Skip to content

Bump cyclonedx-python-lib from 7.3.2 to 7.3.4#9

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/cyclonedx-python-lib-7.3.4
Closed

Bump cyclonedx-python-lib from 7.3.2 to 7.3.4#9
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/cyclonedx-python-lib-7.3.4

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 7, 2024

Bumps cyclonedx-python-lib from 7.3.2 to 7.3.4.

Release notes

Sourced from cyclonedx-python-lib's releases.

v7.3.4 (2024-05-06)

Fix

  • fix: allow suppliers with empty-string names (#611)

fixes #600


Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (b331aeb)


What's Changed

Full Changelog: CycloneDX/cyclonedx-python-lib@v7.3.3...v7.3.4

v7.3.3 (2024-05-06)

Chore

  • chore: shield_ossf-best-practices subbary

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (0d00496)

  • chore(deps-dev): update coverage requirement from 7.5.0 to 7.5.1 (#608)

Updates the requirements on coverage to permit the latest version. <details> <summary>Changelog</summary> <p><em>Sourced from <a href=&#34;CycloneDX/cyclonedx-python-lib#34 changelog</a>.</em></p> <blockquote> <h2>Version 7.5.1 — 2024-05-04</h2> <ul> <li> <p>Fix: a pragma comment on the continuation lines of a multi-line statement now excludes the statement and its body, the same as if the pragma is on the first line. This closes <code>issue 754</code><em>. The fix was contributed by <code>Daniel Diniz &lt;pull 1773_&gt;</code></em>.</p> </li> <li>

... (truncated)

Changelog

Sourced from cyclonedx-python-lib's changelog.

v7.3.4 (2024-05-06)

Fix

  • fix: allow suppliers with empty-string names (#611)

fixes #600


Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (b331aeb)

v7.3.3 (2024-05-06)

Chore

  • chore: shield_ossf-best-practices subbary

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (0d00496)

  • chore(deps-dev): update coverage requirement from 7.5.0 to 7.5.1 (#608)

Updates the requirements on coverage to permit the latest version. <details> <summary>Changelog</summary> <p><em>Sourced from <a href=&#34;CycloneDX/cyclonedx-python-lib#34 changelog</a>.</em></p> <blockquote> <h2>Version 7.5.1 — 2024-05-04</h2> <ul> <li> <p>Fix: a pragma comment on the continuation lines of a multi-line statement now excludes the statement and its body, the same as if the pragma is on the first line. This closes <code>issue 754</code><em>. The fix was contributed by <code>Daniel Diniz &lt;pull 1773_&gt;</code></em>.</p> </li> <li> <p>Fix: very complex source files like <code>this one &lt;resolvent_lookup_&gt;</code>_ could cause a maximum recursion error when creating an HTML report. This is now fixed, closing <code>issue 1774</code>_.</p> </li> <li>

... (truncated)

Commits
  • 9e00604 chore(release): 7.3.4
  • b331aeb fix: allow suppliers with empty-string names (#611)
  • d081ffe chore(release): 7.3.3
  • 08b7c60 fix: json validation allow arbitrary $schema value (#613)
  • 0d00496 chore: shield_ossf-best-practices subbary
  • 4f9174b chore(deps-dev): update coverage requirement from 7.5.0 to 7.5.1 (#608)
  • 6d1bc5b chore(ci): update GH action versions (#606)
  • f566c82 chore(deps-dev): update tox requirement from 4.14.2 to 4.15.0 (#603)
  • 1257861 chore(deps-dev): update coverage requirement from 7.4.4 to 7.5.0 (#605)
  • e64258d chore(deps-dev): update flake8-bugbear requirement from 24.2.6 to 24.4.26 (#604)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cyclonedx-python-lib](https://github.com/CycloneDX/cyclonedx-python-lib) from 7.3.2 to 7.3.4.
- [Release notes](https://github.com/CycloneDX/cyclonedx-python-lib/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md)
- [Commits](CycloneDX/cyclonedx-python-lib@v7.3.2...v7.3.4)

---
updated-dependencies:
- dependency-name: cyclonedx-python-lib
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 7, 2024
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 24, 2024

Superseded by #15.

@dependabot dependabot Bot closed this May 24, 2024
@dependabot dependabot Bot deleted the dependabot/pip/cyclonedx-python-lib-7.3.4 branch May 24, 2024 05:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants