24821522727

Committed 23 Apr 2026 06:57AM UTC coverage: 73.044% (+0.5%) from 72.546%

Build # 24821522727

Build Type

push

github

Committed by

web-flow

Commit Message

fix(deps): update module ocm.software/ocm to v0.40.0 (#442)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[ocm.software/ocm](https://redirect.github.com/open-component-model/ocm)
| `v0.39.0` → `v0.40.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/ocm.software%2focm/v0.40.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/ocm.software%2focm/v0.39.0/v0.40.0?slim=true)
|

---

### Release Notes

<details>
<summary>open-component-model/ocm (ocm.software/ocm)</summary>

###
[`v0.40.0`](https://redirect.github.com/open-component-model/ocm/releases/tag/v0.40.0)

[Compare
Source](https://redirect.github.com/open-component-model/ocm/compare/v0.39.0...v0.40.0)

<!-- Release notes generated using configuration in
.github/config/release.yml at refs/heads/releases/v0.40 -->

#### What's Changed

##### ⬆️ Dependencies

<details>
<summary>6 changes</summary>

- chore(deps): bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1886](https://redirect.github.com/open-component-model/ocm/pull/1886)
- chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.17.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1891](https://redirect.github.com/open-component-model/ocm/pull/1891)
- chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1892](https://redirect.github.com/open-component-model/ocm/pull/1892)
- chore(deps): bump the go group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1896](https://redirect.github.com/open-component-model/ocm/pull/1896)
- chore(deps): migrate github.com/containe... (continued)

Coverage Stats

2054 of 2812 relevant lines covered (73.04%)

29.43 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

78.85

/pkg/controller/release_controller.go

// Copyright 2026 BWI GmbH and Solution Arsenal contributors
// SPDX-License-Identifier: Apache-2.0

package controller

import (
        "context"

        apierrors "k8s.io/apimachinery/pkg/api/errors"
        apimeta "k8s.io/apimachinery/pkg/api/meta"
        metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
        "k8s.io/apimachinery/pkg/runtime"
        "k8s.io/apimachinery/pkg/types"
        "k8s.io/client-go/tools/events"
        ctrl "sigs.k8s.io/controller-runtime"
        "sigs.k8s.io/controller-runtime/pkg/client"

        solarv1alpha1 "go.opendefense.cloud/solar/api/solar/v1alpha1"
)

const (
        ConditionTypeComponentVersionResolved = "ComponentVersionResolved"
)

// ReleaseReconciler reconciles a Release object.
// It validates that the referenced ComponentVersion exists and sets status conditions.
// Rendering is handled by the Target controller.
type ReleaseReconciler struct {
        client.Client
        Scheme   *runtime.Scheme
        Recorder events.EventRecorder
        // WatchNamespace restricts reconciliation to this namespace.
        // Should be empty in production (watches all namespaces).
        // Intended for use in integration tests only.
        // See: https://book.kubebuilder.io/reference/envtest#testing-considerations
        WatchNamespace string
}

//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases,verbs=get;list;watch;create;update;patch;delete
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases/status,verbs=get;update;patch
//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=componentversions,verbs=get;list;watch
//+kubebuilder:rbac:groups=core,resources=events,verbs=create;patch
//+kubebuilder:rbac:groups=events.k8s.io,resources=events,verbs=create;patch

// Reconcile validates the Release by resolving its ComponentVersion reference.
func (r *ReleaseReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
        log := ctrl.LoggerFrom(ctx)
        ctrlResult := ctrl.Result{}

        log.V(1).Info("Release is being reconciled", "req", req)

        if r.WatchNamespace != "" && req.Namespace != r.WatchNamespace {
                return ctrlResult, nil
        }

        // Fetch the Release instance
        res := &solarv1alpha1.Release{}
        if err := r.Get(ctx, req.NamespacedName, res); err != nil {
                if apierrors.IsNotFound(err) {
                        return ctrlResult, nil
                }

                return ctrlResult, errLogAndWrap(log, err, "failed to get object")
        }

        // Resolve ComponentVersion
        cvRef := types.NamespacedName{
                Name:      res.Spec.ComponentVersionRef.Name,
                Namespace: res.Namespace,
        }
        cv := &solarv1alpha1.ComponentVersion{}
        if err := r.Get(ctx, cvRef, cv); err != nil {
                if apierrors.IsNotFound(err) {
                        changed := apimeta.SetStatusCondition(&res.Status.Conditions, metav1.Condition{
                                Type:               ConditionTypeComponentVersionResolved,
                                Status:             metav1.ConditionFalse,
                                ObservedGeneration: res.Generation,
                                Reason:             "NotFound",
                                Message:            "ComponentVersion not found: " + res.Spec.ComponentVersionRef.Name,
                        })
                        if changed {
                                if err := r.Status().Update(ctx, res); err != nil {
                                        return ctrlResult, errLogAndWrap(log, err, "failed to update status")
                                }
                        }

                        return ctrlResult, nil
                }

                return ctrlResult, errLogAndWrap(log, err, "failed to get ComponentVersion")
        }

        // ComponentVersion found — set resolved condition
        changed := apimeta.SetStatusCondition(&res.Status.Conditions, metav1.Condition{
                Type:               ConditionTypeComponentVersionResolved,
                Status:             metav1.ConditionTrue,
                ObservedGeneration: res.Generation,
                Reason:             "Resolved",
                Message:            "ComponentVersion resolved: " + cv.Name,
        })
        if changed {
                if err := r.Status().Update(ctx, res); err != nil {
                        return ctrlResult, errLogAndWrap(log, err, "failed to update status")
                }
        }

        return ctrlResult, nil
}

// SetupWithManager sets up the controller with the Manager.
func (r *ReleaseReconciler) SetupWithManager(mgr ctrl.Manager) error {
        return ctrl.NewControllerManagedBy(mgr).
                For(&solarv1alpha1.Release{}).
                Complete(r)
}

