fix(deps): update module github.com/openmcp-project/openmcp-operator/api to v0.17.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github.com/openmcp-project/openmcp-operator/api	require	minor	v0.16.0 -> v0.17.0
github.com/openmcp-project/openmcp-operator/api	require	minor	v0.15.2 -> v0.17.0

---

Release Notes

openmcp-project/openmcp-operator (github.com/openmcp-project/openmcp-operator/api)

v0.17.0

Compare Source

Changes included in v0.17.0:

🚀 Features

• release v0.17.0 #​198

  • [OPERATOR][FEATURE] - Release v0.17.0 of the github.com/openmcp-project/opencmp-operator

• allow to control the high availability config of ps mcp #​191

  • [OPERATOR][FEATURE] Allow to configure number of replicas and topology spread constraints of the platform service managed control plane.

• user-friendly secret name for MCP access #​193

  • [USER][FEATURE] New name pattern for MCP access secrets on the onboarding cluster. The secret name clearly refers to the corresponding MCP IAM spec values as follows: <provider-name>.<mcp-name>.kubeconfig where provider-name is either an OIDC provider or static token name.

🔧 Chores

• enable ClusterAccessReconciler's Reconcile method to be called during deletion #​197
  • [DEVELOPER][FEATURE] The ClusterAccess Reconciler's Reconcile method can now be called during the deletion logic of the embedding controller without re-creating resources that have already been deleted by an earlier ReconcileDelete call. This means Reconcile can now be called at the beginning of a deleting reconciliation and ReconcileDelete at the end, without resources being created and deleted endlessly when walking through this deletion flow multiple times (because the request is reconciled multiple times because it needs to wait for resources being deleted).
• enable provider webhooks #​195
  • [OPERATOR][FEATURE] During provider deployment, it is now checked whether a webhook TLS secret exists for the provider being deployed. If so, it is automatically mounted in the run container. The name of the mounted secret is determined by the new WebhookSecretName function from the lib/utils package.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: api/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated

Details:

Package	Change
github.com/openmcp-project/controller-utils	v0.23.1 -> v0.23.2
golang.org/x/mod	v0.28.0 -> v0.29.0
golang.org/x/net	v0.44.0 -> v0.46.0
golang.org/x/sys	v0.36.0 -> v0.37.0
golang.org/x/term	v0.35.0 -> v0.36.0
golang.org/x/text	v0.29.0 -> v0.30.0
golang.org/x/tools	v0.37.0 -> v0.38.0
k8s.io/utils	v0.0.0-20250820121507-0af2bda4dd1d -> v0.0.0-20251002143259-bc988d571ff4