Skip to content

Commit 625540e

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.9 (#5010)
Co-authored-by: GitHub <noreply@github.com>
1 parent 538ffc0 commit 625540e

File tree

2 files changed

+68
-75
lines changed

2 files changed

+68
-75
lines changed

‎sbom/cve-bin-tool-py3.9.json

Lines changed: 34 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:8e3fbde1-c71d-4256-9470-1722e39f4960",
5+
"serialNumber": "urn:uuid:81acbf1d-dd39-4432-9adf-621e1cf3f1d4",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-03-31T00:39:40Z",
8+
"timestamp": "2025-04-07T00:38:38Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -89,14 +89,8 @@
8989
"type": "library",
9090
"bom-ref": "2-aiohttp",
9191
"name": "aiohttp",
92-
"version": "3.11.14",
92+
"version": "3.11.16",
9393
"description": "Async http client/server framework (asyncio)",
94-
"hashes": [
95-
{
96-
"alg": "SHA-256",
97-
"content": "e2bc827c01f75803de77b134afdbf74fa74b62970eafdf190f3244931d7a5c0d"
98-
}
99-
],
10094
"licenses": [
10195
{
10296
"license": {
@@ -113,7 +107,7 @@
113107
"comment": "Home page for project"
114108
},
115109
{
116-
"url": "https://pypi.org/project/aiohttp/3.11.14/#files",
110+
"url": "https://pypi.org/project/aiohttp/3.11.16/#files",
117111
"type": "distribution",
118112
"comment": "Download location for component"
119113
},
@@ -150,11 +144,11 @@
150144
"type": "vcs"
151145
}
152146
],
153-
"purl": "pkg:pypi/aiohttp@3.11.14",
147+
"purl": "pkg:pypi/aiohttp@3.11.16",
154148
"properties": [
155149
{
156150
"name": "release_date",
157-
"value": "2025-03-17T02:42:42Z"
151+
"value": "2024-09-17T18:57:44Z"
158152
},
159153
{
160154
"name": "language",
@@ -539,7 +533,7 @@
539533
"type": "library",
540534
"bom-ref": "8-multidict",
541535
"name": "multidict",
542-
"version": "6.2.0",
536+
"version": "6.3.2",
543537
"supplier": {
544538
"name": "Andrew Svetlov",
545539
"contact": [
@@ -548,12 +542,12 @@
548542
}
549543
]
550544
},
551-
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.2.0:*:*:*:*:*:*:*",
545+
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.3.2:*:*:*:*:*:*:*",
552546
"description": "multidict implementation",
553547
"hashes": [
554548
{
555549
"alg": "SHA-256",
556-
"content": "b9f6392d98c0bd70676ae41474e2eecf4c7150cb419237a41f8f96043fcb81d1"
550+
"content": "8b3dc0eec9304fa04d84a51ea13b0ec170bace5b7ddeaac748149efd316f1504"
557551
}
558552
],
559553
"licenses": [
@@ -572,7 +566,7 @@
572566
"comment": "Home page for project"
573567
},
574568
{
575-
"url": "https://pypi.org/project/multidict/6.2.0/#files",
569+
"url": "https://pypi.org/project/multidict/6.3.2/#files",
576570
"type": "distribution",
577571
"comment": "Download location for component"
578572
},
@@ -613,11 +607,11 @@
613607
"type": "vcs"
614608
}
615609
],
616-
"purl": "pkg:pypi/multidict@6.2.0",
610+
"purl": "pkg:pypi/multidict@6.3.2",
617611
"properties": [
618612
{
619613
"name": "release_date",
620-
"value": "2025-03-17T16:53:32Z"
614+
"value": "2025-04-03T19:41:19Z"
621615
},
622616
{
623617
"name": "language",
@@ -633,7 +627,7 @@
633627
"type": "library",
634628
"bom-ref": "9-typing-extensions",
635629
"name": "typing-extensions",
636-
"version": "4.13.0",
630+
"version": "4.13.1",
637631
"supplier": {
638632
"name": "Guido van Jukka ukasz Michael",
639633
"contact": [
@@ -642,12 +636,12 @@
642636
}
643637
]
644638
},
645-
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.13.0:*:*:*:*:*:*:*",
639+
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.13.1:*:*:*:*:*:*:*",
646640
"description": "Backported and Experimental Type Hints for Python 3.8+",
647641
"hashes": [
648642
{
649643
"alg": "SHA-256",
650-
"content": "c8dd92cc0d6425a97c18fbb9d1954e5ff92c1ca881a309c45f06ebc0b79058e5"
644+
"content": "4b6cf02909eb5495cfbc3f6e8fd49217e6cc7944e145cdda8caa3734777f9e69"
651645
}
652646
],
653647
"externalReferences": [
@@ -657,7 +651,7 @@
657651
"comment": "Home page for project"
658652
},
659653
{
660-
"url": "https://pypi.org/project/typing-extensions/4.13.0/#files",
654+
"url": "https://pypi.org/project/typing-extensions/4.13.1/#files",
661655
"type": "distribution",
662656
"comment": "Download location for component"
663657
},
@@ -682,11 +676,11 @@
682676
"type": "vcs"
683677
}
684678
],
685-
"purl": "pkg:pypi/typing-extensions@4.13.0",
679+
"purl": "pkg:pypi/typing-extensions@4.13.1",
686680
"properties": [
687681
{
688682
"name": "release_date",
689-
"value": "2025-03-26T03:49:40Z"
683+
"value": "2025-04-03T16:11:19Z"
690684
},
691685
{
692686
"name": "language",
@@ -796,7 +790,7 @@
796790
"type": "library",
797791
"bom-ref": "11-yarl",
798792
"name": "yarl",
799-
"version": "1.18.3",
793+
"version": "1.19.0",
800794
"supplier": {
801795
"name": "Andrew Svetlov",
802796
"contact": [
@@ -805,12 +799,12 @@
805799
}
806800
]
807801
},
808-
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.18.3:*:*:*:*:*:*:*",
802+
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.19.0:*:*:*:*:*:*:*",
809803
"description": "Yet another URL library",
810804
"hashes": [
811805
{
812806
"alg": "SHA-256",
813-
"content": "7df647e8edd71f000a5208fe6ff8c382a1de8edfbccdbbfe649d263de07d8c34"
807+
"content": "0bae32f8ebd35c04d6528cedb4a26b8bf25339d3616b04613b97347f919b76d3"
814808
}
815809
],
816810
"licenses": [
@@ -829,7 +823,7 @@
829823
"comment": "Home page for project"
830824
},
831825
{
832-
"url": "https://pypi.org/project/yarl/1.18.3/#files",
826+
"url": "https://pypi.org/project/yarl/1.19.0/#files",
833827
"type": "distribution",
834828
"comment": "Download location for component"
835829
},
@@ -870,11 +864,11 @@
870864
"type": "vcs"
871865
}
872866
],
873-
"purl": "pkg:pypi/yarl@1.18.3",
867+
"purl": "pkg:pypi/yarl@1.19.0",
874868
"properties": [
875869
{
876870
"name": "release_date",
877-
"value": "2024-12-01T20:32:32Z"
871+
"value": "2025-04-06T02:33:31Z"
878872
},
879873
{
880874
"name": "language",
@@ -1381,7 +1375,7 @@
13811375
"type": "library",
13821376
"bom-ref": "20-argcomplete",
13831377
"name": "argcomplete",
1384-
"version": "3.6.1",
1378+
"version": "3.6.2",
13851379
"supplier": {
13861380
"name": "Andrey Kislyuk",
13871381
"contact": [
@@ -1390,12 +1384,12 @@
13901384
}
13911385
]
13921386
},
1393-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.6.1:*:*:*:*:*:*:*",
1387+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.6.2:*:*:*:*:*:*:*",
13941388
"description": "Bash tab completion for argparse",
13951389
"hashes": [
13961390
{
13971391
"alg": "SHA-256",
1398-
"content": "cef54d7f752560570291214f0f1c48c3b8ef09aca63d65de7747612666725dbc"
1392+
"content": "65b3133a29ad53fb42c48cf5114752c7ab66c1c38544fdf6460f450c09b42591"
13991393
}
14001394
],
14011395
"licenses": [
@@ -1414,7 +1408,7 @@
14141408
"comment": "Home page for project"
14151409
},
14161410
{
1417-
"url": "https://pypi.org/project/argcomplete/3.6.1/#files",
1411+
"url": "https://pypi.org/project/argcomplete/3.6.2/#files",
14181412
"type": "distribution",
14191413
"comment": "Download location for component"
14201414
},
@@ -1435,11 +1429,11 @@
14351429
"type": "log"
14361430
}
14371431
],
1438-
"purl": "pkg:pypi/argcomplete@3.6.1",
1432+
"purl": "pkg:pypi/argcomplete@3.6.2",
14391433
"properties": [
14401434
{
14411435
"name": "release_date",
1442-
"value": "2025-03-22T17:31:11Z"
1436+
"value": "2025-04-03T04:57:01Z"
14431437
},
14441438
{
14451439
"name": "language",
@@ -4207,7 +4201,7 @@
42074201
"type": "library",
42084202
"bom-ref": "65-narwhals",
42094203
"name": "narwhals",
4210-
"version": "1.32.0",
4204+
"version": "1.33.0",
42114205
"supplier": {
42124206
"name": "Marco Gorelli",
42134207
"contact": [
@@ -4216,7 +4210,7 @@
42164210
}
42174211
]
42184212
},
4219-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.32.0:*:*:*:*:*:*:*",
4213+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.33.0:*:*:*:*:*:*:*",
42204214
"description": "Extremely lightweight compatibility layer between dataframe libraries",
42214215
"licenses": [
42224216
{
@@ -4234,7 +4228,7 @@
42344228
"comment": "Home page for project"
42354229
},
42364230
{
4237-
"url": "https://pypi.org/project/narwhals/1.32.0/#files",
4231+
"url": "https://pypi.org/project/narwhals/1.33.0/#files",
42384232
"type": "distribution",
42394233
"comment": "Download location for component"
42404234
},
@@ -4251,7 +4245,7 @@
42514245
"type": "issue-tracker"
42524246
}
42534247
],
4254-
"purl": "pkg:pypi/narwhals@1.32.0",
4248+
"purl": "pkg:pypi/narwhals@1.33.0",
42554249
"properties": [
42564250
{
42574251
"name": "release_date",

0 commit comments

Comments
 (0)