@Andriy Knysh (Cloud Posse) github.com/cloudposse/atmos/pull/2756 this adds vendor locks and component updater functionality, so atmos can open PRs for component updates. It works with

component.yaml

and

vendor.yaml

. Also, it adds SBOMs.