fix(deps): update module ocm.software/ocm to v0.35.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
ocm.software/ocm	require	minor	v0.33.0 → v0.35.0

---

Release Notes

open-component-model/ocm (ocm.software/ocm)

v0.35.0

Compare Source

What's Changed

🚀 Features

• feat(transfer): Optimized approach for OCM transfer by implementing a concurrent worker pool by @​jakobmoellerdev in #​1676

🐛 Bug Fixes

• fix: Address concurrent setting of log level for yq-lib by @​dee0sap in #​1690
• bugfix: Correct the usage of sync.OnceFunc by @​dee0sap in #​1696

⬆️ Dependencies

13 changes

• chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @​dependabot[bot] in #​1688
• chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @​dependabot[bot] in #​1691
• chore: bump docker/docker to latest version again by @​frewilhelm in #​1693
• chore(deps): bump the go group across 1 directory with 11 updates by @​dependabot[bot] in #​1701
• chore: retract release 0.34 by @​frewilhelm in #​1709
• chore: revert upgrade of github.com/mikefarah/yq/v4 by @​frewilhelm in #​1710
• chore(deps): adjust dependabot ignore for github.com/mikefarah/yq/v4 by @​frewilhelm in #​1716
• chore(deps): bump the go group with 11 updates by @​dependabot[bot] in #​1719
• chore: [releases/0.35] cherry-pick: #​1738 by @​frewilhelm in #​1743
• chore: [releases/0.35] cherry-pick: #​1740 by @​frewilhelm in #​1744
• chore: [releases/0.35] cherry-pick: #​1752 by @​frewilhelm in #​1753
• chore: [releases/0.35] cherry-pick: #​1718 by @​frewilhelm in #​1760
• chore: [releases/0.35] cherry-pick: #​1757 by @​frewilhelm in #​1761

🧰 Maintenance

• chore: bump VERSION to 0.35.0-dev by @​ocmbot[bohttps://github.com/open-component-model/ocm/pull/1685l/1685

Full Changelog: open-component-model/ocm@v0.34...v0.35.0

v0.34.3

Compare Source

What's Changed

⬆️ Dependencies

• chore: [releases/0.34] cherry-pick: #​1718 by @​frewilhelm in #​1758
• chore: [releases/0.34] cherry-pick: #​1757 by @​frewilhelm in #​1759

🧰 Maintenance

• chore: bump VERSION to 0.34.3-dev by @​ocmbot[bot] in #​1747

Full Changelog: open-component-model/ocm@v0.34.2...v0.34.3

v0.34.2

Compare Source

Warning

• This library relies on replace statements in go.mod to pin specific module versions that introduced breaking changes.
• These pinned replace directives must eventually be applied when consuming the library; omitting them can resolve to incompatible versions and cause build or runtime issues.
• Ensure all required modules are pinned via replace to the versions declared by the project before building or releasing.

What's Changed

⬆️ Dependencies

• chore: [releases/0.34] cherry-pick: #​1738 by @​frewilhelm in #​1742
• chore: [releases/0.34] cherry-pick: #​1709 #​1740 by @​frewilhelm in #​1746

🧰 Maintenance

• chore: bump VERSION to 0.34.2-dev by @​ocmbot[bot] in #​1714

Full Changelog: open-component-model/ocm@v0.34.1...v0.34.2

v0.34.1

What's Changed

⬆️ Dependencies

• chore(deps): bump github.com/docker/cli from 28.5.2+incompatible to 29.0.1+incompatible by @​dependabot[bot] in #​1680
• chore(deps): bump the go group across 1 directory with 19 updates by @​frewilhelm in #​1683
• chore: [releases/0.34] cherry-pick: chore: bump docker/docker to latest version again (#​1693) by @​frewilhelm in #​1695
• chore: [releases/0.34] cherry-pick: chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#​1691) by @​frewilhelm in #​1698
• chore: [releases/0.34] cherry-pick and version fix by @​frewilhelm in #​1713

🧰 Maintenance

• chore: update goreleaser version to 2.12.7 in publish-latest workflow by @​jakobmoellerdev in #​1673
• chore: fixup goreleaser by @​jakobmoellerdev in #​1675
• chore: bump VERSION to 0.34.0-dev by @​ocmbot[bot] in #​1672
• chore: Fix 34 by @​frewilhelm in #​1708

