microsoft/component-detection v6.5.0

v6.5.0

Repository: microsoft/component-detection

Tag: v6.5.0

Published: 2026-02-19T23:58:03Z

Prerelease: no

Release notes:

⚙️ Changes

• Update dependency yamldotnet to v16 by @[renovate[bot]](https://github.com/apps/renovate) (#1659)
• Update vulnerable dependencies in verification test fixtures by @JamieMagee (#1670)
• Bump express, typescript, re2, @types/react in pnpm verification test resources by @JamieMagee (#1665)
• Bump express, typescript, re2, @types/react in yarn verification test resources by @JamieMagee (#1667)
• Bump commons-text to 1.12.0 in maven verification test resources by @JamieMagee (#1661)
• Bump Microsoft.Owin packages to 4.2.2 in nuget verification test resources by @JamieMagee (#1663)
• Bump go directive to 1.22 in verification test resources by @JamieMagee (#1660)
• Bump certifi, zipp, setuptools, azure-identity in pip verification test resources by @JamieMagee (#1664)
• Bump black, ipython in poetry verification test resources by @JamieMagee (#1666)
• Bump express, typescript, re2, @types/react in npm verification test resources by @JamieMagee (#1662)
• Add application-layer Syft factories for 6 new ecosystems by @JamieMagee (#1632)
• Fix System.Text.Json MSB3277 version conflict by @JamieMagee (#1669)
• Fix snapshot verify workflow on Windows by @JamieMagee (#1668)
• Update dependency python to 3.14 by @[renovate[bot]](https://github.com/apps/renovate) (#1658)
• Update dotnet monorepo by @[renovate[bot]](https://github.com/apps/renovate) (#1644)
• Update dependency MinVer to v7 by @[renovate[bot]](https://github.com/apps/renovate) (#1656)
• Fix zizmor workflow security findings by @JamieMagee (#1657)
• Update dependency AwesomeAssertions to 9.4.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1654)
• Update dependency Tomlyn.Signed to 0.20.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1655)
• Update dependency Spectre.Console.Cli.Extensions.DependencyInjection to 0.23.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1578)
• Update dependency MinVer to 6.1.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1653)
• Bump urllib3 from 2.6.0 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-2 by @[dependabot[bot]](https://github.com/apps/dependabot) (#1652)
• Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-4 by @[dependabot[bot]](https://github.com/apps/dependabot) (#1651)
• Bump requests from 2.28.1 to 2.32.4 in /test/Microsoft.ComponentDetection.Detectors.Tests/Mocks/InvalidJsonReport by @[dependabot[bot]](https://github.com/apps/dependabot) (#1650)
• Bump urllib3 from 2.4.0 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv by @[dependabot[bot]](https://github.com/apps/dependabot) (#1622)
• Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-3 by @[dependabot[bot]](https://github.com/apps/dependabot) (#1649)
• Update dependency Serilog to 4.3.1 by @[renovate[bot]](https://github.com/apps/renovate) (#1648)
• Update release-drafter/release-drafter digest to 6db134d by @[renovate[bot]](https://github.com/apps/renovate) (#1647)
• Bump azure-core from 1.34.0 to 1.38.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv by @[dependabot[bot]](https://github.com/apps/dependabot) (#1625)
• Update actions/setup-dotnet action to v5.1.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1640)
• Update nuget monorepo to 7.3.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1646)
• Update mstest monorepo to 4.1.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1645)
• Update step-security/harden-runner action to v2.14.2 by @[renovate[bot]](https://github.com/apps/renovate) (#1639)
• Update zizmorcore/zizmor-action action to v0.5.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1643)
• Update actions/setup-python digest to a309ff8 by @[renovate[bot]](https://github.com/apps/renovate) (#1635)
• Update github/codeql-action action to v4.32.3 by @[renovate[bot]](https://github.com/apps/renovate) (#1641)
• Update codecov/codecov-action action to v5.5.2 by @[renovate[bot]](https://github.com/apps/renovate) (#1637)
• Update stefanzweifel/git-auto-commit-action action to v7.1.0 by @[renovate[bot]](https://github.com/apps/renovate) (#1642)
• Update actions/checkout action to v6.0.2 by @[renovate[bot]](https://github.com/apps/renovate) (#1636)
• Update shogo82148/actions-upload-release-asset action to v1.9.2 by @[renovate[bot]](https://github.com/apps/renovate) (#1638)
• Bump cryptography from 45.0.3 to 46.0.5 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv by @[dependabot[bot]](https://github.com/apps/dependabot) (#1634)
• Bump werkzeug from 3.1.3 to 3.1.5 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv by @[dependabot[bot]](https://github.com/apps/dependabot) (#1623)
• Bump github.com/sirupsen/logrus from 1.8.1 to 1.8.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/go by @[dependabot[bot]](https://github.com/apps/dependabot) (#1585)
• Bump requests from 2.31.0 to 2.32.4 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots by @[dependabot[bot]](https://github.com/apps/dependabot) (#1427)
• Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-5 by @[dependabot[bot]](https://github.com/apps/dependabot) (#1609)
• Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-1 by @[dependabot[bot]](https://github.com/apps/dependabot) (#1604)
• Bump urllib3 from 2.2.1 to 2.6.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-2 by @[dependabot[bot]](https://github.com/apps/dependabot) (#1589)
• Bump azure-core from 1.30.0 to 1.38.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots by @[dependabot[bot]](https://github.com/apps/dependabot) (#1611)
• Bump requests from 2.28.1 to 2.32.4 in /test/Microsoft.ComponentDetection.Detectors.Tests/Mocks/EmptyReport by @[dependabot[bot]](https://github.com/apps/dependabot) (#1608)
• Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots by...