Skip to content

Update cyclonedx-bom requirement from >=4.0.0 to >=7.3.0#27

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cyclonedx-bom-gte-7.3.0
Open

Update cyclonedx-bom requirement from >=4.0.0 to >=7.3.0#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cyclonedx-bom-gte-7.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on cyclonedx-bom to permit the latest version.

Release notes

Sourced from cyclonedx-bom's releases.

v7.3.0 (2026-03-30)

Features

  • Add -S flag to skip *.pth evaluation during environment analysis (#1032, 55c15d7)

What's Changed

Full Changelog: CycloneDX/cyclonedx-python@v7.2.2...v7.3.0

Changelog

Sourced from cyclonedx-bom's changelog.

v7.3.0 (2026-03-30)

Features

  • Add -S flag to skip *.pth evaluation during environment analysis (#1032, 55c15d7)

v7.2.2 (2026-02-19)

Documentation

v7.2.1 (2025-10-29)

Documentation

v7.2.0 (2025-10-16)

Documentation

  • Add Changelog to project urls (5f38d75)

Features

v7.1.0 (2025-09-02)

Documentation

Features

  • Support runtime-dependency cyclonedx-python-lib v11 (#938, 7818754)

... (truncated)

Commits
  • e0d92e7 chore(release): 7.3.0
  • 55c15d7 feat: add -S flag to skip *.pth evaluation during environment analysis (#1032)
  • ecf8768 chore(deps-dev): Update uv requirement from 0.10.9 to 0.10.10 (#1026)
  • 00d862f chore(deps-dev): Update uv requirement from 0.10.7 to 0.10.9 (#1025)
  • fd51a5f chore(deps-dev): Update uv requirement from 0.10.2 to 0.10.7 (#1023)
  • 2ecae2b chore(release): 7.2.2
  • 9b06708 chore(deps-dev): Update uv requirement from 0.10.0 to 0.10.2 (#1019)
  • a6b7659 chore(deps-dev): Update uv requirement from 0.9.28 to 0.10.0 (#1018)
  • a2a9108 chore(deps): Update packaging requirement from ^22 || ^23 || ^24 || ^25 to ^2...
  • f35e9f2 chore(deps-dev): Update uv requirement from 0.9.13 to 0.9.28 (#1017)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from alphacrack as a code owner May 18, 2026 11:30
@alphacrack
alphacrack enabled auto-merge (squash) July 21, 2026 20:10
@alphacrack

Copy link
Copy Markdown
Owner

@dependabot rebase

Updates the requirements on [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python) to permit the latest version.
- [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md)
- [Commits](CycloneDX/cyclonedx-python@v4.0.0...v7.3.0)

---
updated-dependencies:
- dependency-name: cyclonedx-bom
  dependency-version: 7.3.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/cyclonedx-bom-gte-7.3.0 branch from 827b883 to 3eb77f0 Compare July 21, 2026 20:15
@github-actions github-actions Bot added the dependencies Runtime / dev dependency upgrade (Dependabot uses this name) label Jul 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Runtime / dev dependency upgrade (Dependabot uses this name)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant