tree 957b05c064a53c0c0b5a087cc9cb7ce73b8bf896
parent fdc5297d030d68108f8e575b6216c3cca48de67c
author Simon Mavi Stewart <simon.m.stewart@gmail.com> 1768435780 +0000
committer GitHub <noreply@github.com> 1768435780 -0800
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJpaDBECRC1aQ7uu5UhlAAAgtgQAIQYRL9KLAxO3wGhJacb2LvP
 IshV6nZ5U9IAOWxoVVR1nIJMXsPswfq9XptvFI8CjX1FlIfzf+G8UiBUyOy0Izje
 Kf1EstBobrM13BfD7fI4q9lTXPF3gX8VpG2M2nyAqOv/DGoHV2mi4Cv7Mt+aqUFA
 9j5TIjZQZmQVez7gZZBKlMV0N8Jy2jCjJrCx1o8rlTxSmfIwH+t6X98AUD6utyyw
 RUHkIugGRfIVkJroScOBawcSjJXoy74ak2zMcS+ND1tDg6+QgTaiXuIC/3rOaLiP
 MOX/ukX+MVLzyNaPysWg9wulEeJbHkdTl0vOhskm2g+yUmaw2OZYwgClkbe0VzF0
 NCMkxMBTkcw9yqQ/piNLu6E+CPMB61S2Qqotj2cz5NbpJsPPYBqafz62LCe83aqZ
 R+0sbTazKJfQaFMjRjc4WAIkw5MrWHWcXZTVvSmNnZUJIRfFHBuy/uGS6edy4qgW
 jYxY/K7oftYhOFxOpwqKe+n4dZoGpWzrhuSQa+8eKGDmhwUfNrsxx0PbKcCjV33o
 tZ+cUkiRe7iu0CyjUB5sk8Q8ZuBaWQDjdI0a1Y8qekjAsVNKcziCpYzs1GV768T+
 ODiJULPxZtVzjclZ97/brzxUawR1h0g2YuaMQqc0MDE5Ib0zG2TPu10hEd85Vair
 78lR88wy6ZihBk1ufbIn
 =Iw3/
 -----END PGP SIGNATURE-----
 

Correctly merge BOMs from non-root modules (#1518)

* Correctly merge BOMs from non-root modules

When merging BOMs from non-root modules, the code was incorrectly using
`bazel_dep_to_non_root_artifacts` (the regular dependencies map) instead
of `non_root_bazel_dep_to_boms` (the BOMs map). This caused all non-root
module artifacts to be treated as BOMs

* Repin lock files. `bazel test //...` now passes

* Update more lock files