fix(ocm-kit): update ocm-kit go modules

[ocmbot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/ThalesGroup/crypto11	v1.6.1 → v1.6.8			replace	patch
ocm.software/open-component-model/bindings/go/configuration	v0.0.15 → v0.0.16			require	patch
ocm.software/open-component-model/bindings/go/descriptor/runtime	6e5e7c3 → 3653a7d			require	digest

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

v1.6.8

Compare Source

What's Changed

• downgrade the go version to 1.25.0 and add go toolchain by @​Nicolas-Peiffer in eclipse-keypont#139
• fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — github.com/eclipse-keypont/crypto11

This release restores the correct module path following the repository move from
github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating

go get github.com/eclipse-keypont/crypto11@​v1.6.8

-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at
ThalesGroup/crypto11@​v1.6.7.
It will receive no further updates, including security fixes. GitHub still redirects the old
repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation
notice for github.com/ThalesGroup/crypto11. They are not usable as
github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@​latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative
so this library does not raise the minimum Go version for projects that import it, while
maintainers build and test with the latest patch toolchain. See #​137 and #​139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in
development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

v1.6.7

Compare Source

v1.6.6

Compare Source

v1.6.5

Compare Source

• Donating the ThalesGroup/crypto11 project to the Eclipse Foundation Project KeyPont
• Repository migration from github.com/ThalesGroup to github.com/eclipse-keypont. Migration details #​138

Full Changelog: eclipse-keypont/crypto11@v1.6.3...v1.6.5

v1.6.4

Compare Source

v1.6.3

Compare Source

v1.6.2

Compare Source

• downgrade the go version to 1.25.0 as per thales-transfer#137

• add go toolchain

Full Changelog: eclipse-keypont/crypto11@v1.6.0...v1.6.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.