Sourced from anchore/sbom-action's releases.

v0.24.0

• chore: update to node 24 + deps (#614) [@​kzantow]
• chore: update to ES modules (#595) [@​kzantow]

⬆️ Dependencies

• chore(deps): update Syft to v1.42.3 (#615) [@anchore-actions-token-generator[bot]]

v0.23.1

⬆️ Dependencies

• chore(deps): update Syft to v1.42.2 (#607) [@anchore-actions-token-generator[bot]]
• chore(deps): bump fast-xml-parser and all other deps (#604) [@dependabot[bot]]

v0.23.0

• switch to single-file dist build with sub-action flags and update dependencies (#595) [@​kzantow]
• switch to esbuild (#590) [@​willmurphyscode]
• update Syft to v1.42.1 (#599) [@anchore-actions-token-generator[bot]]

v0.22.2

⬆️ Dependencies

• chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (#581) [@dependabot[bot]]
• chore(deps): update Syft to v1.41.2 (#582) [@anchore-actions-token-generator[bot]]
• chore(deps-dev): bump the dev-dependencies group with 2 updates (#580) [@dependabot[bot]]
• chore(deps): update Syft to v1.41.1 (#579) [@anchore-actions-token-generator[bot]]

v0.22.1

⬆️ Dependencies

• chore(deps): update Syft to v1.41.0 (#576) [@anchore-actions-token-generator[bot]]
• chore(deps): bump lodash from 4.17.21 to 4.17.23 (#573) [@dependabot[bot]]

v0.22.0

Changes in v0.22.0

⬆️ Dependencies

• chore(deps-dev): bump the dev-dependencies group with 19 updates (#566) [@​dependabot]
• chore(deps): bump npm-check-updates from 17.1.3 to 19.3.1 (#567) [@​dependabot]
• chore(deps): update Syft to v1.40.1 (#563) [@​anchore-actions-token-generator[bot]]

v0.21.1

Changes in v0.21.1

... (truncated)

• e22c389 chore(deps): update Syft to v1.42.3 (#615)
• 36a5fde chore: update to node 24 + deps (#614)
• a0a6512 chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#608)
• 57aae52 chore(deps): update Syft to v1.42.2 (#607)
• c29e913 chore(deps): bump fast-xml-parser and other deps (#604)
• 17ae174 chore(deps/test): move to es modules, node:test, single dist file (#595)
• 6d473d3 chore(deps): update Syft to v1.42.1 (#599)
• 60619e7 fix tests and bump fast-xml-parser (#598)
• e2bd58a chore(deps-dev): bump the dev-dependencies group with 3 updates (#592)
• d032d7d ci(syft auto update): npm ci, not npm install (#597)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)