Deppy [recently](https://github.com/operator-framework/deppy/pull/108) removed EntitySources in favor of VariableSources, the operator-controller should be updated to rely on the new VariableSource.