This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- [codex] align CLI output contracts by @msaad00 in https://github.com/msaad00/agent-bom/pull/1321
- [codex] align graph and contributor extras by @msaad00 in https://github.com/msaad00/agent-bom/pull/1322
- chore(deps): bump react from 19.2.4 to 19.2.5 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1326
- chore(deps): bump react-dom from 19.2.4 to 19.2.5 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1324
- [codex] align live MITRE STIX parsing by @msaad00 in https://github.com/msaad00/agent-bom/pull/1323
- chore(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1325
- chore(deps): bump lucide-react from 1.7.0 to 1.8.0 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1327
- chore(deps-dev): bump eslint-config-next from 16.2.2 to 16.2.3 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1328
- chore(deps): bump next from 16.2.2 to 16.2.3 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1329
- [codex] harden Docker Hub release workflow by @msaad00 in https://github.com/msaad00/agent-bom/pull/1330
- [codex] prepare 0.76.1 release by @msaad00 in https://github.com/msaad00/agent-bom/pull/1331
Full Changelog: https://github.com/msaad00/agent-bom/compare/v0...v0.76.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About msaad00/agent-bom
AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
Related context
Related tools
Beta — feedback welcome: [email protected]