Skip to content

ci: GitHub Actions: bump DependencyTrack/gh-upload-sbom from 4.1.0 to 4.3.0 - #1171

Merged
csm-thu merged 1 commit into
mainfrom
dependabot/github_actions/DependencyTrack/gh-upload-sbom-4.3.0
Oct 16, 2026
Merged

csm-thu merged 1 commit into
mainfrom
dependabot/github_actions/DependencyTrack/gh-upload-sbom-4.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps DependencyTrack/gh-upload-sbom from 4.1.0 to 4.3.0.

Release notes

Sourced from DependencyTrack/gh-upload-sbom's releases.

v4.3.0

What's Changed

Enhancements 🚀

Dependency Updates 🤖

Other Changes

Full Changelog: DependencyTrack/gh-upload-sbom@v4.2.0...v4.3.0

v4.2.0

[!WARNING] All inputs and outputs were renamed to kebab-case (e.g. project-name instead of projectname). The old names still work, but are deprecated and will be removed in the next major release. Using them causes a deprecation warning. See Deprecations.

What's Changed

Enhancements 🚀

Dependency Updates 🤖

Full Changelog: DependencyTrack/gh-upload-sbom@v4.1.0...v4.2.0

Commits
  • 331f980 release: 4.3.0
  • 3729900 Merge pull request #77 from DependencyTrack/ignore-npm-scripts
  • b7b6bf3 Ignore NPM install scripts project-wide
  • 504f46b Merge pull request #76 from DependencyTrack/dependabot/npm_and_yarn/undici-6....
  • 86eaf06 Build dist/index.js
  • 8dec56c Bump undici from 6.28.0 to 6.29.0
  • a0b794d Merge pull request #75 from DependencyTrack/wif
  • f6c45b1 Add workload identity federation support
  • d6dd53e Merge pull request #74 from DependencyTrack/dependabot/github_actions/github-...
  • 5dff331 Bump zizmorcore/zizmor-action in the github-actions group
  • Additional commits viewable in compare view

@csm-thu

csm-thu commented Oct 16, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [DependencyTrack/gh-upload-sbom](https://github.com/dependencytrack/gh-upload-sbom) from 4.1.0 to 4.3.0.
- [Release notes](https://github.com/dependencytrack/gh-upload-sbom/releases)
- [Commits](DependencyTrack/gh-upload-sbom@95c2b5a...331f980)

---
updated-dependencies:
- dependency-name: DependencyTrack/gh-upload-sbom
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/DependencyTrack/gh-upload-sbom-4.3.0 branch from 41dfecf to 5e8b6cf Compare October 16, 2026 13:27
@csm-thu
csm-thu merged commit 5e8b6cf into main Oct 16, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/DependencyTrack/gh-upload-sbom-4.3.0 branch October 16, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant