Repository navigation
chore(deps): bump cyclonedx-bom from 7.3.1 to 7.5.0 - #1422
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python) from 7.3.1 to 7.5.0. - [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md) - [Commits](CycloneDX/cyclonedx-python@v7.3.1...v7.5.0) --- updated-dependencies: - dependency-name: cyclonedx-bom dependency-version: 7.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Exact-head carryover and release-lock verification — 2026-10-09Exact head
따라서 이전 #1318의 7.4.0 source/lock delta는 이 PR이 완전히 승계합니다. 근거를 #1318에 먼저 기록한 뒤 미병합 종료했으며 branch는 삭제하지 않았습니다. Hosted exact-head evidence는 6개 workflow / 8개 job 모두 terminal failure이고 모든 job이 실행된 source/test/security verdict가 아니므로 이전 #1318 Checks를 이전하지 않고, 원인 변화 없는 rerun·gate 약화·merge·release를 하지 않습니다. 이 PR은 자체 executable exact-head Checks와 qualifying current-head review가 필요합니다. |
This branch has not been deployed
1 participant
Bumps cyclonedx-bom from 7.3.1 to 7.5.0.
Release notes
Sourced from cyclonedx-bom's releases.
Changelog
Sourced from cyclonedx-bom's changelog.
Commits
fc11987chore(release): 7.5.0963f80fchore(deps): Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#1103)0bcfff0chore(deps-dev): Update uv requirement from 0.12.10 to 0.12.17 (#1108)e1e1040feat(deps): supportchardetv7 (#1110)1a8a953chore: fix dep constriants (#1111)f6f4941chore(release): 7.4.0f97a9a9chore(deps): Bump actions/download-artifact from 7.0.0 to 8.0.1 (#1046)0fd16c3chore(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#1048)d48f71cchore(deps): Bump python from 3.14-slim to 3.14.6-slim (#1065)2abed0fchore(deps): Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#1100)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)