Skip to content

Commit 8e6aef6

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.10
1 parent 0c481e4 commit 8e6aef6

File tree

2 files changed

+51
-50
lines changed

2 files changed

+51
-50
lines changed

‎sbom/cve-bin-tool-py3.10.json

Lines changed: 28 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:02457095-edd2-4ba8-903c-d14d6ef3cb7c",
5+
"serialNumber": "urn:uuid:e14c6f48-6e1d-4499-bc10-f74b9a469ab7",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-02-03T00:35:26Z",
8+
"timestamp": "2025-02-10T00:36:20Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -89,12 +89,12 @@
8989
"type": "library",
9090
"bom-ref": "2-aiohttp",
9191
"name": "aiohttp",
92-
"version": "3.11.11",
92+
"version": "3.11.12",
9393
"description": "Async http client/server framework (asyncio)",
9494
"hashes": [
9595
{
9696
"alg": "SHA-256",
97-
"content": "a60804bff28662cbcf340a4d61598891f12eea3a66af48ecfdc975ceec21e3c8"
97+
"content": "aa8a8caca81c0a3e765f19c6953416c58e2f4cc1b84829af01dd1c771bb2f91f"
9898
}
9999
],
100100
"licenses": [
@@ -113,7 +113,7 @@
113113
"comment": "Home page for project"
114114
},
115115
{
116-
"url": "https://pypi.org/project/aiohttp/3.11.11/#files",
116+
"url": "https://pypi.org/project/aiohttp/3.11.12/#files",
117117
"type": "distribution",
118118
"comment": "Download location for component"
119119
},
@@ -150,11 +150,11 @@
150150
"type": "vcs"
151151
}
152152
],
153-
"purl": "pkg:pypi/[email protected].11",
153+
"purl": "pkg:pypi/[email protected].12",
154154
"properties": [
155155
{
156156
"name": "release_date",
157-
"value": "2024-12-18T21:17:26Z"
157+
"value": "2025-02-06T00:25:21Z"
158158
},
159159
{
160160
"name": "language",
@@ -170,7 +170,7 @@
170170
"type": "library",
171171
"bom-ref": "3-aiohappyeyeballs",
172172
"name": "aiohappyeyeballs",
173-
"version": "2.4.4",
173+
"version": "2.4.6",
174174
"supplier": {
175175
"name": "J. Nick Koston",
176176
"contact": [
@@ -179,12 +179,12 @@
179179
}
180180
]
181181
},
182-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.4:*:*:*:*:*:*:*",
182+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.6:*:*:*:*:*:*:*",
183183
"description": "Happy Eyeballs for asyncio",
184184
"hashes": [
185185
{
186186
"alg": "SHA-256",
187-
"content": "a980909d50efcd44795c4afeca523296716d50cd756ddca6af8c65b996e27de8"
187+
"content": "147ec992cf873d74f5062644332c539fcd42956dc69453fe5204195e560517e1"
188188
}
189189
],
190190
"licenses": [
@@ -198,12 +198,7 @@
198198
],
199199
"externalReferences": [
200200
{
201-
"url": "https://github.com/aio-libs/aiohappyeyeballs",
202-
"type": "website",
203-
"comment": "Home page for project"
204-
},
205-
{
206-
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.4/#files",
201+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.6/#files",
207202
"type": "distribution",
208203
"comment": "Download location for component"
209204
},
@@ -224,11 +219,11 @@
224219
"type": "vcs"
225220
}
226221
],
227-
"purl": "pkg:pypi/[email protected].4",
222+
"purl": "pkg:pypi/[email protected].6",
228223
"properties": [
229224
{
230225
"name": "release_date",
231-
"value": "2024-11-30T18:43:39Z"
226+
"value": "2025-02-07T17:53:10Z"
232227
},
233228
{
234229
"name": "language",
@@ -951,7 +946,7 @@
951946
"type": "library",
952947
"bom-ref": "13-beautifulsoup4",
953948
"name": "beautifulsoup4",
954-
"version": "4.13.0",
949+
"version": "4.13.3",
955950
"supplier": {
956951
"name": "Leonard Richardson",
957952
"contact": [
@@ -960,8 +955,14 @@
960955
}
961956
]
962957
},
963-
"cpe": "cpe:2.3:a:leonard_richardson:beautifulsoup4:4.13.0:*:*:*:*:*:*:*",
958+
"cpe": "cpe:2.3:a:leonard_richardson:beautifulsoup4:4.13.3:*:*:*:*:*:*:*",
964959
"description": "Screen-scraping library",
960+
"hashes": [
961+
{
962+
"alg": "SHA-256",
963+
"content": "99045d7d3f08f91f0d656bc9b7efbae189426cd913d830294a15eefa0ea4df16"
964+
}
965+
],
965966
"licenses": [
966967
{
967968
"license": {
@@ -978,7 +979,7 @@
978979
"comment": "Home page for project"
979980
},
980981
{
981-
"url": "https://pypi.org/project/beautifulsoup4/4.13.0/#files",
982+
"url": "https://pypi.org/project/beautifulsoup4/4.13.3/#files",
982983
"type": "distribution",
983984
"comment": "Download location for component"
984985
},
@@ -987,11 +988,11 @@
987988
"type": "other"
988989
}
989990
],
990-
"purl": "pkg:pypi/[email protected].0",
991+
"purl": "pkg:pypi/[email protected].3",
991992
"properties": [
992993
{
993994
"name": "release_date",
994-
"value": "2024-09-15T18:07:37Z"
995+
"value": "2025-02-04T20:05:03Z"
995996
},
996997
{
997998
"name": "language",
@@ -4120,7 +4121,7 @@
41204121
"type": "library",
41214122
"bom-ref": "65-narwhals",
41224123
"name": "narwhals",
4123-
"version": "1.24.2",
4124+
"version": "1.25.2",
41244125
"supplier": {
41254126
"name": "Marco Gorelli",
41264127
"contact": [
@@ -4129,7 +4130,7 @@
41294130
}
41304131
]
41314132
},
4132-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.24.2:*:*:*:*:*:*:*",
4133+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.25.2:*:*:*:*:*:*:*",
41334134
"description": "Extremely lightweight compatibility layer between dataframe libraries",
41344135
"externalReferences": [
41354136
{
@@ -4138,7 +4139,7 @@
41384139
"comment": "Home page for project"
41394140
},
41404141
{
4141-
"url": "https://pypi.org/project/narwhals/1.24.2/#files",
4142+
"url": "https://pypi.org/project/narwhals/1.25.2/#files",
41424143
"type": "distribution",
41434144
"comment": "Download location for component"
41444145
},
@@ -4155,7 +4156,7 @@
41554156
"type": "issue-tracker"
41564157
}
41574158
],
4158-
"purl": "pkg:pypi/narwhals@1.24.2",
4159+
"purl": "pkg:pypi/narwhals@1.25.2",
41594160
"properties": [
41604161
{
41614162
"name": "release_date",

‎sbom/cve-bin-tool-py3.10.spdx

Lines changed: 23 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-1aef587d-f8f0-45d3-b5bf-c611ad560753
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-d53e0a1f-9480-4f44-b321-0f5c9465784d
66
LicenseListVersion: 3.25
77
Creator: Tool: sbom4python-0.12.1
8-
Created: 2025-02-03T00:35:18Z
8+
Created: 2025-02-10T00:36:14Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -29,18 +29,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.4:*:*:*:*:*:*
2929

3030
PackageName: aiohttp
3131
SPDXID: SPDXRef-2-aiohttp
32-
PackageVersion: 3.11.11
32+
PackageVersion: 3.11.12
3333
PrimaryPackagePurpose: LIBRARY
3434
PackageSupplier: NOASSERTION
35-
PackageDownloadLocation: https://pypi.org/project/aiohttp/3.11.11/#files
35+
PackageDownloadLocation: https://pypi.org/project/aiohttp/3.11.12/#files
3636
FilesAnalyzed: false
3737
PackageHomePage: https://github.com/aio-libs/aiohttp
38-
PackageChecksum: SHA256: a60804bff28662cbcf340a4d61598891f12eea3a66af48ecfdc975ceec21e3c8
38+
PackageChecksum: SHA256: aa8a8caca81c0a3e765f19c6953416c58e2f4cc1b84829af01dd1c771bb2f91f
3939
PackageLicenseDeclared: Apache-2.0
4040
PackageLicenseConcluded: Apache-2.0
4141
PackageCopyrightText: NOASSERTION
4242
PackageSummary: <text>Async http client/server framework (asyncio)</text>
43-
ReleaseDate: 2024-12-18T21:17:26Z
43+
ReleaseDate: 2025-02-06T00:25:21Z
4444
ExternalRef: OTHER other https://matrix.to/#/#aio-libs:matrix.org
4545
ExternalRef: OTHER other https://matrix.to/#/#aio-libs-space:matrix.org
4646
ExternalRef: OTHER build-system https://github.com/aio-libs/aiohttp/actions?query=workflow%3ACI
@@ -49,29 +49,28 @@ ExternalRef: OTHER log https://docs.aiohttp.org/en/stable/changes.html
4949
ExternalRef: OTHER other https://docs.aiohttp.org
5050
ExternalRef: OTHER issue-tracker https://github.com/aio-libs/aiohttp/issues
5151
ExternalRef: OTHER vcs https://github.com/aio-libs/aiohttp
52-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].11
52+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].12
5353
#####
5454

5555
PackageName: aiohappyeyeballs
5656
SPDXID: SPDXRef-3-aiohappyeyeballs
57-
PackageVersion: 2.4.4
57+
PackageVersion: 2.4.6
5858
PrimaryPackagePurpose: LIBRARY
5959
PackageSupplier: Organization: J. Nick Koston ([email protected])
60-
PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.4/#files
60+
PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.6/#files
6161
FilesAnalyzed: false
62-
PackageHomePage: https://github.com/aio-libs/aiohappyeyeballs
63-
PackageChecksum: SHA256: a980909d50efcd44795c4afeca523296716d50cd756ddca6af8c65b996e27de8
62+
PackageChecksum: SHA256: 147ec992cf873d74f5062644332c539fcd42956dc69453fe5204195e560517e1
6463
PackageLicenseDeclared: PSF-2.0
6564
PackageLicenseConcluded: PSF-2.0
6665
PackageCopyrightText: NOASSERTION
6766
PackageSummary: <text>Happy Eyeballs for asyncio</text>
68-
ReleaseDate: 2024-11-30T18:43:39Z
67+
ReleaseDate: 2025-02-07T17:53:10Z
6968
ExternalRef: OTHER issue-tracker https://github.com/aio-libs/aiohappyeyeballs/issues
7069
ExternalRef: OTHER log https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md
7170
ExternalRef: OTHER documentation https://aiohappyeyeballs.readthedocs.io
7271
ExternalRef: OTHER vcs https://github.com/aio-libs/aiohappyeyeballs
73-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
74-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.4:*:*:*:*:*:*:*
72+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].6
73+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.6:*:*:*:*:*:*:*
7574
#####
7675

7776
PackageName: aiosignal
@@ -298,21 +297,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kim_davies:idna:3.10:*:*:*:*:*:*:*
298297

299298
PackageName: beautifulsoup4
300299
SPDXID: SPDXRef-13-beautifulsoup4
301-
PackageVersion: 4.13.0
300+
PackageVersion: 4.13.3
302301
PrimaryPackagePurpose: LIBRARY
303302
PackageSupplier: Person: Leonard Richardson ([email protected])
304-
PackageDownloadLocation: https://pypi.org/project/beautifulsoup4/4.13.0/#files
303+
PackageDownloadLocation: https://pypi.org/project/beautifulsoup4/4.13.3/#files
305304
FilesAnalyzed: false
306305
PackageHomePage: https://www.crummy.com/software/BeautifulSoup/bs4/
306+
PackageChecksum: SHA256: 99045d7d3f08f91f0d656bc9b7efbae189426cd913d830294a15eefa0ea4df16
307307
PackageLicenseDeclared: NOASSERTION
308308
PackageLicenseConcluded: MIT
309309
PackageLicenseComments: <text>beautifulsoup4 declares MIT License which is not currently a valid SPDX License identifier or expression.</text>
310310
PackageCopyrightText: NOASSERTION
311311
PackageSummary: <text>Screen-scraping library</text>
312-
ReleaseDate: 2024-09-15T18:07:37Z
312+
ReleaseDate: 2025-02-04T20:05:03Z
313313
ExternalRef: OTHER other https://www.crummy.com/software/BeautifulSoup/bs4/download/
314-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].0
315-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:leonard_richardson:beautifulsoup4:4.13.0:*:*:*:*:*:*:*
314+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].3
315+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:leonard_richardson:beautifulsoup4:4.13.3:*:*:*:*:*:*:*
316316
#####
317317

318318
PackageName: soupsieve
@@ -1355,10 +1355,10 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:6.0.0:*:*:*:*:*:*:*
13551355

13561356
PackageName: narwhals
13571357
SPDXID: SPDXRef-65-narwhals
1358-
PackageVersion: 1.24.2
1358+
PackageVersion: 1.25.2
13591359
PrimaryPackagePurpose: LIBRARY
13601360
PackageSupplier: Person: Marco Gorelli ([email protected])
1361-
PackageDownloadLocation: https://pypi.org/project/narwhals/1.24.2/#files
1361+
PackageDownloadLocation: https://pypi.org/project/narwhals/1.25.2/#files
13621362
FilesAnalyzed: false
13631363
PackageHomePage: https://github.com/narwhals-dev/narwhals
13641364
PackageLicenseDeclared: NOASSERTION
@@ -1369,8 +1369,8 @@ ReleaseDate: 2025-01-28T19:33:47Z
13691369
ExternalRef: OTHER documentation https://narwhals-dev.github.io/narwhals/
13701370
ExternalRef: OTHER vcs https://github.com/narwhals-dev/narwhals
13711371
ExternalRef: OTHER issue-tracker https://github.com/narwhals-dev/narwhals/issues
1372-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@1.24.2
1373-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:1.24.2:*:*:*:*:*:*:*
1372+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@1.25.2
1373+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:1.25.2:*:*:*:*:*:*:*
13741374
#####
13751375

13761376
PackageName: requests

0 commit comments

Comments
 (0)