search

dfetch-org / dfetch

Dependency fetcher
https://dfetch.rtfd.io/
MIT License
11 stars 4 forks source link

Bump cyclonedx-python-lib from 4.2.2 to 5.0.1 #542

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps cyclonedx-python-lib from 4.2.2 to 5.0.1.

Release notes

Sourced from cyclonedx-python-lib's releases.

v5.0.1

Chore

  • chore(deps): bump python-semantic-release/python-semantic-release (#474)

Bumps python-semantic-release/python-semantic-release from 8.0.8 to 8.3.0.

updated-dependencies:

  • dependency-name: python-semantic-release/python-semantic-release dependency-type: direct:production update-type: version-update:semver-minor ...

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com> (9c3ffac)

  • chore: make pyproject parsable by dependabot (#477)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (c4eaaa5)

Documentation

  • docs: revisit project meta (#475)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (c3254d0)

  • docs: fix RTFD build (#476)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (b9fcfb4)

Unknown

  • &#34;chore(deps): revert bump python-semantic-release/python-semantic-release (#474)&#34;

This reverts commit 9c3ffac34e89610ccc4f9701444127e1e6f5ee07.

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (aae7304)

What's Changed

... (truncated)

Changelog

Sourced from cyclonedx-python-lib's changelog.

v5.0.1 (2023-10-24)

Chore

  • chore(deps): bump python-semantic-release/python-semantic-release (#474)

Bumps python-semantic-release/python-semantic-release from 8.0.8 to 8.3.0.

updated-dependencies:

  • dependency-name: python-semantic-release/python-semantic-release dependency-type: direct:production update-type: version-update:semver-minor ...

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com> (9c3ffac)

  • chore: make pyproject parsable by dependabot (#477)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (c4eaaa5)

Documentation

  • docs: revisit project meta (#475)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (c3254d0)

  • docs: fix RTFD build (#476)

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (b9fcfb4)

Unknown

  • &#34;chore(deps): revert bump python-semantic-release/python-semantic-release (#474)&#34;

This reverts commit 9c3ffac34e89610ccc4f9701444127e1e6f5ee07.

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> (aae7304)

v5.0.0 (2023-10-24)

Breaking

  • feat!: v5.0.0 (#440)

... (truncated)

Commits
  • b777901 chore(release): 5.0.1
  • aae7304 "chore(deps): revert bump python-semantic-release/python-semantic-release (#4...
  • 9c3ffac chore(deps): bump python-semantic-release/python-semantic-release (#474)
  • c4eaaa5 chore: make pyproject parsable by dependabot (#477)
  • c3254d0 docs: revisit project meta (#475)
  • b9fcfb4 docs: fix RTFD build (#476)
  • 4454d60 chore(release): 5.0.0
  • 26b151c feat!: v5.0.0 (#440)
  • 50ce108 chore(release): 4.2.3
  • 5fa66a0 fix: SPDX-expression-validation internal crashes are cought and handled (#471)
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot[bot] commented 1 year ago

A newer version of cyclonedx-python-lib exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

ben-edna commented 1 year ago

@dependabot rebase

dependabot[bot] commented 1 year ago

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

ben-edna commented 1 year ago

Cyclone-dx dropped support for py 3.7 which would requires us to do so as well. Keeping this branch open for now.