diff --git a/pkgs/by-name/sb/sbom-tool/deps.json b/pkgs/by-name/sb/sbom-tool/deps.json
index 04b05d8f73f6..780917fa27ee 100644
--- a/pkgs/by-name/sb/sbom-tool/deps.json
+++ b/pkgs/by-name/sb/sbom-tool/deps.json
@@ -24,30 +24,25 @@
     "version": "2.1.1",
     "hash": "sha256-j6AbGSipxLcKSAMibc0uyUJHTa8odrgONaA4DXL4/Bo="
   },
-  {
-    "pname": "Microsoft.Bcl.Cryptography",
-    "version": "9.0.6",
-    "hash": "sha256-lfxx9rXXD8PxlUkl9109r1B+bPv/zsyzcp0Yf/iBMY0="
-  },
   {
     "pname": "Microsoft.ComponentDetection.Common",
-    "version": "6.2.1",
-    "hash": "sha256-Vrs91ukXNSeUSBfHgcSqAzPM4eZuS+74PIHQtND8/6s="
+    "version": "6.0.0",
+    "hash": "sha256-F01KCIqxFa4049bzvKGh59kpdk5UykSFFKaHEPQGVY4="
   },
   {
     "pname": "Microsoft.ComponentDetection.Contracts",
-    "version": "6.2.1",
-    "hash": "sha256-H2nNnVDYKnrfUsAaiJhpkRXNtdGgAAoeap7m/dV4a+U="
+    "version": "6.0.0",
+    "hash": "sha256-yRmgJVLDDMGlq550sqve7f+0/iwwHCT/GMb0/6837Y4="
   },
   {
     "pname": "Microsoft.ComponentDetection.Detectors",
-    "version": "6.2.1",
-    "hash": "sha256-op94iMduomjRoe0jC5eX8rCa0FwIFi/1boJ3OpEjM+M="
+    "version": "6.0.0",
+    "hash": "sha256-JeXHB0XY003CpFDmgRzdgGRTcqFABywvEoxXHvlo8b0="
   },
   {
     "pname": "Microsoft.ComponentDetection.Orchestrator",
-    "version": "6.2.1",
-    "hash": "sha256-aHm/r0AgOi+0pSc4nfJU1mskNsovG9y0UP3ajpNvZhg="
+    "version": "6.0.0",
+    "hash": "sha256-+rSRgh0V5WEtZ/SqRGvPI9J4k1hPGczBwJfxx5mmWg0="
   },
   {
     "pname": "Microsoft.CSharp",
@@ -114,6 +109,11 @@
     "version": "8.0.0",
     "hash": "sha256-+qIDR8hRzreCHNEDtUcPfVHQdurzWPo/mqviCH78+EQ="
   },
+  {
+    "pname": "Microsoft.Extensions.DependencyInjection",
+    "version": "8.0.0-rc.2.23479.6",
+    "hash": "sha256-GIErPwEhlblyAQfEDv+uDPn3RhJnmVMiTGj7l2wNCTk="
+  },
   {
     "pname": "Microsoft.Extensions.DependencyInjection",
     "version": "8.0.1",
@@ -306,8 +306,8 @@
   },
   {
     "pname": "morelinq",
-    "version": "4.4.0",
-    "hash": "sha256-6ITnfYABvcfk7uwLxDLgcsXspI4nKuBlrFNdMATGoUI="
+    "version": "4.2.0",
+    "hash": "sha256-BQ2ypkR5S4LuvxKkP6GrZuzckSiTFPVdR8VZ+DRn9g4="
   },
   {
     "pname": "NETStandard.Library",
@@ -321,48 +321,53 @@
   },
   {
     "pname": "NuGet.Common",
-    "version": "7.0.1",
-    "hash": "sha256-7nxlUHxM99xKGZwoen5P7uoXvvG3uK5TGMD2k6/xkP0="
+    "version": "6.10.0",
+    "hash": "sha256-cM3Q7srAykk6KA/FThZkDjs+MIIjiUJSXZjRSqPNP1o="
+  },
+  {
+    "pname": "NuGet.Common",
+    "version": "6.14.0",
+    "hash": "sha256-jDOwt3veI1GSG8CfBnf2+dJxD3E/Nmlc+vHtD4J76Ms="
   },
   {
     "pname": "NuGet.Configuration",
-    "version": "7.0.1",
-    "hash": "sha256-dhXJNWDR43YzJntM4Xoysnq4+hHWzaiUx/MgM21wOhU="
+    "version": "6.14.0",
+    "hash": "sha256-1PN9s6fhCw3wd2260U6hQ4vG3jIvcG8GIn1oQgxMXA0="
   },
   {
     "pname": "NuGet.DependencyResolver.Core",
-    "version": "7.0.1",
-    "hash": "sha256-C0hwFrVf1KD/edUDZxlMoCPxOF9h50ICaUUuI0z6fQg="
+    "version": "6.10.0",
+    "hash": "sha256-3/dapzgXuqd+1RQlR+1iLS1lFpg7g1FDrkDzD5ahW+Y="
   },
   {
     "pname": "NuGet.Frameworks",
-    "version": "7.0.1",
-    "hash": "sha256-ko+dIa2uwaVTBqPsE3VYXmbW+W2rqzYssVYsA99Gogc="
+    "version": "6.14.0",
+    "hash": "sha256-3ViM3R1ucQMEL2hQYsivT86kI6veMQK2xDsiAcFcVQk="
   },
   {
     "pname": "NuGet.LibraryModel",
-    "version": "7.0.1",
-    "hash": "sha256-x7/Va8o9dPsSV3CyGoj+JXBa30YO3E8Ico7ZCU4UYrM="
+    "version": "6.10.0",
+    "hash": "sha256-DVxnItAizUQ4sVY8kcGuAchTtKMXWQrGJqM1ywqjkL0="
   },
   {
     "pname": "NuGet.Packaging",
-    "version": "7.0.1",
-    "hash": "sha256-nOpGQ5ZP0PLKBGAGHkagjIX4ivCdcfeTjQDcBASYRSQ="
+    "version": "6.10.0",
+    "hash": "sha256-RK18XuOdmXPXhmBLRGjw00QsLiKuYawqjDQUlzcbRaM="
   },
   {
     "pname": "NuGet.ProjectModel",
-    "version": "7.0.1",
-    "hash": "sha256-Yo0QJmer/Tw/PwPx6ZAjuCBzswNcUSG+PovAv/SqDe4="
+    "version": "6.10.0",
+    "hash": "sha256-LKdvGDGxqK1/QVVlsTUMFznEuoAsD2B/3dG+sx/e/78="
   },
   {
     "pname": "NuGet.Protocol",
-    "version": "7.0.1",
-    "hash": "sha256-KtTVt/d3apuUJcBS/Saz74yjh4v0BOeClkaJtx1aQnA="
+    "version": "6.10.0",
+    "hash": "sha256-TPWWce4FhI3VaDhAR6mUYydFA6AjrPtcJSMmPQEmu0I="
   },
   {
     "pname": "NuGet.Versioning",
-    "version": "7.0.1",
-    "hash": "sha256-A3d7xyPaDS3tps9TkeCqJVxsPVE0Qvkz44KWSmxL9fI="
+    "version": "6.10.0",
+    "hash": "sha256-r8w4/bin+ZQK6AzkuFXhWbteQlzRFY++S1yDTrq0KfQ="
   },
   {
     "pname": "packageurl-dotnet",
@@ -371,13 +376,13 @@
   },
   {
     "pname": "Polly",
-    "version": "8.6.5",
-    "hash": "sha256-2YRacrP3b3C6EBCb5Pjg6fQdGj+SgbTeaWHN/oZ1d8s="
+    "version": "8.4.0",
+    "hash": "sha256-9KfX2swvws/z2HL31gdRL9WMm3fDZthW1EPeD1Ix+P4="
   },
   {
     "pname": "Polly.Core",
-    "version": "8.6.5",
-    "hash": "sha256-m12obNfMZdWQWJoCaF03H5qEbFDdp9FSdHTHcIIsACQ="
+    "version": "8.4.0",
+    "hash": "sha256-6M2ql3bQj/T6w3G1i0mZC4HtViLWJG5J5nzjP0A25r4="
   },
   {
     "pname": "PowerArgs",
@@ -691,23 +696,18 @@
   },
   {
     "pname": "Spectre.Console",
-    "version": "0.53.1",
-    "hash": "sha256-uj/DD9y9MFWh5ugfQ1nTpbDP5xj55Sa8KX06B8CluMc="
-  },
-  {
-    "pname": "Spectre.Console",
-    "version": "0.54.0",
-    "hash": "sha256-qlZQkT5KzACqJ1bLgBOylq9qO0L7XCh/RY8L8PnkpcU="
+    "version": "0.49.1",
+    "hash": "sha256-tqSVojyuQjuB34lXo759NOcyLgNIw815mKXJPq5JFDo="
   },
   {
     "pname": "Spectre.Console.Cli",
-    "version": "0.53.1",
-    "hash": "sha256-WN79g+F9jRsqXAwVFLYS/lfaQish2yFwL40GB/PpdTo="
+    "version": "0.49.1",
+    "hash": "sha256-sar9rhft1ivDMj1kU683+4KxUPUZL+Fb++ewMA6RD4Q="
   },
   {
     "pname": "Spectre.Console.Cli.Extensions.DependencyInjection",
-    "version": "0.17.0",
-    "hash": "sha256-0y5mJ3CGW2AFqbOFs0TFkbl4mKsYi8c65HO/SkcZeLI="
+    "version": "0.2.0",
+    "hash": "sha256-kcVQM8qJGNuDwlGpKiI1nBsocz1yPS0NkUV7ppbtUm4="
   },
   {
     "pname": "Sprache",
@@ -749,6 +749,11 @@
     "version": "4.3.0",
     "hash": "sha256-KMY5DfJnDeIsa13DpqvyN8NkReZEMAFnlmNglVoFIXI="
   },
+  {
+    "pname": "System.Collections.Immutable",
+    "version": "8.0.0",
+    "hash": "sha256-F7OVjKNwpqbUh8lTidbqJWYi476nsq9n+6k0+QVRo3w="
+  },
   {
     "pname": "System.Console",
     "version": "4.3.0",
@@ -786,8 +791,8 @@
   },
   {
     "pname": "System.Formats.Asn1",
-    "version": "9.0.10",
-    "hash": "sha256-hPvY9hKsDEbNyyzaaMImebYTQWLWD/AOjtru+a4NsIc="
+    "version": "6.0.1",
+    "hash": "sha256-gfGxcaWpVO92BJrl24pXi09KSgW2rSy3HGv0+V8hGgo="
   },
   {
     "pname": "System.Globalization",
@@ -836,8 +841,8 @@
   },
   {
     "pname": "System.IO.Pipelines",
-    "version": "9.0.10",
-    "hash": "sha256-Hu4g9QfEzNW71/zX0vP+Knqu6WizhSzWASy1cxANOr0="
+    "version": "9.0.9",
+    "hash": "sha256-bRMt0ib0KwKzHXgeAXZgegou5eX8lsm80Eu38bHBxBs="
   },
   {
     "pname": "System.Linq",
@@ -851,8 +856,8 @@
   },
   {
     "pname": "System.Memory",
-    "version": "4.6.3",
-    "hash": "sha256-JgeK63WMmumF6L+FH5cwJgYdpqXrSDcgTQwtIgTHKVU="
+    "version": "4.5.5",
+    "hash": "sha256-EPQ9o1Kin7KzGI5O3U3PUQAZTItSbk9h/i4rViN3WiI="
   },
   {
     "pname": "System.Net.Http",
@@ -886,8 +891,8 @@
   },
   {
     "pname": "System.Reactive",
-    "version": "6.1.0",
-    "hash": "sha256-zACYoZmKxHo0qKY8FOVa7jIsw7dN7WjdXdRRV95qY2Y="
+    "version": "6.0.1",
+    "hash": "sha256-Lo5UMqp8DsbVSUxa2UpClR1GoYzqQQcSxkfyFqB/d4Q="
   },
   {
     "pname": "System.Reflection",
@@ -1011,8 +1016,8 @@
   },
   {
     "pname": "System.Security.Cryptography.Pkcs",
-    "version": "9.0.6",
-    "hash": "sha256-+Q7vAp+uOf/aqldFvsZuXw/0UHXtfFdNRMpqCZ1/Hwo="
+    "version": "6.0.4",
+    "hash": "sha256-2e0aRybote+OR66bHaNiYpF//4fCiaO3zbR2e9GABUI="
   },
   {
     "pname": "System.Security.Cryptography.Primitives",
@@ -1021,8 +1026,8 @@
   },
   {
     "pname": "System.Security.Cryptography.ProtectedData",
-    "version": "9.0.6",
-    "hash": "sha256-WMa3KDeFuOLyIZduYd+9PCyx7usJMRu/q2x3eOw9MAQ="
+    "version": "4.4.0",
+    "hash": "sha256-Ri53QmFX8I8UH0x4PikQ1ZA07ZSnBUXStd5rBfGWFOE="
   },
   {
     "pname": "System.Security.Cryptography.X509Certificates",
@@ -1056,13 +1061,18 @@
   },
   {
     "pname": "System.Text.Encodings.Web",
-    "version": "9.0.10",
-    "hash": "sha256-rTef4Wzfcjzx+ZToxTN6VfalIjnpU74TOCmOsIx08hY="
+    "version": "9.0.9",
+    "hash": "sha256-euYrJAKiTDCj/Rf1KVWI6IophDX828x5T9As9vAf81A="
   },
   {
     "pname": "System.Text.Json",
-    "version": "9.0.10",
-    "hash": "sha256-wqeobpRw3PqOw21q8oGvauj5BkX1pS02Cm78E6c742w="
+    "version": "8.0.5",
+    "hash": "sha256-yKxo54w5odWT6nPruUVsaX53oPRe+gKzGvLnnxtwP68="
+  },
+  {
+    "pname": "System.Text.Json",
+    "version": "9.0.9",
+    "hash": "sha256-I+GCgXZZUtgAta94BIBqy72HnZJ3egzNBOTxnVy2Ur8="
   },
   {
     "pname": "System.Text.RegularExpressions",
@@ -1121,8 +1131,8 @@
   },
   {
     "pname": "Tomlyn.Signed",
-    "version": "0.19.0",
-    "hash": "sha256-nOlE1a3wj0LN0IlCgxrdtyx9z/TUYJZEgiLm38N7iZU="
+    "version": "0.17.0",
+    "hash": "sha256-C5+2mVihp64KiytpgvI0BaMwK+vhKz2/h2XqaT24bYg="
   },
   {
     "pname": "Validation",
@@ -1136,7 +1146,7 @@
   },
   {
     "pname": "YamlDotNet",
-    "version": "15.3.0",
-    "hash": "sha256-2rdemzEc4cGKfmYRTRfT0HXjllRs22qXac+UE400klU="
+    "version": "15.1.6",
+    "hash": "sha256-C9IGS9HNuEKgpUozkfuzA0pNWsS/LVwgHzPEmU2sw8Y="
   }
 ]
diff --git a/pkgs/by-name/sb/sbom-tool/package.nix b/pkgs/by-name/sb/sbom-tool/package.nix
index 7d50b5bd6159..58690cdbcb6b 100644
--- a/pkgs/by-name/sb/sbom-tool/package.nix
+++ b/pkgs/by-name/sb/sbom-tool/package.nix
@@ -9,13 +9,13 @@
 
 buildDotnetModule rec {
   pname = "sbom-tool";
-  version = "4.1.5";
+  version = "4.1.6";
 
   src = fetchFromGitHub {
     owner = "microsoft";
     repo = "sbom-tool";
     tag = "v${version}";
-    hash = "sha256-MIsCgUBHhaHobKfq3O/hL7+bXZVHgvtig7h4JIN8Gws=";
+    hash = "sha256-Bx/wPksPpedR7hyK6puqZ1uU74zqJV5j33NQzvJXyzY=";
   };
 
   projectFile = "src/Microsoft.Sbom.Tool/Microsoft.Sbom.Tool.csproj";