erlef / mix_sbom

69%

LAST BUILD ON BRANCH main

branch: main

CHANGE BRANCH

x

Reset

Sync Branches

• main
• add-hex-api-key
• bchassoul/hex-core
• bchassoul/links
• bchassoul/pretty-opt
• bchassoul/spdx
• ci
• dependabot/github_actions/github-actions-000d3d314b
• dependabot/github_actions/github-actions-01d8e432fa
• dependabot/github_actions/github-actions-039c057ac1
• dependabot/github_actions/github-actions-12b7dd0bb1
• dependabot/github_actions/github-actions-2217aebe03
• dependabot/github_actions/github-actions-30316252c6
• dependabot/github_actions/github-actions-415a518de2
• dependabot/github_actions/github-actions-45419baed2
• dependabot/github_actions/github-actions-49d1d51d03
• dependabot/github_actions/github-actions-6541fc03c0
• dependabot/github_actions/github-actions-7488430f0f
• dependabot/github_actions/github-actions-75058fe91b
• dependabot/github_actions/github-actions-7a6ad63ce6
• dependabot/github_actions/github-actions-7b5abd8343
• dependabot/github_actions/github-actions-81d631def5
• dependabot/github_actions/github-actions-872c82b62f
• dependabot/github_actions/github-actions-882fedbe01
• dependabot/github_actions/github-actions-8e8a7fd0ce
• dependabot/github_actions/github-actions-9157c59c98
• dependabot/github_actions/github-actions-94dc8f1485
• dependabot/github_actions/github-actions-9d6c280ac8
• dependabot/github_actions/github-actions-aa2a37f0ca
• dependabot/github_actions/github-actions-b38edd2d4c
• dependabot/github_actions/github-actions-d52dfeb8fb
• dependabot/github_actions/github-actions-d7f0f2d287
• dependabot/github_actions/github-actions-d7f7d0fb55
• dependabot/github_actions/github-actions-d9eeca1fa3
• dependabot/github_actions/github-actions-e35a232a76
• dependabot/github_actions/github-actions-f7e9886b4e
• dependabot/github_actions/github-actions-fd00acb19b
• dependabot/hex/mix-dependencies-07cf6cc68a
• dependabot/hex/mix-dependencies-23ca538be1
• dependabot/hex/mix-dependencies-40b798a931
• dependabot/hex/mix-dependencies-87b0b0fca8
• dependabot/hex/mix-dependencies-892e18a82d
• dependabot/hex/mix-dependencies-a0ee146bfd
• dependabot/hex/mix-dependencies-a98ccd3b1e
• dependabot/hex/mix-dependencies-f2e5eab4d7
• dependabot/hex/mix-dependencies-fb2be53875
• dependabot/hex/mix-dependencies-ffca9f0c38
• gh_action
• iciac/add-component-authors
• iciac/add-component-descr
• iciac/add-components-hashes
• iciac/rename-bomrefs
• jm/429_fix
• jm/action_test
• jm/bpb
• jm/burrito_enable_conditional
• jm/cli
• jm/coveralls_fix
• jm/cyclone_17_smoke_tests
• jm/decode
• jm/description
• jm/devenv_update
• jm/escript_elixir_fix
• jm/flaky_test_fix
• jm/format_equivalence
• jm/full_otp_purl
• jm/groups
• jm/hex_publish_ci
• jm/optimus
• jm/prod_hint
• jm/public_api
• jm/public_cyclonedx_interface
• jm/smoke_test_minimize
• jm/stdout
• jm/umbrella
• jm/umbrella_fix
• jm/xml_unicode_fix
• otp_app_version
• propagate-only
• readme
• renovate/elixir-1.x
• renovate/erlang-28.x
• renovate/erlang-29.x
• smoke_tests
• sosef/distribution_url_fix
• sosef/exclude-docs
• sosef/ort_action
• sosef/otp-links
• sosef/system_enable
• update-optimus
• vers_support

Build # 29101751285

Build Type

push

github

Committed by web-flow

Commit Message

Inherit parent scope for transitive dependencies (#122)

* Inherit parent scope for transitive dependencies

Previously, the `--only` option would still include the transitive
dependencies of ignored packages. The internal `only` scope would
default to `:*` rather than inheriting the parent's scope. In practice
that made it impossible to generate clean `--only prod` output, because
the transitive deps from all `dev` and `test` were always included.

Now dependency fetching passes through an internal `propagate_only/1`
function that recursively applies scoping for all dependencies.

* Use comprenehsion to flatten only_contributions

The nested `flat_map` calls violated the Credo nesting depth rule, so
it's now switched to a comprehension.

Coverage Stats

27 of 28 new or added lines in 1 file covered. (96.43%)

888 of 1281 relevant lines covered (69.32%)

1001.82 hits per line