chore(deps): update dependency operator-framework/operator-registry to v1.74.0

[scality-renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
operator-framework/operator-registry	minor	v1.55.0 → v1.74.0

---

Release Notes

operator-framework/operator-registry (operator-framework/operator-registry)

v1.74.0

Compare Source

What's Changed

• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​2041
• Bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 by @​dependabot[bot] in #​2042
• Bump actions/stale from 10 to 11 by @​dependabot[bot] in #​2043
• Bump github.com/mattn/go-sqlite3 from 1.14.48 to 1.14.49 by @​dependabot[bot] in #​2044
• Bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @​dependabot[bot] in #​2048
• Bump go.podman.io/image/v5 from 5.40.0 to 5.41.0 by @​dependabot[bot] in #​2045
• Bump docker/login-action from 4 to 4.5.2 by @​dependabot[bot] in #​2046
• Bump github.com/docker/cli from 29.6.2+incompatible to 29.7.1+incompatible by @​dependabot[bot] in #​2051
• Bump docker/login-action from 4.5.2 to 4.6.0 by @​dependabot[bot] in #​2050
• Bump go.podman.io/common from 0.68.1 to 0.69.0 by @​dependabot[bot] in #​2047

Full Changelog: operator-framework/operator-registry@v1.73.0...v1.74.0

v1.73.0

Compare Source

What's Changed

• Bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 by @​dependabot[bot] in #​2009
• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​2010
• Bump github.com/onsi/gomega from 1.41.0 to 1.42.0 by @​dependabot[bot] in #​2011
• Bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 by @​dependabot[bot] in #​2012
• Bump github.com/mattn/go-sqlite3 from 1.14.45 to 1.14.46 by @​dependabot[bot] in #​2013
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2014
• Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 by @​dependabot[bot] in #​2015
• Bump github.com/docker/cli from 29.5.3+incompatible to 29.6.0+incompatible by @​dependabot[bot] in #​2016
• Bump github.com/mattn/go-sqlite3 from 1.14.46 to 1.14.47 by @​dependabot[bot] in #​2017
• Bump go.etcd.io/bbolt from 1.4.3 to 1.5.0 by @​dependabot[bot] in #​2018
• Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 by @​dependabot[bot] in #​2019
• Bump github.com/joelanford/ignore from 0.1.1 to 0.1.2 by @​dependabot[bot] in #​2021
• Bump github.com/onsi/gomega from 1.42.0 to 1.42.1 by @​dependabot[bot] in #​2022
• empty cred check failed to fall back by @​grokspawn in #​2020
• Bump github.com/docker/cli from 29.6.0+incompatible to 29.6.1+incompatible by @​dependabot[bot] in #​2024
• Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​2026
• Bump golang.org/x/text from 0.38.0 to 0.39.0 in the golang-x-deps group by @​dependabot[bot] in #​2027
• Bump the golang-x-deps group with 4 updates by @​dependabot[bot] in #​2028
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.52 to 0.4.53 by @​dependabot[bot] in #​2030
• Bump go.podman.io/common from 0.68.0 to 0.68.1 by @​dependabot[bot] in #​2029
• Upgrade gopkg.in/yaml.v2 to go.yaml.in/yaml/v3 by @​chimanjain in #​2023
• Bump github.com/containerd/containerd from 1.7.33 to 1.7.34 by @​dependabot[bot] in #​2031
• Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 by @​dependabot[bot] in #​2032
• Bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48 by @​dependabot[bot] in #​2033
• Bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @​dependabot[bot] in #​2035
• Bump github.com/docker/cli from 29.6.1+incompatible to 29.6.2+incompatible by @​dependabot[bot] in #​2036
• Bump actions/setup-go from 6 to 7 by @​dependabot[bot] in #​2037
• Reject cyclic substitutesFor chains instead of looping until OOM by @​haklein in #​2038
• Bump github.com/moby/moby/client from v0.4.1 to v0.5.0 by @​tmshort in #​2039
• ✨ bump api to 0.45.0 as release prep by @​grokspawn in #​2040

New Contributors

• @​chimanjain made their first contribution in #​2023
• @​haklein made their first contribution in #​2038

Full Changelog: operator-framework/operator-registry@v1.72.0...v1.73.0

v1.72.0

Compare Source

What's Changed

• Bump github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.45 by @​dependabot[bot] in #​2004
• Bump codecov/codecov-action from 6 to 7 by @​dependabot[bot] in #​2005
• Bump golang from 1.25-alpine to 1.26-alpine by @​dependabot[bot] in #​1914
• Bump the golang-x-deps group with 4 updates by @​dependabot[bot] in #​2006
• Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 by @​dependabot[bot] in #​2007
• Bump the k8s-dependencies group across 1 directory with 5 updates by @​dependabot[bot] in #​2002
• Update api to v0.44.0 by @​tmshort in #​2008

Full Changelog: operator-framework/operator-registry@v1.71.0...v1.72.0

v1.71.0

Compare Source

What's Changed

• Update to operator-framework/api@​v0.43.0 by @​tmshort in #​2003

Full Changelog: operator-framework/operator-registry@v1.70.0...v1.71.0

v1.70.0

Compare Source

What's Changed

• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.50 to 0.4.52 by @​dependabot[bot] in #​1998
• Bump github.com/docker/cli from 29.5.2+incompatible to 29.5.3+incompatible by @​dependabot[bot] in #​1999
• OPRUN-4642: Update to golang-1.26.3 by @​tmshort in #​2001

Full Changelog: operator-framework/operator-registry@v1.69.0...v1.70.0

v1.69.0

Compare Source

What's Changed

• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.49 to 0.4.50 by @​dependabot[bot] in #​1982
• Bump github.com/docker/cli from 29.4.3+incompatible to 29.5.0+incompatible by @​dependabot[bot] in #​1984
• Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​1985
• Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 by @​dependabot[bot] in #​1988
• Bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 by @​dependabot[bot] in #​1989
• Bump github.com/docker/cli from 29.5.0+incompatible to 29.5.1+incompatible by @​dependabot[bot] in #​1990
• OCPBUGS-85775: validate skipRange with blang/semver ParseRange by @​joelanford in #​1987
• Bump github.com/docker/cli from 29.5.1+incompatible to 29.5.2+incompatible by @​dependabot[bot] in #​1992
• Bump github.com/containerd/containerd from 1.7.31 to 1.7.32 by @​dependabot[bot] in #​1993
• Bump go.podman.io/image/v5 from 5.39.2 to 5.40.0 by @​dependabot[bot] in #​1991
• Add ExperimentalListPackageCustomSchemas gRPC endpoint by @​perdasilva in #​1981
• Store custom schema metas as proto binary in pogreb cache by @​joelanford in #​1994
• Bump golang.org/x/sys from 0.44.0 to 0.45.0 in the golang-x-deps group by @​dependabot[bot] in #​1995
• Bump go.podman.io/common from 0.67.1 to 0.68.0 by @​dependabot[bot] in #​1996

Full Changelog: operator-framework/operator-registry@v1.68.0...v1.69.0

v1.68.0

Compare Source

What's Changed

• 🌱 add structured output from validation with 'output' option by @​grokspawn in #​1971
• Bump github.com/docker/cli from 29.4.1+incompatible to 29.4.2+incompatible by @​dependabot[bot] in #​1972
• Bump github.com/distribution/distribution/v3 from 3.1.0 to 3.1.1 by @​dependabot[bot] in #​1973
• Bump github.com/docker/cli from 29.4.2+incompatible to 29.4.3+incompatible by @​dependabot[bot] in #​1975
• Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​1974
• OPRUN-4548: bundle version increased type safety / serialization support by @​grokspawn in #​1938
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.48 to 0.4.49 by @​dependabot[bot] in #​1976
• Bump the golang-x-deps group with 3 updates by @​dependabot[bot] in #​1977
• Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.6.1 to 1.6.2 by @​dependabot[bot] in #​1980
• fix(declcfg): WriteFS now preserves Others and Deprecations by @​tmshort in #​1979

Full Changelog: operator-framework/operator-registry@v1.67.0...v1.68.0

v1.67.0

Compare Source

What's Changed

• Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 by @​dependabot[bot] in #​1967
• Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.3 by @​dependabot[bot] in #​1968
• Bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44 by @​dependabot[bot] in #​1969
• 🐛 OCPBUGS-84642: remove substitutesFor interpretation from sqlite code by @​grokspawn in #​1966

Full Changelog: operator-framework/operator-registry@v1.66.0...v1.67.0

v1.66.0

Compare Source

What's Changed

• Add fgiudici as reviewer by @​fgiudici in #​1943
• Bump github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.38 by @​dependabot[bot] in #​1944
• Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @​dependabot[bot] in #​1945
• OCPBUGS-76487: substitutes template protects against reuse of base/candidate by @​grokspawn in #​1942
• Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.12.1 to 6.12.2 by @​dependabot[bot] in #​1946
• Bump go.podman.io/common from 0.67.0 to 0.67.1 by @​dependabot[bot] in #​1949
• Bump github.com/docker/cli from 29.3.1+incompatible to 29.4.0+incompatible by @​dependabot[bot] in #​1953
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.47 to 0.4.48 by @​dependabot[bot] in #​1952
• Bump github.com/mattn/go-sqlite3 from 1.14.38 to 1.14.42 by @​dependabot[bot] in #​1956
• Bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0 by @​dependabot[bot] in #​1951
• Bump the golang-x-deps group across 1 directory with 3 updates by @​dependabot[bot] in #​1957
• update owners by @​grokspawn in #​1958
• Bump github.com/containerd/containerd from 1.7.30 to 1.7.31 by @​dependabot[bot] in #​1959
• fix: hex-encode OCI layout image name to avoid validation errors by @​joelanford in #​1954
• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​1960
• Bump github.com/docker/cli from 29.4.0+incompatible to 29.4.1+incompatible by @​dependabot[bot] in #​1962
• prune unused dockerfiles & build targets by @​grokspawn in #​1961

New Contributors

• @​fgiudici made their first contribution in #​1943

Full Changelog: operator-framework/operator-registry@v1.65.0...v1.66.0

v1.65.0

Compare Source

What's Changed

• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​1922
• Bump docker/setup-qemu-action from 3 to 4 by @​dependabot[bot] in #​1923
• Bump docker/login-action from 3 to 4 by @​dependabot[bot] in #​1924
• Bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 in the k8s-dependencies group by @​dependabot[bot] in #​1925
• Bump github.com/docker/cli from 29.2.1+incompatible to 29.3.0+incompatible by @​dependabot[bot] in #​1926
• Bump docker/setup-buildx-action from 3 to 4 by @​dependabot[bot] in #​1927
• Bump the golang-x-deps group with 2 updates by @​dependabot[bot] in #​1928
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.45 to 0.4.46 by @​dependabot[bot] in #​1929
• Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @​dependabot[bot] in #​1930
• Bump the golang-x-deps group with 2 updates by @​dependabot[bot] in #​1932
• 🌱 chore(lint): Upgrade golanglint from v2.7.2 to v2.8.0 and fix lint issues by @​camilamacedo86 in #​1898
• Bump github.com/mattn/go-sqlite3 from 1.14.34 to 1.14.37 by @​dependabot[bot] in #​1934
• Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @​dependabot[bot] in #​1935
• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​1936
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.46 to 0.4.47 by @​dependabot[bot] in #​1937
• Bump github.com/docker/cli from 29.3.0+incompatible to 29.3.1+incompatible by @​dependabot[bot] in #​1939
• render package-level info from channel head in semver template by @​grokspawn in #​1933
• Bump github.com/operator-framework/api from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​1940
• Bump codecov/codecov-action from 5 to 6 by @​dependabot[bot] in #​1941

Full Changelog: operator-framework/operator-registry@v1.64.0...v1.65.0

v1.64.0

Compare Source

What's Changed

• Add pedjak to OWNERS by @​perdasilva in #​1902
• Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.6.0 to 1.6.1 by @​dependabot[bot] in #​1903
• Bump go.podman.io/common from 0.66.1 to 0.67.0 by @​dependabot[bot] in #​1907
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.44 to 0.4.45 by @​dependabot[bot] in #​1908
• Bump the golang-x-deps group across 1 directory with 3 updates by @​dependabot[bot] in #​1911
• Bump github.com/mattn/go-sqlite3 from 1.14.33 to 1.14.34 by @​dependabot[bot] in #​1913
• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​1912
• Bump google.golang.org/grpc from 1.78.0 to 1.79.0 by @​dependabot[bot] in #​1915
• Bump google.golang.org/grpc from 1.79.0 to 1.79.1 by @​dependabot[bot] in #​1916
• adding olm.bundle image/relatedImages pullspec format validation by @​grokspawn in #​1905
• handle cases where spec.version.release is a number instead of string by @​grokspawn in #​1909
• Update to go 1.25.7 by @​tmshort in #​1918
• Bump github.com/operator-framework/api from 0.39.0 to 0.40.0 by @​dependabot[bot] in #​1917
• Bump actions/download-artifact from 7 to 8 by @​dependabot[bot] in #​1919
• Bump actions/upload-artifact from 6 to 7 by @​dependabot[bot] in #​1920
• bumping api to capture go bumps across the whole o-f set by @​grokspawn in #​1921

Full Changelog: operator-framework/operator-registry@v1.63.0...v1.64.0

v1.63.0

Compare Source

What's Changed

• set up a docker buildx builder to support sbom attestations on tag-release by @​grokspawn in #​1888
• fix dropped :release tag publication from migration to goreleaser v2.12 and go1.25 by @​grokspawn in #​1891
• Bump github.com/docker/cli from 29.1.5+incompatible to 29.2.0+incompatible by @​dependabot[bot] in #​1890
• Bump the k8s-dependencies with additional fixes by @​tmshort in #​1892
• Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group across 1 directory by @​dependabot[bot] in #​1893
• Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 by @​dependabot[bot] in #​1894
• Bump github.com/docker/cli from 29.2.0+incompatible to 29.2.1+incompatible by @​dependabot[bot] in #​1896
• Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @​dependabot[bot] in #​1895
• 🌱 chore(deps): upgrade Go module dependencies (edge) by @​camilamacedo86 in #​1897
• Bump github.com/operator-framework/api from 0.38.0 to 0.39.0 by @​dependabot[bot] in #​1900
• 🐛 fix CreateTemplateByType regression by @​grokspawn in #​1899
• 🌱 fix(release) Issues faced with invalid latest tag after changes in goreleaser by @​camilamacedo86 in #​1901

Full Changelog: operator-framework/operator-registry@v1.62.0...v1.63.0

v1.62.0

Compare Source

What's Changed

• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.41 to 0.4.42 by @​dependabot[bot] in #​1833
• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​1832
• Bump the golang-x-deps group with 3 updates (updated) by @​tmshort in #​1834
• Bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @​dependabot[bot] in #​1838
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​1840
• Bump github.com/docker/cli from 29.0.0+incompatible to 29.1.1+incompatible by @​dependabot[bot] in #​1847
• Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.12.0 to 6.12.1 by @​dependabot[bot] in #​1849
• Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.5.1 to 1.6.0 by @​dependabot[bot] in #​1845
• Bump github.com/golang-migrate/migrate/v4 from 4.19.0 to 4.19.1 by @​dependabot[bot] in #​1848
• Bump github.com/docker/cli from 29.1.1+incompatible to 29.1.2+incompatible by @​dependabot[bot] in #​1850
• Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @​dependabot[bot] in #​1851
• Bump go.podman.io/common from 0.66.0 to 0.66.1 by @​dependabot[bot] in #​1853
• Bump the golang-x-deps group with 4 updates by @​dependabot[bot] in #​1854
• Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 by @​dependabot[bot] in #​1855
• Bump github.com/operator-framework/api from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​1858
• Bump github.com/docker/cli from 29.1.2+incompatible to 29.1.3+incompatible by @​dependabot[bot] in #​1859
• Bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @​dependabot[bot] in #​1860
• Bump actions/download-artifact from 6 to 7 by @​dependabot[bot] in #​1861
• Bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in #​1862
• Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @​dependabot[bot] in #​1856
• Bump the k8s-dependencies group with 4 updates by @​dependabot[bot] in #​1857
• Bump github.com/containerd/containerd from 1.7.29 to 1.7.30 by @​dependabot[bot] in #​1864
• Bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @​dependabot[bot] in #​1867
• Update to golang 1.25 by @​tmshort in #​1866
• Bump github.com/sigstore/fulcio from 1.7.1 to 1.8.3 by @​dependabot[bot] in #​1868
• Fix goreleaser/linux job by @​perdasilva in #​1869
• Migrate away from ioutil by @​perdasilva in #​1865
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.42 to 0.4.43 by @​dependabot[bot] in #​1871
• Bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 by @​dependabot[bot] in #​1872
• freshen maintainers by request by @​grokspawn in #​1879
• 🌱 Golangci lint bump v1.64.8 --> v2.7.2 by @​grokspawn in #​1878
• Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 by @​dependabot[bot] in #​1876
• Bump the golang-x-deps group across 1 directory with 3 updates by @​dependabot[bot] in #​1880
• Bump github.com/docker/cli from 29.1.3+incompatible to 29.1.4+incompatible by @​dependabot[bot] in #​1881
• Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @​dependabot[bot] in #​1877
• Bump github.com/onsi/ginkgo/v2 from 2.27.4 to 2.27.5 by @​dependabot[bot] in #​1882
• 🌱 sync test override pattern with op-con by @​grokspawn in #​1874
• detect template type from input, but respect explicit specification by @​grokspawn in #​1844
• Bump github.com/docker/cli from 29.1.4+incompatible to 29.1.5+incompatible by @​dependabot[bot] in #​1884
• Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @​dependabot[bot] in #​1883
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.43 to 0.4.44 by @​dependabot[bot] in #​1885
• OPRUN-4195,OPRUN-4275,OPRUN-4276: release bundle attribute in version property by @​grokspawn in #​1792
• updating to api v0.38.0 by @​grokspawn in #​1887
• set up a docker buildx builder to support sbom attestations on tag-release by @​grokspawn in #​1888

Full Changelog: operator-framework/operator-registry@v1.61.0...v1.62.0

v1.61.0

Compare Source

What's Changed

• Bump google.golang.org/protobuf from 1.36.9 to 1.36.10 by @​dependabot[bot] in #​1803
• Bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 by @​dependabot[bot] in #​1805
• Bump sigs.k8s.io/controller-runtime from 0.22.1 to 0.22.2 in the k8s-dependencies group by @​dependabot[bot] in #​1807
• Bump google.golang.org/grpc from 1.75.1 to 1.76.0 by @​dependabot[bot] in #​1808
• Bump github.com/docker/cli from 28.4.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​1809
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.40 to 0.4.41 by @​dependabot[bot] in #​1811
• Bump sigs.k8s.io/controller-runtime from 0.22.2 to 0.22.3 in the k8s-dependencies group by @​dependabot[bot] in #​1812
• revert channel-scoped semver template expansion to edge-scoped by @​grokspawn in #​1813
• Bump go.podman.io/image/v5 from 5.37.0 to 5.38.0 by @​dependabot[bot] in #​1815
• Bump the golang-x-deps group across 1 directory with 2 updates by @​dependabot[bot] in #​1818
• Bump go.podman.io/common from 0.65.0 to 0.66.0 by @​dependabot[bot] in #​1816
• add AGENTS.md for LLM agents interfacing with this repository by @​grokspawn in #​1817
• Bump actions/download-artifact from 5 to 6 by @​dependabot[bot] in #​1822
• Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 by @​dependabot[bot] in #​1819
• Bump actions/upload-artifact from 4 to 5 by @​dependabot[bot] in #​1821
• Bump github.com/onsi/ginkgo/v2 from 2.27.1 to 2.27.2 by @​dependabot[bot] in #​1823
• bump go version to fix https://pkg.go.dev/vuln/GO-2025-3956 by @​ErickRDS in #​1820
• Bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 in the k8s-dependencies group by @​dependabot[bot] in #​1824
• Bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.2 to 2.3.3 by @​dependabot[bot] in #​1825
• Bump github.com/docker/cli from 28.5.1+incompatible to 28.5.2+incompatible by @​dependabot[bot] in #​1827
• Bump github.com/containerd/containerd from 1.7.28 to 1.7.29 by @​dependabot[bot] in #​1828
• Bump the golang-x-deps group with 2 updates by @​dependabot[bot] in #​1829
• Bump github.com/docker/cli from 28.5.2+incompatible to 29.0.0+incompatible by @​dependabot[bot] in #​1830

