[PR #42] [MERGED] 🌱 Bump anchore/sbom-action from 0.16.0 to 0.17.0 #54

New issue

Closed

opened 2026-03-03 16:27:59 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:27:59 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/natrontech/pbs-exporter/pull/42
Author: @dependabot[bot]
Created: 7/15/2024
Status: ✅ Merged
Merged: 7/16/2024
Merged by: @janfuhrer

Base: main ← Head: dependabot/github_actions/anchore/sbom-action-0.17.0

📝 Commits (1)

62c73b4 🌱 Bump anchore/sbom-action from 0.16.0 to 0.17.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/release.yml (+1 -1)

📄 Description

Bumps anchore/sbom-action from 0.16.0 to 0.17.0.

Release notes

Sourced from anchore/sbom-action's releases.

v0.17.0

Changes in v0.17.0

chore(deps): update Syft to v1.9.0 (#479) [anchore-actions-token-generator]

chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (#474) [dependabot]

chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#475) [dependabot]

chore: serialize tests to prevent install race (#478) [willmurphyscode]

v0.16.1

Changes in v0.16.1

fix: workaround windows install issue (#477) [willmurphyscode]

fix: allow users to properly use the file input over the default path value (#471) [komish]

chore(deps): update Syft to v1.5.0 (#470) [anchore-actions-token-generator]

docs: notes for matrix and required permissions (#469) [kzantow]

chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#466) [dependabot]

Commits

d94f46e chore(deps): update Syft to v1.9.0 (#479)
ee41e6a chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (#474)
23e0b38 chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#475)
f4035cd chore: serialize tests to prevent install race (#478)
f3253ca chore(deps): update Syft to v1.8.0 (#473)
95b086a fix: workaround windows install script (#477)
72370e1 fix: allow users to properly use the file input over the default path value (...
e28bab5 chore(deps): update Syft to v1.5.0 (#470)
2283abe docs: notes for matrix and required permissions (#469)
07e5b3a chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#466)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/natrontech/pbs-exporter/pull/42 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 7/15/2024 **Status:** ✅ Merged **Merged:** 7/16/2024 **Merged by:** [@janfuhrer](https://github.com/janfuhrer) **Base:** `main` ← **Head:** `dependabot/github_actions/anchore/sbom-action-0.17.0` --- ### 📝 Commits (1) - [`62c73b4`](https://github.com/natrontech/pbs-exporter/commit/62c73b44e4e4427bd2040a1d583ca5a3d9dd7f7b) :seedling: Bump anchore/sbom-action from 0.16.0 to 0.17.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+1 -1) </details> ### 📄 Description Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.16.0 to 0.17.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's releases</a>.</em></p> <blockquote> <h2>v0.17.0</h2> <h2>Changes in v0.17.0</h2> <ul> <li>chore(deps): update Syft to v1.9.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/479">#479</a>) [<a href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li> <li>chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (<a href="https://redirect.github.com/anchore/sbom-action/issues/474">#474</a>) [<a href="https://github.com/dependabot">dependabot</a>]</li> <li>chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/475">#475</a>) [<a href="https://github.com/dependabot">dependabot</a>]</li> <li>chore: serialize tests to prevent install race (<a href="https://redirect.github.com/anchore/sbom-action/issues/478">#478</a>) [<a href="https://github.com/willmurphyscode">willmurphyscode</a>]</li> </ul> <h2>v0.16.1</h2> <h2>Changes in v0.16.1</h2> <ul> <li>fix: workaround windows install issue (<a href="https://redirect.github.com/anchore/sbom-action/issues/477">#477</a>) [<a href="https://github.com/willmurphyscode">willmurphyscode</a>]</li> <li>fix: allow users to properly use the file input over the default path value (<a href="https://redirect.github.com/anchore/sbom-action/issues/471">#471</a>) [<a href="https://github.com/komish">komish</a>]</li> <li>chore(deps): update Syft to v1.5.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/470">#470</a>) [<a href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li> <li>docs: notes for matrix and required permissions (<a href="https://redirect.github.com/anchore/sbom-action/issues/469">#469</a>) [<a href="https://github.com/kzantow">kzantow</a>]</li> <li>chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (<a href="https://redirect.github.com/anchore/sbom-action/issues/466">#466</a>) [<a href="https://github.com/dependabot">dependabot</a>]</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/anchore/sbom-action/commit/d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5"><code>d94f46e</code></a> chore(deps): update Syft to v1.9.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/479">#479</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/ee41e6a02ae14ba7c759082d65330fc0377476b2"><code>ee41e6a</code></a> chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (<a href="https://redirect.github.com/anchore/sbom-action/issues/474">#474</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/23e0b38264299f4696f46bf5eec395522e74548a"><code>23e0b38</code></a> chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/475">#475</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/f4035cdb8eb39fd4e7b545e3acd16f92cf84acc2"><code>f4035cd</code></a> chore: serialize tests to prevent install race (<a href="https://redirect.github.com/anchore/sbom-action/issues/478">#478</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/f3253ca2ff8122dbea159485124fb950533f77dc"><code>f3253ca</code></a> chore(deps): update Syft to v1.8.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/473">#473</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/95b086ac308035dc0850b3853be5b7ab108236a8"><code>95b086a</code></a> fix: workaround windows install script (<a href="https://redirect.github.com/anchore/sbom-action/issues/477">#477</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/72370e18af3add17e587ca8533fab7d28d2b0bee"><code>72370e1</code></a> fix: allow users to properly use the file input over the default path value (...</li> <li><a href="https://github.com/anchore/sbom-action/commit/e28bab51878dc8b0a6ee2e3c1de6adf48a3aee42"><code>e28bab5</code></a> chore(deps): update Syft to v1.5.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/470">#470</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/2283abe365797ff88b160542ad78bed017d8b4c9"><code>2283abe</code></a> docs: notes for matrix and required permissions (<a href="https://redirect.github.com/anchore/sbom-action/issues/469">#469</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/07e5b3aee7e43056aa294cf574ee7331fd066f17"><code>07e5b3a</code></a> chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (<a href="https://redirect.github.com/anchore/sbom-action/issues/466">#466</a>)</li> <li>See full diff in <a href="https://github.com/anchore/sbom-action/compare/e8d2a6937ecead383dfe75190d104edd1f9c5751...d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.16.0&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>