Skip to content

Add isLatest property#55

Merged
nscuro merged 1 commit into
DependencyTrack:masterfrom
tolobis:master
Jun 17, 2026
Merged

Add isLatest property#55
nscuro merged 1 commit into
DependencyTrack:masterfrom
tolobis:master

Conversation

@tolobis

@tolobis tolobis commented Mar 20, 2026

Copy link
Copy Markdown

Add support for the isLatest value in the SBOM upload.

@owasp-dt-bot

owasp-dt-bot commented Mar 20, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Signed-off-by: Tobias Löwen <tloewen@schueco.com>
@nscuro nscuro added the enhancement New feature or request label Jun 17, 2026
@nscuro
nscuro merged commit a1502c5 into DependencyTrack:master Jun 17, 2026
2 checks passed
@nscuro nscuro linked an issue Jun 18, 2026 that may be closed by this pull request
phbaer pushed a commit to phbaer/ha-birthday-calendar that referenced this pull request Jul 11, 2026
… (#11)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://github.com/DependencyTrack/gh-upload-sbom](https://github.com/DependencyTrack/gh-upload-sbom) | action | major | `v3` → `v4` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>DependencyTrack/gh-upload-sbom (https://github.com/DependencyTrack/gh-upload-sbom)</summary>

### [`v4.1.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v4.1.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v4.1.0...v4.1.0)

<!-- Release notes generated using configuration in .github/release.yml at v4.1.0 -->

#### What's Changed

##### Enhancements 🚀

- Upload BOMs using POST (multipart) by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;65](DependencyTrack/gh-upload-sbom#65)

##### Dependency Updates 🤖

- Bump actions/checkout from 6.0.3 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;64](DependencyTrack/gh-upload-sbom#64)

**Full Changelog**: <DependencyTrack/gh-upload-sbom@v4.0...v4.1.0>

### [`v4.1`](DependencyTrack/gh-upload-sbom@v4...v4.1.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v4...v4.1.0)

### [`v4.0.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v4.0.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v4...v4)

<!-- Release notes generated using configuration in .github/release.yml at v4.0.0 -->

#### What's Changed

##### Breaking Changes 🚨

- chore: update action runtime to Node.js 24 by [@&#8203;diseku](https://github.com/diseku) in [#&#8203;56](DependencyTrack/gh-upload-sbom#56)

##### Enhancements 🚀

- Add isLatest property by [@&#8203;tolobis](https://github.com/tolobis) in [#&#8203;55](DependencyTrack/gh-upload-sbom#55)
- Add proper CI automation and update distribution model by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;57](DependencyTrack/gh-upload-sbom#57)
- Add token output by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;60](DependencyTrack/gh-upload-sbom#60)
- Defensively mark api key as secret by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;62](DependencyTrack/gh-upload-sbom#62)
- Add support for project UUID output (requires DT v5) by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;63](DependencyTrack/gh-upload-sbom#63)

##### Bug Fixes 🐛

- docs: Corrected the variables and code snippets by [@&#8203;sellisd](https://github.com/sellisd) in [#&#8203;50](DependencyTrack/gh-upload-sbom#50)

##### Dependency Updates 🤖

- Bump esbuild from 0.25.12 to 0.28.0 in the npm-minor-patch group by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;58](DependencyTrack/gh-upload-sbom#58)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;59](DependencyTrack/gh-upload-sbom#59)
- Bump esbuild from 0.28.0 to 0.28.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;61](DependencyTrack/gh-upload-sbom#61)

#### New Contributors

- [@&#8203;diseku](https://github.com/diseku) made their first contribution in [#&#8203;56](DependencyTrack/gh-upload-sbom#56)
- [@&#8203;tolobis](https://github.com/tolobis) made their first contribution in [#&#8203;55](DependencyTrack/gh-upload-sbom#55)
- [@&#8203;sellisd](https://github.com/sellisd) made their first contribution in [#&#8203;50](DependencyTrack/gh-upload-sbom#50)

**Full Changelog**: <DependencyTrack/gh-upload-sbom@v3...v4.0.0>

### [`v4.0`](DependencyTrack/gh-upload-sbom@v4...v4)

[Compare Source](DependencyTrack/gh-upload-sbom@v4...v4)

### [`v4`](DependencyTrack/gh-upload-sbom@v3.1.0...v4)

[Compare Source](DependencyTrack/gh-upload-sbom@v3.1.0...v4)

### [`v3.1.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v3.1.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v3...v3.1.0)

<!-- Release notes generated using configuration in .github/release.yml at v3.1.0 -->

#### What's Changed

##### Enhancements 🚀

- Use fetch instead of http by [@&#8203;entigo-mart-erlenheim](https://github.com/entigo-mart-erlenheim) in [#&#8203;35](DependencyTrack/gh-upload-sbom#35)

##### Other Changes

- patch: change example version to 3 in README.md by [@&#8203;aethernet](https://github.com/aethernet) in [#&#8203;32](DependencyTrack/gh-upload-sbom#32)
- feat: include tags when creating by [@&#8203;JCHacking](https://github.com/JCHacking) in [#&#8203;33](DependencyTrack/gh-upload-sbom#33)
- Add release notes config by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;37](DependencyTrack/gh-upload-sbom#37)
- Improve parameter descriptions by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;36](DependencyTrack/gh-upload-sbom#36)
- Unify action versions in examples by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;38](DependencyTrack/gh-upload-sbom#38)

#### New Contributors

- [@&#8203;aethernet](https://github.com/aethernet) made their first contribution in [#&#8203;32](DependencyTrack/gh-upload-sbom#32)
- [@&#8203;JCHacking](https://github.com/JCHacking) made their first contribution in [#&#8203;33](DependencyTrack/gh-upload-sbom#33)
- [@&#8203;entigo-mart-erlenheim](https://github.com/entigo-mart-erlenheim) made their first contribution in [#&#8203;35](DependencyTrack/gh-upload-sbom#35)
- [@&#8203;nscuro](https://github.com/nscuro) made their first contribution in [#&#8203;37](DependencyTrack/gh-upload-sbom#37)

**Full Changelog**: <DependencyTrack/gh-upload-sbom@v3.0.0...v3.1.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: https://git.baer.one/phbaer/ha-birthday-calendar/pulls/11
phbaer pushed a commit to phbaer/ha-birthday-calendar that referenced this pull request Jul 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [DependencyTrack/gh-upload-sbom](https://github.com/DependencyTrack/gh-upload-sbom) | action | major | `v3` → `v4` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>DependencyTrack/gh-upload-sbom (DependencyTrack/gh-upload-sbom)</summary>

### [`v4.1.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v4.1.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v4.1.0...v4.1.0)

<!-- Release notes generated using configuration in .github/release.yml at v4.1.0 -->

#### What's Changed

##### Enhancements 🚀

- Upload BOMs using POST (multipart) by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;65](DependencyTrack/gh-upload-sbom#65)

##### Dependency Updates 🤖

- Bump actions/checkout from 6.0.3 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;64](DependencyTrack/gh-upload-sbom#64)

**Full Changelog**: <DependencyTrack/gh-upload-sbom@v4.0...v4.1.0>

### [`v4.1`](DependencyTrack/gh-upload-sbom@v4...v4.1.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v4...v4.1.0)

### [`v4.0.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v4.0.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v4...v4)

<!-- Release notes generated using configuration in .github/release.yml at v4.0.0 -->

#### What's Changed

##### Breaking Changes 🚨

- chore: update action runtime to Node.js 24 by [@&#8203;diseku](https://github.com/diseku) in [#&#8203;56](DependencyTrack/gh-upload-sbom#56)

##### Enhancements 🚀

- Add isLatest property by [@&#8203;tolobis](https://github.com/tolobis) in [#&#8203;55](DependencyTrack/gh-upload-sbom#55)
- Add proper CI automation and update distribution model by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;57](DependencyTrack/gh-upload-sbom#57)
- Add token output by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;60](DependencyTrack/gh-upload-sbom#60)
- Defensively mark api key as secret by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;62](DependencyTrack/gh-upload-sbom#62)
- Add support for project UUID output (requires DT v5) by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;63](DependencyTrack/gh-upload-sbom#63)

##### Bug Fixes 🐛

- docs: Corrected the variables and code snippets by [@&#8203;sellisd](https://github.com/sellisd) in [#&#8203;50](DependencyTrack/gh-upload-sbom#50)

##### Dependency Updates 🤖

- Bump esbuild from 0.25.12 to 0.28.0 in the npm-minor-patch group by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;58](DependencyTrack/gh-upload-sbom#58)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;59](DependencyTrack/gh-upload-sbom#59)
- Bump esbuild from 0.28.0 to 0.28.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;61](DependencyTrack/gh-upload-sbom#61)

#### New Contributors

- [@&#8203;diseku](https://github.com/diseku) made their first contribution in [#&#8203;56](DependencyTrack/gh-upload-sbom#56)
- [@&#8203;tolobis](https://github.com/tolobis) made their first contribution in [#&#8203;55](DependencyTrack/gh-upload-sbom#55)
- [@&#8203;sellisd](https://github.com/sellisd) made their first contribution in [#&#8203;50](DependencyTrack/gh-upload-sbom#50)

**Full Changelog**: <DependencyTrack/gh-upload-sbom@v3...v4.0.0>

### [`v4.0`](DependencyTrack/gh-upload-sbom@v4...v4)

[Compare Source](DependencyTrack/gh-upload-sbom@v4...v4)

### [`v4`](DependencyTrack/gh-upload-sbom@v3.1.0...v4)

[Compare Source](DependencyTrack/gh-upload-sbom@v3.1.0...v4)

### [`v3.1.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v3.1.0)

[Compare Source](DependencyTrack/gh-upload-sbom@v3...v3.1.0)

<!-- Release notes generated using configuration in .github/release.yml at v3.1.0 -->

#### What's Changed

##### Enhancements 🚀

- Use fetch instead of http by [@&#8203;entigo-mart-erlenheim](https://github.com/entigo-mart-erlenheim) in [#&#8203;35](DependencyTrack/gh-upload-sbom#35)

##### Other Changes

- patch: change example version to 3 in README.md by [@&#8203;aethernet](https://github.com/aethernet) in [#&#8203;32](DependencyTrack/gh-upload-sbom#32)
- feat: include tags when creating by [@&#8203;JCHacking](https://github.com/JCHacking) in [#&#8203;33](DependencyTrack/gh-upload-sbom#33)
- Add release notes config by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;37](DependencyTrack/gh-upload-sbom#37)
- Improve parameter descriptions by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;36](DependencyTrack/gh-upload-sbom#36)
- Unify action versions in examples by [@&#8203;nscuro](https://github.com/nscuro) in [#&#8203;38](DependencyTrack/gh-upload-sbom#38)

#### New Contributors

- [@&#8203;aethernet](https://github.com/aethernet) made their first contribution in [#&#8203;32](DependencyTrack/gh-upload-sbom#32)
- [@&#8203;JCHacking](https://github.com/JCHacking) made their first contribution in [#&#8203;33](DependencyTrack/gh-upload-sbom#33)
- [@&#8203;entigo-mart-erlenheim](https://github.com/entigo-mart-erlenheim) made their first contribution in [#&#8203;35](DependencyTrack/gh-upload-sbom#35)
- [@&#8203;nscuro](https://github.com/nscuro) made their first contribution in [#&#8203;37](DependencyTrack/gh-upload-sbom#37)

**Full Changelog**: <DependencyTrack/gh-upload-sbom@v3.0.0...v3.1.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: Philipp A. Baer <git@ph.baer.one>
Reviewed-on: https://git.baer.one/phbaer/ha-birthday-calendar/pulls/10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Allow setting "is Latest version" flag

3 participants