Skip to content

Commit f139848

Browse files
chore: update SBOM for Python 3.11 (#3079)
Co-authored-by: GitHub <[email protected]>
1 parent 4e6f18b commit f139848

File tree

2 files changed

+68
-68
lines changed

2 files changed

+68
-68
lines changed

sbom/cve-bin-tool-py3.11.json

Lines changed: 34 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.4",
5-
"serialNumber": "urn:uuid7d8c87ee-5c93-48a0-8c3b-b1ae51633100",
5+
"serialNumber": "urn:uuidded89e98-707e-49c9-9c62-8d231861f94c",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-06-05T00:29:14Z",
8+
"timestamp": "2023-06-19T00:29:32Z",
99
"tools": [
1010
{
1111
"name": "sbom4python",
@@ -590,7 +590,7 @@
590590
"type": "library",
591591
"bom-ref": "17-argcomplete",
592592
"name": "argcomplete",
593-
"version": "3.0.8",
593+
"version": "3.1.1",
594594
"supplier": {
595595
"name": "Andrey Kislyuk",
596596
"contact": [
@@ -599,7 +599,7 @@
599599
}
600600
]
601601
},
602-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.8:*:*:*:*:*:*:*",
602+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.1:*:*:*:*:*:*:*",
603603
"description": "Bash tab completion for argparse",
604604
"licenses": [
605605
{
@@ -616,12 +616,12 @@
616616
"comment": "Home page for project"
617617
},
618618
{
619-
"url": "https://pypi.org/project/argcomplete/3.0.8",
619+
"url": "https://pypi.org/project/argcomplete/3.1.1",
620620
"type": "distribution",
621621
"comment": "Download location for component"
622622
}
623623
],
624-
"purl": "pkg:pypi/argcomplete@3.0.8",
624+
"purl": "pkg:pypi/argcomplete@3.1.1",
625625
"properties": [
626626
{
627627
"name": "License Comments",
@@ -948,7 +948,7 @@
948948
"type": "library",
949949
"bom-ref": "26-pyparsing",
950950
"name": "pyparsing",
951-
"version": "3.0.9",
951+
"version": "3.1.0",
952952
"supplier": {
953953
"name": "Paul McGuire",
954954
"contact": [
@@ -957,16 +957,16 @@
957957
}
958958
]
959959
},
960-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.0.9:*:*:*:*:*:*:*",
960+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.0:*:*:*:*:*:*:*",
961961
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
962962
"externalReferences": [
963963
{
964-
"url": "https://pypi.org/project/pyparsing/3.0.9",
964+
"url": "https://pypi.org/project/pyparsing/3.1.0",
965965
"type": "distribution",
966966
"comment": "Download location for component"
967967
}
968968
],
969-
"purl": "pkg:pypi/pyparsing@3.0.9"
969+
"purl": "pkg:pypi/pyparsing@3.1.0"
970970
},
971971
{
972972
"type": "library",
@@ -1372,7 +1372,7 @@
13721372
"type": "library",
13731373
"bom-ref": "37-google-auth",
13741374
"name": "google-auth",
1375-
"version": "2.19.1",
1375+
"version": "2.20.0",
13761376
"supplier": {
13771377
"name": "Google Cloud Platform",
13781378
"contact": [
@@ -1381,7 +1381,7 @@
13811381
}
13821382
]
13831383
},
1384-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.19.1:*:*:*:*:*:*:*",
1384+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.20.0:*:*:*:*:*:*:*",
13851385
"description": "Google Authentication Library",
13861386
"licenses": [
13871387
{
@@ -1398,12 +1398,12 @@
13981398
"comment": "Home page for project"
13991399
},
14001400
{
1401-
"url": "https://pypi.org/project/google-auth/2.19.1",
1401+
"url": "https://pypi.org/project/google-auth/2.20.0",
14021402
"type": "distribution",
14031403
"comment": "Download location for component"
14041404
}
14051405
],
1406-
"purl": "pkg:pypi/google-auth@2.19.1",
1406+
"purl": "pkg:pypi/google-auth@2.20.0",
14071407
"properties": [
14081408
{
14091409
"name": "License Comments",
@@ -1820,7 +1820,7 @@
18201820
"type": "library",
18211821
"bom-ref": "49-plotly",
18221822
"name": "plotly",
1823-
"version": "5.14.1",
1823+
"version": "5.15.0",
18241824
"supplier": {
18251825
"name": "Chris P",
18261826
"contact": [
@@ -1829,7 +1829,7 @@
18291829
}
18301830
]
18311831
},
1832-
"cpe": "cpe:2.3:a:chris_p:plotly:5.14.1:*:*:*:*:*:*:*",
1832+
"cpe": "cpe:2.3:a:chris_p:plotly:5.15.0:*:*:*:*:*:*:*",
18331833
"description": "An open-source, interactive data visualization library for Python",
18341834
"licenses": [
18351835
{
@@ -1846,12 +1846,12 @@
18461846
"comment": "Home page for project"
18471847
},
18481848
{
1849-
"url": "https://pypi.org/project/plotly/5.14.1",
1849+
"url": "https://pypi.org/project/plotly/5.15.0",
18501850
"type": "distribution",
18511851
"comment": "Download location for component"
18521852
}
18531853
],
1854-
"purl": "pkg:pypi/plotly@5.14.1"
1854+
"purl": "pkg:pypi/plotly@5.15.0"
18551855
},
18561856
{
18571857
"type": "library",
@@ -2023,7 +2023,7 @@
20232023
"type": "library",
20242024
"bom-ref": "54-rich",
20252025
"name": "rich",
2026-
"version": "13.4.1",
2026+
"version": "13.4.2",
20272027
"supplier": {
20282028
"name": "Will McGugan",
20292029
"contact": [
@@ -2032,7 +2032,7 @@
20322032
}
20332033
]
20342034
},
2035-
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.4.1:*:*:*:*:*:*:*",
2035+
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.4.2:*:*:*:*:*:*:*",
20362036
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
20372037
"licenses": [
20382038
{
@@ -2049,18 +2049,18 @@
20492049
"comment": "Home page for project"
20502050
},
20512051
{
2052-
"url": "https://pypi.org/project/rich/13.4.1",
2052+
"url": "https://pypi.org/project/rich/13.4.2",
20532053
"type": "distribution",
20542054
"comment": "Download location for component"
20552055
}
20562056
],
2057-
"purl": "pkg:pypi/[email protected].1"
2057+
"purl": "pkg:pypi/[email protected].2"
20582058
},
20592059
{
20602060
"type": "library",
20612061
"bom-ref": "55-markdown-it-py",
20622062
"name": "markdown-it-py",
2063-
"version": "2.2.0",
2063+
"version": "3.0.0",
20642064
"supplier": {
20652065
"name": "Chris Sewell",
20662066
"contact": [
@@ -2069,16 +2069,16 @@
20692069
}
20702070
]
20712071
},
2072-
"cpe": "cpe:2.3:a:chris_sewell:markdown-it-py:2.2.0:*:*:*:*:*:*:*",
2072+
"cpe": "cpe:2.3:a:chris_sewell:markdown-it-py:3.0.0:*:*:*:*:*:*:*",
20732073
"description": "Python port of markdown-it. Markdown parsing, done right!",
20742074
"externalReferences": [
20752075
{
2076-
"url": "https://pypi.org/project/markdown-it-py/2.2.0",
2076+
"url": "https://pypi.org/project/markdown-it-py/3.0.0",
20772077
"type": "distribution",
20782078
"comment": "Download location for component"
20792079
}
20802080
],
2081-
"purl": "pkg:pypi/markdown-it-py@2.2.0"
2081+
"purl": "pkg:pypi/markdown-it-py@3.0.0"
20822082
},
20832083
{
20842084
"type": "library",
@@ -2214,7 +2214,7 @@
22142214
"type": "library",
22152215
"bom-ref": "60-xmlschema",
22162216
"name": "xmlschema",
2217-
"version": "2.3.0",
2217+
"version": "2.3.1",
22182218
"supplier": {
22192219
"name": "Davide Brunato",
22202220
"contact": [
@@ -2223,7 +2223,7 @@
22232223
}
22242224
]
22252225
},
2226-
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.3.0:*:*:*:*:*:*:*",
2226+
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.3.1:*:*:*:*:*:*:*",
22272227
"description": "An XML Schema validator and decoder",
22282228
"licenses": [
22292229
{
@@ -2240,18 +2240,18 @@
22402240
"comment": "Home page for project"
22412241
},
22422242
{
2243-
"url": "https://pypi.org/project/xmlschema/2.3.0",
2243+
"url": "https://pypi.org/project/xmlschema/2.3.1",
22442244
"type": "distribution",
22452245
"comment": "Download location for component"
22462246
}
22472247
],
2248-
"purl": "pkg:pypi/[email protected].0"
2248+
"purl": "pkg:pypi/[email protected].1"
22492249
},
22502250
{
22512251
"type": "library",
22522252
"bom-ref": "61-elementpath",
22532253
"name": "elementpath",
2254-
"version": "4.1.2",
2254+
"version": "4.1.3",
22552255
"supplier": {
22562256
"name": "Davide Brunato",
22572257
"contact": [
@@ -2260,7 +2260,7 @@
22602260
}
22612261
]
22622262
},
2263-
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.2:*:*:*:*:*:*:*",
2263+
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.3:*:*:*:*:*:*:*",
22642264
"description": "XPath 1.0/2.0/3.0/3.1 parsers and selectors for ElementTree and lxml",
22652265
"licenses": [
22662266
{
@@ -2277,12 +2277,12 @@
22772277
"comment": "Home page for project"
22782278
},
22792279
{
2280-
"url": "https://pypi.org/project/elementpath/4.1.2",
2280+
"url": "https://pypi.org/project/elementpath/4.1.3",
22812281
"type": "distribution",
22822282
"comment": "Download location for component"
22832283
}
22842284
],
2285-
"purl": "pkg:pypi/[email protected].2"
2285+
"purl": "pkg:pypi/[email protected].3"
22862286
},
22872287
{
22882288
"type": "library",

0 commit comments

Comments
 (0)