Skip to content

Commit b84e811

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.11 (#5008)
Co-authored-by: GitHub <[email protected]>
1 parent 4316ab4 commit b84e811

File tree

2 files changed

+68
-75
lines changed

2 files changed

+68
-75
lines changed

‎sbom/cve-bin-tool-py3.11.json

Lines changed: 34 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:2068af70-d1c3-4d09-a939-3b19482b7e97",
5+
"serialNumber": "urn:uuid:17f70096-0b7b-431d-be85-859dff9fe279",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-03-31T00:40:44Z",
8+
"timestamp": "2025-04-07T00:38:38Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -89,14 +89,8 @@
8989
"type": "library",
9090
"bom-ref": "2-aiohttp",
9191
"name": "aiohttp",
92-
"version": "3.11.14",
92+
"version": "3.11.16",
9393
"description": "Async http client/server framework (asyncio)",
94-
"hashes": [
95-
{
96-
"alg": "SHA-256",
97-
"content": "e2bc827c01f75803de77b134afdbf74fa74b62970eafdf190f3244931d7a5c0d"
98-
}
99-
],
10094
"licenses": [
10195
{
10296
"license": {
@@ -113,7 +107,7 @@
113107
"comment": "Home page for project"
114108
},
115109
{
116-
"url": "https://pypi.org/project/aiohttp/3.11.14/#files",
110+
"url": "https://pypi.org/project/aiohttp/3.11.16/#files",
117111
"type": "distribution",
118112
"comment": "Download location for component"
119113
},
@@ -150,11 +144,11 @@
150144
"type": "vcs"
151145
}
152146
],
153-
"purl": "pkg:pypi/[email protected].14",
147+
"purl": "pkg:pypi/[email protected].16",
154148
"properties": [
155149
{
156150
"name": "release_date",
157-
"value": "2025-03-17T02:42:42Z"
151+
"value": "2024-09-17T18:57:44Z"
158152
},
159153
{
160154
"name": "language",
@@ -461,7 +455,7 @@
461455
"type": "library",
462456
"bom-ref": "7-multidict",
463457
"name": "multidict",
464-
"version": "6.2.0",
458+
"version": "6.3.2",
465459
"supplier": {
466460
"name": "Andrew Svetlov",
467461
"contact": [
@@ -470,12 +464,12 @@
470464
}
471465
]
472466
},
473-
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.2.0:*:*:*:*:*:*:*",
467+
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.3.2:*:*:*:*:*:*:*",
474468
"description": "multidict implementation",
475469
"hashes": [
476470
{
477471
"alg": "SHA-256",
478-
"content": "b9f6392d98c0bd70676ae41474e2eecf4c7150cb419237a41f8f96043fcb81d1"
472+
"content": "8b3dc0eec9304fa04d84a51ea13b0ec170bace5b7ddeaac748149efd316f1504"
479473
}
480474
],
481475
"licenses": [
@@ -494,7 +488,7 @@
494488
"comment": "Home page for project"
495489
},
496490
{
497-
"url": "https://pypi.org/project/multidict/6.2.0/#files",
491+
"url": "https://pypi.org/project/multidict/6.3.2/#files",
498492
"type": "distribution",
499493
"comment": "Download location for component"
500494
},
@@ -535,11 +529,11 @@
535529
"type": "vcs"
536530
}
537531
],
538-
"purl": "pkg:pypi/multidict@6.2.0",
532+
"purl": "pkg:pypi/multidict@6.3.2",
539533
"properties": [
540534
{
541535
"name": "release_date",
542-
"value": "2025-03-17T16:53:32Z"
536+
"value": "2025-04-03T19:41:19Z"
543537
},
544538
{
545539
"name": "language",
@@ -555,7 +549,7 @@
555549
"type": "library",
556550
"bom-ref": "8-typing-extensions",
557551
"name": "typing-extensions",
558-
"version": "4.13.0",
552+
"version": "4.13.1",
559553
"supplier": {
560554
"name": "Guido van Jukka ukasz Michael",
561555
"contact": [
@@ -564,12 +558,12 @@
564558
}
565559
]
566560
},
567-
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.13.0:*:*:*:*:*:*:*",
561+
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.13.1:*:*:*:*:*:*:*",
568562
"description": "Backported and Experimental Type Hints for Python 3.8+",
569563
"hashes": [
570564
{
571565
"alg": "SHA-256",
572-
"content": "c8dd92cc0d6425a97c18fbb9d1954e5ff92c1ca881a309c45f06ebc0b79058e5"
566+
"content": "4b6cf02909eb5495cfbc3f6e8fd49217e6cc7944e145cdda8caa3734777f9e69"
573567
}
574568
],
575569
"externalReferences": [
@@ -579,7 +573,7 @@
579573
"comment": "Home page for project"
580574
},
581575
{
582-
"url": "https://pypi.org/project/typing-extensions/4.13.0/#files",
576+
"url": "https://pypi.org/project/typing-extensions/4.13.1/#files",
583577
"type": "distribution",
584578
"comment": "Download location for component"
585579
},
@@ -604,11 +598,11 @@
604598
"type": "vcs"
605599
}
606600
],
607-
"purl": "pkg:pypi/[email protected].0",
601+
"purl": "pkg:pypi/[email protected].1",
608602
"properties": [
609603
{
610604
"name": "release_date",
611-
"value": "2025-03-26T03:49:40Z"
605+
"value": "2025-04-03T16:11:19Z"
612606
},
613607
{
614608
"name": "language",
@@ -718,7 +712,7 @@
718712
"type": "library",
719713
"bom-ref": "10-yarl",
720714
"name": "yarl",
721-
"version": "1.18.3",
715+
"version": "1.19.0",
722716
"supplier": {
723717
"name": "Andrew Svetlov",
724718
"contact": [
@@ -727,12 +721,12 @@
727721
}
728722
]
729723
},
730-
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.18.3:*:*:*:*:*:*:*",
724+
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.19.0:*:*:*:*:*:*:*",
731725
"description": "Yet another URL library",
732726
"hashes": [
733727
{
734728
"alg": "SHA-256",
735-
"content": "7df647e8edd71f000a5208fe6ff8c382a1de8edfbccdbbfe649d263de07d8c34"
729+
"content": "0bae32f8ebd35c04d6528cedb4a26b8bf25339d3616b04613b97347f919b76d3"
736730
}
737731
],
738732
"licenses": [
@@ -751,7 +745,7 @@
751745
"comment": "Home page for project"
752746
},
753747
{
754-
"url": "https://pypi.org/project/yarl/1.18.3/#files",
748+
"url": "https://pypi.org/project/yarl/1.19.0/#files",
755749
"type": "distribution",
756750
"comment": "Download location for component"
757751
},
@@ -792,11 +786,11 @@
792786
"type": "vcs"
793787
}
794788
],
795-
"purl": "pkg:pypi/yarl@1.18.3",
789+
"purl": "pkg:pypi/yarl@1.19.0",
796790
"properties": [
797791
{
798792
"name": "release_date",
799-
"value": "2024-12-01T20:32:32Z"
793+
"value": "2025-04-06T02:33:31Z"
800794
},
801795
{
802796
"name": "language",
@@ -1303,7 +1297,7 @@
13031297
"type": "library",
13041298
"bom-ref": "19-argcomplete",
13051299
"name": "argcomplete",
1306-
"version": "3.6.1",
1300+
"version": "3.6.2",
13071301
"supplier": {
13081302
"name": "Andrey Kislyuk",
13091303
"contact": [
@@ -1312,12 +1306,12 @@
13121306
}
13131307
]
13141308
},
1315-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.6.1:*:*:*:*:*:*:*",
1309+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.6.2:*:*:*:*:*:*:*",
13161310
"description": "Bash tab completion for argparse",
13171311
"hashes": [
13181312
{
13191313
"alg": "SHA-256",
1320-
"content": "cef54d7f752560570291214f0f1c48c3b8ef09aca63d65de7747612666725dbc"
1314+
"content": "65b3133a29ad53fb42c48cf5114752c7ab66c1c38544fdf6460f450c09b42591"
13211315
}
13221316
],
13231317
"licenses": [
@@ -1336,7 +1330,7 @@
13361330
"comment": "Home page for project"
13371331
},
13381332
{
1339-
"url": "https://pypi.org/project/argcomplete/3.6.1/#files",
1333+
"url": "https://pypi.org/project/argcomplete/3.6.2/#files",
13401334
"type": "distribution",
13411335
"comment": "Download location for component"
13421336
},
@@ -1357,11 +1351,11 @@
13571351
"type": "log"
13581352
}
13591353
],
1360-
"purl": "pkg:pypi/[email protected].1",
1354+
"purl": "pkg:pypi/[email protected].2",
13611355
"properties": [
13621356
{
13631357
"name": "release_date",
1364-
"value": "2025-03-22T17:31:11Z"
1358+
"value": "2025-04-03T04:57:01Z"
13651359
},
13661360
{
13671361
"name": "language",
@@ -4129,7 +4123,7 @@
41294123
"type": "library",
41304124
"bom-ref": "64-narwhals",
41314125
"name": "narwhals",
4132-
"version": "1.32.0",
4126+
"version": "1.33.0",
41334127
"supplier": {
41344128
"name": "Marco Gorelli",
41354129
"contact": [
@@ -4138,7 +4132,7 @@
41384132
}
41394133
]
41404134
},
4141-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.32.0:*:*:*:*:*:*:*",
4135+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.33.0:*:*:*:*:*:*:*",
41424136
"description": "Extremely lightweight compatibility layer between dataframe libraries",
41434137
"licenses": [
41444138
{
@@ -4156,7 +4150,7 @@
41564150
"comment": "Home page for project"
41574151
},
41584152
{
4159-
"url": "https://pypi.org/project/narwhals/1.32.0/#files",
4153+
"url": "https://pypi.org/project/narwhals/1.33.0/#files",
41604154
"type": "distribution",
41614155
"comment": "Download location for component"
41624156
},
@@ -4173,7 +4167,7 @@
41734167
"type": "issue-tracker"
41744168
}
41754169
],
4176-
"purl": "pkg:pypi/narwhals@1.32.0",
4170+
"purl": "pkg:pypi/narwhals@1.33.0",
41774171
"properties": [
41784172
{
41794173
"name": "release_date",

0 commit comments

Comments
 (0)