Skip to content

Pull requests: microsoft/component-detection

New pull request New
50 Open 1,237 Closed
50 Open 1,237 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Maven combined detector experiment
#1628 opened Feb 3, 2026 by zhenghao104 Loading…
26
Bump azure-core from 1.34.0 to 1.38.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code
#1625 opened Feb 3, 2026 by dependabot bot Loading…
Bump requests from 2.32.3 to 2.32.4 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code
#1624 opened Feb 3, 2026 by dependabot bot Loading…
Bump werkzeug from 3.1.3 to 3.1.5 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code
#1623 opened Feb 3, 2026 by dependabot bot Loading…
Bump urllib3 from 2.4.0 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/uv dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code
#1622 opened Feb 3, 2026 by dependabot bot Loading…
Bump azure-core from 1.30.0 to 1.38.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots dependencies Pull requests that update a dependency file python Pull requests that update Python code
#1611 opened Jan 13, 2026 by dependabot bot Loading…
Complete migration from Newtonsoft.Json to System.Text.Json
#1610 opened Jan 12, 2026 by JamieMagee Loading…
2
Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-5 dependencies Pull requests that update a dependency file python Pull requests that update Python code
#1609 opened Jan 12, 2026 by dependabot bot Loading…
Bump requests from 2.28.1 to 2.32.4 in /test/Microsoft.ComponentDetection.Detectors.Tests/Mocks/EmptyReport dependencies Pull requests that update a dependency file python Pull requests that update Python code
#1608 opened Jan 12, 2026 by dependabot bot Loading…
Fixes nested dependency detection in NpmLockfile3Detector and applies the engines array fix that was missing from PR #1400.
#1606 opened Jan 8, 2026 by gzproger Loading…
12
Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/roots dependencies Pull requests that update a dependency file python Pull requests that update Python code
#1605 opened Jan 8, 2026 by dependabot bot Loading…
Bump urllib3 from 2.2.1 to 2.6.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-1 dependencies Pull requests that update a dependency file python Pull requests that update Python code
#1604 opened Jan 8, 2026 by dependabot bot Loading…
Maven scala sbt detector first pass
#1601 opened Dec 23, 2025 by zhenghao104 • Draft
1
10
Bump actions/upload-artifact from 5.0.0 to 6.0.0 type:ci Build or repository configuration
#1597 opened Dec 12, 2025 by dependabot bot Loading…
Bump github/codeql-action from 4.31.6 to 4.31.8 type:ci Build or repository configuration
#1596 opened Dec 12, 2025 by dependabot bot Loading…
Bump codecov/codecov-action from 5.5.1 to 5.5.2 type:ci Build or repository configuration
#1594 opened Dec 9, 2025 by dependabot bot Loading…
Bump step-security/harden-runner from 2.13.3 to 2.14.0 type:ci Build or repository configuration
#1593 opened Dec 9, 2025 by dependabot bot Loading…
Bump urllib3 from 2.2.1 to 2.6.0 in /test/Microsoft.ComponentDetection.VerificationTests/resources/pip/parallel/parallel-test-2 dependencies Pull requests that update a dependency file python Pull requests that update Python code
#1589 opened Dec 6, 2025 by dependabot bot Loading…
Track file location diff in experiment report
#1587 opened Dec 5, 2025 by zhenghao104 Loading…
9
Bump github.com/sirupsen/logrus from 1.8.1 to 1.8.3 in /test/Microsoft.ComponentDetection.VerificationTests/resources/go dependencies Pull requests that update a dependency file go Pull requests that update Go code
#1585 opened Dec 5, 2025 by dependabot bot Loading…
Update dependency Serilog.Extensions.Logging to v10
#1579 opened Nov 26, 2025 by renovate bot Loading…
1 task
1
Update dependency Spectre.Console.Cli.Extensions.DependencyInjection to 0.22.0
#1578 opened Nov 26, 2025 by renovate bot Loading…
1 task
2
Support packaging as a dotnet tool
#1547 opened Nov 19, 2025 by JamieMagee Loading…
3
Initial RPM database detector
#1534 opened Nov 15, 2025 by JamieMagee • Draft
12
Separated paket.lock handling from NuGetComponentDetector to PaketCom…
#1502 opened Oct 29, 2025 by Thorium Loading…
ProTip! Follow long discussions with comments:>50.