chore(deps): bump the go group with 8 updates by dependabot[bot] · Pull Request #849 · open-component-model/ocm-controller

dependabot · 2026-03-01T15:04:27Z

Bumps the go group with 8 updates:

Package	From	To
github.com/fluxcd/helm-controller/api	`1.5.0`	`1.5.1`
github.com/fluxcd/kustomize-controller/api	`1.8.0`	`1.8.1`
github.com/google/go-containerregistry	`0.21.0`	`0.21.1`
k8s.io/api	`0.35.1`	`0.35.2`
k8s.io/apiextensions-apiserver	`0.35.1`	`0.35.2`
k8s.io/apimachinery	`0.35.1`	`0.35.2`
k8s.io/client-go	`0.35.1`	`0.35.2`
ocm.software/ocm	`0.35.0`	`0.36.0`

Updates github.com/fluxcd/helm-controller/api from 1.5.0 to 1.5.1

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.5.1

Changelog

v1.5.1 changelog

Container images

docker.io/fluxcd/helm-controller:v1.5.1

ghcr.io/fluxcd/helm-controller:v1.5.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.5.1

Release date: 2026-02-27

This patch release fixes health check logic for StatefulSets during rolling updates when the Pods are Pending/Unschedulable.

Fixes:

Fix health check logic for StatefulSets during rolling updates #1424

Improvements:

Add note about MTTR only for kstatus #1416

Remove no longer needed workaround for Flux 2.8 #1420

Commits

2447764 Merge pull request #1425 from fluxcd/release-v1.5.1
1f42f67 Release v1.5.1
727ea4c Add changelog entry for v1.5.1
73872f9 Merge pull request #1424 from fluxcd/update-pkg-deps/release/v1.5.x
17ffe88 Update fluxcd/pkg dependencies
7568b08 Merge pull request #1421 from fluxcd/backport-1420-to-release/v1.5.x
b8d57fd Remove no longer needed workaround for Flux 2.8
9df94b5 Merge pull request #1417 from fluxcd/backport-1416-to-release/v1.5.x
6f7b802 Add note about MTTR only for kstatus
See full diff in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.8.1

Changelog

v1.8.1 changelog

Container images

docker.io/fluxcd/kustomize-controller:v1.8.1

ghcr.io/fluxcd/kustomize-controller:v1.8.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.8.1

Release date: 2026-02-27

This patch release fixes health check logic for StatefulSets during rolling updates when the Pods are Pending/Unschedulable.

Fixes:

Fix health check logic for StatefulSets during rolling updates #1602

Improvements:

Improve docs for .spec.force #1597

Remove no longer needed workaround for Flux 2.8 #1595

Commits

1fbb27f Merge pull request #1603 from fluxcd/release-v1.8.1
c8fd34b Release v1.8.1
73b2483 Add changelog entry for v1.8.1
794b701 Merge pull request #1602 from fluxcd/update-pkg-deps/release/v1.8.x
ea9478f Update fluxcd/pkg dependencies
8ccbdc9 Merge pull request #1598 from fluxcd/backport-1597-to-release/v1.8.x
9d0c746 Improve docs for .spec.force
4d1de8b Merge pull request #1596 from fluxcd/backport-1595-to-release/v1.8.x
628944a Remove no longer needed workaround for Flux 2.8
See full diff in compare view

Updates github.com/google/go-containerregistry from 0.21.0 to 0.21.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.1

This release fixes a regression in crane introduced in the previous release.

What's Changed

Add WithFileBufferedOpener for file-backed daemon image buffering by @twdamhore in google/go-containerregistry#2214

crane: fix case in auth response json by @aelindeman in google/go-containerregistry#2218

New Contributors

@twdamhore made their first contribution in google/go-containerregistry#2214

@aelindeman made their first contribution in google/go-containerregistry#2218

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

Commits

85f2bf5 crane: fix case in auth response json (#2218)
e971d63 Add WithFileBufferedOpener for file-backed daemon image buffering (#2214)
See full diff in compare view

Updates k8s.io/api from 0.35.1 to 0.35.2

Commits

8a137cd Update dependencies to v0.35.2 tag
See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.1 to 0.35.2

Commits

79000f4 Update dependencies to v0.35.2 tag
See full diff in compare view

Updates k8s.io/apimachinery from 0.35.1 to 0.35.2

Commits

See full diff in compare view

Updates k8s.io/client-go from 0.35.1 to 0.35.2

Commits

a21b329 Update dependencies to v0.35.2 tag
See full diff in compare view

Updates ocm.software/ocm from 0.35.0 to 0.36.0

Release notes

Sourced from ocm.software/ocm's releases.

v0.36.0

What's Changed

‼️ Breaking Changes

fix!: use Fulcio certificate instead of public key and upgrade Sigstore Cosign from v2 to v3 by @morri-son in open-component-model/ocm#1726

fix: chart access artifact set media type by @fabianburth in open-component-model/ocm#1786

🚀 Features

feat: support index based reading of OCI artifacts by @jakobmoellerdev in open-component-model/ocm#1646

🐛 Bug Fixes

fix: add --oci-layout flag for OCI Image Layout blob paths by @piotrjanik in open-component-model/ocm#1723

fix: update image reference name to use the open-component-model organization repository by @piotrjanik in open-component-model/ocm#1784

fix(1560): add more explicit errors on get cv by @matthiasbruns in open-component-model/ocm#1787

⬆️ Dependencies

chore(deps): bump the go group with 2 updates by @dependabot[bot] in open-component-model/ocm#1728

chore(deps): bump the go group with 18 updates by @dependabot[bot] in open-component-model/ocm#1734

chore: retract 0.33.0 and 0.34.1 by @frewilhelm in open-component-model/ocm#1740

chore(deps): bump the go group with 11 updates by @dependabot[bot] in open-component-model/ocm#1749

chore(deps): bump github.com/klauspost/compress by @frewilhelm in open-component-model/ocm#1752

chore(deps): bump golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 by @dependabot[bot] in open-component-model/ocm#1718

chore: bump sigstore/fulcio by @jakobmoellerdev in open-component-model/ocm#1757

chore(deps): bump the go group with 3 updates by @dependabot[bot] in open-component-model/ocm#1764

chore(deps): bump the go group with 12 updates by @dependabot[bot] in open-component-model/ocm#1770

chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 by @dependabot[bot] in open-component-model/ocm#1774

chore(deps): bump the go group with 6 updates by @dependabot[bot] in open-component-model/ocm#1778

chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by @dependabot[bot] in open-component-model/ocm#1792

chore(deps): bump the go group with 7 updates by @dependabot[bot] in open-component-model/ocm#1795

chore(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 by @dependabot[bot] in open-component-model/ocm#1794

🧰 Maintenance

chore: bump VERSION to 0.36.0-dev by @ocmbot[bot] in open-component-model/ocm#1724

New Contributors

@piotrjanik made their first contribution in open-component-model/ocm#1723

@matthiasbruns made their first contribution in open-component-model/ocm#1787

Full Changelog: open-component-model/ocm@v0.35...v0.36.0

v0.36.0-rc.2

What's Changed

‼️ Breaking Changes

fix!: use Fulcio certificate instead of public key and upgrade Sigstore Cosign from v2 to v3 by @morri-son in open-component-model/ocm#1726

... (truncated)

Commits

87fdfc7 chore(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 (#1794)
ffe4118 chore(deps): bump the go group with 7 updates (#1795)
00100ff fix(1560): add more explicit errors on get cv (#1787)
e98265f chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (#1792)
e18390a fix: chart access artifact set media type (#1786)
92a409a fix!: use Fulcio certificate instead of public key and upgrade Sigstore Cosig...
e408963 feat: support index based reading of OCI artifacts (#1646)
7a2ada0 fix: update image reference name to use the open-component-model organization...
2b9fa8e chore(deps): bump actions/cache from 5.0.1 to 5.0.2 in the ci group (#1780)
6ee834a chore(deps): bump the go group with 6 updates (#1778)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) | `1.5.0` | `1.5.1` | | [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.8.0` | `1.8.1` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.0` | `0.21.1` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.35.1` | `0.35.2` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.35.1` | `0.35.2` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.1` | `0.35.2` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.1` | `0.35.2` | | [ocm.software/ocm](https://github.com/open-component-model/ocm) | `0.35.0` | `0.36.0` | Updates `github.com/fluxcd/helm-controller/api` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/fluxcd/helm-controller/releases) - [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/helm-controller@v1.5.0...v1.5.1) Updates `github.com/fluxcd/kustomize-controller/api` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/fluxcd/kustomize-controller/releases) - [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/kustomize-controller@v1.8.0...v1.8.1) Updates `github.com/google/go-containerregistry` from 0.21.0 to 0.21.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.0...v0.21.1) Updates `k8s.io/api` from 0.35.1 to 0.35.2 - [Commits](kubernetes/api@v0.35.1...v0.35.2) Updates `k8s.io/apiextensions-apiserver` from 0.35.1 to 0.35.2 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.35.1...v0.35.2) Updates `k8s.io/apimachinery` from 0.35.1 to 0.35.2 - [Commits](kubernetes/apimachinery@v0.35.1...v0.35.2) Updates `k8s.io/client-go` from 0.35.1 to 0.35.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.1...v0.35.2) Updates `ocm.software/ocm` from 0.35.0 to 0.36.0 - [Release notes](https://github.com/open-component-model/ocm/releases) - [Changelog](https://github.com/open-component-model/ocm/blob/main/RELEASE_PROCESS.md) - [Commits](open-component-model/ocm@v0.35...v0.36) --- updated-dependencies: - dependency-name: github.com/fluxcd/helm-controller/api dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/fluxcd/kustomize-controller/api dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/api dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apimachinery dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/client-go dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: ocm.software/ocm dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Mar 1, 2026

dependabot bot requested a review from a team as a code owner March 1, 2026 15:04

dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Mar 1, 2026

dependabot bot force-pushed the dependabot/go_modules/go-1f67d65b16 branch from 9b8b626 to 2d3db48 Compare March 2, 2026 06:41

frewilhelm approved these changes Mar 2, 2026

View reviewed changes

frewilhelm merged commit 54170b0 into main Mar 2, 2026
9 checks passed

frewilhelm deleted the dependabot/go_modules/go-1f67d65b16 branch March 2, 2026 07:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go group with 8 updates#849

chore(deps): bump the go group with 8 updates#849
frewilhelm merged 1 commit intomainfrom
dependabot/go_modules/go-1f67d65b16

dependabot bot commented on behalf of github Mar 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.5.1

Changelog

Container images

1.5.1

v1.8.1

Changelog

Container images

1.8.1

v0.21.1

What's Changed

New Contributors

v0.36.0

What's Changed

‼️ Breaking Changes

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

New Contributors

v0.36.0-rc.2

What's Changed

‼️ Breaking Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Mar 1, 2026 •

edited

Loading