Skip to content

chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0#235

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/CycloneDX/cyclonedx-go-0.10.0
Closed

chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0#235
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/CycloneDX/cyclonedx-go-0.10.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026

Bumps github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0.

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.10.0

Changelog

Fixes

  • f724c55d9c13a6e79980cd4cc6a39f2696bc6c97: fix: add missing fields for v1.6 spec (#249) (@​alistair-mclean)
  • 48a212c7c5cd015cac8df92de3696e3d7e3531ef: fix: migrate golangci-lint config and address issues (@​nscuro)
  • 75662981bebea02c122b44d31fa65f134d6abd28: fix: unset component tags for spec version less than 1.6 (#253) (@​alistair-mclean)

Building and Packaging

  • ff55798700d8298a41813be8bf2dfbacd3179ea1: build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (@​dependabot[bot])
  • 3781c74cf069aac093ca69feb0ede6b97eccc1ae: build(deps): bump actions/checkout from 5.0.0 to 6.0.2 (@​dependabot[bot])
  • 4a3ab35be2ded2e654818a3f9ea45a8cd19788e2: build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (@​dependabot[bot])
  • 49ee4a34713d50c1ec26b08e515eeca4b6226bd2: build(deps): bump actions/setup-go from 6.0.0 to 6.2.0 (@​dependabot[bot])
  • 521976f2f97e4690d75b0042374ed44dcf01e373: build(deps): bump apache/skywalking-eyes from 0.7.0 to 0.8.0 (@​dependabot[bot])
  • 11497919754dd4238eb10f357ed68800c617a233: build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (@​dependabot[bot])
  • 9fa7dc11aaf321c06eef3f86dc5ae2be694be33c: build(deps): bump gitpod/workspace-go from 8985eb7 to 08a7c68 (@​dependabot[bot])
  • af64af3762779ec64a6e77904524480ec4a60a44: build(deps): bump golangci/golangci-lint-action from 6.2.0 to 9.2.0 (@​dependabot[bot])
  • 8c642b2c7902e6473e9994656cdf078e24bd75f5: build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (@​dependabot[bot])

Others

  • 082681c2438c89ed961c4ad0a89d80b798d8e7f2: chore: bump minimum go version to 1.23 (@​nscuro)
Commits
  • 2270566 Merge pull request #254 from CycloneDX/bump-go-versions
  • 082681c chore: bump minimum go version to 1.23
  • 291671e Merge pull request #252 from CycloneDX/dependabot/github_actions/golangci/gol...
  • 48a212c fix: migrate golangci-lint config and address issues
  • f724c55 fix: add missing fields for v1.6 spec (#249)
  • 7566298 fix: unset component tags for spec version less than 1.6 (#253)
  • bc030ba Merge pull request #235 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
  • b198226 Merge pull request #251 from CycloneDX/dependabot/github_actions/actions/setu...
  • e11807d Merge pull request #250 from CycloneDX/dependabot/github_actions/actions/chec...
  • af64af3 build(deps): bump golangci/golangci-lint-action from 6.2.0 to 9.2.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 9, 2026 11:59
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 9, 2026
codacybeta
codacybeta previously approved these changes Feb 9, 2026
@codacybeta codacybeta enabled auto-merge (squash) February 9, 2026 12:00
@codacy-production
Copy link

codacy-production bot commented Feb 9, 2026

Codacy's Analysis Summary

0 new issue (≤ 1 medium issue)
0 new security issue (≤ 0 issue)
0 complexity
0 duplications

Review Pull Request in Codacy →

AI Reviewer available: add the codacy-review label to get contextual insights without leaving GitHub.

Bumps [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) from 0.9.3 to 0.10.0.
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Commits](CycloneDX/cyclonedx-go@v0.9.3...v0.10.0)

---
updated-dependencies:
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/CycloneDX/cyclonedx-go-0.10.0 branch from 703b67c to 4cc60e7 Compare February 10, 2026 14:09
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 10, 2026

Looks like github.com/CycloneDX/cyclonedx-go is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Feb 10, 2026
auto-merge was automatically disabled February 10, 2026 14:23

Pull request was closed

@dependabot dependabot bot deleted the dependabot/go_modules/github.com/CycloneDX/cyclonedx-go-0.10.0 branch February 10, 2026 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant