Skip to content

chore(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 - #53

Merged
maksimtech merged 1 commit into
mainfrom
dependabot/github_actions/anchore/sbom-action/download-syft-0.24.3
Oct 15, 2026
Merged

maksimtech merged 1 commit into
mainfrom
dependabot/github_actions/anchore/sbom-action/download-syft-0.24.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps anchore/sbom-action/download-syft from 0.24.2 to 0.24.3.

Release notes

Sourced from anchore/sbom-action/download-syft's releases.

v0.24.3

Added Features

Bug Fixes

(Full Changelog)

Commits
  • 66cbf4b chore(deps): update Syft to latest release (#735)
  • 6b31fa7 chore(deps-dev): bump type-fest from 5.9.0 to 5.10.0 (#742)
  • 85bda36 chore(deps-dev): bump @​types/node from 26.5.1 to 26.6.1 (#741)
  • 7b97c1e chore(deps): bump github.com/anchore/go-make in /.make (#738)
  • 891b055 chore(deps): bump anchore/go-make/.github/actions/setup (#740)
  • f73cf48 chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#739)
  • 13576db chore(deps-dev): bump @​types/node from 26.4.1 to 26.5.1 (#737)
  • 924e83b chore(deps-dev): bump typescript-eslint from 8.69.0 to 8.70.0 (#736)
  • 274555f chore(deps-dev): bump type-fest from 5.8.0 to 5.9.0 (#732)
  • 48fb538 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#734)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [anchore/sbom-action/download-syft](https://github.com/anchore/sbom-action) from 0.24.2 to 0.24.3.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@3ad7283...66cbf4b)

---
updated-dependencies:
- dependency-name: anchore/sbom-action/download-syft
  dependency-version: 0.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency version updates and security patches label Oct 15, 2026
@codspeed

codspeed Bot commented Oct 15, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

⚠️ 11 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

✅ 17 untouched benchmarks


Comparing dependabot/github_actions/anchore/sbom-action/download-syft-0.24.3 (afafd1e) with main (29669d2)

Open in CodSpeed

@maksimtech
maksimtech merged commit 8559598 into main Oct 15, 2026
21 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/anchore/sbom-action/download-syft-0.24.3 branch October 15, 2026 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency version updates and security patches

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant