10 Pull requests merged by 3 people

• build(deps): bump Microsoft.Testing.Extensions.TrxReport from 1.5.3 to 1.6.2

  #937 merged Mar 5, 2025

• build(deps): bump Microsoft.NETFramework.ReferenceAssemblies, NuGet.Configuration and NuGet.Frameworks

  #960 merged Mar 5, 2025

• API BREAKING CHANGE: Remove back-compat interface shims

  #952 merged Mar 3, 2025

• Reenable CodeQL for SDL compliance

  #951 merged Mar 1, 2025

• Normalize "SBOM" to "Sbom" through most of the code base

  #950 merged Mar 1, 2025

• API changes to support SPDX 3.0

  #924 merged Feb 27, 2025

• Clean apt cache in Dockerfile to reduce image size

  #939 merged Feb 22, 2025

• build(deps): bump github/codeql-action from 3.28.8 to 3.28.10

  #945 merged Feb 21, 2025

• Bump System.Text.Json from 9.0.0 to 9.0.2

  #940 merged Feb 21, 2025

• build(deps): bump System.Threading.Channels

  #929 merged Feb 20, 2025

9 Pull requests opened by 5 people

• build(deps): bump Microsoft.Build.Framework from 17.11.4 to 17.13.9

  #926 opened Feb 12, 2025

• Use MSBuild Logging APIs for Task output instead of StdOut

  #933 opened Feb 16, 2025

• Fix NugetPackagesPath

  #936 opened Feb 18, 2025

• build(deps): bump Microsoft.Extensions.Http and Microsoft.NETFramework.ReferenceAssemblies

  #942 opened Feb 21, 2025

• build(deps): bump Microsoft.Extensions.Hosting and Microsoft.NETFramework.ReferenceAssemblies

  #943 opened Feb 21, 2025

• Check for invalid manifestInfo's during the redaction workflow

  #953 opened Feb 28, 2025

• Fix problems running E2E tests locally

  #957 opened Mar 4, 2025

• Generate singular SBOM based on manifestInfo parameter

  #959 opened Mar 5, 2025

• Validate manifest info with attributes

  #961 opened Mar 6, 2025

3 Issues closed by 2 people

• Relationship graph is not generated for npm projects when node_modules presents

  #934 closed Feb 20, 2025

• Timeout when fetching license information

  #584 closed Feb 18, 2025

• Revert #758 when we pick up component-detection 5.1.6 or newer

  #782 closed Feb 11, 2025

8 Issues opened by 5 people

• SBOM generation for SPDX 3.0 is missing files

  #962 opened Mar 7, 2025

• SBOM Generation is running both 2.2 and 3.0 generators

  #958 opened Mar 4, 2025

• Package SBOMs are included in SBOM files section

  #956 opened Mar 3, 2025

• SBOM API project is tightly coupled with parsers, breaking encapsulation

  #949 opened Feb 26, 2025

• We need a way to run CodeQL during CI builds

  #948 opened Feb 25, 2025

• Generating SBOM with NuGet (`Microsoft.Sbom.Targets`) on MacoSX results in intermittent hangs

  #946 opened Feb 23, 2025

• License information may not be fully recorded

  #944 opened Feb 21, 2025

• Problems running unit tests locally

  #930 opened Feb 12, 2025

5 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• The Maven dependencies graph is different from other package managers

  #827 commented on Feb 14, 2025 • 0 new comments

• Use `ILogger<T>` from `Microsoft.Extensions.Logging` instead of `ILogger` from Serilog

  #284 commented on Feb 21, 2025 • 0 new comments

• [Microsoft.Sbom.Targets] Generates the wrong .nupkg file name and cannot find it.

  #920 commented on Feb 28, 2025 • 0 new comments

• build(deps): bump System.Text.Json and System.Threading.Tasks.Extensions

  #873 commented on Feb 20, 2025 • 0 new comments

• build(deps): bump Microsoft.Extensions.DependencyInjection.Abstractions from 8.0.2 to 9.0.1

  #893 commented on Feb 27, 2025 • 0 new comments