Skip to content

Commit 0212681

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.9 (#4340)
Co-authored-by: GitHub <[email protected]>
1 parent a5e4218 commit 0212681

File tree

2 files changed

+80
-85
lines changed

2 files changed

+80
-85
lines changed

‎sbom/cve-bin-tool-py3.9.json‎

Lines changed: 42 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:485924ac-6344-4b78-b66d-e84d13270170",
5+
"serialNumber": "urn:uuid:87b9b11e-38e1-4e9a-8f7a-3548bf602f43",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-05T00:37:48Z",
8+
"timestamp": "2024-08-12T00:35:43Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -15,7 +15,7 @@
1515
"components": [
1616
{
1717
"name": "sbom4python",
18-
"version": "0.11.0",
18+
"version": "0.11.1",
1919
"type": "application"
2020
}
2121
]
@@ -74,7 +74,7 @@
7474
"type": "library",
7575
"bom-ref": "2-aiohttp",
7676
"name": "aiohttp",
77-
"version": "3.10.1",
77+
"version": "3.10.3",
7878
"description": "Async http client/server framework (asyncio)",
7979
"licenses": [
8080
{
@@ -87,12 +87,12 @@
8787
],
8888
"externalReferences": [
8989
{
90-
"url": "https://pypi.org/project/aiohttp/3.10.1",
90+
"url": "https://pypi.org/project/aiohttp/3.10.3",
9191
"type": "distribution",
9292
"comment": "Download location for component"
9393
}
9494
],
95-
"purl": "pkg:pypi/[email protected].1",
95+
"purl": "pkg:pypi/[email protected].3",
9696
"properties": [
9797
{
9898
"name": "language",
@@ -108,7 +108,7 @@
108108
"type": "library",
109109
"bom-ref": "3-aiohappyeyeballs",
110110
"name": "aiohappyeyeballs",
111-
"version": "2.3.4",
111+
"version": "2.3.5",
112112
"supplier": {
113113
"name": "J. Nick Koston",
114114
"contact": [
@@ -117,25 +117,31 @@
117117
}
118118
]
119119
},
120-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.4:*:*:*:*:*:*:*",
120+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.5:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122+
"hashes": [
123+
{
124+
"alg": "SHA-1",
125+
"content": "01595bbda3380154cc4e72702a1f82502a15940a"
126+
}
127+
],
122128
"licenses": [
123129
{
124130
"license": {
125-
"id": "PSF-2.0",
131+
"id": "Python-2.0",
126132
"url": "https://opensource.org/licenses/Python-2.0",
127133
"acknowledgement": "concluded"
128134
}
129135
}
130136
],
131137
"externalReferences": [
132138
{
133-
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.4",
139+
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.5",
134140
"type": "distribution",
135141
"comment": "Download location for component"
136142
}
137143
],
138-
"purl": "pkg:pypi/[email protected].4",
144+
"purl": "pkg:pypi/[email protected].5",
139145
"properties": [
140146
{
141147
"name": "language",
@@ -273,7 +279,7 @@
273279
"type": "library",
274280
"bom-ref": "7-attrs",
275281
"name": "attrs",
276-
"version": "24.1.0",
282+
"version": "24.2.0",
277283
"supplier": {
278284
"name": "Hynek Schlawack",
279285
"contact": [
@@ -282,16 +288,16 @@
282288
}
283289
]
284290
},
285-
"cpe": "cpe:2.3:a:hynek_schlawack:attrs:24.1.0:*:*:*:*:*:*:*",
291+
"cpe": "cpe:2.3:a:hynek_schlawack:attrs:24.2.0:*:*:*:*:*:*:*",
286292
"description": "Classes Without Boilerplate",
287293
"externalReferences": [
288294
{
289-
"url": "https://pypi.org/project/attrs/24.1.0",
295+
"url": "https://pypi.org/project/attrs/24.2.0",
290296
"type": "distribution",
291297
"comment": "Download location for component"
292298
}
293299
],
294-
"purl": "pkg:pypi/attrs@24.1.0",
300+
"purl": "pkg:pypi/attrs@24.2.0",
295301
"properties": [
296302
{
297303
"name": "language",
@@ -761,7 +767,7 @@
761767
"type": "library",
762768
"bom-ref": "18-argcomplete",
763769
"name": "argcomplete",
764-
"version": "3.4.0",
770+
"version": "3.5.0",
765771
"supplier": {
766772
"name": "Andrey Kislyuk",
767773
"contact": [
@@ -770,7 +776,7 @@
770776
}
771777
]
772778
},
773-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.4.0:*:*:*:*:*:*:*",
779+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.5.0:*:*:*:*:*:*:*",
774780
"description": "Bash tab completion for argparse",
775781
"licenses": [
776782
{
@@ -783,12 +789,12 @@
783789
],
784790
"externalReferences": [
785791
{
786-
"url": "https://pypi.org/project/argcomplete/3.4.0",
792+
"url": "https://pypi.org/project/argcomplete/3.5.0",
787793
"type": "distribution",
788794
"comment": "Download location for component"
789795
}
790796
],
791-
"purl": "pkg:pypi/argcomplete@3.4.0",
797+
"purl": "pkg:pypi/argcomplete@3.5.0",
792798
"properties": [
793799
{
794800
"name": "language",
@@ -1625,7 +1631,7 @@
16251631
"type": "library",
16261632
"bom-ref": "37-cffi",
16271633
"name": "cffi",
1628-
"version": "1.16.0",
1634+
"version": "1.17.0",
16291635
"supplier": {
16301636
"name": "Armin Maciej Fijalkowski",
16311637
"contact": [
@@ -1634,14 +1640,8 @@
16341640
}
16351641
]
16361642
},
1637-
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.16.0:*:*:*:*:*:*:*",
1643+
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.17.0:*:*:*:*:*:*:*",
16381644
"description": "Foreign Function Interface for Python calling C code.",
1639-
"hashes": [
1640-
{
1641-
"alg": "SHA-1",
1642-
"content": "ba44abd69cf6f0f1cc90db34cd067275dc10fc71"
1643-
}
1644-
],
16451645
"licenses": [
16461646
{
16471647
"license": {
@@ -1653,12 +1653,12 @@
16531653
],
16541654
"externalReferences": [
16551655
{
1656-
"url": "https://pypi.org/project/cffi/1.16.0",
1656+
"url": "https://pypi.org/project/cffi/1.17.0",
16571657
"type": "distribution",
16581658
"comment": "Download location for component"
16591659
}
16601660
],
1661-
"purl": "pkg:pypi/cffi@1.16.0",
1661+
"purl": "pkg:pypi/cffi@1.17.0",
16621662
"properties": [
16631663
{
16641664
"name": "language",
@@ -1904,7 +1904,7 @@
19041904
"type": "library",
19051905
"bom-ref": "43-zipp",
19061906
"name": "zipp",
1907-
"version": "3.19.2",
1907+
"version": "3.20.0",
19081908
"supplier": {
19091909
"name": "Jason R .",
19101910
"contact": [
@@ -1913,16 +1913,16 @@
19131913
}
19141914
]
19151915
},
1916-
"cpe": "cpe:2.3:a:jason_r.:zipp:3.19.2:*:*:*:*:*:*:*",
1916+
"cpe": "cpe:2.3:a:jason_r.:zipp:3.20.0:*:*:*:*:*:*:*",
19171917
"description": "Backport of pathlib-compatible object wrapper for zip files",
19181918
"externalReferences": [
19191919
{
1920-
"url": "https://pypi.org/project/zipp/3.19.2",
1920+
"url": "https://pypi.org/project/zipp/3.20.0",
19211921
"type": "distribution",
19221922
"comment": "Download location for component"
19231923
}
19241924
],
1925-
"purl": "pkg:pypi/zipp@3.19.2",
1925+
"purl": "pkg:pypi/zipp@3.20.0",
19261926
"properties": [
19271927
{
19281928
"name": "language",
@@ -2114,11 +2114,11 @@
21142114
"type": "library",
21152115
"bom-ref": "49-rpds-py",
21162116
"name": "rpds-py",
2117-
"version": "0.19.1",
2117+
"version": "0.20.0",
21182118
"supplier": {
21192119
"name": "Julian Berman"
21202120
},
2121-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.19.1:*:*:*:*:*:*:*",
2121+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.20.0:*:*:*:*:*:*:*",
21222122
"description": "Python bindings to Rust's persistent data structures (rpds)",
21232123
"licenses": [
21242124
{
@@ -2131,12 +2131,12 @@
21312131
],
21322132
"externalReferences": [
21332133
{
2134-
"url": "https://pypi.org/project/rpds-py/0.19.1",
2134+
"url": "https://pypi.org/project/rpds-py/0.20.0",
21352135
"type": "distribution",
21362136
"comment": "Download location for component"
21372137
}
21382138
],
2139-
"purl": "pkg:pypi/rpds-py@0.19.1",
2139+
"purl": "pkg:pypi/rpds-py@0.20.0",
21402140
"properties": [
21412141
{
21422142
"name": "language",
@@ -2195,7 +2195,7 @@
21952195
"type": "library",
21962196
"bom-ref": "51-pyyaml",
21972197
"name": "pyyaml",
2198-
"version": "6.0.1",
2198+
"version": "6.0.2",
21992199
"supplier": {
22002200
"name": "Kirill Simonov",
22012201
"contact": [
@@ -2204,14 +2204,8 @@
22042204
}
22052205
]
22062206
},
2207-
"cpe": "cpe:2.3:a:kirill_simonov:pyyaml:6.0.1:*:*:*:*:*:*:*",
2207+
"cpe": "cpe:2.3:a:kirill_simonov:pyyaml:6.0.2:*:*:*:*:*:*:*",
22082208
"description": "YAML parser and emitter for Python",
2209-
"hashes": [
2210-
{
2211-
"alg": "SHA-1",
2212-
"content": "c42fa3bff1eabdb64763bb1526d9ea1ccb708479"
2213-
}
2214-
],
22152209
"licenses": [
22162210
{
22172211
"license": {
@@ -2223,12 +2217,12 @@
22232217
],
22242218
"externalReferences": [
22252219
{
2226-
"url": "https://pypi.org/project/pyyaml/6.0.1",
2220+
"url": "https://pypi.org/project/pyyaml/6.0.2",
22272221
"type": "distribution",
22282222
"comment": "Download location for component"
22292223
}
22302224
],
2231-
"purl": "pkg:pypi/[email protected].1",
2225+
"purl": "pkg:pypi/[email protected].2",
22322226
"properties": [
22332227
{
22342228
"name": "language",
@@ -3243,6 +3237,7 @@
32433237
"70-toml",
32443238
"67-urllib3",
32453239
"71-xmlschema",
3240+
"43-zipp",
32463241
"73-zstandard"
32473242
]
32483243
},

0 commit comments

Comments
 (0)