1	// Copyright 2026 BWI GmbH and Solution Arsenal contributors
2	// SPDX-License-Identifier: Apache-2.0
3
4	package controller
5
6	import (
7	"context"
8
9	apierrors "k8s.io/apimachinery/pkg/api/errors"
10	apimeta "k8s.io/apimachinery/pkg/api/meta"
11	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
12	"k8s.io/apimachinery/pkg/runtime"
13	"k8s.io/apimachinery/pkg/types"
14	"k8s.io/client-go/tools/events"
15	ctrl "sigs.k8s.io/controller-runtime"
16	"sigs.k8s.io/controller-runtime/pkg/client"
17
18	solarv1alpha1 "go.opendefense.cloud/solar/api/solar/v1alpha1"
19	)
20
21	const (
22	ConditionTypeComponentVersionResolved = "ComponentVersionResolved"
23	)
24
25	// ReleaseReconciler reconciles a Release object.
26	// It validates that the referenced ComponentVersion exists and sets status conditions.
27	// Rendering is handled by the Target controller.
28	type ReleaseReconciler struct {
29	client.Client
30	Scheme *runtime.Scheme
31	Recorder events.EventRecorder
32	// WatchNamespace restricts reconciliation to this namespace.
33	// Should be empty in production (watches all namespaces).
34	// Intended for use in integration tests only.
35	// See: https://book.kubebuilder.io/reference/envtest#testing-considerations
36	WatchNamespace string
37	}
38
39	//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases,verbs=get;list;watch;create;update;patch;delete
40	//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=releases/status,verbs=get;update;patch
41	//+kubebuilder:rbac:groups=solar.opendefense.cloud,resources=componentversions,verbs=get;list;watch
42	//+kubebuilder:rbac:groups=core,resources=events,verbs=create;patch
43	//+kubebuilder:rbac:groups=events.k8s.io,resources=events,verbs=create;patch
44
45	// Reconcile validates the Release by resolving its ComponentVersion reference.
46	func (r *ReleaseReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {	10✔
47	log := ctrl.LoggerFrom(ctx)	10✔
48	ctrlResult := ctrl.Result{}	10✔
49		10✔
50	log.V(1).Info("Release is being reconciled", "req", req)	10✔
51		10✔
52	if r.WatchNamespace != "" && req.Namespace != r.WatchNamespace {	10✔
53	return ctrlResult, nil	×
54	}	×
55
56	// Fetch the Release instance
57	res := &solarv1alpha1.Release{}	10✔
58	if err := r.Get(ctx, req.NamespacedName, res); err != nil {	10✔
59	if apierrors.IsNotFound(err) {	×
60	return ctrlResult, nil	×
61	}	×
62
63	return ctrlResult, errLogAndWrap(log, err, "failed to get object")	×
64	}
65
66	// Resolve ComponentVersion
67	cvRef := types.NamespacedName{	10✔
68	Name: res.Spec.ComponentVersionRef.Name,	10✔
69	Namespace: res.Namespace,	10✔
70	}	10✔
71	cv := &solarv1alpha1.ComponentVersion{}	10✔
72	if err := r.Get(ctx, cvRef, cv); err != nil {	12✔
73	if apierrors.IsNotFound(err) {	4✔
74	changed := apimeta.SetStatusCondition(&res.Status.Conditions, metav1.Condition{	2✔
75	Type: ConditionTypeComponentVersionResolved,	2✔
76	Status: metav1.ConditionFalse,	2✔
77	ObservedGeneration: res.Generation,	2✔
78	Reason: "NotFound",	2✔
79	Message: "ComponentVersion not found: " + res.Spec.ComponentVersionRef.Name,	2✔
80	})	2✔
81	if changed {	3✔
82	if err := r.Status().Update(ctx, res); err != nil {	1✔
83	return ctrlResult, errLogAndWrap(log, err, "failed to update status")	×
84	}	×
85	}
86
87	return ctrlResult, nil	2✔
88	}
89
90	return ctrlResult, errLogAndWrap(log, err, "failed to get ComponentVersion")	×
91	}
92
93	// ComponentVersion found — set resolved condition
94	changed := apimeta.SetStatusCondition(&res.Status.Conditions, metav1.Condition{	8✔
95	Type: ConditionTypeComponentVersionResolved,	8✔
96	Status: metav1.ConditionTrue,	8✔
97	ObservedGeneration: res.Generation,	8✔
98	Reason: "Resolved",	8✔
99	Message: "ComponentVersion resolved: " + cv.Name,	8✔
100	})	8✔
101	if changed {	12✔
102	if err := r.Status().Update(ctx, res); err != nil {	4✔
103	return ctrlResult, errLogAndWrap(log, err, "failed to update status")	×
104	}	×
105	}
106
107	return ctrlResult, nil	8✔
108	}
109
110	// SetupWithManager sets up the controller with the Manager.
111	func (r *ReleaseReconciler) SetupWithManager(mgr ctrl.Manager) error {	1✔
112	return ctrl.NewControllerManagedBy(mgr).	1✔
113	For(&solarv1alpha1.Release{}).	1✔
114	Complete(r)	1✔
115	}	1✔

opendefensecloud / solution-arsenal / 24821522727

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous