Update DependencyTrack/gh-upload-sbom action to v4

Bump esbuild from 0.25.12 to 0.28.0 in the npm-minor-patch group by @dependabot[bot] in #58
Bump @actions/core from 1.11.1 to 3.0.1 by @dependabot[bot] in #59
Bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in #61

New Contributors

@diseku made their first contribution in #56
@tolobis made their first contribution in #55
@sellisd made their first contribution in #50

Full Changelog: https://github.com/DependencyTrack/gh-upload-sbom/compare/v3...v4.0.0

`v3.1.0`

Compare Source

What's Changed

Enhancements 🚀

Use fetch instead of http by @entigo-mart-erlenheim in #35

Other Changes

patch: change example version to 3 in README.md by @aethernet in #32
feat: include tags when creating by @JCHacking in #33
Add release notes config by @nscuro in #37
Improve parameter descriptions by @nscuro in #36
Unify action versions in examples by @nscuro in #38

New Contributors

@aethernet made their first contribution in #32
@JCHacking made their first contribution in #33
@entigo-mart-erlenheim made their first contribution in #35
@nscuro made their first contribution in #37

Full Changelog: https://github.com/DependencyTrack/gh-upload-sbom/compare/v3.0.0...v3.1.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [DependencyTrack/gh-upload-sbom](https://github.com/DependencyTrack/gh-upload-sbom) | action | major | `v3` → `v4` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>DependencyTrack/gh-upload-sbom (DependencyTrack/gh-upload-sbom)</summary> ### [`v4.1.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v4.1.0) [Compare Source](https://github.com/DependencyTrack/gh-upload-sbom/compare/v4.1.0...v4.1.0)  #### What's Changed ##### Enhancements 🚀 - Upload BOMs using POST (multipart) by [@nscuro](https://github.com/nscuro) in [#65](https://github.com/DependencyTrack/gh-upload-sbom/pull/65) ##### Dependency Updates 🤖 - Bump actions/checkout from 6.0.3 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#64](https://github.com/DependencyTrack/gh-upload-sbom/pull/64) **Full Changelog**: <https://github.com/DependencyTrack/gh-upload-sbom/compare/v4.0...v4.1.0> ### [`v4.1`](https://github.com/DependencyTrack/gh-upload-sbom/compare/v4...v4.1.0) [Compare Source](https://github.com/DependencyTrack/gh-upload-sbom/compare/v4...v4.1.0) ### [`v4.0.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v4.0.0) [Compare Source](https://github.com/DependencyTrack/gh-upload-sbom/compare/v4...v4)  #### What's Changed ##### Breaking Changes 🚨 - chore: update action runtime to Node.js 24 by [@diseku](https://github.com/diseku) in [#56](https://github.com/DependencyTrack/gh-upload-sbom/pull/56) ##### Enhancements 🚀 - Add isLatest property by [@tolobis](https://github.com/tolobis) in [#55](https://github.com/DependencyTrack/gh-upload-sbom/pull/55) - Add proper CI automation and update distribution model by [@nscuro](https://github.com/nscuro) in [#57](https://github.com/DependencyTrack/gh-upload-sbom/pull/57) - Add token output by [@nscuro](https://github.com/nscuro) in [#60](https://github.com/DependencyTrack/gh-upload-sbom/pull/60) - Defensively mark api key as secret by [@nscuro](https://github.com/nscuro) in [#62](https://github.com/DependencyTrack/gh-upload-sbom/pull/62) - Add support for project UUID output (requires DT v5) by [@nscuro](https://github.com/nscuro) in [#63](https://github.com/DependencyTrack/gh-upload-sbom/pull/63) ##### Bug Fixes 🐛 - docs: Corrected the variables and code snippets by [@sellisd](https://github.com/sellisd) in [#50](https://github.com/DependencyTrack/gh-upload-sbom/pull/50) ##### Dependency Updates 🤖 - Bump esbuild from 0.25.12 to 0.28.0 in the npm-minor-patch group by [@dependabot](https://github.com/dependabot)\[bot] in [#58](https://github.com/DependencyTrack/gh-upload-sbom/pull/58) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#59](https://github.com/DependencyTrack/gh-upload-sbom/pull/59) - Bump esbuild from 0.28.0 to 0.28.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#61](https://github.com/DependencyTrack/gh-upload-sbom/pull/61) #### New Contributors - [@diseku](https://github.com/diseku) made their first contribution in [#56](https://github.com/DependencyTrack/gh-upload-sbom/pull/56) - [@tolobis](https://github.com/tolobis) made their first contribution in [#55](https://github.com/DependencyTrack/gh-upload-sbom/pull/55) - [@sellisd](https://github.com/sellisd) made their first contribution in [#50](https://github.com/DependencyTrack/gh-upload-sbom/pull/50) **Full Changelog**: <https://github.com/DependencyTrack/gh-upload-sbom/compare/v3...v4.0.0> ### [`v4.0`](https://github.com/DependencyTrack/gh-upload-sbom/compare/v4...v4) [Compare Source](https://github.com/DependencyTrack/gh-upload-sbom/compare/v4...v4) ### [`v4`](https://github.com/DependencyTrack/gh-upload-sbom/compare/v3.1.0...v4) [Compare Source](https://github.com/DependencyTrack/gh-upload-sbom/compare/v3.1.0...v4) ### [`v3.1.0`](https://github.com/DependencyTrack/gh-upload-sbom/releases/tag/v3.1.0) [Compare Source](https://github.com/DependencyTrack/gh-upload-sbom/compare/v3...v3.1.0)  #### What's Changed ##### Enhancements 🚀 - Use fetch instead of http by [@entigo-mart-erlenheim](https://github.com/entigo-mart-erlenheim) in [#35](https://github.com/DependencyTrack/gh-upload-sbom/pull/35) ##### Other Changes - patch: change example version to 3 in README.md by [@aethernet](https://github.com/aethernet) in [#32](https://github.com/DependencyTrack/gh-upload-sbom/pull/32) - feat: include tags when creating by [@JCHacking](https://github.com/JCHacking) in [#33](https://github.com/DependencyTrack/gh-upload-sbom/pull/33) - Add release notes config by [@nscuro](https://github.com/nscuro) in [#37](https://github.com/DependencyTrack/gh-upload-sbom/pull/37) - Improve parameter descriptions by [@nscuro](https://github.com/nscuro) in [#36](https://github.com/DependencyTrack/gh-upload-sbom/pull/36) - Unify action versions in examples by [@nscuro](https://github.com/nscuro) in [#38](https://github.com/DependencyTrack/gh-upload-sbom/pull/38) #### New Contributors - [@aethernet](https://github.com/aethernet) made their first contribution in [#32](https://github.com/DependencyTrack/gh-upload-sbom/pull/32) - [@JCHacking](https://github.com/JCHacking) made their first contribution in [#33](https://github.com/DependencyTrack/gh-upload-sbom/pull/33) - [@entigo-mart-erlenheim](https://github.com/entigo-mart-erlenheim) made their first contribution in [#35](https://github.com/DependencyTrack/gh-upload-sbom/pull/35) - [@nscuro](https://github.com/nscuro) made their first contribution in [#37](https://github.com/DependencyTrack/gh-upload-sbom/pull/37) **Full Changelog**: <https://github.com/DependencyTrack/gh-upload-sbom/compare/v3.0.0...v3.1.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-06-19 00:02:25 +00:00

Update DependencyTrack/gh-upload-sbom action to v4

build-and-test / build (pull_request) Successful in 2m8s

Details

87c700fb43

phbaer added 1 commit

2026-07-11 05:12:11 +00:00