From 90ddfdfed56fe63ffcb218d3efdb6367bba84b26 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Oct 2026 01:10:00 +0000 Subject: [PATCH] ci(deps): Bump no42-org/blitsbom Bumps the gh-actions group with 1 update: [no42-org/blitsbom](https://github.com/no42-org/blitsbom). Updates `no42-org/blitsbom` from 0.8.3 to 0.8.4 - [Release notes](https://github.com/no42-org/blitsbom/releases) - [Commits](https://github.com/no42-org/blitsbom/compare/ff9f8516070e082f78bc98453217d6f43cc4a357...bcd6d108886dbc0457794a5c3a20551073ac064f) --- updated-dependencies: - dependency-name: no42-org/blitsbom dependency-version: 0.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a5ea28e..9823ec4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -165,7 +165,7 @@ jobs: # container at the version matching this SHA pin (report-0.6.1, read # from package.json at the pinned commit) — the release path never # picks up a floating image. - uses: no42-org/blitsbom@ff9f8516070e082f78bc98453217d6f43cc4a357 # v0.8.3 + uses: no42-org/blitsbom@bcd6d108886dbc0457794a5c3a20551073ac064f # v0.8.4 with: sbom: sbom/onmsctl.cdx.json output: sbom/onmsctl-sbom-report.html