Full Changelog: open-component-model/ocm@v0.33...v0.34.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 23 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2/config	v1.31.17 -> v1.31.20
github.com/aws/aws-sdk-go-v2/credentials	v1.18.21 -> v1.18.24
github.com/aws/aws-sdk-go-v2/feature/s3/manager	v1.20.4 -> v1.20.7
github.com/aws/aws-sdk-go-v2/service/ecr	v1.51.2 -> v1.52.0
github.com/aws/aws-sdk-go-v2/service/s3	v1.90.0 -> v1.90.2
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.1 -> v1.30.3
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.5 -> v1.35.7
github.com/aws/aws-sdk-go-v2/service/sts	v1.39.1 -> v1.40.2
github.com/docker/cli	v28.5.2+incompatible -> v29.0.2+incompatible
github.com/go-openapi/analysis	v0.24.0 -> v0.24.1
github.com/go-openapi/errors	v0.22.3 -> v0.22.4
github.com/go-openapi/jsonreference	v0.21.2 -> v0.21.3
github.com/go-openapi/loads	v0.23.1 -> v0.23.2
github.com/go-openapi/runtime	v0.29.0 -> v0.29.2
github.com/go-openapi/spec	v0.22.0 -> v0.22.1
github.com/go-openapi/strfmt	v0.24.0 -> v0.25.0
github.com/go-openapi/swag/conv	v0.25.1 -> v0.25.3
github.com/go-openapi/swag/typeutils	v0.25.1 -> v0.25.3
github.com/go-openapi/validate	v0.25.0 -> v0.25.1
github.com/sigstore/rekor	v1.4.2 -> v1.4.3
golang.org/x/mod	v0.29.0 -> v0.30.0
golang.org/x/oauth2	v0.32.0 -> v0.33.0
helm.sh/helm/v3	v3.19.0 -> v3.19.2

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 54 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.4 -> 1.25.5
golang.org/x/text	v0.31.0 -> v0.32.0
github.com/aws/aws-sdk-go-v2	v1.39.6 -> v1.41.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	v1.7.3 -> v1.7.4
github.com/aws/aws-sdk-go-v2/config	v1.31.17 -> v1.32.5
github.com/aws/aws-sdk-go-v2/credentials	v1.18.21 -> v1.19.5
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.13 -> v1.18.16
github.com/aws/aws-sdk-go-v2/feature/s3/manager	v1.20.4 -> v1.20.13
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.13 -> v1.4.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.13 -> v2.7.16
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.13 -> v1.4.15
github.com/aws/aws-sdk-go-v2/service/ecr	v1.51.2 -> v1.54.2
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.3 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.9.4 -> v1.9.6
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.13 -> v1.13.16
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.19.13 -> v1.19.15
github.com/aws/aws-sdk-go-v2/service/s3	v1.90.0 -> v1.93.0
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.1 -> v1.30.7
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.5 -> v1.35.12
github.com/aws/aws-sdk-go-v2/service/sts	v1.39.1 -> v1.41.5
github.com/aws/smithy-go	v1.23.2 -> v1.24.0
github.com/coreos/go-oidc/v3	v3.16.0 -> v3.17.0
github.com/docker/cli	v28.5.2+incompatible -> v29.1.2+incompatible
github.com/go-git/go-git/v5	v5.16.3 -> v5.16.4
github.com/go-openapi/analysis	v0.24.0 -> v0.24.1
github.com/go-openapi/errors	v0.22.3 -> v0.22.4
github.com/go-openapi/jsonreference	v0.21.2 -> v0.21.3
github.com/go-openapi/loads	v0.23.1 -> v0.23.2
github.com/go-openapi/runtime	v0.29.0 -> v0.29.2
github.com/go-openapi/spec	v0.22.0 -> v0.22.1
github.com/go-openapi/strfmt	v0.24.0 -> v0.25.0
github.com/go-openapi/swag/conv	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/typeutils	v0.25.1 -> v0.25.4
github.com/go-openapi/validate	v0.25.0 -> v0.25.1
github.com/google/go-containerregistry	v0.20.6 -> v0.20.7
github.com/klauspost/compress	v1.18.1 -> v1.18.2
github.com/prometheus/common	v0.67.2 -> v0.67.4
github.com/redis/go-redis/v9	v9.16.0 -> v9.17.2
github.com/sigstore/fulcio	v1.8.1 -> v1.8.4
github.com/sigstore/rekor	v1.4.2 -> v1.4.3
github.com/sigstore/sigstore	v1.9.6-0.20250729224751-181c5d3339b3 -> v1.10.3
github.com/spf13/cobra	v1.10.1 -> v1.10.2
go.uber.org/zap	v1.27.0 -> v1.27.1
golang.org/x/crypto	v0.45.0 -> v0.46.0
golang.org/x/mod	v0.29.0 -> v0.30.0
golang.org/x/oauth2	v0.32.0 -> v0.33.0
golang.org/x/sync	v0.18.0 -> v0.19.0
golang.org/x/sys	v0.38.0 -> v0.39.0
golang.org/x/term	v0.37.0 -> v0.38.0
golang.org/x/tools	v0.38.0 -> v0.39.0
google.golang.org/api	v0.255.0 -> v0.257.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251103181224-f26f9409b101 -> v0.0.0-20251213004720-97cd9d5aeac2
google.golang.org/grpc	v1.76.0 -> v1.77.0
google.golang.org/protobuf	v1.36.10 -> v1.36.11
helm.sh/helm/v3	v3.19.0 -> v3.19.2