chore(deps): update dependency open-component-model/ocm to v0.19.0

[gardener-ci-robot]

This PR contains the following updates:

Package	Update	Change	OpenSSF
open-component-model/ocm	minor	v0.15.0 -> v0.19.0

---

Release Notes

open-component-model/ocm (open-component-model/ocm)

v0.19.0

Compare Source

What's Changed

🚀 Features

• feat(log): log http requests for OCI and docker based on trace level by injecting a logger by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1118

🧰 Maintenance

34 changes

• chore: change guide for 0.18.0 by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1066
• chore(deps): bump the ci group with 2 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1068
• chore(deps): bump the go group with 10 updates by @​dependabot in https://github.com/open-component-model/ocm/pull/1067
• chore: allow publishing to Brew via custom script by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1059
• chore: remove ocm inception during build CTF aggregation by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1065
• chore: release branches as instead of by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1071
• chore: cleanup release action by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1076
• chore: disable mandatory period comments by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1079
• chore: make sure that version bumping happens everytime by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1090
• chore: also create a branch based on the tag to avoid dangling commits by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1098
• chore: add correct labels for flake nix job by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1100
• chore: allow triggering blackduck scans manually by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1104
• chore: remove the int test repository dispatch by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1106
• chore: rework labeling jobs by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1103
• chore: ensure that PR titles must be semantic by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1108
• chore: move process options to struct by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1109
• chore: automatically set github actions label by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1112
• chore: remove releasenotes.yaml by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1111
• docs: document complex artifact transfer by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1113
• chore: setup release to reuse CTF from components workflow by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1077
• docs: revise RELEASE_PROCESS.md by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1086
• chore: label prs based on conventional commit by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1121
• docs: finally some working examples for a lot of commands by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1123
• chore: let's not store the release notes in the repository by @​hilmarf in https://github.com/open-component-model/ocm/pull/1120
• chore: fixup release action versioning and notes process by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1124
• chore: make sure we release to brew too with our release by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1125
• chore(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8 in the ci group by @​dependabot in https://github.com/open-component-model/ocm/pull/1128
• chore: publish to website as other by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1126
• chore(github_actions): push-to-winget: permissions: by @​hilmarf in https://github.com/open-component-model/ocm/pull/1133
• chore(signing): correct Fulcio service to correct address by @​morri-son in https://github.com/open-component-model/ocm/pull/1135
• chore(github_actions): using now classic secret of OCM_CI_ROBOT by @​hilmarf in https://github.com/open-component-model/ocm/pull/1137
• chore: rework release note handling by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1139
• chore(backport): fixup release notes (#​1148) by @​jakobmoellerdev in https://github.com/open-component-model/ocm/pull/1149
• chore(backport): adjust labels to new configuration by @​hilmarf in https://github.com/open-component-model/ocm/pull/1154

⬆️ Dependencies

• chore(deps): bump the go group with 17 updates by @​dependabhttps://github.com/open-component-model/ocm/pull/1127l/1127

Full Changelog: open-component-model/ocm@v0.18...v0.19.0

v0.18.0

Compare Source

Release v0.18.0

• change short text for help topic (#​1058)
• bug: allow http protocol for oci access (#​1060)
• bug: fix unmarshal consumer identity with empty value (#​1057)
• fix artifact set tagging (#​1033)
• component constructor with references field (#​1054)
• priority for CLI registration options (#​1045)
• chore: update 'flake.nix' (#​1049)
• add action doc (#​1032)
• chore: update 'flake.nix' (#​1040)
• chore: update 'flake.nix' (#​1039)
• fix downloader handling (#​1031)
• Adjust README with rotated GPG key (#​1025)

🐛 Bug Fixes

• [release-v0.18.0] fix: version info for OCI refs (#​1080)
• fix: set tlskyber=0 (#​1047)
• fix: remove ocm release key if present (#​1024)
• chore: release fallout corrections (#​1023)

🧰 Maintenance

8 changes

• chore: force bump to 0.18.0-dev (#​1061)
• chore: reuse aggregation from ctf during component build (#​1044)
• chore: disable runner cache for release note drafter (#​1051)
• chore: enhance the publishing to other repositories then github (#​1028)
• chore: migrate all component builds: ca => ctf (#​1043)
• chore(ci): various optimizations for build processing, caching and concurrency (#​996)
• fix: remove ocm release key if present (#​1024)
• chore: release fallout corrections (#​1023)

⬆️ Dependencies

4 changes

• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group (#​1048)
• chore(deps): bump github.com/containerd/errdefs from 0.3.0 to 1.0.0 (#​1037)
• chore(deps): bump the ci group with 2 updates (#​1038)
• chore(deps): bump the go group with 8 updates (#​1036)

v0.17.0

Compare Source

Release v0.17.0

• !OCI Annotations change in Component Descriptor for Component Versions: `ocm-artifact` -> `software.ocm.artifact` and introduce `software.ocm.creator` (#​987)
• Introduce update state on CV implementation API (#​976)

🐛 Bug Fixes

• Revert "feat: replace docker with oras (#<!---->904)" (#​1005)
• fix!(release): retract 0.16.0-z (#​1006)

Documentation

• documentation: fix uploader documentation (#​991)
• documentation: Update the installation options (#​979)
• chore: fixes for docu + cleanup test leftovers (#​993)

🧰 Maintenance

8 changes

• Fix/publish release (#​1001)
• chore: reduce cache pressure by early deleting cache entries after PR closure (#​986)
• chore: update 'flake.nix' (#​1012)
• chore(release): also call make generate to update files (#​992)
• chore(ci): remove i386, optimize latest build and add various comments (#​1010)
• chore(ci): use reusable stale bot configuration (#​1008)
• chore(ci): add stale bot for issues (#​1002)
• chore(ci): make sure we use candidates and branches by default (#​1004)

⬆️ Dependencies

3 changes

• Upgrade levenshtein dependency (#​1009)
• chore(deps): bump the go group with 5 updates (#​989)
• chore(deps): bump anchore/sbom-action from 0.17.3 to 0.17.4 in the ci group (#​988)

v0.16.2

Compare Source

Release v0.16.2

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see https://github.com/open-component-model/ocm-project/issues/293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue. Please refer to v0.15 for now

• chore: update readme (#​985)

v0.16.1

Compare Source

Release v0.16.1

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see https://github.com/open-component-model/ocm-project/issues/293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue. Please refer to v0.15 for now

• fix: wrap the TLS config into a retryer client (#<!---->968) (#​983)

v0.16.0

Compare Source

Release v0.16.0

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see https://github.com/open-component-model/ocm-project/issues/293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue.

• Support standard object types for command plugins + options for templater types (#​958)
• feat: add function to satisfy accessMethodView interface (#​955)
• CLI: fix recursive mode for ocm hash component (#​954)
• OCI: prefer digest over tag (#​953)
• fix: docker registry returning internal server error on blobs not found (#​950)
• fix + doc for VerifyResourceDigest (#​946)
• Adjust verify digest again (#​945)
• Add a simpler digest verify function (#​943)
• [chore] fix: publish release (#​940)
• Fix/publish release (#​939)
• feat: replace docker with oras (#​904)
• feat: add gav matching and overwritable mediatype for file types (#​932)
• fix: some weird maven repositories do return bad index-of listings (#​938)
• Release process documentation (#​931)
• some fixes and alignments (#​934)
• Update CODEOWNERS (#​933)
• fix busy text file during plugin installation (#​929)
• Custom Unmarshaler for Consumer Identity (#​927)
• Documentation: `If the option ...` (#​928)
• feat: automatically label all issues with ipcei (#​923)

🐛 Bug Fixes

• [chore]: release-notes-url isn't supported by wingetcreate v1.6.1.0 (#​948)
• [chore]: Install wingetcreate (#​942)

⬆️ Dependencies

5 changes

• chore(deps): bump the ci group across 1 directory with 3 updates (#​957)
• Bump the go group with 7 updates (#​941)
• Bump the go group with 9 updates (#​936)
• Bump the go group with 13 updates (#​925)
• Bump DeterminateSystems/nix-installer-action from 13 to 14 in the ci group (#​926)

---

Configuration

📅 Schedule: Branch creation - "after 07:30am,before 07:15pm,every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-robot]

@gardener-ci-robot Thank you for your contribution.

[guewa]

Integration tests failed with:

Deploy Landscaper
Release "landscaper-controller" does not exist. Installing it now.
Error: context deadline exceeded
Error: installing landscaper failed