Skip to content

Commit a67f656

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.10
1 parent c90157e commit a67f656

File tree

2 files changed

+80
-103
lines changed

2 files changed

+80
-103
lines changed

‎sbom/cve-bin-tool-py3.10.json

Lines changed: 41 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:b8d83946-2d28-40f4-a2b6-1e96486676ff",
5+
"serialNumber": "urn:uuid:fd5b4bda-246c-4977-8b52-dc55bb5bdbf9",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-05-26T00:41:48Z",
8+
"timestamp": "2025-06-02T00:41:53Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -89,8 +89,14 @@
8989
"type": "library",
9090
"bom-ref": "2-aiohttp",
9191
"name": "aiohttp",
92-
"version": "3.12.0",
92+
"version": "3.12.6",
9393
"description": "Async http client/server framework (asyncio)",
94+
"hashes": [
95+
{
96+
"alg": "SHA-256",
97+
"content": "77ba53286c89486e8b02fb47352a5a8270bab1084e2a43fe8e35eb261befda13"
98+
}
99+
],
94100
"licenses": [
95101
{
96102
"license": {
@@ -107,7 +113,7 @@
107113
"comment": "Home page for project"
108114
},
109115
{
110-
"url": "https://pypi.org/project/aiohttp/3.12.0/#files",
116+
"url": "https://pypi.org/project/aiohttp/3.12.6/#files",
111117
"type": "distribution",
112118
"comment": "Download location for component"
113119
},
@@ -144,11 +150,11 @@
144150
"type": "vcs"
145151
}
146152
],
147-
"purl": "pkg:pypi/[email protected].0",
153+
"purl": "pkg:pypi/[email protected].6",
148154
"properties": [
149155
{
150156
"name": "release_date",
151-
"value": "2024-09-17T18:57:44Z"
157+
"value": "2025-05-31T05:54:32Z"
152158
},
153159
{
154160
"name": "language",
@@ -2999,7 +3005,7 @@
29993005
"type": "library",
30003006
"bom-ref": "45-zipp",
30013007
"name": "zipp",
3002-
"version": "3.21.0",
3008+
"version": "3.22.0",
30033009
"supplier": {
30043010
"name": "Jason R .",
30053011
"contact": [
@@ -3008,26 +3014,17 @@
30083014
}
30093015
]
30103016
},
3011-
"cpe": "cpe:2.3:a:jason_r.:zipp:3.21.0:*:*:*:*:*:*:*",
3017+
"cpe": "cpe:2.3:a:jason_r.:zipp:3.22.0:*:*:*:*:*:*:*",
30123018
"description": "Backport of pathlib-compatible object wrapper for zip files",
30133019
"hashes": [
30143020
{
30153021
"alg": "SHA-256",
3016-
"content": "ac1bbe05fd2991f160ebce24ffbac5f6d11d83dc90891255885223d42b3cd931"
3017-
}
3018-
],
3019-
"licenses": [
3020-
{
3021-
"license": {
3022-
"id": "MIT",
3023-
"url": "https://opensource.org/license/mit/",
3024-
"acknowledgement": "concluded"
3025-
}
3022+
"content": "fe208f65f2aca48b81f9e6fd8cf7b8b32c26375266b009b413d45306b6148343"
30263023
}
30273024
],
30283025
"externalReferences": [
30293026
{
3030-
"url": "https://pypi.org/project/zipp/3.21.0/#files",
3027+
"url": "https://pypi.org/project/zipp/3.22.0/#files",
30313028
"type": "distribution",
30323029
"comment": "Download location for component"
30333030
},
@@ -3036,11 +3033,11 @@
30363033
"type": "vcs"
30373034
}
30383035
],
3039-
"purl": "pkg:pypi/zipp@3.21.0",
3036+
"purl": "pkg:pypi/zipp@3.22.0",
30403037
"properties": [
30413038
{
30423039
"name": "release_date",
3043-
"value": "2024-11-10T15:05:19Z"
3040+
"value": "2025-05-26T14:46:30Z"
30443041
},
30453042
{
30463043
"name": "language",
@@ -3049,10 +3046,6 @@
30493046
{
30503047
"name": "python_version",
30513048
"value": "3.10.17"
3052-
},
3053-
{
3054-
"name": "License Comments",
3055-
"value": "zipp declares MIT License which is not currently a valid SPDX License identifier or expression."
30563049
}
30573050
]
30583051
},
@@ -3187,7 +3180,7 @@
31873180
"type": "library",
31883181
"bom-ref": "48-jsonschema",
31893182
"name": "jsonschema",
3190-
"version": "4.23.0",
3183+
"version": "4.24.0",
31913184
"supplier": {
31923185
"name": "Julian Berman",
31933186
"contact": [
@@ -3196,21 +3189,12 @@
31963189
}
31973190
]
31983191
},
3199-
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.23.0:*:*:*:*:*:*:*",
3192+
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.24.0:*:*:*:*:*:*:*",
32003193
"description": "An implementation of JSON Schema validation for Python",
32013194
"hashes": [
32023195
{
32033196
"alg": "SHA-256",
3204-
"content": "fbadb6f8b144a8f8cf9f0b89ba94501d143e50411a1278633f56a7acf7fd5566"
3205-
}
3206-
],
3207-
"licenses": [
3208-
{
3209-
"license": {
3210-
"id": "MIT",
3211-
"url": "https://opensource.org/license/mit/",
3212-
"acknowledgement": "concluded"
3213-
}
3197+
"content": "a462455f19f5faf404a7902952b6f0e3ce868f3ee09a359b05eca6673bd8412d"
32143198
}
32153199
],
32163200
"externalReferences": [
@@ -3220,7 +3204,7 @@
32203204
"comment": "Home page for project"
32213205
},
32223206
{
3223-
"url": "https://pypi.org/project/jsonschema/4.23.0/#files",
3207+
"url": "https://pypi.org/project/jsonschema/4.24.0/#files",
32243208
"type": "distribution",
32253209
"comment": "Download location for component"
32263210
},
@@ -3249,11 +3233,11 @@
32493233
"type": "vcs"
32503234
}
32513235
],
3252-
"purl": "pkg:pypi/jsonschema@4.23.0",
3236+
"purl": "pkg:pypi/jsonschema@4.24.0",
32533237
"properties": [
32543238
{
32553239
"name": "release_date",
3256-
"value": "2024-07-08T18:40:00Z"
3240+
"value": "2025-05-26T18:48:08Z"
32573241
},
32583242
{
32593243
"name": "language",
@@ -4185,7 +4169,7 @@
41854169
"type": "library",
41864170
"bom-ref": "63-plotly",
41874171
"name": "plotly",
4188-
"version": "6.1.1",
4172+
"version": "6.1.2",
41894173
"supplier": {
41904174
"name": "Chris P",
41914175
"contact": [
@@ -4194,12 +4178,12 @@
41944178
}
41954179
]
41964180
},
4197-
"cpe": "cpe:2.3:a:chris_p:plotly:6.1.1:*:*:*:*:*:*:*",
4181+
"cpe": "cpe:2.3:a:chris_p:plotly:6.1.2:*:*:*:*:*:*:*",
41984182
"description": "An open-source interactive data visualization library for Python",
41994183
"hashes": [
42004184
{
42014185
"alg": "SHA-256",
4202-
"content": "9cca7167406ebf7ff541422738402159ec3621a608ff7b3e2f025573a1c76225"
4186+
"content": "f1548a8ed9158d59e03d7fed548c7db5549f3130d9ae19293c8638c202648f6d"
42034187
}
42044188
],
42054189
"externalReferences": [
@@ -4209,7 +4193,7 @@
42094193
"comment": "Home page for project"
42104194
},
42114195
{
4212-
"url": "https://pypi.org/project/plotly/6.1.1/#files",
4196+
"url": "https://pypi.org/project/plotly/6.1.2/#files",
42134197
"type": "distribution",
42144198
"comment": "Download location for component"
42154199
},
@@ -4226,11 +4210,11 @@
42264210
"type": "log"
42274211
}
42284212
],
4229-
"purl": "pkg:pypi/[email protected].1",
4213+
"purl": "pkg:pypi/[email protected].2",
42304214
"properties": [
42314215
{
42324216
"name": "release_date",
4233-
"value": "2025-05-20T20:09:26Z"
4217+
"value": "2025-05-27T20:21:46Z"
42344218
},
42354219
{
42364220
"name": "language",
@@ -4250,7 +4234,7 @@
42504234
"type": "library",
42514235
"bom-ref": "64-narwhals",
42524236
"name": "narwhals",
4253-
"version": "1.40.0",
4237+
"version": "1.41.0",
42544238
"supplier": {
42554239
"name": "Marco Gorelli",
42564240
"contact": [
@@ -4259,14 +4243,8 @@
42594243
}
42604244
]
42614245
},
4262-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.40.0:*:*:*:*:*:*:*",
4246+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.41.0:*:*:*:*:*:*:*",
42634247
"description": "Extremely lightweight compatibility layer between dataframe libraries",
4264-
"hashes": [
4265-
{
4266-
"alg": "SHA-256",
4267-
"content": "1e6c731811d01c61147c52433b4d4edfb6511aaf2c859aa01c2e8ca6ff4d27e5"
4268-
}
4269-
],
42704248
"licenses": [
42714249
{
42724250
"license": {
@@ -4283,7 +4261,7 @@
42834261
"comment": "Home page for project"
42844262
},
42854263
{
4286-
"url": "https://pypi.org/project/narwhals/1.40.0/#files",
4264+
"url": "https://pypi.org/project/narwhals/1.41.0/#files",
42874265
"type": "distribution",
42884266
"comment": "Download location for component"
42894267
},
@@ -4300,11 +4278,11 @@
43004278
"type": "issue-tracker"
43014279
}
43024280
],
4303-
"purl": "pkg:pypi/narwhals@1.40.0",
4281+
"purl": "pkg:pypi/narwhals@1.41.0",
43044282
"properties": [
43054283
{
43064284
"name": "release_date",
4307-
"value": "2025-05-19T07:44:10Z"
4285+
"value": "2025-05-27T20:21:46Z"
43084286
},
43094287
{
43104288
"name": "language",
@@ -4713,7 +4691,7 @@
47134691
"type": "library",
47144692
"bom-ref": "71-setuptools",
47154693
"name": "setuptools",
4716-
"version": "80.8.0",
4694+
"version": "80.9.0",
47174695
"supplier": {
47184696
"name": "Python Packaging Authority",
47194697
"contact": [
@@ -4722,17 +4700,17 @@
47224700
}
47234701
]
47244702
},
4725-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:80.8.0:*:*:*:*:*:*:*",
4703+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:80.9.0:*:*:*:*:*:*:*",
47264704
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
47274705
"hashes": [
47284706
{
47294707
"alg": "SHA-256",
4730-
"content": "95a60484590d24103af13b686121328cc2736bee85de8936383111e421b9edc0"
4708+
"content": "062d34222ad13e0cc312a4c02d73f059e86a4acbfbdea8f8f76b28c99f306922"
47314709
}
47324710
],
47334711
"externalReferences": [
47344712
{
4735-
"url": "https://pypi.org/project/setuptools/80.8.0/#files",
4713+
"url": "https://pypi.org/project/setuptools/80.9.0/#files",
47364714
"type": "distribution",
47374715
"comment": "Download location for component"
47384716
},
@@ -4749,11 +4727,11 @@
47494727
"type": "log"
47504728
}
47514729
],
4752-
"purl": "pkg:pypi/setuptools@80.8.0",
4730+
"purl": "pkg:pypi/setuptools@80.9.0",
47534731
"properties": [
47544732
{
47554733
"name": "release_date",
4756-
"value": "2025-05-20T14:02:51Z"
4734+
"value": "2025-05-27T00:56:49Z"
47574735
},
47584736
{
47594737
"name": "language",

0 commit comments

Comments
 (0)