Skip to content

Commit 3525b65

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.13
1 parent 6dc9e95 commit 3525b65

File tree

2 files changed

+102
-105
lines changed

2 files changed

+102
-105
lines changed

‎sbom/cve-bin-tool-py3.13.json

Lines changed: 53 additions & 56 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:0c6defef-a0fe-4858-98b1-1fe46e557e1e",
5+
"serialNumber": "urn:uuid:d0bd14a8-fa98-429b-9f5d-cf2dde35c5c9",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-03-24T00:38:31Z",
8+
"timestamp": "2025-03-31T00:41:10Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -555,7 +555,7 @@
555555
"type": "library",
556556
"bom-ref": "8-typing-extensions",
557557
"name": "typing-extensions",
558-
"version": "4.12.2",
558+
"version": "4.13.0",
559559
"supplier": {
560560
"name": "Guido van Jukka ukasz Michael",
561561
"contact": [
@@ -564,21 +564,12 @@
564564
}
565565
]
566566
},
567-
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.12.2:*:*:*:*:*:*:*",
567+
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.13.0:*:*:*:*:*:*:*",
568568
"description": "Backported and Experimental Type Hints for Python 3.8+",
569569
"hashes": [
570570
{
571571
"alg": "SHA-256",
572-
"content": "04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d"
573-
}
574-
],
575-
"licenses": [
576-
{
577-
"license": {
578-
"id": "PSF-2.0",
579-
"url": "https://opensource.org/licenses/Python-2.0",
580-
"acknowledgement": "concluded"
581-
}
572+
"content": "c8dd92cc0d6425a97c18fbb9d1954e5ff92c1ca881a309c45f06ebc0b79058e5"
582573
}
583574
],
584575
"externalReferences": [
@@ -588,7 +579,7 @@
588579
"comment": "Home page for project"
589580
},
590581
{
591-
"url": "https://pypi.org/project/typing-extensions/4.12.2/#files",
582+
"url": "https://pypi.org/project/typing-extensions/4.13.0/#files",
592583
"type": "distribution",
593584
"comment": "Download location for component"
594585
},
@@ -613,11 +604,11 @@
613604
"type": "vcs"
614605
}
615606
],
616-
"purl": "pkg:pypi/typing-extensions@4.12.2",
607+
"purl": "pkg:pypi/typing-extensions@4.13.0",
617608
"properties": [
618609
{
619610
"name": "release_date",
620-
"value": "2024-06-07T18:52:13Z"
611+
"value": "2025-03-26T03:49:40Z"
621612
},
622613
{
623614
"name": "language",
@@ -633,7 +624,7 @@
633624
"type": "library",
634625
"bom-ref": "9-propcache",
635626
"name": "propcache",
636-
"version": "0.3.0",
627+
"version": "0.3.1",
637628
"supplier": {
638629
"name": "Andrew Svetlov",
639630
"contact": [
@@ -642,12 +633,12 @@
642633
}
643634
]
644635
},
645-
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.3.0:*:*:*:*:*:*:*",
636+
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.3.1:*:*:*:*:*:*:*",
646637
"description": "Accelerated property cache",
647638
"hashes": [
648639
{
649640
"alg": "SHA-256",
650-
"content": "efa44f64c37cc30c9f05932c740a8b40ce359f51882c70883cc95feac842da4d"
641+
"content": "f27785888d2fdd918bc36de8b8739f2d6c791399552333721b58193f68ea3e98"
651642
}
652643
],
653644
"licenses": [
@@ -666,7 +657,7 @@
666657
"comment": "Home page for project"
667658
},
668659
{
669-
"url": "https://pypi.org/project/propcache/0.3.0/#files",
660+
"url": "https://pypi.org/project/propcache/0.3.1/#files",
670661
"type": "distribution",
671662
"comment": "Download location for component"
672663
},
@@ -707,11 +698,11 @@
707698
"type": "vcs"
708699
}
709700
],
710-
"purl": "pkg:pypi/[email protected].0",
701+
"purl": "pkg:pypi/[email protected].1",
711702
"properties": [
712703
{
713704
"name": "release_date",
714-
"value": "2025-02-20T18:59:44Z"
705+
"value": "2025-03-26T03:03:35Z"
715706
},
716707
{
717708
"name": "language",
@@ -1977,7 +1968,7 @@
19771968
"type": "library",
19781969
"bom-ref": "30-pyparsing",
19791970
"name": "pyparsing",
1980-
"version": "3.2.1",
1971+
"version": "3.2.3",
19811972
"supplier": {
19821973
"name": "Paul McGuire",
19831974
"contact": [
@@ -1986,12 +1977,12 @@
19861977
}
19871978
]
19881979
},
1989-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.1:*:*:*:*:*:*:*",
1980+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.3:*:*:*:*:*:*:*",
19901981
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
19911982
"hashes": [
19921983
{
19931984
"alg": "SHA-256",
1994-
"content": "506ff4f4386c4cec0590ec19e6302d3aedb992fdc02c761e90416f158dacf8e1"
1985+
"content": "a749938e02d6fd0b59b356ca504a24982314bb090c383e3cf201c95ef7e2bfcf"
19951986
}
19961987
],
19971988
"licenses": [
@@ -2010,16 +2001,16 @@
20102001
"comment": "Home page for project"
20112002
},
20122003
{
2013-
"url": "https://pypi.org/project/pyparsing/3.2.1/#files",
2004+
"url": "https://pypi.org/project/pyparsing/3.2.3/#files",
20142005
"type": "distribution",
20152006
"comment": "Download location for component"
20162007
}
20172008
],
2018-
"purl": "pkg:pypi/[email protected].1",
2009+
"purl": "pkg:pypi/[email protected].3",
20192010
"properties": [
20202011
{
20212012
"name": "release_date",
2022-
"value": "2024-12-31T20:59:42Z"
2013+
"value": "2025-03-25T05:01:24Z"
20232014
},
20242015
{
20252016
"name": "language",
@@ -2093,7 +2084,7 @@
20932084
"type": "library",
20942085
"bom-ref": "32-pyasn1-modules",
20952086
"name": "pyasn1-modules",
2096-
"version": "0.4.1",
2087+
"version": "0.4.2",
20972088
"supplier": {
20982089
"name": "Ilya Etingof",
20992090
"contact": [
@@ -2102,12 +2093,12 @@
21022093
}
21032094
]
21042095
},
2105-
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1-modules:0.4.1:*:*:*:*:*:*:*",
2096+
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1-modules:0.4.2:*:*:*:*:*:*:*",
21062097
"description": "A collection of ASN.1-based protocols modules",
21072098
"hashes": [
21082099
{
21092100
"alg": "SHA-256",
2110-
"content": "c28e2dbf9c06ad61c71a075c7e0f9fd0f1b0bb2d2ad4377f240d33ac2ab60a7c"
2101+
"content": "29253a9207ce32b64c3ac6600edc75368f98473906e8fd1043bd6b5b1de2c14a"
21112102
}
21122103
],
21132104
"licenses": [
@@ -2126,7 +2117,7 @@
21262117
"comment": "Home page for project"
21272118
},
21282119
{
2129-
"url": "https://pypi.org/project/pyasn1-modules/0.4.1/#files",
2120+
"url": "https://pypi.org/project/pyasn1-modules/0.4.2/#files",
21302121
"type": "distribution",
21312122
"comment": "Download location for component"
21322123
},
@@ -2143,11 +2134,11 @@
21432134
"type": "log"
21442135
}
21452136
],
2146-
"purl": "pkg:pypi/[email protected].1",
2137+
"purl": "pkg:pypi/[email protected].2",
21472138
"properties": [
21482139
{
21492140
"name": "release_date",
2150-
"value": "2024-09-10T22:42:08Z"
2141+
"value": "2025-03-28T02:41:19Z"
21512142
},
21522143
{
21532144
"name": "language",
@@ -3249,7 +3240,7 @@
32493240
"type": "library",
32503241
"bom-ref": "50-rpds-py",
32513242
"name": "rpds-py",
3252-
"version": "0.23.1",
3243+
"version": "0.24.0",
32533244
"supplier": {
32543245
"name": "Julian Berman",
32553246
"contact": [
@@ -3258,12 +3249,12 @@
32583249
}
32593250
]
32603251
},
3261-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.23.1:*:*:*:*:*:*:*",
3252+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.24.0:*:*:*:*:*:*:*",
32623253
"description": "Python bindings to Rust's persistent data structures (rpds)",
32633254
"hashes": [
32643255
{
32653256
"alg": "SHA-256",
3266-
"content": "2a54027554ce9b129fc3d633c92fa33b30de9f08bc61b32c053dc9b537266fed"
3257+
"content": "006f4342fe729a368c6df36578d7a348c7c716be1da0a1a0f86e3021f8e98724"
32673258
}
32683259
],
32693260
"licenses": [
@@ -3282,7 +3273,7 @@
32823273
"comment": "Home page for project"
32833274
},
32843275
{
3285-
"url": "https://pypi.org/project/rpds-py/0.23.1/#files",
3276+
"url": "https://pypi.org/project/rpds-py/0.24.0/#files",
32863277
"type": "distribution",
32873278
"comment": "Download location for component"
32883279
},
@@ -3311,11 +3302,11 @@
33113302
"type": "other"
33123303
}
33133304
],
3314-
"purl": "pkg:pypi/rpds-py@0.23.1",
3305+
"purl": "pkg:pypi/rpds-py@0.24.0",
33153306
"properties": [
33163307
{
33173308
"name": "release_date",
3318-
"value": "2025-02-21T15:01:14Z"
3309+
"value": "2025-03-26T14:52:41Z"
33193310
},
33203311
{
33213312
"name": "language",
@@ -3694,7 +3685,7 @@
36943685
"type": "library",
36953686
"bom-ref": "57-rich",
36963687
"name": "rich",
3697-
"version": "13.9.4",
3688+
"version": "14.0.0",
36983689
"supplier": {
36993690
"name": "Will McGugan",
37003691
"contact": [
@@ -3703,12 +3694,12 @@
37033694
}
37043695
]
37053696
},
3706-
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.9.4:*:*:*:*:*:*:*",
3697+
"cpe": "cpe:2.3:a:will_mcgugan:rich:14.0.0:*:*:*:*:*:*:*",
37073698
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
37083699
"hashes": [
37093700
{
37103701
"alg": "SHA-256",
3711-
"content": "6049d5e6ec054bf2779ab3358186963bac2ea89175919d699e378b99738c2a90"
3702+
"content": "1c9491e1951aac09caffd42f448ee3d04e58923ffe14993f6e83068dc395d7e0"
37123703
}
37133704
],
37143705
"licenses": [
@@ -3727,7 +3718,7 @@
37273718
"comment": "Home page for project"
37283719
},
37293720
{
3730-
"url": "https://pypi.org/project/rich/13.9.4/#files",
3721+
"url": "https://pypi.org/project/rich/14.0.0/#files",
37313722
"type": "distribution",
37323723
"comment": "Download location for component"
37333724
},
@@ -3736,11 +3727,11 @@
37363727
"type": "documentation"
37373728
}
37383729
],
3739-
"purl": "pkg:pypi/rich@13.9.4",
3730+
"purl": "pkg:pypi/rich@14.0.0",
37403731
"properties": [
37413732
{
37423733
"name": "release_date",
3743-
"value": "2024-11-01T16:43:55Z"
3734+
"value": "2025-03-30T14:15:12Z"
37443735
},
37453736
{
37463737
"name": "language",
@@ -4138,7 +4129,7 @@
41384129
"type": "library",
41394130
"bom-ref": "64-narwhals",
41404131
"name": "narwhals",
4141-
"version": "1.31.0",
4132+
"version": "1.32.0",
41424133
"supplier": {
41434134
"name": "Marco Gorelli",
41444135
"contact": [
@@ -4147,7 +4138,7 @@
41474138
}
41484139
]
41494140
},
4150-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.31.0:*:*:*:*:*:*:*",
4141+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.32.0:*:*:*:*:*:*:*",
41514142
"description": "Extremely lightweight compatibility layer between dataframe libraries",
41524143
"licenses": [
41534144
{
@@ -4165,7 +4156,7 @@
41654156
"comment": "Home page for project"
41664157
},
41674158
{
4168-
"url": "https://pypi.org/project/narwhals/1.31.0/#files",
4159+
"url": "https://pypi.org/project/narwhals/1.32.0/#files",
41694160
"type": "distribution",
41704161
"comment": "Download location for component"
41714162
},
@@ -4182,7 +4173,7 @@
41824173
"type": "issue-tracker"
41834174
}
41844175
],
4185-
"purl": "pkg:pypi/narwhals@1.31.0",
4176+
"purl": "pkg:pypi/narwhals@1.32.0",
41864177
"properties": [
41874178
{
41884179
"name": "release_date",
@@ -4526,7 +4517,7 @@
45264517
"type": "library",
45274518
"bom-ref": "70-setuptools",
45284519
"name": "setuptools",
4529-
"version": "77.0.3",
4520+
"version": "78.1.0",
45304521
"supplier": {
45314522
"name": "Python Packaging Authority",
45324523
"contact": [
@@ -4535,8 +4526,14 @@
45354526
}
45364527
]
45374528
},
4538-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:77.0.3:*:*:*:*:*:*:*",
4529+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:78.1.0:*:*:*:*:*:*:*",
45394530
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
4531+
"hashes": [
4532+
{
4533+
"alg": "SHA-256",
4534+
"content": "3e386e96793c8702ae83d17b853fb93d3e09ef82ec62722e61da5cd22376dcd8"
4535+
}
4536+
],
45404537
"licenses": [
45414538
{
45424539
"license": {
@@ -4548,7 +4545,7 @@
45484545
],
45494546
"externalReferences": [
45504547
{
4551-
"url": "https://pypi.org/project/setuptools/77.0.3/#files",
4548+
"url": "https://pypi.org/project/setuptools/78.1.0/#files",
45524549
"type": "distribution",
45534550
"comment": "Download location for component"
45544551
},
@@ -4565,11 +4562,11 @@
45654562
"type": "log"
45664563
}
45674564
],
4568-
"purl": "pkg:pypi/setuptools@77.0.3",
4565+
"purl": "pkg:pypi/setuptools@78.1.0",
45694566
"properties": [
45704567
{
45714568
"name": "release_date",
4572-
"value": "2024-07-24T21:57:45Z"
4569+
"value": "2025-03-25T22:49:33Z"
45734570
},
45744571
{
45754572
"name": "language",

0 commit comments

Comments
 (0)