build(deps): bump anchore/sbom-action from 0.24.0 to 0.24.2 #26

2026-09-25T00:41:17+09:00

dependabot[bot] commented

2026-09-25 00:41:17 +09:00

(Migrated from github.com)

Bumps anchore/sbom-action from 0.24.0 to 0.24.2.

Release notes

Sourced from anchore/sbom-action's releases.

v0.24.2

Added Features

bump eslint from 10.8.1 to 10.9.0 [#724 @dependabot]

Additional Changes

add makefile target to bump syft [#620 @willmurphyscode]

update zizmor workflow triggers [#624 @wagoodman]

require zizmor security events [#621 @wagoodman]

(Full Changelog)

Commits

3ad7283 ops: update write permissions for release (#723)
31f5287 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#724)
aa80c8c chore(deps): update Syft to latest release (#722)
74b54e9 chore(deps): bump lodash from 4.17.23 to 4.18.1 (#623)
6b92ff5 chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (#721)
4f8983b chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 (#719)
10f27f4 chore(deps-dev): bump eslint from 10.5.0 to 10.8.1 (#720)
249403a chore(deps-dev): bump @types/node from 26.1.0 to 26.2.0 (#718)
cbf8daa chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (#693)
6afc793 fix: pin syft install.sh to the release tag being installed (#716)
Additional commits viewable in compare view

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.24.0 to 0.24.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's releases</a>.</em></p> <blockquote> <h2>v0.24.2</h2> <h3>Added Features</h3> <ul> <li>bump eslint from 10.8.1 to 10.9.0 [<a href="https://redirect.github.com/anchore/sbom-action/pull/724">#724</a> <a href="https://github.com/dependabot"><code>@dependabot</code></a>]</li> </ul> <h3>Additional Changes</h3> <ul> <li>add makefile target to bump syft [<a href="https://redirect.github.com/anchore/sbom-action/pull/620">#620</a> <a href="https://github.com/willmurphyscode"><code>@willmurphyscode</code></a>]</li> <li>update zizmor workflow triggers [<a href="https://redirect.github.com/anchore/sbom-action/pull/624">#624</a> <a href="https://github.com/wagoodman"><code>@wagoodman</code></a>]</li> <li>require zizmor security events [<a href="https://redirect.github.com/anchore/sbom-action/pull/621">#621</a> <a href="https://github.com/wagoodman"><code>@wagoodman</code></a>]</li> </ul> <p><strong><a href="https://github.com/anchore/sbom-action/compare/v0.24.0...v0.24.2">(Full Changelog)</a></strong></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/anchore/sbom-action/commit/3ad7283483fc7af8ff2b4ea19663c2d5ca935e26"><code>3ad7283</code></a> ops: update write permissions for release (<a href="https://redirect.github.com/anchore/sbom-action/issues/723">#723</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/31f5287d0c257c8bc49b610d01b16bd7c4c89482"><code>31f5287</code></a> chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/724">#724</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/aa80c8c5bd439a416a62804f2151ab38c671a638"><code>aa80c8c</code></a> chore(deps): update Syft to latest release (<a href="https://redirect.github.com/anchore/sbom-action/issues/722">#722</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/74b54e97f669d9e2e6b728114eac6a92940f9c1c"><code>74b54e9</code></a> chore(deps): bump lodash from 4.17.23 to 4.18.1 (<a href="https://redirect.github.com/anchore/sbom-action/issues/623">#623</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/6b92ff5b2cce1787a99198f282dd8a26d1991449"><code>6b92ff5</code></a> chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (<a href="https://redirect.github.com/anchore/sbom-action/issues/721">#721</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/4f8983b9311d3d896e6bd8a3fb90cf4afde91b5c"><code>4f8983b</code></a> chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/719">#719</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/10f27f499cc07de2496e6ec84c95f019fbbfe061"><code>10f27f4</code></a> chore(deps-dev): bump eslint from 10.5.0 to 10.8.1 (<a href="https://redirect.github.com/anchore/sbom-action/issues/720">#720</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/249403a067afdb4dc73ece33bce948606f486da1"><code>249403a</code></a> chore(deps-dev): bump <code>@types/node</code> from 26.1.0 to 26.2.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/718">#718</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/cbf8daab5ef08eec2b4849d40f2798fae7c50855"><code>cbf8daa</code></a> chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (<a href="https://redirect.github.com/anchore/sbom-action/issues/693">#693</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/6afc7939587b28fc3a3cb96958223f88c7efa864"><code>6afc793</code></a> fix: pin syft install.sh to the release tag being installed (<a href="https://redirect.github.com/anchore/sbom-action/issues/716">#716</a>)</li> <li>Additional commits viewable in <a href="https://github.com/anchore/sbom-action/compare/e22c389904149dbc22b58101806040fa8d37a610...3ad7283483fc7af8ff2b4ea19663c2d5ca935e26">compare view</a></li> </ul> </details> <br />

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/github_actions/anchore/sbom-action-0.24.2:dependabot/github_actions/anchore/sbom-action-0.24.2

git checkout dependabot/github_actions/anchore/sbom-action-0.24.2

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: FelisMC/Felis#26