Repository navigation
chore(deps): bump cyclonedx-bom from 7.3.1 to 7.4.0 - #1318
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python) from 7.3.1 to 7.4.0. - [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md) - [Commits](CycloneDX/cyclonedx-python@v7.3.1...v7.4.0) --- updated-dependencies: - dependency-name: cyclonedx-bom dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Admission correction — exact current head |
|
Superseded by #1422. |
Verified complete successor carryover — 2026-10-09이 PR의 유효 delta는 최신 #1422 exact
#1422 exact tree 직접 검증:
따라서 #1318의 source, generated lock, reproducible-SBOM 요구와 릴리스 기능은 #1422가 완전히 승계하며 고유 delta가 남지 않습니다. #1318의 과거 Checks/승인은 #1422로 이전되지 않으며, #1422는 자체 exact-head hosted Checks와 current-head review를 별도로 충족해야 합니다. 이 기록 뒤 #1318을 successor-carryover 사유로 미병합 종료합니다. branch 삭제, Force Push, destructive rebase, gate 완화는 하지 않습니다. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps cyclonedx-bom from 7.3.1 to 7.4.0.
Release notes
Sourced from cyclonedx-bom's releases.
Changelog
Sourced from cyclonedx-bom's changelog.
Commits
f6f4941chore(release): 7.4.0f97a9a9chore(deps): Bump actions/download-artifact from 7.0.0 to 8.0.1 (#1046)0fd16c3chore(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#1048)d48f71cchore(deps): Bump python from 3.14-slim to 3.14.6-slim (#1065)2abed0fchore(deps): Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#1100)51813c7feat: respect env varSOURCE_DATE_EPOCHwhen generating reproducible output...0e4de7achore(deps): Bump docker/login-action from 3.7.0 to 4.6.0 (#1092)b51c001chore(deps): Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#1090)25bfa4cchore(deps-dev): Update uv requirement from 0.11.32 to 0.12.10 (#1101)20a8345chore(deps): Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#1091)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)