From f5b4d0625e0a44cf78ca0b479047dabf6a6be61a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 28 Oct 2026 08:14:50 +0000
Subject: [PATCH] fix: bump
 advanced-security/component-detection-dependency-submission-action

Bumps [advanced-security/component-detection-dependency-submission-action](https://github.com/advanced-security/component-detection-dependency-submission-action) from 0.1.6 to 0.2.0.
- [Release notes](https://github.com/advanced-security/component-detection-dependency-submission-action/releases)
- [Commits](https://github.com/advanced-security/component-detection-dependency-submission-action/compare/b282c67b1008fde9b60da4bdfcd8849613e293b2...a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0)

---
updated-dependencies:
- dependency-name: advanced-security/component-detection-dependency-submission-action
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/dependency-review.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index f8c4b6278..cb3a50e83 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -244,7 +244,7 @@ jobs:
           ${{ github.event_name == 'pull_request' &&
               github.event.pull_request.head.repo.full_name == github.repository &&
               steps.dependency-changes.outputs.snapshot_detector != '' }}
-        uses: advanced-security/component-detection-dependency-submission-action@b282c67b1008fde9b60da4bdfcd8849613e293b2 # v0.1.6
+        uses: advanced-security/component-detection-dependency-submission-action@a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0 # v0.2.0
         with:
           snapshot-sha: ${{ github.event.pull_request.base.sha }}
           snapshot-ref: ${{ format('refs/heads/{0}', github.event.pull_request.base.ref) }}
@@ -257,7 +257,7 @@ jobs:
           ${{ github.event_name == 'pull_request' &&
               github.event.pull_request.head.repo.full_name == github.repository &&
               steps.dependency-changes.outputs.snapshot_detector != '' }}
-        uses: advanced-security/component-detection-dependency-submission-action@b282c67b1008fde9b60da4bdfcd8849613e293b2 # v0.1.6
+        uses: advanced-security/component-detection-dependency-submission-action@a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0 # v0.2.0
         with:
           snapshot-sha: ${{ github.event.pull_request.head.sha }}
           snapshot-ref: ${{ format('refs/heads/{0}', github.event.pull_request.head.ref) }}
@@ -275,7 +275,7 @@ jobs:
         # timeout component-detection falls back to declared source dependencies.
         env:
           PipReportFileLevelTimeoutSeconds: "120"
-        uses: advanced-security/component-detection-dependency-submission-action@b282c67b1008fde9b60da4bdfcd8849613e293b2 # v0.1.6
+        uses: advanced-security/component-detection-dependency-submission-action@a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0 # v0.2.0
         with:
           snapshot-sha: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
           snapshot-ref: ${{ github.event_name == 'pull_request' && format('refs/heads/{0}', github.event.pull_request.head.ref) || github.ref }}