Skip to content

chore(deps): Bump github.com/protobom/protobom from 0.6.0 to 0.6.1 in the gomod group across 1 directory - #120

Merged
miniprow[bot] merged 2 commits into
mainfrom
dependabot/go_modules/gomod-2fdd2141a2
Sep 8, 2026
Merged

miniprow[bot] merged 2 commits into
mainfrom
dependabot/go_modules/gomod-2fdd2141a2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 1 update in the / directory: github.com/protobom/protobom.

Updates github.com/protobom/protobom from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/protobom/protobom's releases.

v0.6.1

No release notes provided.

Commits
  • f14f382 Cut patch release
  • a885670 Merge pull request #469 from puerco/graph-update
  • e4e79ee Add upward traversal and edge manipulation to the graph API
  • 3c8d2d3 Test the database driver interfaces
  • 7045dc7 Deepen tests for node merging, set operations and diffing
  • ba41633 Test the core sbom identity and graph primitives
  • a679617 Merge pull request #468 from puerco/roundtrips
  • 49fdfc7 Close CDX gaps for licenses, authors and gitoids
  • ec5fade Add synthetic CycloneDX roundtrip conformance tests
  • 2258d03 Stop writing the document name over the CycloneDX root component
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 7, 2026
@miniprow

miniprow Bot commented Sep 7, 2026 •

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], puerco

The full list of commands accepted by this bot can be found here.

Details Approved by a repository administrator.

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Bumps the gomod group with 1 update in the / directory: [github.com/protobom/protobom](https://github.com/protobom/protobom).


Updates `github.com/protobom/protobom` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/protobom/protobom/releases)
- [Commits](protobom/protobom@v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: github.com/protobom/protobom
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): Bump github.com/protobom/protobom from 0.6.0 to 0.6.1 in the gomod group chore(deps): Bump github.com/protobom/protobom from 0.6.0 to 0.6.1 in the gomod group across 1 directory Sep 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-2fdd2141a2 branch from 3ef3403 to 6bf5326 Compare September 8, 2026 20:40
protobom v0.6.1 changes the CycloneDX reader in two ways that affect the
round-trip example: auto-generated node IDs are now derived from node
content rather than a sequential counter, and the reader now parses the
legacy tools array, document authors and component suppliers. The ent
backend already stores and retrieves these fields, so only the expected
output needed regenerating.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@carabiner.dev>
@miniprow miniprow Bot added lgtm Indicates that a PR is ready to be merged (Looks Good To Me) approved Indicates a PR has been approved by an approver from all required OWNERS files labels Sep 8, 2026
@miniprow
miniprow Bot merged commit c2af2fe into main Sep 8, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-2fdd2141a2 branch September 8, 2026 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files dependencies Pull requests that update a dependency file go Pull requests that update Go code lgtm Indicates that a PR is ready to be merged (Looks Good To Me)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant