Public search query: agent bumped a package and the SBOM wasn't regenerated — the release shipped with a stale SBOM listing the old version