[aolieman]

Why upgrade

Older versions of the PG Atlas SBOM Action use GitHub's synchronous Dependency Graph SBOM endpoint. GitHub will remove that endpoint on 2026-11-13, after which workflows pinned to older action versions will fail when fetching an SBOM. Please upgrade before 2026-11-13 to keep SBOM submissions working.

Version 1.0.1 uses GitHub's asynchronous SBOM API. See pg-atlas-sbom-action#7 for details.

Change

• Pin the PG Atlas SBOM Action to v1.0.1 (20d2cff7ec9335c43e5e50451dc2576572ff7d49).

Validation

• actionlint -verbose .github/workflows/sbom.yml

This PR is Copilot-assisted.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.41%. Comparing base (92b32b9) to head (3a79955).

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #193   +/-   ##
=========================================
  Coverage     93.41%   93.41%           
  Complexity    21578    21578           
=========================================
  Files          1006     1006           
  Lines         52310    52310           
=========================================
  Hits          48866    48866           
  Misses         3444     3444           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.