Skip to content

Commit a2f0235

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.11
1 parent a478bce commit a2f0235

File tree

2 files changed

+52
-57
lines changed

2 files changed

+52
-57
lines changed

‎sbom/cve-bin-tool-py3.11.json

Lines changed: 28 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:40e44969-b259-4931-9ea1-0af3fe41c424",
5+
"serialNumber": "urn:uuid:6651a745-49a2-4885-9df4-d4583c676a0e",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-02-17T00:37:07Z",
8+
"timestamp": "2025-02-24T00:37:35Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -624,7 +624,7 @@
624624
"type": "library",
625625
"bom-ref": "9-propcache",
626626
"name": "propcache",
627-
"version": "0.2.1",
627+
"version": "0.3.0",
628628
"supplier": {
629629
"name": "Andrew Svetlov",
630630
"contact": [
@@ -633,14 +633,8 @@
633633
}
634634
]
635635
},
636-
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.2.1:*:*:*:*:*:*:*",
636+
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.3.0:*:*:*:*:*:*:*",
637637
"description": "Accelerated property cache",
638-
"hashes": [
639-
{
640-
"alg": "SHA-256",
641-
"content": "6b3f39a85d671436ee3d12c017f8fdea38509e4f25b28eb25877293c98c243f6"
642-
}
643-
],
644638
"licenses": [
645639
{
646640
"license": {
@@ -657,7 +651,7 @@
657651
"comment": "Home page for project"
658652
},
659653
{
660-
"url": "https://pypi.org/project/propcache/0.2.1/#files",
654+
"url": "https://pypi.org/project/propcache/0.3.0/#files",
661655
"type": "distribution",
662656
"comment": "Download location for component"
663657
},
@@ -698,11 +692,11 @@
698692
"type": "vcs"
699693
}
700694
],
701-
"purl": "pkg:pypi/propcache@0.2.1",
695+
"purl": "pkg:pypi/propcache@0.3.0",
702696
"properties": [
703697
{
704698
"name": "release_date",
705-
"value": "2024-12-01T18:27:02Z"
699+
"value": "2024-06-07T18:52:13Z"
706700
},
707701
{
708702
"name": "language",
@@ -2515,7 +2509,7 @@
25152509
"type": "library",
25162510
"bom-ref": "39-cachetools",
25172511
"name": "cachetools",
2518-
"version": "5.5.1",
2512+
"version": "5.5.2",
25192513
"supplier": {
25202514
"name": "Thomas Kemmer",
25212515
"contact": [
@@ -2524,12 +2518,12 @@
25242518
}
25252519
]
25262520
},
2527-
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.5.1:*:*:*:*:*:*:*",
2521+
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.5.2:*:*:*:*:*:*:*",
25282522
"description": "Extensible memoizing collections and decorators",
25292523
"hashes": [
25302524
{
25312525
"alg": "SHA-256",
2532-
"content": "b76651fdc3b24ead3c648bbdeeb940c1b04d365b38b4af66788f9ec4a81d42bb"
2526+
"content": "d26a22bcc62eb95c3beabd9f1ee5e820d3d2704fe2967cbe350e20c8ffcd3f0a"
25332527
}
25342528
],
25352529
"licenses": [
@@ -2548,16 +2542,16 @@
25482542
"comment": "Home page for project"
25492543
},
25502544
{
2551-
"url": "https://pypi.org/project/cachetools/5.5.1/#files",
2545+
"url": "https://pypi.org/project/cachetools/5.5.2/#files",
25522546
"type": "distribution",
25532547
"comment": "Download location for component"
25542548
}
25552549
],
2556-
"purl": "pkg:pypi/[email protected].1",
2550+
"purl": "pkg:pypi/[email protected].2",
25572551
"properties": [
25582552
{
25592553
"name": "release_date",
2560-
"value": "2025-01-21T21:27:54Z"
2554+
"value": "2025-02-20T21:01:16Z"
25612555
},
25622556
{
25632557
"name": "language",
@@ -3177,7 +3171,7 @@
31773171
"type": "library",
31783172
"bom-ref": "50-rpds-py",
31793173
"name": "rpds-py",
3180-
"version": "0.22.3",
3174+
"version": "0.23.1",
31813175
"supplier": {
31823176
"name": "Julian Berman",
31833177
"contact": [
@@ -3186,12 +3180,15 @@
31863180
}
31873181
]
31883182
},
3189-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.22.3:*:*:*:*:*:*:*",
3183+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.23.1:*:*:*:*:*:*:*",
31903184
"description": "Python bindings to Rust's persistent data structures (rpds)",
3191-
"hashes": [
3185+
"licenses": [
31923186
{
3193-
"alg": "SHA-256",
3194-
"content": "6c7b99ca52c2c1752b544e310101b98a659b720b21db00e65edca34483259967"
3187+
"license": {
3188+
"id": "MIT",
3189+
"url": "https://opensource.org/license/mit/",
3190+
"acknowledgement": "concluded"
3191+
}
31953192
}
31963193
],
31973194
"externalReferences": [
@@ -3201,7 +3198,7 @@
32013198
"comment": "Home page for project"
32023199
},
32033200
{
3204-
"url": "https://pypi.org/project/rpds-py/0.22.3/#files",
3201+
"url": "https://pypi.org/project/rpds-py/0.23.1/#files",
32053202
"type": "distribution",
32063203
"comment": "Download location for component"
32073204
},
@@ -3230,11 +3227,11 @@
32303227
"type": "other"
32313228
}
32323229
],
3233-
"purl": "pkg:pypi/rpds-py@0.22.3",
3230+
"purl": "pkg:pypi/rpds-py@0.23.1",
32343231
"properties": [
32353232
{
32363233
"name": "release_date",
3237-
"value": "2024-12-04T15:31:31Z"
3234+
"value": "2025-01-25T08:48:14Z"
32383235
},
32393236
{
32403237
"name": "language",
@@ -4043,7 +4040,7 @@
40434040
"type": "library",
40444041
"bom-ref": "64-narwhals",
40454042
"name": "narwhals",
4046-
"version": "1.26.0",
4043+
"version": "1.27.1",
40474044
"supplier": {
40484045
"name": "Marco Gorelli",
40494046
"contact": [
@@ -4052,7 +4049,7 @@
40524049
}
40534050
]
40544051
},
4055-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.26.0:*:*:*:*:*:*:*",
4052+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.27.1:*:*:*:*:*:*:*",
40564053
"description": "Extremely lightweight compatibility layer between dataframe libraries",
40574054
"externalReferences": [
40584055
{
@@ -4061,7 +4058,7 @@
40614058
"comment": "Home page for project"
40624059
},
40634060
{
4064-
"url": "https://pypi.org/project/narwhals/1.26.0/#files",
4061+
"url": "https://pypi.org/project/narwhals/1.27.1/#files",
40654062
"type": "distribution",
40664063
"comment": "Download location for component"
40674064
},
@@ -4078,7 +4075,7 @@
40784075
"type": "issue-tracker"
40794076
}
40804077
],
4081-
"purl": "pkg:pypi/narwhals@1.26.0",
4078+
"purl": "pkg:pypi/narwhals@1.27.1",
40824079
"properties": [
40834080
{
40844081
"name": "release_date",

‎sbom/cve-bin-tool-py3.11.spdx

Lines changed: 24 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-5f160352-36eb-4d91-b842-36f9c32fd09d
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-da3c03f4-11e8-4169-9feb-c7b342c61cc2
66
LicenseListVersion: 3.25
77
Creator: Tool: sbom4python-0.12.1
8-
Created: 2025-02-17T00:37:00Z
8+
Created: 2025-02-24T00:37:23Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -199,18 +199,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-e
199199

200200
PackageName: propcache
201201
SPDXID: SPDXRef-9-propcache
202-
PackageVersion: 0.2.1
202+
PackageVersion: 0.3.0
203203
PrimaryPackagePurpose: LIBRARY
204204
PackageSupplier: Person: Andrew Svetlov ([email protected])
205-
PackageDownloadLocation: https://pypi.org/project/propcache/0.2.1/#files
205+
PackageDownloadLocation: https://pypi.org/project/propcache/0.3.0/#files
206206
FilesAnalyzed: false
207207
PackageHomePage: https://github.com/aio-libs/propcache
208-
PackageChecksum: SHA256: 6b3f39a85d671436ee3d12c017f8fdea38509e4f25b28eb25877293c98c243f6
209208
PackageLicenseDeclared: Apache-2.0
210209
PackageLicenseConcluded: Apache-2.0
211210
PackageCopyrightText: NOASSERTION
212211
PackageSummary: <text>Accelerated property cache</text>
213-
ReleaseDate: 2024-12-01T18:27:02Z
212+
ReleaseDate: 2024-06-07T18:52:13Z
214213
ExternalRef: OTHER other https://matrix.to/#/#aio-libs:matrix.org
215214
ExternalRef: OTHER other https://matrix.to/#/#aio-libs-space:matrix.org
216215
ExternalRef: OTHER other https://github.com/aio-libs/propcache/actions?query=branch:master
@@ -220,8 +219,8 @@ ExternalRef: OTHER log https://propcache.readthedocs.io/en/latest/changes/
220219
ExternalRef: OTHER other https://propcache.readthedocs.io
221220
ExternalRef: OTHER issue-tracker https://github.com/aio-libs/propcache/issues
222221
ExternalRef: OTHER vcs https://github.com/aio-libs/propcache
223-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/propcache@0.2.1
224-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:propcache:0.2.1:*:*:*:*:*:*:*
222+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/propcache@0.3.0
223+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:propcache:0.3.0:*:*:*:*:*:*:*
225224
#####
226225

227226
PackageName: yarl
@@ -800,20 +799,20 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.17
800799

801800
PackageName: cachetools
802801
SPDXID: SPDXRef-39-cachetools
803-
PackageVersion: 5.5.1
802+
PackageVersion: 5.5.2
804803
PrimaryPackagePurpose: LIBRARY
805804
PackageSupplier: Person: Thomas Kemmer ([email protected])
806-
PackageDownloadLocation: https://pypi.org/project/cachetools/5.5.1/#files
805+
PackageDownloadLocation: https://pypi.org/project/cachetools/5.5.2/#files
807806
FilesAnalyzed: false
808807
PackageHomePage: https://github.com/tkem/cachetools/
809-
PackageChecksum: SHA256: b76651fdc3b24ead3c648bbdeeb940c1b04d365b38b4af66788f9ec4a81d42bb
808+
PackageChecksum: SHA256: d26a22bcc62eb95c3beabd9f1ee5e820d3d2704fe2967cbe350e20c8ffcd3f0a
810809
PackageLicenseDeclared: MIT
811810
PackageLicenseConcluded: MIT
812811
PackageCopyrightText: NOASSERTION
813812
PackageSummary: <text>Extensible memoizing collections and decorators</text>
814-
ReleaseDate: 2025-01-21T21:27:54Z
815-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
816-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.5.1:*:*:*:*:*:*:*
813+
ReleaseDate: 2025-02-20T21:01:16Z
814+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
815+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.5.2:*:*:*:*:*:*:*
817816
#####
818817

819818
PackageName: google-auth-httplib2
@@ -1053,26 +1052,25 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.36.2:*:*:*
10531052

10541053
PackageName: rpds-py
10551054
SPDXID: SPDXRef-50-rpds-py
1056-
PackageVersion: 0.22.3
1055+
PackageVersion: 0.23.1
10571056
PrimaryPackagePurpose: LIBRARY
10581057
PackageSupplier: Person: Julian Berman ([email protected])
1059-
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.22.3/#files
1058+
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.23.1/#files
10601059
FilesAnalyzed: false
10611060
PackageHomePage: https://github.com/crate-py/rpds
1062-
PackageChecksum: SHA256: 6c7b99ca52c2c1752b544e310101b98a659b720b21db00e65edca34483259967
1063-
PackageLicenseDeclared: NOASSERTION
1064-
PackageLicenseConcluded: NOASSERTION
1061+
PackageLicenseDeclared: MIT
1062+
PackageLicenseConcluded: MIT
10651063
PackageCopyrightText: NOASSERTION
10661064
PackageSummary: <text>Python bindings to Rust's persistent data structures (rpds)</text>
1067-
ReleaseDate: 2024-12-04T15:31:31Z
1065+
ReleaseDate: 2025-01-25T08:48:14Z
10681066
ExternalRef: OTHER documentation https://rpds.readthedocs.io/
10691067
ExternalRef: OTHER issue-tracker https://github.com/crate-py/rpds/issues/
10701068
ExternalRef: OTHER other https://github.com/sponsors/Julian
10711069
ExternalRef: OTHER other https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link
10721070
ExternalRef: OTHER vcs https://github.com/crate-py/rpds
10731071
ExternalRef: OTHER other https://github.com/orium/rpds
1074-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.22.3
1075-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.22.3:*:*:*:*:*:*:*
1072+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.23.1
1073+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.23.1:*:*:*:*:*:*:*
10761074
#####
10771075

10781076
PackageName: lib4sbom
@@ -1331,10 +1329,10 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:6.0.0:*:*:*:*:*:*:*
13311329

13321330
PackageName: narwhals
13331331
SPDXID: SPDXRef-64-narwhals
1334-
PackageVersion: 1.26.0
1332+
PackageVersion: 1.27.1
13351333
PrimaryPackagePurpose: LIBRARY
13361334
PackageSupplier: Person: Marco Gorelli ([email protected])
1337-
PackageDownloadLocation: https://pypi.org/project/narwhals/1.26.0/#files
1335+
PackageDownloadLocation: https://pypi.org/project/narwhals/1.27.1/#files
13381336
FilesAnalyzed: false
13391337
PackageHomePage: https://github.com/narwhals-dev/narwhals
13401338
PackageLicenseDeclared: NOASSERTION
@@ -1345,8 +1343,8 @@ ReleaseDate: 2025-01-28T19:33:47Z
13451343
ExternalRef: OTHER documentation https://narwhals-dev.github.io/narwhals/
13461344
ExternalRef: OTHER vcs https://github.com/narwhals-dev/narwhals
13471345
ExternalRef: OTHER issue-tracker https://github.com/narwhals-dev/narwhals/issues
1348-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@1.26.0
1349-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:1.26.0:*:*:*:*:*:*:*
1346+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@1.27.1
1347+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:1.27.1:*:*:*:*:*:*:*
13501348
#####
13511349

13521350
PackageName: requests

0 commit comments

Comments
 (0)