chore(deps): update module ocm.software/open-component-model/kubernetes/controller to v0.15.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
ocm.software/open-component-model/kubernetes/controller	require	minor	v0.14.0 → v0.15.0

---

Release Notes

open-component-model/open-component-model (ocm.software/open-component-model/kubernetes/controller)

v0.15.0: OCM 0.15.0

Compare Source

Promoted from v0.15.0-rc.1 on 2026-09-08

[0.15.0] - 2026-09-08

🚀 Features

• Migrate the signature configuration usage into the CLI (#​3356)
• Oci cache cli and controller wiring (#​3433)

🐛 Bug Fixes

• Update versioncheck test to new release tags (#​3362)
• Thread http config for resource repository in cli [2/2] (#​3402)
• (cli) Remove downloadName label, --output wins, fallback to resource name (#​3241)
• #​1254 allow non digest processor available for custom resources [2/2] (#​3417)

📚 Dependencies

• (deps) Update digest pins (#​3375)
• (deps) Update golang:1.26.5 docker digest to 705e964 (#​3377)
• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to 302eb14 (#​3376)
• (deps) Update module github.com/ebitengine/purego to v0.10.2 (#​3378)
• (deps) Update module github.com/docker/cli to v29.6.2+incompatible (#​3380)
• (deps) Update module github.com/gabriel-vasile/mimetype to v1.4.14 (#​3381)
• (deps) Update module ocm.software/open-component-model/bindings/go to v0.0.2 (#​3382)
• (deps) Update module ocm.software/open-component-model/bindings/go to v0.0.2 (#​3358)
• (deps) Update module github.com/moby/go-archive to v0.3.0 [security] (#​3407)
• (deps) Update kubernetes controller dependencies (non-major) (#​3445)
• (deps) Update module github.com/klauspost/compress to v1.19.1 (#​3442)
• (deps) Update go-openapi packages to v0.27.3 (#​3439)
• (deps) Update kubernetes controller dependencies (non-major) (#​3454)
• (deps) Update module ocm.software/open-component-model/bindings/go to v0.0.6 (#​3460)
• (deps) Update module go.opentelemetry.io/proto/otlp to v1.11.0 (#​3452)
• (deps) Update digest pins (#​3437)
• (deps) Update kubernetes dependencies to v0.36.3 (#​3440)
• (deps) Update module github.com/mattn/go-runewidth to v0.0.27 (#​3443)
• (deps) Update module github.com/go-logr/logr to v1.4.4 (#​3441)
• (deps) Update github.com/ianlancetaylor/demangle digest to 83e58ba (#​3438)
• (deps) Update module github.com/gabriel-vasile/mimetype to v1.4.15 (#​3446)
• (deps) Update module github.com/jedib0t/go-pretty/v6 to v6.8.3 (#​3448)
• (deps) Update module github.com/docker/go-connections to v0.8.0 (#​3450)
• (deps) Update module github.com/magiconair/properties to v1.18.11 (#​3451)
• (deps) Update module github.com/stretchr/testify to v1.12.0 (#​3456)
• (deps) Update module github.com/google/cel-go to v0.30.0 (#​3455)

⚙️ Miscellaneous Tasks

• Update CLI and controller to require monolithic binding module (#​3368)
• Update CLI integration tests to require monolithic binding module (#​3369)
• Migrate k8s e2e test to ocm v2 (#​3277)
• [breaking] Remove upload-as default default (#​3278)
• (cli) [breaking] Bump bindings/go and remove default flag for --upload-as (#​3393)

Get This Release

Install the OCM CLI

curl -sfL https://ocm.software/install-cli.sh | OCM_VERSION=0.15.0 bash

For alternative installation options, see the installation guide.

You can also run the OCM CLI in a container without installing it:

docker run --rm -t ghcr.io/open-component-model/cli:0.15.0 --help

See the container image guide for more details.

Deploy the OCM Controller

Install into a Kubernetes cluster via Helm:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart \
--version 0.15.0 \
--namespace ocm-k8s-toolkit-system \
--create-namespace

See the controller setup guide for full configuration options.

OCM Component Distribution (for existing OCM users)

Every OCM release is published as OCM component versions to ghcr.io/open-component-model - the same distribution mechanism OCM enables for your own software. Components in this release:

Component	Contents
ocm.software/ocm:0.15.0	Product wrapper referencing CLI + controller
ocm.software/cli:0.15.0	CLI binaries and OCI image
ocm.software/kubernetes/controller:0.15.0	Controller image and Helm chart

Inspect the full product component:

ocm get component-version ghcr.io/open-component-model//ocm.software/ocm:0.15.0 -o yaml

Download a CLI binary directly via OCM (requires OCM CLI already installed; replace os and architecture as needed — e.g. linux/amd64, darwin/arm64):

ocm download resource ghcr.io/open-component-model//ocm.software/cli:0.15.0 \
--identity os=linux,architecture=amd64

Community & Contributors

This release we had a total of 8 contributors!
If you want to engage with us, check our community page!

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: test/e2e/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 13 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
github.com/go-openapi/swag	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/cmdutils	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/conv	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/fileutils	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/jsonutils	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/loading	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/mangling	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/netutils	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/pools	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/stringutils	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/typeutils	v0.27.1 -> v0.27.3
github.com/go-openapi/swag/yamlutils	v0.27.1 -> v0.27.3
k8s.io/cli-runtime	v0.36.2 -> v0.36.3