From a8f12655c80befc2cb383f02f2f9cc9c6ec27dd3 Mon Sep 17 00:00:00 2001
From: staging-update-bot <staging-update-bot@chainguard.dev>
Date: Mon, 8 Dec 2025 20:44:20 +0000
Subject: [PATCH 1/3] container-object-storage-interface/0.2.2 package update

---
 container-object-storage-interface.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/container-object-storage-interface.yaml b/container-object-storage-interface.yaml
index d47be5c706c4..f68aff473690 100644
--- a/container-object-storage-interface.yaml
+++ b/container-object-storage-interface.yaml
@@ -1,7 +1,7 @@
 package:
   name: container-object-storage-interface
-  version: "0.2.1"
-  epoch: 3 # CVE-2025-61725
+  version: "0.2.2"
+  epoch: 0 # CVE-2025-61725
   description: Container Object Storage Interface (COSI) responsible for defining COSI spec and APIs, interfacing with COSI drivers, and managing the lifecycle of COSI objects
   copyright:
     - license: Apache-2.0
@@ -21,7 +21,7 @@ pipeline:
     with:
       repository: https://github.com/kubernetes-sigs/container-object-storage-interface
       tag: v${{package.version}}
-      expected-commit: f1f392110e45b4f407aa214380eda16b118db31d
+      expected-commit: f75d47509dae3e4ed0fd18ce0a60474b78e8d29b
 
 subpackages:
   - range: binaries

From aa1ca3c8a8257ccaea0063f560290c39b1238f1e Mon Sep 17 00:00:00 2001
From: Daniel Watkins <daniel.watkins@chainguard.dev>
Date: Tue, 9 Dec 2025 09:00:58 -0500
Subject: [PATCH 2/3] container-object-storage-interface: drop unneeded
 go/bumps

---
 container-object-storage-interface.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/container-object-storage-interface.yaml b/container-object-storage-interface.yaml
index f68aff473690..e32de89981b5 100644
--- a/container-object-storage-interface.yaml
+++ b/container-object-storage-interface.yaml
@@ -28,12 +28,6 @@ subpackages:
     name: "${{package.name}}-${{range.key}}"
     description: COSI's ${{range.key}} binary
     pipeline:
-      - uses: go/bump
-        with:
-          deps: |-
-            golang.org/x/net@v0.38.0
-            golang.org/x/oauth2@v0.27.0
-          modroot: ./${{range.key}}
       - uses: go/build
         with:
           packages: ./cmd

From 993abdf3e59d4ab6fa1f83d5c2b7e8ac3051e49d Mon Sep 17 00:00:00 2001
From: Daniel Watkins <daniel.watkins@chainguard.dev>
Date: Tue, 9 Dec 2025 09:01:17 -0500
Subject: [PATCH 3/3] container-object-storage-interface: follow upstream move
 to top-level go.mod

---
 container-object-storage-interface.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/container-object-storage-interface.yaml b/container-object-storage-interface.yaml
index e32de89981b5..4ef853b715ed 100644
--- a/container-object-storage-interface.yaml
+++ b/container-object-storage-interface.yaml
@@ -30,9 +30,8 @@ subpackages:
     pipeline:
       - uses: go/build
         with:
-          packages: ./cmd
+          packages: ./${{range.key}}/cmd
           output: ${{range.key}}
-          modroot: ./${{range.key}}
     test:
       environment:
         contents: