Skip to content

Conversation

@dborgards
Copy link
Owner

Prevents transitive build and file locking issues during semantic release. The project was attempting to generate its own SBOM during build, which caused it to build itself transitively. This led to file locking conflicts with the GenerateDepsFile task in .NET SDK 10.0.100.

Fixes the error:
System.IO.IOException: The process cannot access the file 'CycloneDX.MSBuild.deps.json' because it is being used by another process.

Prevents transitive build and file locking issues during semantic release.
The project was attempting to generate its own SBOM during build, which
caused it to build itself transitively. This led to file locking conflicts
with the GenerateDepsFile task in .NET SDK 10.0.100.

Fixes the error:
System.IO.IOException: The process cannot access the file
'CycloneDX.MSBuild.deps.json' because it is being used by another process.
@dborgards dborgards requested a review from Copilot December 10, 2025 13:43
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes a file locking issue that occurred during semantic release builds by disabling SBOM generation for the CycloneDX.MSBuild project itself. The project was attempting to generate its own SBOM during the build process, which caused it to build itself transitively and led to file locking conflicts with the GenerateDepsFile task in .NET SDK 10.0.100.

Key Changes:

  • Disabled SBOM generation for the CycloneDX.MSBuild project to prevent self-referential build loops

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@dborgards dborgards merged commit 13aa6d6 into main Dec 10, 2025
10 checks passed
@dborgards dborgards deleted the claude/fix-cyclonedx-build-01Eh3AVVN1anyABSjWouamsG branch December 10, 2025 13:44
@github-actions
Copy link

🎉 This PR is included in version 1.3.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants