jenstroeger
chore(deps-dev): update cyclonedx-bom requirement from <4.0.0,>=3.11.0 to >=3.11.0,<5.0.0
Updates the requirements on cyclonedx-bom to permit the latest version.
Release notes
Sourced from cyclonedx-bom's releases.
v4.1.1 (2024-02-03)
Documentation
- docs: improve example for programmatic call of CLI (#670)
Signed-off-by: Jan Kowalleck <[email protected]> (
2ac3f21)Fix
- fix: normalize package extras (#671)
ALL names of package extras are normalized, according to spec <https://packaging.python.org/en/latest/specifications/name-normalization/#name-normalization>
Signed-off-by: Jan Kowalleck <[email protected]> (
4d550ad)
What's Changed
- docs: improve example for programmatic call of CLI by
@jkowalleckin CycloneDX/cyclonedx-python#670- fix: normalize package extras by
@jkowalleckin CycloneDX/cyclonedx-python#671Full Changelog: https://github.com/CycloneDX/cyclonedx-python/compare/v4.1.0...v4.1.1
Changelog
Sourced from cyclonedx-bom's changelog.
v4.1.1 (2024-02-03)
Documentation
- docs: improve example for programmatic call of CLI (#670)
Signed-off-by: Jan Kowalleck <[email protected]> (
2ac3f21)Fix
- fix: normalize package extras (#671)
ALL names of package extras are normalized, according to spec <https://packaging.python.org/en/latest/specifications/name-normalization/#name-normalization>
Signed-off-by: Jan Kowalleck <[email protected]> (
4d550ad)v4.1.0 (2024-02-02)
Feature
- feat: support poetry multi-constraint dependencies (#668)
Signed-off-by: Jan Kowalleck <[email protected]> (
50d2a4b)Unknown
- tests: modernize testbeds (#667)
Signed-off-by: Jan Kowalleck <[email protected]> (
2fd3faf)
- docs (#666)
Signed-off-by: Jan Kowalleck <[email protected]> (
491e875)v4.0.0 (2024-01-31)
Breaking
feat!: v4.0.0 (#605)
Changelog
See also the migration guide in the docs.
... (truncated)
Commits
d8f7d1bchore(release): 4.1.14d550adfix: normalize package extras (#671)2ac3f21docs: improve example for programmatic call of CLI (#670)cda86b3chore(release): 4.1.050d2a4bfeat: support poetry multi-constraint dependencies (#668)2fd3faftests: modernize testbeds (#667)491e875docs (#666)74f82e2chore(release): 4.0.06d24e65feat!: v4.0.0 (#605)0181aebchore(deps): Bump actions/setup-python from 4 to 5 (#620)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
A newer version of cyclonedx-bom exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.
