Bump github.com/openshift-online/ocm-sdk-go from 0.1.508 to 0.1.509 in the ocm-sdk group

[dependabot]

Bumps the ocm-sdk group with 1 update: github.com/openshift-online/ocm-sdk-go.

Updates github.com/openshift-online/ocm-sdk-go from 0.1.508 to 0.1.509

Release notes

Sourced from github.com/openshift-online/ocm-sdk-go's releases.

Release 0.1.509

What's Changed

• chore: bump ocm-api-model to v0.0.464 by @​github-actions[bot] in openshift-online/ocm-sdk-go#1196
• chore: bump version to v0.1.509 by @​miguelsorianod in openshift-online/ocm-sdk-go#1197

Full Changelog: openshift-online/ocm-sdk-go@v0.1.508...v0.1.509

Changelog

Sourced from github.com/openshift-online/ocm-sdk-go's changelog.

0.1.509 Aug 10 2026

• feat: aro-hcp: allow providing CS Provision Shard ID during cluster creation
• feat: aro-hcp: remove provisionshard reference in cluster type

Commits

• 607a2de Merge pull request #1197 from miguelsorianod/bump-sdk-version-to-v01509
• c75dd68 chore: bump version to v0.1.509
• 8242e51 Merge pull request #1196 from openshift-online/sync-model/v0.0.464
• 25796ea chore: bump ocm-api-model to v0.0.464
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Updated the OpenShift Cluster Manager SDK and API model dependencies to newer patch versions.
  • No user-facing functionality or public API changes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 2a5a4775-5b5c-4a72-bedd-fe2a6d4826a0

📥 Commits

Reviewing files that changed from the base of the PR and between 4f4d737 and 79ced4b.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 10 remain after this review.

---

Walkthrough

The pull request updates go.mod with newer versions of ocm-sdk-go and ocm-api-model.

Changes

OCM dependency updates

Layer / File(s)	Summary
Update OCM dependency versions go.mod	The direct ocm-sdk-go dependency changes to v0.1.509. The indirect ocm-api-model dependencies change to v0.0.464.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 79ced

This PR only updates the Go SDK version and module checksums; the supplied evidence shows no known vulnerability or downstream compatibility change, so no actionable merge-blocking risk remains beyond normal checks and review.

Possibly related PRs

• openshift-online/rosa-e2e#222: Updates the same ocm-sdk-go and ocm-api-model dependencies to successive versions.

Suggested reviewers: redhat-chai-bot, dustman9000

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the dependency update that constitutes the pull request's main change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	The PR changes only Go dependency versions and checksums; no weak-crypto APIs, custom crypto, or secret comparisons appear in the diff or cached v0.1.509 sources.
Container-Privileges	✅ Passed	The PR changes only go.mod and go.sum. No container or Kubernetes manifest privilege settings changed, and existing privileged-nested parameters default to false.
No-Sensitive-Data-In-Logs	✅ Passed	The PR changes only go.mod/go.sum. Comparing SDK 0.1.508 and 0.1.509 shows only ARO-HCP OpenAPI files and version metadata changed; logging code is unchanged.
No-Hardcoded-Secrets	✅ Passed	The PR changes only Go dependency versions and go.sum integrity hashes; it adds no API keys, tokens, passwords, credentials, embedded-credential URLs, or secrets in config.
No-Injection-Vectors	✅ Passed	The PR changes only Go dependency versions and checksums; no executable additions introduce SQL concatenation, shell=True, eval/exec, pickle.loads, unsafe yaml.load, os.system, or innerHTML sinks.
Ai-Attribution	✅ Passed	The PR and commit mention Dependabot/GitHub Actions, not an AI tool; HEAD has only a Signed-off-by trailer and no Assisted-by, Generated-by, or AI Co-Authored-By trailer.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/ocm-sdk-847d9c03a0

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment