From 2151acfce789126975e5fa57d7a625c684c6adca Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Mon, 15 Jul 2024 20:29:52 +0200 Subject: [PATCH] Update anchore/sbom-action action to v0.17.0 (#5748) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anchore/sbom-action](https://togithub.com/anchore/sbom-action) | action | minor | `v0.16.1` -> `v0.17.0` | --- ### Release Notes
anchore/sbom-action (anchore/sbom-action) ### [`v0.17.0`](https://togithub.com/anchore/sbom-action/releases/tag/v0.17.0) [Compare Source](https://togithub.com/anchore/sbom-action/compare/v0.16.1...v0.17.0) #### Changes in v0.17.0 - chore(deps): update Syft to v1.9.0 ([#​479](https://togithub.com/anchore/sbom-action/issues/479)) \[[anchore-actions-token-generator](https://togithub.com/anchore-actions-token-generator)] - chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 ([#​474](https://togithub.com/anchore/sbom-action/issues/474)) \[[dependabot](https://togithub.com/dependabot)] - chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 ([#​475](https://togithub.com/anchore/sbom-action/issues/475)) \[[dependabot](https://togithub.com/dependabot)] - chore: serialize tests to prevent install race ([#​478](https://togithub.com/anchore/sbom-action/issues/478)) \[[willmurphyscode](https://togithub.com/willmurphyscode)]
--- ### Configuration 📅 **Schedule**: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/jaegertracing/jaeger). Signed-off-by: Mend Renovate Co-authored-by: Yuri Shkuro --- .github/workflows/ci-release-testing.yml | 2 +- .github/workflows/ci-release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-release-testing.yml b/.github/workflows/ci-release-testing.yml index 9d2295f2971..bb586982118 100644 --- a/.github/workflows/ci-release-testing.yml +++ b/.github/workflows/ci-release-testing.yml @@ -88,7 +88,7 @@ jobs: QUAY_TOKEN: ${{ secrets.QUAY_TOKEN }} - name: Generate SBOM - uses: anchore/sbom-action@95b086ac308035dc0850b3853be5b7ab108236a8 # v0.16.1 + uses: anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0.17.0 with: output-file: jaeger-SBOM.spdx.json upload-release-assets: false diff --git a/.github/workflows/ci-release.yml b/.github/workflows/ci-release.yml index 580c6bc6606..448637c6146 100644 --- a/.github/workflows/ci-release.yml +++ b/.github/workflows/ci-release.yml @@ -112,7 +112,7 @@ jobs: QUAY_TOKEN: ${{ secrets.QUAY_TOKEN }} - name: Generate SBOM - uses: anchore/sbom-action@95b086ac308035dc0850b3853be5b7ab108236a8 # v0.16.1 + uses: anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0.17.0 with: output-file: jaeger-SBOM.spdx.json upload-release-assets: false