Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
CycloneDX
/
cyclonedx-dotnet-library
Public
Uh oh!
There was an error while loading.
Please reload this page
.
Notifications
You must be signed in to change notification settings
Fork
37
Star
29
Code
Issues
18
Pull requests
20
Discussions
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Security and quality
Insights
Bom.AttachDanglingComponents: close dependency-graph gaps left by a merge (4/5)
- #449
#449
Open
jimklimov
wants to merge 17 commits into
CycloneDX:main
CycloneDX/cyclonedx-dotnet-library:main
from
jimklimov:merge-attach-dangling-components
jimklimov/cyclonedx-dotnet-library:merge-attach-dangling-components
Copy head branch name to clipboard
Conversation
Commits
17
(17)
Checks
Files changed
Open
Bom.AttachDanglingComponents: close dependency-graph gaps left by a merge (4/5)
#449
jimklimov
wants to merge 17 commits into
CycloneDX:main
CycloneDX/cyclonedx-dotnet-library:main
from
jimklimov:merge-attach-dangling-components
jimklimov/cyclonedx-dotnet-library:merge-attach-dangling-components
Copy head branch name to clipboard
Commits
Commits on Sep 15, 2026
Introduce IBomEntity/IMergeable<T>/IEquivalent<T> interfaces and MergeStrategy
Show description for f01e735
jimklimov
committed
f01e735
View commit details
Copy full SHA for f01e735
Browse repository at this point
Commits on Sep 17, 2026
Retarget mergeable model classes to IMergeable<T>/IEquivalent<T>
Show description for c2b4dac
jimklimov
and
claude
committed
c2b4dac
View commit details
Copy full SHA for c2b4dac
Browse repository at this point
Add strategy-aware MergeableListHelper.Merge<T>
Show description for 4c6624c
jimklimov
committed
4c6624c
View commit details
Copy full SHA for 4c6624c
Browse repository at this point
Component: real Equivalent/MergeWith, field-by-field, no reflection
Show description for 5e566bb
jimklimov
committed
5e566bb
View commit details
Copy full SHA for 5e566bb
Browse repository at this point
Add BomRefWalker and Bom.RenameRef/BomMetadataUpdate/ReferThisToolkit
Show description for 0ad6727
jimklimov
committed
0ad6727
View commit details
Copy full SHA for 0ad6727
Browse repository at this point
Add strategy-aware FlatMerge/HierarchicalMerge overloads
Show description for e3074cc
jimklimov
committed
e3074cc
View commit details
Copy full SHA for e3074cc
Browse repository at this point
Add focused tests for the new merge-strategy capability
Show description for a76cde2
jimklimov
committed
a76cde2
View commit details
Copy full SHA for a76cde2
Browse repository at this point
Add strategy-aware multi-BOM FlatMerge(IEnumerable<Bom>, ...) overloads
Show description for 139c3b0
jimklimov
committed
139c3b0
View commit details
Copy full SHA for 139c3b0
Browse repository at this point
Flip default scope-conflict resolution to Squash_UpgradeScope; rename enum
Show description for 578100f
jimklimov
committed
578100f
View commit details
Copy full SHA for 578100f
Browse repository at this point
Bom.RenameRef: refuse rather than silently collide
Show description for 3331ec7
jimklimov
committed
3331ec7
View commit details
Copy full SHA for 3331ec7
Browse repository at this point
Dependency: real Equivalent/MergeWith for subset-dependency merging
Show description for 356abf7
jimklimov
committed
356abf7
View commit details
Copy full SHA for 356abf7
Browse repository at this point
Implement Squash_RenameByScope: split scope-conflicting components by bom-ref
Show description for f7c0583
jimklimov
committed
f7c0583
View commit details
Copy full SHA for f7c0583
Browse repository at this point
Merge.cs: fix stale comment on Dependency reconciliation
Show description for 30fd0b6
jimklimov
and
claude
committed
30fd0b6
View commit details
Copy full SHA for 30fd0b6
Browse repository at this point
Add CleanupMetadataComponent/CleanupEmptyLists, call from strategy merges
Show description for 32ac0f8
jimklimov
committed
32ac0f8
View commit details
Copy full SHA for 32ac0f8
Browse repository at this point
FlatMerge: reconcile a bom's own Metadata.Component via Equivalent(), not Contains()
Show description for 625d2b1
jimklimov
committed
625d2b1
View commit details
Copy full SHA for 625d2b1
Browse repository at this point
RenameBomRefCollisions: don't rename pairs the generic merge will squash anyway
Show description for 7bb8f23
jimklimov
committed
7bb8f23
View commit details
Copy full SHA for 7bb8f23
Browse repository at this point
Bom: add AttachDanglingComponents to close gaps in the dependency graph
Show description for 7117d23
jimklimov
committed
7117d23
View commit details
Copy full SHA for 7117d23
Browse repository at this point
You can’t perform that action at this time.