Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(deps): update osv-scanner minor (#1017)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [github.com/CycloneDX/cyclonedx-go](https://togithub.com/CycloneDX/cyclonedx-go) | `v0.8.0` -> `v0.9.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/charmbracelet/bubbletea](https://togithub.com/charmbracelet/bubbletea) | `v0.26.3` -> `v0.26.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | golang.org/x/exp | `4c93da0` -> `fc45aab` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | golang.org/x/mod | `v0.17.0` -> `v0.18.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/term | `v0.20.0` -> `v0.21.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | --- ### Release Notes <details> <summary>CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)</summary> ### [`v0.9.0`](https://togithub.com/CycloneDX/cyclonedx-go/releases/tag/v0.9.0) [Compare Source](https://togithub.com/CycloneDX/cyclonedx-go/compare/v0.8.0...v0.9.0) #### Changelog ##### Features - [`729c284`](https://togithub.com/CycloneDX/cyclonedx-go/commit/729c284798ebe341ced210b661362f77d68cd655): feat: Add CycloneDX 1.6 fields swhid and omniborId ([@​snyk-tim](https://togithub.com/snyk-tim)) - [`b5d3595`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b5d35959767efce95f50e96bf752c47fbe374496): feat: add manufacturer and authors ([@​snyk-tim](https://togithub.com/snyk-tim)) - [`c52e698`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc): feat: raise baseline go version to 1.20 ([@​nscuro](https://togithub.com/nscuro)) ##### Fixes - [`9166e10`](https://togithub.com/CycloneDX/cyclonedx-go/commit/9166e10fdecaadd8a97ceed9636261d351d90a65): fix: `ioutil` -> `io` ([@​nscuro](https://togithub.com/nscuro)) - [`349fc8c`](https://togithub.com/CycloneDX/cyclonedx-go/commit/349fc8cd072e90d81c0328f1d9dab16aa30fcf60): fix: add bom-ref to OrganizationalEntity/Contact ([@​snyk-tim](https://togithub.com/snyk-tim)) - [`c97da90`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c97da90e259e0051e02e07300c75ad5e37a0311b): fix: handle breaking changes in skywalking-eyes ([@​nscuro](https://togithub.com/nscuro)) ##### Building and Packaging - [`ec6291e`](https://togithub.com/CycloneDX/cyclonedx-go/commit/ec6291e9ce9efbbb5d0010de4d8668fcbd05d148): build(deps): bump actions/checkout from 4.1.1 to 4.1.5 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`899fe39`](https://togithub.com/CycloneDX/cyclonedx-go/commit/899fe391ca4d756f1d5ba84478d3bc8795003cba): build(deps): bump actions/checkout from 4.1.5 to 4.1.6 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`8674ed5`](https://togithub.com/CycloneDX/cyclonedx-go/commit/8674ed5ecc38b65e03908b5a74308c95039068a9): build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`db3a114`](https://togithub.com/CycloneDX/cyclonedx-go/commit/db3a1144a2ce30b85e5985d2755fa3e4a81c5ca8): build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`a3bd055`](https://togithub.com/CycloneDX/cyclonedx-go/commit/a3bd05518575f14d917685a02c689f81eedaad5c): build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`1179dd9`](https://togithub.com/CycloneDX/cyclonedx-go/commit/1179dd9051112c3b44a6cc577964c7d501a7258b): build(deps): bump gitpod/workspace-go from `8b9a0f6` to `8d15123` ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`d98494e`](https://togithub.com/CycloneDX/cyclonedx-go/commit/d98494ea11dbb6550705d46d2473aa2a4a18e642): build(deps): bump gitpod/workspace-go from `9118b93` to `8b9a0f6` ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`1e2a3a0`](https://togithub.com/CycloneDX/cyclonedx-go/commit/1e2a3a09e86d720729a3ab7ec55ed3ffa75164a5): build(deps): bump gitpod/workspace-go from `94ae638` to `9118b93` ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`d4d6e35`](https://togithub.com/CycloneDX/cyclonedx-go/commit/d4d6e35fcfb08d14589b4a693aac3f28978b640b): build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`521d1ce`](https://togithub.com/CycloneDX/cyclonedx-go/commit/521d1ce7b555013f2b78d8c4a21954815863ab44): build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 ([@​dependabot](https://togithub.com/dependabot)\[bot]) - [`f1ebafe`](https://togithub.com/CycloneDX/cyclonedx-go/commit/f1ebafe5e2d2af3a3d551eb23c583a93b7ebccbf): build(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 ([@​dependabot](https://togithub.com/dependabot)\[bot]) ##### Others - [`16d2143`](https://togithub.com/CycloneDX/cyclonedx-go/commit/16d2143b3d74b77af8a309b331e1bc46a445f495): Fix(1.6): Added missing omitempty in NistQuantumSecurityLevel ([@​Petzys](https://togithub.com/Petzys)) - [`ffec473`](https://togithub.com/CycloneDX/cyclonedx-go/commit/ffec473428073e1266169e97c1c64de95e89981b): chore: add license header ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`1f8fdcc`](https://togithub.com/CycloneDX/cyclonedx-go/commit/1f8fdcc0047611a8baacfcd214c5ba3821fefd51): feat(1.6): add BOM.Declarations ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`62b5342`](https://togithub.com/CycloneDX/cyclonedx-go/commit/62b53429289d6cc6884b111256588150e3fed308): feat(1.6): add BOM.Definitions ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`c33b9cb`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c33b9cb58eaa14e89740182fbde2a0cc888bc457): feat(1.6): add CBOM types ([@​Petzys](https://togithub.com/Petzys)) - [`10e10c8`](https://togithub.com/CycloneDX/cyclonedx-go/commit/10e10c8bc8fcac6f90c914828786f11e404919b8): feat(1.6): add JSON schema, XML namespace ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`2dc599a`](https://togithub.com/CycloneDX/cyclonedx-go/commit/2dc599a8ad0f2be20e9bfc55ba75764758e6c7b8): feat(1.6): add License.Acknowledgement ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`7a32fde`](https://togithub.com/CycloneDX/cyclonedx-go/commit/7a32fde7e9e9e5fb44f8f8aafadd83a21ff82aaf): feat(1.6): add PostalAddress type ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`b8e4529`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b8e4529773c3d12b172729567574ea6201231682): feat(1.6): add SpecVersion for v1.6 ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`c877828`](https://togithub.com/CycloneDX/cyclonedx-go/commit/c8778287f29dd21bff18a4f27f71f495de7b4991): feat(1.6): add environmentalConsiderations ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`e0e9c67`](https://togithub.com/CycloneDX/cyclonedx-go/commit/e0e9c670e1617adbdd147cff7cc0747769a4e723): feat(1.6): add schema definitions for CycloneDX 1.6 ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`b1636c2`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b1636c2d6bb8aca4161402958a8d894aab7d66b5): feat(1.6): extend EvidenceOccurrence ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`b4b3b94`](https://togithub.com/CycloneDX/cyclonedx-go/commit/b4b3b94a60b1665c1d0492744032a9375ef751b1): fix(1.6): convert occurrences of OrganizationalEntity ([@​mcombuechen](https://togithub.com/mcombuechen)) - [`9332ca6`](https://togithub.com/CycloneDX/cyclonedx-go/commit/9332ca660b772bc538b3c274ceb3d9f81caa0eb8): fix(1.6): fix json, xml labels on BOM.Definitions ([@​mcombuechen](https://togithub.com/mcombuechen)) </details> <details> <summary>charmbracelet/bubbletea (github.com/charmbracelet/bubbletea)</summary> ### [`v0.26.4`](https://togithub.com/charmbracelet/bubbletea/releases/tag/v0.26.4) [Compare Source](https://togithub.com/charmbracelet/bubbletea/compare/v0.26.3...v0.26.4) Fix panics! Using `program.SetWindowTitle` and others *may* panic if they were called before the program starts. Also note that `program.SetWindowTitle` is now deprecated. To set the window title use [`tea.SetWindowTitle`](https://pkg.go.dev/github.com/charmbracelet/bubbletea@v0.26.4#SetWindowTitle) command. #### What's Changed - chore(deps): bump github.com/charmbracelet/x/ansi from 0.1.1 to 0.1.2 by [@​dependabot](https://togithub.com/dependabot) in [charmbracelet/bubbletea#1026 - chore(deps): bump github.com/charmbracelet/lipgloss from 0.10.0 to 0.11.0 in /examples by [@​dependabot](https://togithub.com/dependabot) in [charmbracelet/bubbletea#1025 - fix: program renderer commands by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [charmbracelet/bubbletea#1030 **Full Changelog**: charmbracelet/bubbletea@v0.26.3...v0.26.4 *** <a href="https://charm.sh/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-badge.jpg" width="400"></a> Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.social/@​charmcli), or [Discord](https://charm.sh/chat). </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/google/osv-scanner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNzcuOCIsInVwZGF0ZWRJblZlciI6IjM3LjM4OC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
](https://renovatebot.com){kind=link}
- Loading branch information
1 parent
69e9088
commit 8c75812