fix(deps): update module open-cluster-management.io/config-policy-controller to v0.19.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
open-cluster-management.io/config-policy-controller	v0.18.0 → v0.19.0

---

Release Notes

open-cluster-management-io/config-policy-controller (open-cluster-management.io/config-policy-controller)

v0.19.0

Compare Source

config-policy-controller v0.19.0

• The released image is quay.io/open-cluster-management/config-policy-controller:v0.19.0

🚀 Features

• Use contexts in all requests and improve logging by @​JustinKuli in #​446
• feat: enable logging output for dryrun by @​dhaiducek in #​365
• feat: detect new minor operator version on another channel by @​jan-law in #​456
• docs: add OperatorPolicy to readme by @​jan-law in #​467
• docs: add status explanation to readme by @​jan-law in #​475

🐛 Bug Fixes

• fix: Allow multiple object-templates to point to the same object by @​jan-law in #​464
• fix: ignore startingCSV only in subscription by @​JustinKuli in #​469
• Preserve createdByPolicy through recreates by @​JustinKuli in #​471

⚙️ Other Notable Changes

• refactor: pass context with operator policy logger by @​jan-law in #​437
• Cleanup coverage reports and send to Codecov by @​JustinKuli in #​443
• CI: Separate coverage reports for Codecov by @​JustinKuli in #​448
• chore: sync common build files by @​dhaiducek in #​449
• chore: bump to k8s v1.35 by @​dhaiducek in #​451
• Generate and save JUnit reports for all tests by @​JustinKuli in #​454
• test: replace quay-operator tests by @​jan-law in #​465
• chore: realign Dependabot interval by @​dhaiducek in #​473
• Many dependabot updates for keeping packages up-to-date and to address potential vulnerabilities (see full changelog below)

Full Changelog: open-cluster-management-io/config-policy-controller@v0.18.0...v0.19.0

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 32 additional dependencies were updated

Details:

Package	Change
k8s.io/api	v0.35.4 -> v0.35.5
k8s.io/apiextensions-apiserver	v0.35.4 -> v0.35.5
k8s.io/apimachinery	v0.35.4 -> v0.35.5
k8s.io/client-go	v0.35.4 -> v0.35.5
k8s.io/component-base	v0.35.4 -> v0.35.5
open-cluster-management.io/addon-framework	v1.1.2 -> v1.3.0
open-cluster-management.io/api	v1.1.0 -> v1.3.0
open-cluster-management.io/sdk-go	v1.1.1 -> v1.3.0
github.com/fsnotify/fsnotify	v1.9.0 -> v1.10.1
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.2
github.com/go-openapi/jsonpointer	v0.22.4 -> v0.23.1
github.com/go-openapi/jsonreference	v0.21.4 -> v0.21.6
github.com/go-openapi/swag	v0.25.4 -> v0.26.0
github.com/prometheus/common	v0.67.5 -> v0.68.0
go.opentelemetry.io/otel	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.43.0 -> v1.44.0
go.uber.org/zap	v1.27.0 -> v1.28.0
golang.org/x/oauth2	v0.35.0 -> v0.36.0
golang.org/x/time	v0.14.0 -> v0.15.0
k8s.io/apiserver	v0.35.4 -> v0.35.5
github.com/go-openapi/swag/cmdutils	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/conv	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/fileutils	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/jsonname	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/jsonutils	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/loading	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/mangling	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/netutils	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/stringutils	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/typeutils	v0.25.4 -> v0.26.0
github.com/go-openapi/swag/yamlutils	v0.25.4 -> v0.26.0
sigs.k8s.io/structured-merge-diff/v6	v6.3.2-0.20260122202528-d9cc6641c482 -> v6.3.2

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign gurnben for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[openshift-ci]

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/images	1ad7819	link	true	/test images
ci/prow/sonar-pre-submit	1ad7819	link	true	/test sonar-pre-submit
ci/prow/unit	1ad7819	link	true	/test unit

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.