chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.10.0 to 0.11.0#2594
Merged
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
This PR bumps github.com/CycloneDX/cyclonedx-go to v0.11.0 and updates SBOM unit test expectations to match the library’s new default CycloneDX BOM spec version (1.7), unblocking the larger dependabot group update PR.
Changes:
- Bump
github.com/CycloneDX/cyclonedx-gofromv0.10.0tov0.11.0. - Update
TestToCycloneDXexpectedXMLNS,JSONSchema, andSpecVersionfrom CycloneDX 1.6 to 1.7. - Refresh
go.sumchecksums for the updated dependency.
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| reporter/sbom/cyclonedx_test.go | Updates expected BOM spec/schema fields to CycloneDX 1.7 to align with cyclonedx-go v0.11 defaults. |
| go.mod | Bumps github.com/CycloneDX/cyclonedx-go requirement to v0.11.0. |
| go.sum | Updates sums for github.com/CycloneDX/cyclonedx-go v0.11.0. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
…11.0 cyclonedx-go v0.11.0 changes the default BOM spec version from 1.6 to 1.7, so update the expected values in TestToCycloneDX accordingly. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
shino
force-pushed
the
chore/bump-cyclonedx-go-0.11.0
branch
from
58faf11 to
2f4803f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What did you implement:
Bump
github.com/CycloneDX/cyclonedx-gofrom 0.10.0 to 0.11.0.cyclonedx-go v0.11.0 changes the default BOM spec version from 1.6 to 1.7, which broke
TestToCycloneDXin the dependabot group PR #2584. This PR bumps only cyclonedx-go and updates the test expectations (XMLNS / JSONSchema / SpecVersion) to 1.7, so that #2584 can go in cleanly after a rebase.Type of change
How Has This Been Tested?
go build ./...go test ./reporter/... ./contrib/trivy/... ./saas/...— all passChecklist:
🤖 Generated with Claude Code