chore(deps): update dependency open-component-model/ocm to v0.18.0

[gardener-ci-robot]

This PR contains the following updates:

Package	Update	Change	OpenSSF
open-component-model/ocm	minor	v0.15.0 -> v0.18.0

---

Release Notes

open-component-model/ocm (open-component-model/ocm)

v0.18.0

Compare Source

Release v0.18.0

• change short text for help topic (#​1058)
• bug: allow http protocol for oci access (#​1060)
• bug: fix unmarshal consumer identity with empty value (#​1057)
• fix artifact set tagging (#​1033)
• component constructor with references field (#​1054)
• priority for CLI registration options (#​1045)
• chore: update 'flake.nix' (#​1049)
• add action doc (#​1032)
• chore: update 'flake.nix' (#​1040)
• chore: update 'flake.nix' (#​1039)
• fix downloader handling (#​1031)
• Adjust README with rotated GPG key (#​1025)

🐛 Bug Fixes

• [release-v0.18.0] fix: version info for OCI refs (#​1080)
• fix: set tlskyber=0 (#​1047)
• fix: remove ocm release key if present (#​1024)
• chore: release fallout corrections (#​1023)

🧰 Maintenance

8 changes

• chore: force bump to 0.18.0-dev (#​1061)
• chore: reuse aggregation from ctf during component build (#​1044)
• chore: disable runner cache for release note drafter (#​1051)
• chore: enhance the publishing to other repositories then github (#​1028)
• chore: migrate all component builds: ca => ctf (#​1043)
• chore(ci): various optimizations for build processing, caching and concurrency (#​996)
• fix: remove ocm release key if present (#​1024)
• chore: release fallout corrections (#​1023)

⬆️ Dependencies

4 changes

• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group (#​1048)
• chore(deps): bump github.com/containerd/errdefs from 0.3.0 to 1.0.0 (#​1037)
• chore(deps): bump the ci group with 2 updates (#​1038)
• chore(deps): bump the go group with 8 updates (#​1036)

v0.17.0

Compare Source

Release v0.17.0

• !OCI Annotations change in Component Descriptor for Component Versions: `ocm-artifact` -> `software.ocm.artifact` and introduce `software.ocm.creator` (#​987)
• Introduce update state on CV implementation API (#​976)

🐛 Bug Fixes

• Revert "feat: replace docker with oras (#<!---->904)" (#​1005)
• fix!(release): retract 0.16.0-z (#​1006)

Documentation

• documentation: fix uploader documentation (#​991)
• documentation: Update the installation options (#​979)
• chore: fixes for docu + cleanup test leftovers (#​993)

🧰 Maintenance

8 changes

• Fix/publish release (#​1001)
• chore: reduce cache pressure by early deleting cache entries after PR closure (#​986)
• chore: update 'flake.nix' (#​1012)
• chore(release): also call make generate to update files (#​992)
• chore(ci): remove i386, optimize latest build and add various comments (#​1010)
• chore(ci): use reusable stale bot configuration (#​1008)
• chore(ci): add stale bot for issues (#​1002)
• chore(ci): make sure we use candidates and branches by default (#​1004)

⬆️ Dependencies

3 changes

• Upgrade levenshtein dependency (#​1009)
• chore(deps): bump the go group with 5 updates (#​989)
• chore(deps): bump anchore/sbom-action from 0.17.3 to 0.17.4 in the ci group (#​988)

v0.16.2

Compare Source

Release v0.16.2

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see https://github.com/open-component-model/ocm-project/issues/293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue. Please refer to v0.15 for now

• chore: update readme (#​985)

v0.16.1

Compare Source

Release v0.16.1

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see https://github.com/open-component-model/ocm-project/issues/293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue. Please refer to v0.15 for now

• fix: wrap the TLS config into a retryer client (#<!---->968) (#​983)

v0.16.0

Compare Source

Release v0.16.0

WARNING: We are receiving reports of Slowness and missing layers in the OCM library handling OCI Images (see https://github.com/open-component-model/ocm-project/issues/293 for Details). Until this is resolved, please hold back on a potential upgrade. We are working on resolving the issue.

• Support standard object types for command plugins + options for templater types (#​958)
• feat: add function to satisfy accessMethodView interface (#​955)
• CLI: fix recursive mode for ocm hash component (#​954)
• OCI: prefer digest over tag (#​953)
• fix: docker registry returning internal server error on blobs not found (#​950)
• fix + doc for VerifyResourceDigest (#​946)
• Adjust verify digest again (#​945)
• Add a simpler digest verify function (#​943)
• [chore] fix: publish release (#​940)
• Fix/publish release (#​939)
• feat: replace docker with oras (#​904)
• feat: add gav matching and overwritable mediatype for file types (#​932)
• fix: some weird maven repositories do return bad index-of listings (#​938)
• Release process documentation (#​931)
• some fixes and alignments (#​934)
• Update CODEOWNERS (#​933)
• fix busy text file during plugin installation (#​929)
• Custom Unmarshaler for Consumer Identity (#​927)
• Documentation: `If the option ...` (#​928)
• feat: automatically label all issues with ipcei (#​923)

🐛 Bug Fixes

• [chore]: release-notes-url isn't supported by wingetcreate v1.6.1.0 (#​948)
• [chore]: Install wingetcreate (#​942)

⬆️ Dependencies

5 changes

• chore(deps): bump the ci group across 1 directory with 3 updates (#​957)
• Bump the go group with 7 updates (#​941)
• Bump the go group with 9 updates (#​936)
• Bump the go group with 13 updates (#​925)
• Bump DeterminateSystems/nix-installer-action from 13 to 14 in the ci group (#​926)

---

Configuration

📅 Schedule: Branch creation - "after 07:30am,before 07:15pm,every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-robot]

@gardener-ci-robot Thank you for your contribution.

[guewa]

Integration tests failed with:

Deploy Landscaper
Release "landscaper-controller" does not exist. Installing it now.
Error: context deadline exceeded
Error: installing landscaper failed