Repository navigation
build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 - #114
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [anchore/sbom-action/download-syft](https://github.com/anchore/sbom-action) from 0.24.2 to 0.24.3. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@3ad7283...66cbf4b) --- updated-dependencies: - dependency-name: anchore/sbom-action/download-syft dependency-version: 0.24.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
@dependabotbot, CI needs fixes on
Please open the failed job logs, fix the reported CI issues, and push your changes to this PR. CI will run again automatically. Other checks may still be running. |
|
Please add a real issue link and explain which acceptance checks this PR addresses. If this is a standalone improvement, add a paragraph starting with A reference to another PR is not an issue link. Missing context requests clarification; it does not automatically close this PR. See .github/PR_TRIAGE.md. |
github-actions
Bot
added
the
triage:needs-context
armstrongsam25
left a comment
armstrongsam25
left a comment
There was a problem hiding this comment.
2026-10-11 core-repository review: held for repair/qualification at b85384d05451b616572112146a9a5ffc8efa0df7.
Authentic official sbom-action/download-syft v0.24.3 SHA verified. Required CI fails hardcoded reviewed release-action expected SHA; update owning guarded test and requalify. Useful dependency work, not low effort.
The complete diff, existing discussion and current-head checks were reviewed. Useful partial work is retained; this review does not authorize bypassing a required gate.
1 participant
Bumps anchore/sbom-action/download-syft from 0.24.2 to 0.24.3.
Release notes
Sourced from anchore/sbom-action/download-syft's releases.
Commits
66cbf4bchore(deps): update Syft to latest release (#735)6b31fa7chore(deps-dev): bump type-fest from 5.9.0 to 5.10.0 (#742)85bda36chore(deps-dev): bump@types/nodefrom 26.5.1 to 26.6.1 (#741)7b97c1echore(deps): bump github.com/anchore/go-make in /.make (#738)891b055chore(deps): bump anchore/go-make/.github/actions/setup (#740)f73cf48chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#739)13576dbchore(deps-dev): bump@types/nodefrom 26.4.1 to 26.5.1 (#737)924e83bchore(deps-dev): bump typescript-eslint from 8.69.0 to 8.70.0 (#736)274555fchore(deps-dev): bump type-fest from 5.8.0 to 5.9.0 (#732)48fb538chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#734)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)