cdxgen 10.2.6 -> 10.4.0 https://github.com/AppThreat/cdxgen/releases
attrpath: cdxgen
Checking auto update branch...
An auto update branch exists with message `cdxgen: 10.2.6 -> 10.3.5`. New version is 10.4.0.
The auto update branch does not match or exceed the new version.
[version] 
[version] generic version rewriter does not support multiple hashes
[rustCrateVersion] 
[rustCrateVersion] No cargoSha256 or cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorSha256 or vendorHash
[npmDepsVersion] 
[npmDepsVersion] Replacing npmDepsHash with sha256-uVhcuCtjwLQUHVa8xb1w+vYNX4aZODZgwrk6VrNgUKE=
[npmDepsVersion] Finished updating NPM deps version and replacing hashes
[updateScript] 
[updateScript] skipping because derivation has no updateScript
Diff after rewrites:
diff --git a/pkgs/tools/security/cdxgen/default.nix b/pkgs/tools/security/cdxgen/default.nix
index ce87f2b35a96..c7c075616c87 100644
--- a/pkgs/tools/security/cdxgen/default.nix
+++ b/pkgs/tools/security/cdxgen/default.nix
@@ -5,16 +5,16 @@
 
 buildNpmPackage rec {
   pname = "cdxgen";
-  version = "10.2.6";
+  version = "10.4.0";
 
   src = fetchFromGitHub {
     owner = "AppThreat";
     repo = pname;
     rev = "v${version}";
-    sha256 = "sha256-tbZVSFsvjWp+VPcET4/gynwDVF1XBhFQ1dObj4fSWBo=";
+    sha256 = "sha256-9nwEu/Uok5b8U2ixtWXkxglDK0q2d4HnDLZt9e8E+PY=";
   };
 
-  npmDepsHash = "sha256-svp8h5xjV3/Ikq7YR/2y70Y9ufOrrAPcG4/nWF1jUug=";
+  npmDepsHash = "sha256-uVhcuCtjwLQUHVa8xb1w+vYNX4aZODZgwrk6VrNgUKE=";
 
   dontNpmBuild = true;
 

Successfully finished processing
cachix "/nix/store/67cg2zsvbm0j79nnxvghy97va9qxhwsw-cdxgen-10.4.0"
[check][nixpkgs-review]