Skip to content

Bump anchore/sbom-action from v0.24.2 to v0.24.3 in /.github/workflows - #126

Merged
onuralpszr merged 1 commit into
mainfrom
dependabot/github_actions/bump-anchore-sbom-action-from-v0-24-2-to-v0-24-3-in-github-w
Oct 3, 2026
Merged

onuralpszr merged 1 commit into
mainfrom
dependabot/github_actions/bump-anchore-sbom-action-from-v0-24-2-to-v0-24-3-in-github-w

Conversation

@UltralyticsAssistant

@UltralyticsAssistant UltralyticsAssistant commented Oct 3, 2026 •

Copy link
Copy Markdown
Member

Bump anchore/sbom-action from v0.24.2 to v0.24.3 in /.github/workflows

This PR updates GitHub Actions references in this repository.

Examples:

  • Branch: actions/checkout@main stays on @main
  • Major tag: actions/checkout@v4 updates to @v5
  • Specific tag: astral-sh/setup-uv@v0.5.0 updates to @v0.9.4
  • SHA pinned: actions/checkout@<sha> # v4.1.0 updates to the latest release SHA and tag comment

Made with ❤️ by Ultralytics Actions

🛠️ PR Summary

Made with ❤️ by Ultralytics Actions

🌟 Summary

Updated the pinned anchore/sbom-action version in the publish workflow from v0.24.2 to v0.24.3.

📊 Key Changes

  • Changed the action reference to the v0.24.3 commit SHA in .github/workflows/publish.yml.
  • Kept the SBOM output configured as SPDX JSON at sbom.spdx.json.

🎯 Purpose & Impact

  • The publish workflow uses v0.24.3 when generating the SBOM; no application behavior is changed.

@onuralpszr
onuralpszr merged commit 5e326a0 into main Oct 3, 2026
9 checks passed
@onuralpszr
onuralpszr deleted the dependabot/github_actions/bump-anchore-sbom-action-from-v0-24-2-to-v0-24-3-in-github-w branch October 3, 2026 22:22
@UltralyticsAssistant

Copy link
Copy Markdown
Member Author

🎉 This PR was merged—thank you, @onuralpszr, for updating the publish workflow to pin anchore/sbom-action to v0.24.3 while keeping the SPDX JSON output at sbom.spdx.json.

“Great things are done by a series of small things brought together.” — Vincent van Gogh

This focused workflow update keeps the SBOM action version current without changing the output format.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants