OCPBUGS-22616: [release-4.14] Bump github.com/operator-framework/operator-registry

[ankitathomas]

No description provided.

[openshift-ci-robot]

@ankitathomas: This pull request references Jira Issue OCPBUGS-22616, which is invalid:

• expected Jira Issue OCPBUGS-22616 to depend on a bug targeting a version in 4.15.0 and in one of the following states: VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA), but no dependents were found

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: ankitathomas
Once this PR has been reviewed and has the lgtm label, please assign kevinrizza for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• DOWNSTREAM_OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ncdc]

/hold

There are a lot of dependency updates in here. Is it possible to limit to solely operator-registry?

[openshift-ci]

@ankitathomas: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/vet	b524db6	link	true	/test vet
ci/prow/unit	b524db6	link	true	/test unit
ci/prow/verify-deps	b524db6	link	true	/test verify-deps
ci/prow/openshift-e2e-aws	b524db6	link	true	/test openshift-e2e-aws
ci/prow/verify-commits	b524db6	link	true	/test verify-commits
ci/prow/images	b524db6	link	true	/test images

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[openshift-ci-robot]

@ankitathomas: This pull request references Jira Issue OCPBUGS-22616. The bug has been updated to no longer refer to the pull request using the external bug tracker. All external bug links have been closed. The bug has been moved to the NEW state.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[ankitathomas]

After looking through the library affected by the CVE, we aren't affected since we don't use the affected otelhttp.NewHandler method. This is an indirect dependency through operator-registry's CRD validation, which operator-controller does not use.

[ncdc]

@ankitathomas nice!!!