39f600f4ca
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [wjakob/nanobind](https://redirect.github.com/wjakob/nanobind) | minor | `2.13.0` → `2.14.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the warning logs for more information. This PR was automatically created by [Renovate Bot](https://docs.renovatebot.com/) to keep build dependencies up to date. Renovate manages dependencies **not** handled by Dependabot: manylinux Docker images, nanobind (via sbom.cdx.json), googletest (release tarball + SHA256), and the Pixi lockfile. Please review the linked changelog/release notes before merging. A one-week stabilization period (`minimumReleaseAge`) has already elapsed since the new version was published. --- ### Release Notes <details> <summary>wjakob/nanobind (wjakob/nanobind)</summary> ### [`v2.14.0`](https://redirect.github.com/wjakob/nanobind/compare/v2.13.0...v2.14.0) [Compare Source](https://redirect.github.com/wjakob/nanobind/compare/v2.13.0...v2.14.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/onnx/onnx). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yNC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMjQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsibW9kdWxlOiBkZXBlbmRlbmNpZXMiLCJydW4gcmVsZWFzZSBDSXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
76 lines
2.1 KiB
JSON
76 lines
2.1 KiB
JSON
{
|
|
"$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
|
|
"bomFormat": "CycloneDX",
|
|
"specVersion": "1.7",
|
|
"version": 1,
|
|
"metadata": {
|
|
"lifecycles": [{"phase": "build"}],
|
|
"component": {
|
|
"type": "library",
|
|
"name": "onnx",
|
|
"description": "Open Neural Network Exchange — open format for AI/ML models",
|
|
"purl": "pkg:pypi/onnx",
|
|
"bom-ref": "onnx"
|
|
}
|
|
},
|
|
"components": [
|
|
{
|
|
"type": "library",
|
|
"name": "abseil-cpp",
|
|
"version": "20250127.0",
|
|
"bom-ref": "abseil-cpp",
|
|
"purl": "pkg:github/abseil/abseil-cpp@v20250127.0",
|
|
"externalReferences": [
|
|
{
|
|
"type": "distribution",
|
|
"url": "https://github.com/abseil/abseil-cpp/releases/download/20250127.0/abseil-cpp-20250127.0.tar.gz"
|
|
}
|
|
],
|
|
"hashes": [
|
|
{"alg": "SHA-256", "content": "16242f394245627e508ec6bb296b433c90f8d914f73b9c026fddb905e27276e8"}
|
|
],
|
|
"licenses": [{"license": {"id": "Apache-2.0"}}]
|
|
},
|
|
{
|
|
"type": "library",
|
|
"name": "protobuf",
|
|
"version": "31.1",
|
|
"bom-ref": "protobuf",
|
|
"purl": "pkg:github/protocolbuffers/protobuf@v31.1",
|
|
"externalReferences": [
|
|
{
|
|
"type": "distribution",
|
|
"url": "https://github.com/protocolbuffers/protobuf/releases/download/v31.1/protobuf-31.1.tar.gz"
|
|
}
|
|
],
|
|
"hashes": [
|
|
{"alg": "SHA-256", "content": "12bfd76d27b9ac3d65c00966901609e020481b9474ef75c7ff4601ac06fa0b82"}
|
|
],
|
|
"licenses": [{"license": {"id": "BSD-3-Clause"}}]
|
|
},
|
|
{
|
|
"type": "library",
|
|
"name": "nanobind",
|
|
"version": "2.14.0",
|
|
"bom-ref": "nanobind",
|
|
"purl": "pkg:github/wjakob/nanobind@v2.14.0",
|
|
"externalReferences": [
|
|
{
|
|
"type": "vcs",
|
|
"url": "https://github.com/wjakob/nanobind.git"
|
|
}
|
|
],
|
|
"licenses": [{"license": {"id": "BSD-3-Clause"}}]
|
|
}
|
|
],
|
|
"dependencies": [
|
|
{
|
|
"ref": "onnx",
|
|
"dependsOn": ["abseil-cpp", "protobuf", "nanobind"]
|
|
},
|
|
{"ref": "abseil-cpp"},
|
|
{"ref": "protobuf"},
|
|
{"ref": "nanobind"}
|
|
]
|
|
}
|