Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 30, 2025

Updated Microsoft.Sbom.Targets from 4.1.2 to 4.1.4.

Release notes

Sourced from Microsoft.Sbom.Targets's releases.

4.1.4

⚙️ Changes

  • Fix release pipeline internal feed release by @​sfoslund (#​1325)
  • Fix release pipeline internal feed logic by @​sfoslund (#​1324)
  • Major version bump for Component Detection by @​jlperkins (#​1323)
  • Fix validation errors for SBOM tool release by @​pragnya17 (#​1282)
  • Bump Microsoft.Build, Microsoft.Build.Framework, and Microsoft.Build.Utilities.Core by @dependabot[bot] (#​1276)
  • Revert "Update pipeline to use shared service connection" by @​pragnya17 (#​1275)
  • Bump System.Threading.Channels from 9.0.8 to 9.0.10 by @dependabot[bot] (#​1273)
  • Update pipeline to use shared service connection by @​pragnya17 (#​1262)

4.1.3

⚙️ Changes

  • Fix validation errors for SBOM tool release by @​pragnya17 (#​1282)
  • Bump Microsoft.Build, Microsoft.Build.Framework, and Microsoft.Build.Utilities.Core by @dependabot[bot] (#​1276)
  • Revert "Update pipeline to use shared service connection" by @​pragnya17 (#​1275)
  • Bump System.Threading.Channels from 9.0.8 to 9.0.10 by @dependabot[bot] (#​1273)
  • Update pipeline to use shared service connection by @​pragnya17 (#​1262)
  • Bump Microsoft.ComponentDetection.Contracts from 5.2.19 to 5.2.27 by @dependabot[bot] (#​1204)
  • Update readme to reflect new contribution policy by @​alisonlomaka (#​1235)
  • Bump NuGet.Configuration from 6.13.2 to 6.14.0 by @dependabot[bot] (#​1178)
  • Bump NuGet.Frameworks from 6.13.2 to 6.14.0 by @dependabot[bot] (#​1179)
  • Bump System.Linq.Async from 6.0.1 to 6.0.3 by @dependabot[bot] (#​1184)
  • Bump Scrutor from 6.0.1 to 6.1.0 by @dependabot[bot] (#​1181)
  • Bump Newtonsoft.Json from 13.0.3 to 13.0.4 by @dependabot[bot] (#​1226)
  • Bump actions/setup-dotnet from 4.3.1 to 5.0.0 by @dependabot[bot] (#​1202)
  • Bump System.Text.Json from 9.0.2 to 9.0.9 by @dependabot[bot] (#​1218)
  • Bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] (#​1207)
  • Bump github/codeql-action from 3.29.11 to 3.30.3 by @dependabot[bot] (#​1219)
  • Convert SBOM tool release pipeline from classic to governed by @​pragnya17 (#​1212)
  • Bump Microsoft.VisualStudio.Threading.Analyzers from 17.12.19 to 17.14.15 by @dependabot[bot] (#​1176)
  • Bump System.Threading.Channels from 9.0.2 to 9.0.8 by @dependabot[bot] (#​1186)
  • Bump System.Threading.Tasks.Extensions from 4.6.1 to 4.6.3 by @dependabot[bot] (#​1187)
  • Bump github/codeql-action from 3.29.3 to 3.29.11 by @dependabot[bot] (#​1164)
  • Bump actions/checkout from 4 to 5 by @dependabot[bot] (#​1156)

Commits viewable in compare view.

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Microsoft.Sbom.Targets
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Nov 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant