Skip to content

chore(deps): update cyclonedx-bom requirement from <8.0.0,>=7.0.0 to >=7.3.0,<8.0.0#1367

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/main/cyclonedx-bom-gte-7.3.0-and-lt-8.0.0
Open

chore(deps): update cyclonedx-bom requirement from <8.0.0,>=7.0.0 to >=7.3.0,<8.0.0#1367
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/main/cyclonedx-bom-gte-7.3.0-and-lt-8.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Updates the requirements on cyclonedx-bom to permit the latest version.

Release notes

Sourced from cyclonedx-bom's releases.

v7.3.0 (2026-03-30)

Features

  • Add -S flag to skip *.pth evaluation during environment analysis (#1032, 55c15d7)

What's Changed

Full Changelog: CycloneDX/cyclonedx-python@v7.2.2...v7.3.0

Changelog

Sourced from cyclonedx-bom's changelog.

v7.3.0 (2026-03-30)

Features

  • Add -S flag to skip *.pth evaluation during environment analysis (#1032, 55c15d7)

v7.2.2 (2026-02-19)

Documentation

v7.2.1 (2025-10-29)

Documentation

v7.2.0 (2025-10-16)

Documentation

  • Add Changelog to project urls (5f38d75)

Features

v7.1.0 (2025-09-02)

Documentation

Features

  • Support runtime-dependency cyclonedx-python-lib v11 (#938, 7818754)

... (truncated)

Commits
  • e0d92e7 chore(release): 7.3.0
  • 55c15d7 feat: add -S flag to skip *.pth evaluation during environment analysis (#1032)
  • ecf8768 chore(deps-dev): Update uv requirement from 0.10.9 to 0.10.10 (#1026)
  • 00d862f chore(deps-dev): Update uv requirement from 0.10.7 to 0.10.9 (#1025)
  • fd51a5f chore(deps-dev): Update uv requirement from 0.10.2 to 0.10.7 (#1023)
  • 2ecae2b chore(release): 7.2.2
  • 9b06708 chore(deps-dev): Update uv requirement from 0.10.0 to 0.10.2 (#1019)
  • a6b7659 chore(deps-dev): Update uv requirement from 0.9.28 to 0.10.0 (#1018)
  • a2a9108 chore(deps): Update packaging requirement from ^22 || ^23 || ^24 || ^25 to ^2...
  • f35e9f2 chore(deps-dev): Update uv requirement from 0.9.13 to 0.9.28 (#1017)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python) to permit the latest version.
- [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md)
- [Commits](CycloneDX/cyclonedx-python@v7.0.0...v7.3.0)

---
updated-dependencies:
- dependency-name: cyclonedx-bom
  dependency-version: 7.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 13, 2026
@dependabot dependabot bot requested a review from behnazh-w as a code owner April 13, 2026 12:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 13, 2026
@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file OCA Verified All contributors have signed the Oracle Contributor Agreement. python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants