chore(deps): bump the go group across 1 directory with 14 updates by dependabot[bot] · Pull Request #184 · open-component-model/ocm-e2e-framework

dependabot · 2025-10-05T06:04:24Z

Bumps the go group with 6 updates in the / directory:

Package	From	To
github.com/fluxcd/flux2/v2	`2.6.4`	`2.7.0`
github.com/open-component-model/ocm-controller	`0.26.8`	`0.26.9`
k8s.io/api	`0.34.0`	`0.34.1`
k8s.io/apiextensions-apiserver	`0.34.0`	`0.34.1`
k8s.io/cli-runtime	`0.34.0`	`0.34.1`
ocm.software/ocm	`0.29.1`	`0.30.0`

Updates github.com/fluxcd/flux2/v2 from 2.6.4 to 2.7.0

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.7.0

Highlights

Flux v2.7.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.7 GA blog post.

Overview of the new features:

General availability release of the Image Automation APIs (ImagePolicy, ImageRepository, ImageUpdateAutomation)

Watch for changes in ConfigMaps and Secrets references (Kustomization, HelmRelease)

Support for remote cluster authentication using Workload Identity (Kustomization, HelmRelease)

Extend the readiness evaluation of dependencies with CEL expressions (Kustomization, HelmRelease)

Support for global SOPS Age decryption keys on single-tenant clusters (Kustomization)

Support for optional Kustomize components (Kustomization)

Introduce RetryOnFailure lifecycle management strategy (HelmRelease)

Support mTLS for sending alerts to external systems (Provider)

Object-level workload identity authentication (Bucket, Provider)

Support mTLS for GitHub App transport (GitRepository, ImageUpdateAutomation, Provider)

OpenTelemetry tracing for Kustomization and HelmRelease reconciliation (Provider)

Support for 3rd-party source controllers (ExternalArtifact)

Support for source composition and decomposition patterns (ArtifactGenerator)

CancelHealthCheckOnNewRevision feature gate (kustomize-controller)

GitSparseCheckout feature gate (image-automation-controller)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version Minimum required

v1.32 >= 1.32.0

v1.33 >= 1.33.0

v1.34 >= 1.34.1

[!NOTE] Note that the Flux project offers support only for the latest three minor versions of Kubernetes. Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

⚠️ The Flux APIs v1beta1 and v2beta1 (deprecated in 2023) have reached end-of-life and have been removed from the CRDs.

... (truncated)

Commits

f251e8e Merge pull request #5509 from RussellAult/action-without-api
44f0d50 fluxcd/flux2/action: Determine latest version without using GitHub API
4664d49 Merge pull request #5542 from fluxcd/update-components
2997645 Update toolkit components
3247a46 Merge pull request #5541 from fluxcd/debug-ks-history
b5ecb9b Add --show-history flag to debug kustomization
5502606 Merge pull request #5540 from fluxcd/update-components
b52d76d Update toolkit components
95b2d85 Merge pull request #5539 from fluxcd/no-cron-for-update
52e0c98 ci: remove cron schedule from update
Additional commits viewable in compare view

Updates github.com/fluxcd/helm-controller/api from 1.3.0 to 1.4.0

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.4.0

Changelog

v1.4.0 changelog

Container images

docker.io/fluxcd/helm-controller:v1.4.0

ghcr.io/fluxcd/helm-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.0-rc.1

This release candidate is meant for testing.

Container images

docker.io/fluxcd/helm-controller:v1.4.0-rc.1

ghcr.io/fluxcd/helm-controller:v1.4.0-rc.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.4.0

Release date: 2025-09-25

This minor release comes with various bug fixes and improvements.

⚠️ The v2beta1 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v2beta1.

The controller now supports ExternalArtifact Helm chart sources under the feature gate ExternalArtifact.

A new RetryOnFailure strategy has been added for automatic retries on Helm release failures.

Dependencies can now be evaluated using CEL expressions via the new readyExpr field, providing more flexible and powerful dependency readiness checks.

Support for workload identity authentication has been added for remote clusters. This is supported both at the controller and object levels. For object-level, enable the feature gate ObjectLevelWorkloadIdentity.

In addition, the Kubernetes dependencies have been updated to v1.34, Helm has been updated to v3.19 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.25.

Fixes:

Fix continuous drift due to unstable hashing of values #1267

Fix watch index conflict between HelmChart and OCIRepository kinds #1266

Fix requeue interval for SourceNotReady #1276

Improvements:

[RFC-0010] Add workload identity auth for remote clusters #1249

[RFC-0010] Support all Azure clouds for remote clusters #1262

[RFC-0010] Add multi-tenancy lockdown for kubeconfig #1284

[RFC-0010] Add object-level configuration validation #1286

[RFC-0012] Add ExternalArtifact feature gate and reconciliation support #1293

[RFC-0012] Add support for ExternalArtifact revision with digest #1296

Remove deprecated helm.toolkit.fluxcd.io/v2beta1 API group

... (truncated)

Commits

3db605b Merge pull request #1311 from fluxcd/release-v1.4.0
349a1c9 Release v1.4.0
81cb78c Add changelog entry for v1.4.0
f716265 Merge pull request #1310 from fluxcd/fix-release
60f04c9 Fix release workflow
a3bc6a3 Merge pull request #1309 from fluxcd/dependabot/github_actions/ci-e1f752511b
54fd680 Bump fluxcd/gha-workflows from 0.3.0 to 0.4.0 in the ci group
7ef5e6b Merge pull request #1307 from fluxcd/ci-improve
ca91a05 ci: Extract verify to Makefile
82398b7 Merge pull request #1305 from fluxcd/fluxcd/gha-workflows
Additional commits viewable in compare view

Updates github.com/fluxcd/image-automation-controller/api from 0.41.2 to 1.0.1

Release notes

Sourced from github.com/fluxcd/image-automation-controller/api's releases.

v1.0.1

Changelog

v1.0.1 changelog

Container images

docker.io/fluxcd/image-automation-controller:v1.0.1

ghcr.io/fluxcd/image-automation-controller:v1.0.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.0.0

Changelog

v1.0.0 changelog

Container images

docker.io/fluxcd/image-automation-controller:v1.0.0

ghcr.io/fluxcd/image-automation-controller:v1.0.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/image-automation-controller/api's changelog.

1.0.1

Release date: 2025-09-28

This patch release fixes the Git checkout reference name not being taken into account when checking out the Git repository.

Fixes:

Fix checkout reference name not taken into account #973

1.0.0

Release date: 2025-09-16

This is the first GA release of the image-automation-controller. It comes with various bug fixes and improvements.

The ImageUpdateAutomation API has been promoted to v1 (GA) status. The v1 API is backwards compatible with v1beta2.

⚠️ The v1beta1 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v1beta1. After the upgrade, all manifests in Git which contain ImagePolicy, ImageRepository and ImageUpdateAutomation definitions must be updated to:
apiVersion: image.toolkit.fluxcd.io/v1
The .spec.update.strategy field is now optional, simplifying configuration for basic use cases. Object-level workload identity support has been added for Azure DevOps Git repositories. A --default-service-account=<sa name> flag was introduced for workload identity multi-tenancy lockdown. The controller now supports system certificate pools for improved CA compatibility, and TLS ServerName pinning has been removed from TLS configuration for better flexibility. TLS support was also added for GitHub App authentication. Sparse checkout is now performed when .spec.update.path is specified.

In addition, the Kubernetes dependencies have been updated to v1.34 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.25.

Fixes:

Fix GitRepository namespace not used in watch index key #945

Improvements:

Promote ImageUpdateAutomation API to v1 (GA) #963

Remove deprecated APIs in group image.toolkit.fluxcd.io/v1beta1 #946

[RFC-0010] Add multi-tenant workload identity support for ImageUpdateAutomation with Azure GitRepository #951

[RFC-0010] Add default-service-account for lockdown #952

[RFC-0010] Add object-level configuration validation #954

Add TLS config for GitHub App auth #947

Make .spec.update.strategy optional

... (truncated)

Commits

885d9f7 Merge pull request #975 from fluxcd/release-v1.0.1
d03b3a1 Release v1.0.1
6bb4506 Add changelog entry for v1.0.1
8c5b036 Merge pull request #974 from fluxcd/backport-973-to-release/v1.0.x
f835a3a Fix checkout reference name not taken into account
a07d21c Merge pull request #971 from fluxcd/backport-fix-release-v1.0.x
f9d5f98 Fix release workflow
348b645 Bump fluxcd/gha-workflows from 0.3.0 to 0.4.0 in the ci group
f89ee87 ci: Refactor CI with fluxcd/gha-workflows
9617e0e Merge pull request #965 from fluxcd/release-v1.0.0
Additional commits viewable in compare view

Updates github.com/fluxcd/image-reflector-controller/api from 0.35.2 to 1.0.1

Release notes

Sourced from github.com/fluxcd/image-reflector-controller/api's releases.

v1.0.1

Changelog

v1.0.1 changelog

Container images

docker.io/fluxcd/image-reflector-controller:v1.0.1

ghcr.io/fluxcd/image-reflector-controller:v1.0.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.0.0

Changelog

v1.0.0 changelog

Container images

docker.io/fluxcd/image-reflector-controller:v1.0.0

ghcr.io/fluxcd/image-reflector-controller:v1.0.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/image-reflector-controller/api's changelog.

1.0.1

Release date: 2025-09-20

This patch release fixes the ImagePolicy controller not watching reconcile requests performed by adding the reconcile annotation to the object.

Fixes:

Fix controllers not watching reconcile requests from annotations #824

1.0.0

Release date: 2025-09-15

This is the first GA release of the image-reflector-controller. It comes with various bug fixes and improvements.

⚠️ The v1beta1 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v1beta1. After the upgrade, all manifests in Git which contain ImagePolicy, ImageRepository and ImageUpdateAutomation definitions must be updated to:
apiVersion: image.toolkit.fluxcd.io/v1
ImageRepository

The ImageRepository API has been promoted to v1 (GA) status. The v1 API is backwards compatible with v1beta2.

ImagePolicy

The ImagePolicy API has been promoted to v1 (GA) status. The v1 API is backwards compatible with v1beta2.

The ImagePolicy now supports the .spec.suspend field and includes .status.lastHandledReconcileAt for better reconciliation tracking. Deprecated status fields have been removed from the ImagePolicy status to clean up the API surface.

General updates

The controller now supports system certificate pools for improved CA compatibility, and TLS ServerName pinning has been removed from TLS configuration for better flexibility. A --default-service-account=<sa name> flag was introduced for workload identity multi-tenancy lockdown. The auto-login flags for cloud providers have been removed; users should now specify the .spec.provider field in ImageRepository resources for contextual authentication.

In addition, the Kubernetes dependencies have been updated to v1.34, BadgerDB has been updated to v4.8 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.25.

Fixes:

Fix missing TLS ServerName in ImageRepository #797

Improvements:

Promote ImagePolicy and ImageRepository APIs to v1 (GA) #818

... (truncated)

Commits

ce367e3 Merge pull request #826 from lukas8219/release-v1.0.1
e26dab1 Release v1.0.1
66d99ac Add changelog entry for v1.0.1
6fa4bf4 Merge pull request #825 from fluxcd/backport-824-to-release/v1.0.x
4ff8e3e Fix controllers not watching reconcile requests from annotations
dee1888 Merge pull request #823 from fluxcd/backport-822-to-release/v1.0.x
c4fd583 Change goreleaser prerelease flag to auto
30288d8 Merge pull request #819 from fluxcd/release-v1.0.0
56f9fb7 Release v1.0.0
c87d43e Add changelog entry for v1.0.0
Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.6.1 to 1.7.0

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.7.0

Changelog

v1.7.0 changelog

Container images

docker.io/fluxcd/kustomize-controller:v1.7.0

ghcr.io/fluxcd/kustomize-controller:v1.7.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.7.0-rc.1

This release candidate is meant for testing.

Container images

docker.io/fluxcd/kustomize-controller:v1.7.0-rc.1

ghcr.io/fluxcd/kustomize-controller:v1.7.0-rc.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.7.0

Release date: 2025-09-24

This minor release comes with various bug fixes and improvements.

⚠️ The v1beta1 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v1beta1.

The Kustomization API now supports reconciling content from external storage systems through the new ExternalArtifact CRD. This feature is controlled by the ExternalArtifact feature gate and enables reconciliation of artifacts stored outside of Git repositories.

Kustomizations now track their reconciliation history in .status.history, providing visibility into past reconciliation attempts and their outcomes.

Dependencies can now be evaluated using CEL expressions through the new readyExpr field in dependsOn. This feature is controlled by the AdditiveCELDependencyCheck feature gate and allows for more flexible dependency readiness checks.

The controller now supports global SOPS Age key decryption, allowing centralized management of decryption keys.

Support for workload identity authentication has been added for remote clusters. This is support both at the controller and object levels. For object-level, enable the feature gate ObjectLevelWorkloadIdentity.

The new .spec.ignoreMissingComponents field allows Kustomizations to continue reconciliation even when referenced components are missing, providing more resilient deployments.

A feature gate CancelHealthChecksOnNewRevision has been added to cancel ongoing health checks when a new revision is detected.

In addition, the Kubernetes dependencies have been updated to v1.34, Kustomize has been updated to v5.7 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.25.

Fixes:

Fix skipped entries from SSA being stored in the inventory #1513

Improvements:

[RFC-0010] Add workload identity authentication for remote clusters #1476

[RFC-0010] Add multi-tenancy lockdown for decryption and kubeconfig #1495

[RFC-0010] Add object-level configuration validation

... (truncated)

Commits

91e762e Merge pull request #1521 from fluxcd/release-v1.7.0
020caf4 Release v1.7.0
8a3619d Add changelog entry for v1.7.0
d7d96f5 Merge pull request #1520 from fluxcd/cancel-health-checks
b28d750 Add feature gate to cancel health checks on new revisions
bce9a08 Merge pull request #1517 from fluxcd/fix-release
2b35fd8 Fix release workflow
14d88d4 Merge pull request #1515 from fluxcd/dependabot/github_actions/ci-e1f752511b
a7fce1b Bump fluxcd/gha-workflows from 0.3.0 to 0.4.0 in the ci group
e5d2e36 Merge pull request #1513 from fluxcd/fix-1510
Additional commits viewable in compare view

Updates github.com/fluxcd/notification-controller/api from 1.6.0 to 1.7.1

Release notes

Sourced from github.com/fluxcd/notification-controller/api's releases.

v1.7.1

Changelog

v1.7.1 changelog

Container images

docker.io/fluxcd/notification-controller:v1.7.1

ghcr.io/fluxcd/notification-controller:v1.7.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.7.0

Changelog

v1.7.0 changelog

Container images

docker.io/fluxcd/notification-controller:v1.7.0

ghcr.io/fluxcd/notification-controller:v1.7.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/notification-controller/api's changelog.

1.7.1

Release date: 2025-09-24

This patch release fixes the release workflow.

Fixes:

Fix release workflow #1179

1.7.0

Release date: 2025-09-24

This minor release comes with various bug fixes and improvements.

⚠️ The v1beta1 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v1beta1.

Provider

The field .spec.proxySecretRef has been added to the Provider API. The field .spec.proxy and the field proxy inside the Secret referenced by .spec.secretRef are now deprecated and will be removed in the Provider API v1 GA.

The JWT based auth authentication method for the azureeventhub provider has been deprecated and will be removed in the Provider API v1 GA.

The otel provider has been introduced to send alerts as traces to an OpenTelemetry Collector.

The azuredevops and googlepubsub providers now support workload identity both at the controller and object levels. For object level, the .spec.serviceAccountName field can be set to the name of a service account in the same namespace that was configured with a cloud identity. For this feature to work, the controller feature gate ObjectLevelWorkloadIdentity must be enabled. See a complete guide here.

Support for mutual TLS (mTLS) has been added for GitHub App transport, git-based notifiers, postMessage-based notifiers, DataDog and Sentry, and TLS ServerName pinning has been removed for improved flexibility.

Receiver

Users can now define a label selector for watching Secrets referenced in Receivers through the controller flag --watch-configs-label-selector.

... (truncated)

Commits

dcaa793 Merge pull request #1184 from fluxcd/release-v1.7.1
ba48222 Release v1.7.1
786f493 Add changelog entry for v1.7.1
cd7f0d9 Merge pull request #1183 from fluxcd/backport-fix-release-v1.7.x
b9fc804 Fix release workflow
a0a2f73 Merge pull request #1178 from fluxcd/release-v1.7.0
b65ec67 Release v1.7.0
49bd794 Add changelog entry for v1.7.0
cf354c6 Merge pull request #1177 from fluxcd/dependabot/github_actions/ci-e1f752511b
ec6f6e5 build(deps): bump fluxcd/gha-workflows in the ci group
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/ssa from 0.55.0 to 0.58.0

Commits

fd3183a Merge pull request #1033 from fluxcd/ssa-wait-cancelable
54a76b3 ssa: Implement cancelable WaitForSet
04c997d Merge pull request #1032 from fluxcd/fix-1510
a9bfc3b ssa: fix apply returning entries without name and namespace
9b7c472 Merge pull request #1031 from fluxcd/ssa-diff-force
7efec4e ssa: Add force apply config to dry-run diff
a4d6607 Merge pull request #1030 from fluxcd/cel-any
633addb Prepare for release
e2a9309 runtime/cel: introduce Evaluate()
4e0af91 Merge pull request #1028 from fluxcd/cel-string-slice
Additional commits viewable in compare view

Updates github.com/open-component-model/ocm-controller from 0.26.8 to 0.26.9

Release notes

Sourced from github.com/open-component-model/ocm-controller's releases.

v0.26.9

Release v0.26.9

fix: manually set client-side ratelimiting to previous values (#754)

fix(deps): remove ocm dependent pins from go mod (#739)

fix: rename the helm podinfo deployer as it collides with ocm test (#736)

chore: add more log output to the e2e tests (#724)

🧰 Maintenance

chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 in the go_modules group (#735)

chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in the go_modules group (#732)

chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in the go_modules group (#722)

⬆️ Dependencies

chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 in the go_modules group (#735)

chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in the go_modules group (#732)

chore(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 in the go_modules group (#722)

Commits

64dcfb5 chore: release notes and version bump for v0.26.9 (#755)
fe6a2fd fix: manually set client-side ratelimiting to previous values (#754)
27c2561 chore(deps): bump the ci group across 1 directory with 4 updates (#752)
255953a chore(deps): bump the ci group across 1 directory with 3 updates (#747)
68579fe chore(deps): bump the ci group with 2 updates (#744)
402e95a chore(deps): bump github/codeql-action from 3.30.1 to 3.30.2 in the ci group ...
c26546e chore(deps): bump the ci group across 1 directory with 2 updates (#742)
04d4764 fix(deps): remove ocm dependent pins from go mod (#739)
f082ebd chore(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 in the go_mod...
58d429f chore(deps): bump github/codeql-action from 3.29.11 to 3.30.0 in the ci group...
Additional commits viewable in compare view

Updates k8s.io/api from 0.34.0 to 0.34.1

Commits

77c9e29 Update dependencies to v0.34.1 tag
See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.34.0 to 0.34.1

Commits

bb91141 Update dependencies to v0.34.1 tag
4a9fea1 Merge pull request #133901yongruilin/automated-cherry-pick-of-#133896
3896d9f fix: Only warn for unrecognized formats on type=string
See full diff in compare view

Updates k8s.io/apimachinery from 0.34.0 to 0.34.1

Commits

See full diff in compare view

Updates k8s.io/cli-runtime from 0.34.0 to 0.34.1

Commits

d9c0bdd Update dependencies to v0.34.1 tag
See full diff in compare view

Updates k8s.io/client-go from 0.34.0 to 0.34.1

Commits

d033c49 Update dependencies to v0.34.1 tag
See full diff in compare view

Updates ocm.software/ocm from 0.29.1 to 0.30.0

Release notes

Sourced from ocm.software/ocm's releases.

v0.30.0

What's Changed

‼️ Breaking Changes

fix!: unwrap standard transfer handler and fix spiff handler (#1501) by @fabianburth in open-component-model/ocm#1617

🚀 Features

feat: configurable preference for relative access creation for uploader by @mandelsoft in open-component-model/ocm#1412

🐛 Bug Fixes

fix(ci): correct artifact download path in release workflow to ensure proper recognition by @jakobmoellerdev in open-component-model/ocm#1594

fix: revert "chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to… by @fabianburth in open-component-model/ocm#1598

⬆️ Dependencies

chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group by @dependabot[bot] in open-component-model/ocm#1597

chore(deps): bump github.com/fluxcd/cli-utils from 0.36.0-flux.14 to 0.36.0-flux.15 by @dependabot[bot] in open-component-model/ocm#1601

chore(deps): bump distroless/static-debian12 from to by @dependabot[bot] in open-component-model/ocm#1599

chore: update Go version to 1.25.1 by @fabianburth in open-component-model/ocm#1609

🧰 Maintenance

chore: update Nix installer package to version 2.31.0 in flake_vendorhash workflow by @jakobmoellerdev in open-component-model/ocm#1593

chore: bump VERSION to 0.30.0-dev by @ocmbot[bot] in open-component-model/ocm#1592

Full Changelog: open-component-model/ocm@v0.29...v0.30.0

v0.30.0-rc.2

What's Changed

‼️ Breaking Changes

fix!: unwrap standard transfer handler and fix spiff handler (#1501) by @fabianburth in open-component-model/ocm#1617

🚀 Features

feat: configurable preference for relative access creation for uploader by @mandelsoft in open-component-model/ocm#1412

🐛 Bug Fixes

fix(ci): correct artifact download path in release workflow to ensure proper recognition by @jakobmoellerdev in open-component-model/ocm#1594

fix: revert "chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to… by @fabianburth in open-component-model/ocm#1598

⬆️ Dependencies

chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group by @dependabot[bot] in open-component-model/ocm#1597

chore(deps): bump github.com/fluxcd/cli-utils from 0.36.0-flux.14 to 0.36.0-flux.15 by @dependabot[bot] in open-component-model/ocm#1601

chore(deps): bump distroless/static-debian12 from to by @dependabot[bot] in open-component-model/ocm#1599

chore: update Go version to 1.25.1 by @fabianburth in open-component-model/ocm#1609

🧰 Maintenance

chore: update Nix installer package to version 2.31.0 in flake_vendorhash workflow by @jakobmoellerdev in open-component-model/ocm#1593

chore: bump VERSION to 0.30.0-dev by @ocmbot[bot] in open-component-model/ocm#1592

Full Changelog: open-component-model/ocm@v0.29...v0.30.0

v0.30.0-rc.1

... (truncated)

Commits

ae2b1d0 chore: update Go version to 1.25.1 (#1609)
30df5a9 chore(deps): bump the ci group with 2 updates (#1606)
392cf27 feat: configurable preference for relative access creation for uploader (#1412)
4eed321 chore(deps): bump the ci group with 2 updates (#1605)
c69e609 chore(deps): bump ncipollo/release-action from 1.19.1 to 1.20.0 in the ci gro...
0f4b924 chore(deps): bump the ci group with 2 updates (#1603)
56af80c chore(deps): bump distroless/static-debian12 from cdf4daa to a9f88e0 (#1599)
eaa4dbd chore(deps): bump github.com/fluxcd/cli-utils from 0.36.0-flux.14 to 0.36.0-f...
3ff7856 chore: bump VERSION to 0.30.0-dev (#1592)
d3cbb1b fix: revert "chore(deps): bump github.com/ulikunitz/xz from 0.5.13 to… (#1598)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) | `2.6.4` | `2.7.0` | | [github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller) | `0.26.8` | `0.26.9` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.34.0` | `0.34.1` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.0` | `0.34.1` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.0` | `0.34.1` | | [ocm.software/ocm](https://github.com/open-component-model/ocm) | `0.29.1` | `0.30.0` | Updates `github.com/fluxcd/flux2/v2` from 2.6.4 to 2.7.0 - [Release notes](https://github.com/fluxcd/flux2/releases) - [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml) - [Commits](fluxcd/flux2@v2.6.4...v2.7.0) Updates `github.com/fluxcd/helm-controller/api` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/fluxcd/helm-controller/releases) - [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/helm-controller@v1.3.0...v1.4.0) Updates `github.com/fluxcd/image-automation-controller/api` from 0.41.2 to 1.0.1 - [Release notes](https://github.com/fluxcd/image-automation-controller/releases) - [Changelog](https://github.com/fluxcd/image-automation-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/image-automation-controller@v0.41.2...v1.0.1) Updates `github.com/fluxcd/image-reflector-controller/api` from 0.35.2 to 1.0.1 - [Release notes](https://github.com/fluxcd/image-reflector-controller/releases) - [Changelog](https://github.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/image-reflector-controller@v0.35.2...v1.0.1) Updates `github.com/fluxcd/kustomize-controller/api` from 1.6.1 to 1.7.0 - [Release notes](https://github.com/fluxcd/kustomize-controller/releases) - [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/kustomize-controller@v1.6.1...v1.7.0) Updates `github.com/fluxcd/notification-controller/api` from 1.6.0 to 1.7.1 - [Release notes](https://github.com/fluxcd/notification-controller/releases) - [Changelog](https://github.com/fluxcd/notification-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/notification-controller@v1.6.0...v1.7.1) Updates `github.com/fluxcd/pkg/ssa` from 0.55.0 to 0.58.0 - [Commits](fluxcd/pkg@oci/v0.55.0...ssa/v0.58.0) Updates `github.com/open-component-model/ocm-controller` from 0.26.8 to 0.26.9 - [Release notes](https://github.com/open-component-model/ocm-controller/releases) - [Changelog](https://github.com/open-component-model/ocm-controller/blob/main/.goreleaser.yaml) - [Commits](open-component-model/ocm-controller@v0.26.8...v0.26.9) Updates `k8s.io/api` from 0.34.0 to 0.34.1 - [Commits](kubernetes/api@v0.34.0...v0.34.1) Updates `k8s.io/apiextensions-apiserver` from 0.34.0 to 0.34.1 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.34.0...v0.34.1) Updates `k8s.io/apimachinery` from 0.34.0 to 0.34.1 - [Commits](kubernetes/apimachinery@v0.34.0...v0.34.1) Updates `k8s.io/cli-runtime` from 0.34.0 to 0.34.1 - [Commits](kubernetes/cli-runtime@v0.34.0...v0.34.1) Updates `k8s.io/client-go` from 0.34.0 to 0.34.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.0...v0.34.1) Updates `ocm.software/ocm` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/open-component-model/ocm/releases) - [Changelog](https://github.com/open-component-model/ocm/blob/main/RELEASE_PROCESS.md) - [Commits](open-component-model/ocm@v0.29.1...v0.30) --- updated-dependencies: - dependency-name: github.com/fluxcd/flux2/v2 dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/helm-controller/api dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/image-automation-controller/api dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/fluxcd/image-reflector-controller/api dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/fluxcd/kustomize-controller/api dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/notification-controller/api dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/ssa dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/open-component-model/ocm-controller dependency-version: 0.26.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/api dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apimachinery dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/cli-runtime dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/client-go dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: ocm.software/ocm dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-10-12T06:03:12Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Oct 5, 2025

dependabot Bot requested a review from a team as a code owner October 5, 2025 06:04

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Oct 5, 2025

This was referenced Oct 5, 2025

chore(deps): bump github.com/fluxcd/image-automation-controller/api from 0.41.2 to 1.0.0 #182

Closed

chore(deps): bump github.com/fluxcd/image-reflector-controller/api from 0.35.2 to 1.0.1 #183

Closed

dependabot Bot closed this Oct 12, 2025

dependabot Bot deleted the dependabot/go_modules/go-f2c3ec44a9 branch October 12, 2025 06:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go group across 1 directory with 14 updates#184

chore(deps): bump the go group across 1 directory with 14 updates#184
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-f2c3ec44a9

dependabot Bot commented on behalf of github Oct 5, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.7.0

Highlights

Kubernetes compatibility

OpenShift compatibility

Upgrade procedure

v1.4.0

Changelog

Container images

v1.4.0-rc.1

Container images

1.4.0

v1.0.1

Changelog

Container images

v1.0.0

Changelog

Container images

1.0.1

1.0.0

v1.0.1

Changelog

Container images

v1.0.0

Changelog

Container images

1.0.1

1.0.0

ImageRepository

ImagePolicy

General updates

v1.7.0

Changelog

Container images

v1.7.0-rc.1

Container images

1.7.0

v1.7.1

Changelog

Container images

v1.7.0

Changelog

Container images

1.7.1

1.7.0

Provider

Receiver

v0.26.9

Release v0.26.9

🧰 Maintenance

⬆️ Dependencies

v0.30.0

What's Changed

‼️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.30.0-rc.2

What's Changed

‼️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

v0.30.0-rc.1

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 5, 2025 •

edited

Loading