chore(deps): Bump the gomod group across 1 directory with 3 updates

[dependabot]

Bumps the gomod group with 3 updates in the / directory: entgo.io/ent, github.com/protobom/protobom and google.golang.org/protobuf.

Updates entgo.io/ent from 0.14.2 to 0.14.4

Commits

• 088bfd7 entc/gen/template: allow nested template access Receiver (#4354)
• 6109670 entc/integration: add integration testing for PG16 and PG17 (#4353)
• 6813cdd fix: set the dialect for the generated query (#4349)
• 80f9cbf dialect/sql/schema: qualify if schema is given (#4346)
• 7f5f143 doc/md: docs for new globalid feature (#4344)
• fed373a dialect/sql/schema: support dialect specific view definitions (#4340)
• addae7f cmd/internal/base: add build tags flag to schema dump command (#4339)
• 428604a fix: ent schema panics if any field contains the DefaultExprs annotation ...
• 8b85c83 dialect/sql/schema: add multi schema and view support for schema dump (#4335)
• See full diff in compare view

Updates github.com/protobom/protobom from 0.5.0 to 0.5.2

Release notes

Sourced from github.com/protobom/protobom's releases.

v0.5.2

What's Changed

• nodelist.NodeDescendants: Fix off-by-one bug by @​puerco in protobom/protobom#319
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in protobom/protobom#320
• set version to 1 from 0 by @​viveksahu26 in protobom/protobom#325
• Init CycloneDX options in serializer by @​puerco in protobom/protobom#327
• [Fix]: replace invalid or empty serial id with newly generated valid one by @​viveksahu26 in protobom/protobom#324
• skip files section with noassert license by @​viveksahu26 in protobom/protobom#328
• Writer: Use io.Writer instead of WriterCloser by @​puerco in protobom/protobom#330
• Fix 1-char bug flattening CDX data. by @​puerco in protobom/protobom#332
• Rewrite cdx recursion by @​puerco in protobom/protobom#331

New Contributors

• @​viveksahu26 made their first contribution in protobom/protobom#325

Full Changelog: protobom/protobom@v0.5.1...v0.5.2

v0.5.1

What's Changed

• docs: Add project logo and openssf sandbox badge and display them on README by @​GeauxJD in protobom/protobom#282
• build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 in the actions group by @​dependabot in protobom/protobom#288
• build(deps): bump the gomod group with 2 updates by @​dependabot in protobom/protobom#295
• build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.36.1 by @​dependabot in protobom/protobom#296
• build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 in the gomod group by @​dependabot in protobom/protobom#299
• build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 in the actions group by @​dependabot in protobom/protobom#301
• build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 in the gomod group by @​dependabot in protobom/protobom#300
• fix: assign PackageOriginator under Originators by @​Vyom-Yadav in protobom/protobom#306
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 in the gomod group by @​dependabot in protobom/protobom#307
• build(deps): bump the actions group with 2 updates by @​dependabot in protobom/protobom#308
• build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.1 in the actions group by @​dependabot in protobom/protobom#312
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 in the gomod group by @​dependabot in protobom/protobom#310
• Bump minimal go version to 1.23 by @​puerco in protobom/protobom#313
• build(deps): bump sigs.k8s.io/release-utils from 0.8.4 to 0.11.0 by @​dependabot in protobom/protobom#311
• build(deps): bump golangci/golangci-lint-action from 6.3.1 to 6.5.0 in the actions group by @​dependabot in protobom/protobom#316
• use go1.24 and update golangci-lint by @​cpanato in protobom/protobom#318
• Parse CycloneDX dependency graph by @​puerco in protobom/protobom#315

New Contributors

• @​Vyom-Yadav made their first contribution in protobom/protobom#306

Full Changelog: protobom/protobom@v0.5.0...v0.5.1

Commits

• 8ec5a99 Merge pull request #331 from puerco/rewrite-cdx-recursion
• 14a2d90 Merge pull request #332 from puerco/fix-flat-boms
• 989799c Fix double import in CDX serializer test
• 37ca572 CDX: Rewrite recursive serialization
• 98b074f Regenerate conformance data
• f3a8d88 Fix 1 char bom flattener bug
• 3e3b437 Merge pull request #330 from puerco/writer
• 0c11a51 Writer: Use io.Writer instead of WriterCloser
• bd99779 Merge pull request #328 from viveksahu26/fix/drop_noassert_license_spdx_files
• de56300 nit: Prefer NOASSERTION constant
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.5 to 1.36.6

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cpanato]

@dependabot rebase

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.