Skip to content

Update cyclonedx-bom requirement from >=4.0.0 to >=7.3.0#27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cyclonedx-bom-gte-7.3.0
Closed

Update cyclonedx-bom requirement from >=4.0.0 to >=7.3.0#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cyclonedx-bom-gte-7.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on cyclonedx-bom to permit the latest version.

Release notes

Sourced from cyclonedx-bom's releases.

v7.3.0 (2026-03-30)

Features

  • Add -S flag to skip *.pth evaluation during environment analysis (#1032, 55c15d7)

What's Changed

Full Changelog: CycloneDX/cyclonedx-python@v7.2.2...v7.3.0

Changelog

Sourced from cyclonedx-bom's changelog.

v7.3.0 (2026-03-30)

Features

  • Add -S flag to skip *.pth evaluation during environment analysis (#1032, 55c15d7)

v7.2.2 (2026-02-19)

Documentation

v7.2.1 (2025-10-29)

Documentation

v7.2.0 (2025-10-16)

Documentation

  • Add Changelog to project urls (5f38d75)

Features

v7.1.0 (2025-09-02)

Documentation

Features

  • Support runtime-dependency cyclonedx-python-lib v11 (#938, 7818754)

... (truncated)

Commits
  • e0d92e7 chore(release): 7.3.0
  • 55c15d7 feat: add -S flag to skip *.pth evaluation during environment analysis (#1032)
  • ecf8768 chore(deps-dev): Update uv requirement from 0.10.9 to 0.10.10 (#1026)
  • 00d862f chore(deps-dev): Update uv requirement from 0.10.7 to 0.10.9 (#1025)
  • fd51a5f chore(deps-dev): Update uv requirement from 0.10.2 to 0.10.7 (#1023)
  • 2ecae2b chore(release): 7.2.2
  • 9b06708 chore(deps-dev): Update uv requirement from 0.10.0 to 0.10.2 (#1019)
  • a6b7659 chore(deps-dev): Update uv requirement from 0.9.28 to 0.10.0 (#1018)
  • a2a9108 chore(deps): Update packaging requirement from ^22 || ^23 || ^24 || ^25 to ^2...
  • f35e9f2 chore(deps-dev): Update uv requirement from 0.9.13 to 0.9.28 (#1017)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from alphacrack as a code owner May 18, 2026 11:30
@alphacrack
alphacrack enabled auto-merge (squash) July 21, 2026 20:10
@alphacrack

Copy link
Copy Markdown
Owner

@dependabot rebase

Updates the requirements on [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python) to permit the latest version.
- [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md)
- [Commits](CycloneDX/cyclonedx-python@v4.0.0...v7.3.0)

---
updated-dependencies:
- dependency-name: cyclonedx-bom
  dependency-version: 7.3.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/cyclonedx-bom-gte-7.3.0 branch from 827b883 to 3eb77f0 Compare July 21, 2026 20:15
@github-actions github-actions Bot added the dependencies Runtime / dev dependency upgrade (Dependabot uses this name) label Jul 21, 2026
@alphacrack

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like cyclonedx-bom is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 23, 2026
auto-merge was automatically disabled July 23, 2026 19:08

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/pip/cyclonedx-bom-gte-7.3.0 branch July 23, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Runtime / dev dependency upgrade (Dependabot uses this name)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant