` -> `v1.2.0`
`github.com/klauspost/compress`	`v1.18.6` -> `v1.19.0`
`github.com/moby/moby/api`	`v1.54.2` -> `v1.55.0`
`github.com/moby/moby/client`	`v0.4.1` -> `v0.5.0`
`github.com/redis/go-redis/v9`	`v9.20.0` -> `v9.21.0`
`github.com/sigstore/cosign/v3`	`v3.0.6` -> `v3.1.1`
`github.com/sigstore/fulcio`	`v1.8.5` -> `v1.8.7`
`github.com/sigstore/rekor`	`v1.5.2` -> `v1.5.3`
`github.com/sigstore/rekor-tiles/v2`	`v2.2.1` -> `v2.2.2-0.20260601073857-5d098a2b6443`
`github.com/sigstore/sigstore-go`	`v1.1.4` -> `v1.2.0`
`github.com/sigstore/timestamp-authority/v2`	`v2.0.6` -> `v2.1.2`
`github.com/spiffe/go-spiffe/v2`	`v2.6.0` -> `v2.7.0`
`github.com/tetratelabs/wazero`	`v1.11.0` -> `v1.12.0`
`github.com/theupdateframework/go-tuf/v2`	`v2.4.1` -> `v2.4.2`
`github.com/transparency-dev/formats`	`v0.0.0-20260202103038-9975703229b3` -> `v0.1.1`
`go.opentelemetry.io/otel`	`v1.43.0` -> `v1.44.0`
`go.opentelemetry.io/otel/metric`	`v1.43.0` -> `v1.44.0`
`go.opentelemetry.io/otel/sdk`	`v1.43.0` -> `v1.44.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.43.0` -> `v1.44.0`
`go.opentelemetry.io/otel/trace`	`v1.43.0` -> `v1.44.0`
`go.yaml.in/yaml/v2`	`v2.4.3` -> `v2.4.4`
`golang.org/x/crypto`	`v0.52.0` -> `v0.54.0`
`golang.org/x/mod`	`v0.35.0` -> `v0.37.0`
`golang.org/x/net`	`v0.55.0` -> `v0.57.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.45.0` -> `v0.47.0`
`golang.org/x/term`	`v0.43.0` -> `v0.45.0`
`golang.org/x/text`	`v0.37.0` -> `v0.40.0`
`golang.org/x/tools`	`v0.44.0` -> `v0.47.0`
`google.golang.org/api`	`v0.274.0` -> `v0.283.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260401024825-9d38bb4040a9` -> `v0.0.0-20260526163538-3dc84a4a5aaa`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260406210006-6f92a3bedf2d` -> `v0.0.0-20260523011958-0a33c5d7ca68`
`google.golang.org/grpc`	`v1.80.0` -> `v1.82.0`
`gopkg.in/ini.v1`	`v1.67.2` -> `v1.67.3`
`helm.sh/helm/v4`	`v4.2.0` -> `v4.2.3`
`k8s.io/api`	`v0.36.1` -> `v0.36.2`
`k8s.io/apiextensions-apiserver`	`v0.36.1` -> `v0.36.2`
`k8s.io/apimachinery`	`v0.36.1` -> `v0.36.2`
`k8s.io/cli-runtime`	`v0.36.1` -> `v0.36.2`
`k8s.io/client-go`	`v0.36.1` -> `v0.36.2`
`k8s.io/utils`	`v0.0.0-20260319190234-28399d86e0b5` -> `v0.0.0-20260507154919-ff6756f316d2`
`oras.land/oras-go/v2`	`v2.6.0` -> `v2.6.2`

coveralls · 2026-07-06T02:53:52Z

Coverage Report for CI Build 30613871870

Warning

No base build found for commit 909b766 on main.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 42.21%

Details

Patch coverage: No coverable lines changed in this PR.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

Requires a base build to compare against. How to fix this →

Coverage Stats


Relevant Lines:	353
Covered Lines:	149
Line Coverage:	42.21%
Coverage Strength:	0.49 hits per line

💛 - Coveralls

renovate Bot added the ok-to-image PR is allowed to run container build label Jul 6, 2026

renovate Bot enabled auto-merge July 6, 2026 02:47

renovate Bot added the ok-to-image PR is allowed to run container build label Jul 6, 2026

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from 486be39 to 90171b2 Compare July 17, 2026 09:39

renovate Bot changed the title ~~fix(deps): update dependencies (minor) to v0.45.0~~ fix(deps): update dependencies (minor) to v0.46.0 Jul 17, 2026

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from b47beca to eed5d1b Compare July 20, 2026 16:02

fix(deps): update dependencies (minor) to v0.47.0

c77133e

renovate Bot force-pushed the renovate/all-minor-updates branch from eed5d1b to c77133e Compare July 31, 2026 07:44

renovate Bot changed the title ~~fix(deps): update dependencies (minor) to v0.46.0~~ fix(deps): update dependencies (minor) to v0.47.0 Jul 31, 2026

Navigation Menu

Uh oh!

fix(deps): update dependencies (minor) to v0.47.0 - #79

fix(deps): update dependencies (minor) to v0.47.0#79
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates

renovate Bot commented Jul 6, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 6, 2026 •

edited

Loading

Uh oh!

coveralls commented Jul 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.47.0

What's Changed

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.46.0

What's Changed

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.45.0

What's Changed

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

New Contributors

Configuration

Uh oh!

renovate Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

coveralls commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage Report for CI Build 30613871870

Coverage: 42.21%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Jul 6, 2026 •

edited

Loading

`v0.47.0`

`v0.46.0`

`v0.45.0`

renovate Bot commented Jul 6, 2026 •

edited

Loading

coveralls commented Jul 6, 2026 •

edited

Loading