New Contributors

• @​ErickRDS made their first contribution in #​1820

Full Changelog: operator-framework/operator-registry@v1.60.0...v1.61.0

v1.60.0

Compare Source

Notice

This release bumps k8s to 1.34

What's Changed

• Bump the k8s-dependencies group across 1 directory with 6 updates by @​dependabot[bot] in #​1772
• Add PodMonitor to supported resources by @​WanzenBug in #​1795
• release/goreleaser.opm.Dockerfile: parameterize grpc-health-probe version by @​joelanford in #​1801
• update o-f/api as prep for release by @​grokspawn in #​1806

New Contributors

• @​WanzenBug made their first contribution in #​1795

Full Changelog: operator-framework/operator-registry@v1.59.0...v1.60.0

v1.59.0

Compare Source

What's Changed

• OPRUN-4118: migrate containers libs to new mono-repo by @​anik120 in #​1799

Full Changelog: operator-framework/operator-registry@v1.58.0...v1.59.0

v1.58.0

Compare Source

Potential breaking changes

• #​1750 introduced ratcheted criteria for opm validate which includes the ability to validate that no included bundle versions are stranded, since without validation it's relatively easy to create edges which OLM ignores when evaluating potential upgrades. Capabilities added to opm alpha render-graph in #​1744 attempt to make this more apparent to operator authors.

What's Changed

• Bump github.com/golang-migrate/migrate/v4 from 4.18.3 to 4.19.0 by @​dependabot[bot] in #​1774
• Bump github.com/spf13/pflag from 1.0.7 to 1.0.8 by @​dependabot[bot] in #​1775
• 🐛 Add key ordering for mermaid graph output by @​perdasilva in #​1778
• Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @​perdasilva in #​1776
• Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @​dependabot[bot] in #​1779
• Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @​dependabot[bot] in #​1781
• Bump github.com/spf13/pflag from 1.0.9 to 1.0.10 by @​dependabot[bot] in #​1782
• Bump github.com/containers/image/v5 from 5.36.1 to 5.36.2 by @​dependabot[bot] in #​1783
• Bump github.com/docker/cli from 28.3.3+incompatible to 28.4.0+incompatible by @​dependabot[bot] in #​1784

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Dependency Bump Evaluation

Version change: v1.55.0 → v1.74.0 (19 minor versions)
Semver bump type: minor

Changes (notable across v1.55.0 → v1.74.0):

• v1.58.0: Ratcheted opm validate criteria for stranded bundle versions (potential breaking change — does NOT affect this repo)
• v1.59.0: Container libs migrated to new mono-repo (internal)
• v1.60.0: k8s bumped to 1.34; added PodMonitor to supported resources
• v1.62.0+: Go version bumps (1.25 → 1.26), golangci-lint v2 migration, goreleaser fixes
• v1.67.0: Removed substitutesFor interpretation from sqlite code
• v1.68.0: WriteFS now preserves Others and Deprecations; bundle version type safety improvements; structured validation output
• v1.69.0: New experimental ListPackageCustomSchemas gRPC endpoint; skipRange validation with blang/semver
• v1.73.0: gopkg.in/yaml.v2 → go.yaml.in/yaml/v3 migration; cyclic substitutesFor chain rejection (OOM fix)
• Numerous transitive dependency bumps (grpc, k8s, containerd, sqlite3, etc.)

Breaking changes: v1.58.0 introduced ratcheted opm validate criteria — but this project does not use opm validate. The only opm subcommand used is opm index add --mode semver, which is unaffected.

Security concerns: None identified. No CVEs or security advisories mentioned. Transitive dependency bumps (containerd, grpc, protobuf) are routine patches.

Impact on codebase: Minimal. The PR changes a single line in Makefile (OPM_VERSION). The opm binary is downloaded as a pre-built release artifact and used solely for opm index add --container-tool docker --mode semver. No Go library dependency on operator-registry exists in this project.

CI status: Several checks still IN_PROGRESS at time of review (build, generate, lint, test). Verify CI is green before merging.

Recommendation: SAFE TO MERGE (pending CI green)

Notes:

• This is a tool-only version bump (pre-built binary), not a Go module dependency — blast radius is limited to catalog image builds.
• The 19-version jump is large but the release notes show no breaking changes to opm index add.
• Cannot auto-approve: PR author is scality-renovate[bot], not dependabot[bot].

— Claude Code