The ocm-backend plugin in this branch is out of sync (v4.0.6) with what we ship in 1.2 (v4.0.8).  On top of that, there are many plugins that had fixes and semver patch updates that were never backported. We need to rebase these to the latest patch versions in order to apply the CVE fixes so we can make the proper patch version bumps