Skip to content

Commit 53425d9

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.8 (#4363)
Co-authored-by: GitHub <[email protected]>
1 parent 170dd8e commit 53425d9

File tree

2 files changed

+69
-83
lines changed

2 files changed

+69
-83
lines changed

‎sbom/cve-bin-tool-py3.8.json‎

Lines changed: 37 additions & 49 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:eceb771e-1645-4a2c-adc6-a53bd131f608",
5+
"serialNumber": "urn:uuid:e590664e-704c-4ef2-83fb-1bb29edfc0f7",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-12T00:35:48Z",
8+
"timestamp": "2024-08-19T00:36:28Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -74,7 +74,7 @@
7474
"type": "library",
7575
"bom-ref": "2-aiohttp",
7676
"name": "aiohttp",
77-
"version": "3.10.3",
77+
"version": "3.10.4",
7878
"description": "Async http client/server framework (asyncio)",
7979
"licenses": [
8080
{
@@ -87,12 +87,12 @@
8787
],
8888
"externalReferences": [
8989
{
90-
"url": "https://pypi.org/project/aiohttp/3.10.3",
90+
"url": "https://pypi.org/project/aiohttp/3.10.4",
9191
"type": "distribution",
9292
"comment": "Download location for component"
9393
}
9494
],
95-
"purl": "pkg:pypi/[email protected].3",
95+
"purl": "pkg:pypi/[email protected].4",
9696
"properties": [
9797
{
9898
"name": "language",
@@ -108,7 +108,7 @@
108108
"type": "library",
109109
"bom-ref": "3-aiohappyeyeballs",
110110
"name": "aiohappyeyeballs",
111-
"version": "2.3.5",
111+
"version": "2.3.7",
112112
"supplier": {
113113
"name": "J. Nick Koston",
114114
"contact": [
@@ -117,31 +117,25 @@
117117
}
118118
]
119119
},
120-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.5:*:*:*:*:*:*:*",
120+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.7:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122-
"hashes": [
123-
{
124-
"alg": "SHA-1",
125-
"content": "01595bbda3380154cc4e72702a1f82502a15940a"
126-
}
127-
],
128122
"licenses": [
129123
{
130124
"license": {
131-
"id": "Python-2.0",
132-
"url": "https://opensource.org/licenses/Python-2.0",
125+
"id": "Python-2.0.1",
126+
"url": "https://www.python.org/download/releases/2.0.1/license/",
133127
"acknowledgement": "concluded"
134128
}
135129
}
136130
],
137131
"externalReferences": [
138132
{
139-
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.5",
133+
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.7",
140134
"type": "distribution",
141135
"comment": "Download location for component"
142136
}
143137
],
144-
"purl": "pkg:pypi/[email protected].5",
138+
"purl": "pkg:pypi/[email protected].7",
145139
"properties": [
146140
{
147141
"name": "language",
@@ -494,7 +488,7 @@
494488
"type": "library",
495489
"bom-ref": "12-soupsieve",
496490
"name": "soupsieve",
497-
"version": "2.5",
491+
"version": "2.6",
498492
"supplier": {
499493
"name": "Isaac Muse",
500494
"contact": [
@@ -503,22 +497,16 @@
503497
}
504498
]
505499
},
506-
"cpe": "cpe:2.3:a:isaac_muse:soupsieve:2.5:*:*:*:*:*:*:*",
500+
"cpe": "cpe:2.3:a:isaac_muse:soupsieve:2.6:*:*:*:*:*:*:*",
507501
"description": "A modern CSS selector implementation for Beautiful Soup.",
508-
"hashes": [
509-
{
510-
"alg": "SHA-1",
511-
"content": "51ec317ada7e34f70fad6bfddaef8a2cfac1aebd"
512-
}
513-
],
514502
"externalReferences": [
515503
{
516-
"url": "https://pypi.org/project/soupsieve/2.5",
504+
"url": "https://pypi.org/project/soupsieve/2.6",
517505
"type": "distribution",
518506
"comment": "Download location for component"
519507
}
520508
],
521-
"purl": "pkg:pypi/soupsieve@2.5",
509+
"purl": "pkg:pypi/soupsieve@2.6",
522510
"properties": [
523511
{
524512
"name": "language",
@@ -1038,7 +1026,7 @@
10381026
"type": "library",
10391027
"bom-ref": "24-cachetools",
10401028
"name": "cachetools",
1041-
"version": "5.4.0",
1029+
"version": "5.5.0",
10421030
"supplier": {
10431031
"name": "Thomas Kemmer",
10441032
"contact": [
@@ -1047,7 +1035,7 @@
10471035
}
10481036
]
10491037
},
1050-
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.4.0:*:*:*:*:*:*:*",
1038+
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.5.0:*:*:*:*:*:*:*",
10511039
"description": "Extensible memoizing collections and decorators",
10521040
"licenses": [
10531041
{
@@ -1060,12 +1048,12 @@
10601048
],
10611049
"externalReferences": [
10621050
{
1063-
"url": "https://pypi.org/project/cachetools/5.4.0",
1051+
"url": "https://pypi.org/project/cachetools/5.5.0",
10641052
"type": "distribution",
10651053
"comment": "Download location for component"
10661054
}
10671055
],
1068-
"purl": "pkg:pypi/cachetools@5.4.0",
1056+
"purl": "pkg:pypi/cachetools@5.5.0",
10691057
"properties": [
10701058
{
10711059
"name": "language",
@@ -1938,7 +1926,7 @@
19381926
"type": "library",
19391927
"bom-ref": "44-importlib-resources",
19401928
"name": "importlib-resources",
1941-
"version": "6.4.0",
1929+
"version": "6.4.3",
19421930
"supplier": {
19431931
"name": "Barry Warsaw",
19441932
"contact": [
@@ -1947,22 +1935,16 @@
19471935
}
19481936
]
19491937
},
1950-
"cpe": "cpe:2.3:a:barry_warsaw:importlib-resources:6.4.0:*:*:*:*:*:*:*",
1938+
"cpe": "cpe:2.3:a:barry_warsaw:importlib-resources:6.4.3:*:*:*:*:*:*:*",
19511939
"description": "Read resources from Python packages",
1952-
"hashes": [
1953-
{
1954-
"alg": "SHA-1",
1955-
"content": "1f4d3f10a3ed5d65b3092a39369c08e71e30a97c"
1956-
}
1957-
],
19581940
"externalReferences": [
19591941
{
1960-
"url": "https://pypi.org/project/importlib-resources/6.4.0",
1942+
"url": "https://pypi.org/project/importlib-resources/6.4.3",
19611943
"type": "distribution",
19621944
"comment": "Download location for component"
19631945
}
19641946
],
1965-
"purl": "pkg:pypi/[email protected].0",
1947+
"purl": "pkg:pypi/[email protected].3",
19661948
"properties": [
19671949
{
19681950
"name": "language",
@@ -2226,7 +2208,7 @@
22262208
"type": "library",
22272209
"bom-ref": "52-lib4sbom",
22282210
"name": "lib4sbom",
2229-
"version": "0.7.2",
2211+
"version": "0.7.3",
22302212
"supplier": {
22312213
"name": "Anthony Harrison",
22322214
"contact": [
@@ -2235,7 +2217,7 @@
22352217
}
22362218
]
22372219
},
2238-
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.2:*:*:*:*:*:*:*",
2220+
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.3:*:*:*:*:*:*:*",
22392221
"description": "Software Bill of Material (SBOM) generator and consumer library",
22402222
"licenses": [
22412223
{
@@ -2248,12 +2230,12 @@
22482230
],
22492231
"externalReferences": [
22502232
{
2251-
"url": "https://pypi.org/project/lib4sbom/0.7.2",
2233+
"url": "https://pypi.org/project/lib4sbom/0.7.3",
22522234
"type": "distribution",
22532235
"comment": "Download location for component"
22542236
}
22552237
],
2256-
"purl": "pkg:pypi/[email protected].2",
2238+
"purl": "pkg:pypi/[email protected].3",
22572239
"properties": [
22582240
{
22592241
"name": "language",
@@ -2465,6 +2447,12 @@
24652447
},
24662448
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.15.6:*:*:*:*:*:*:*",
24672449
"description": "A purl aka. Package URL parser and builder",
2450+
"hashes": [
2451+
{
2452+
"alg": "SHA-1",
2453+
"content": "14a11b50ab723796888133d3722b5b3e2845b084"
2454+
}
2455+
],
24682456
"licenses": [
24692457
{
24702458
"license": {
@@ -3096,7 +3084,7 @@
30963084
"type": "library",
30973085
"bom-ref": "72-setuptools",
30983086
"name": "setuptools",
3099-
"version": "72.1.0",
3087+
"version": "72.2.0",
31003088
"supplier": {
31013089
"name": "Python Packaging Authority",
31023090
"contact": [
@@ -3105,16 +3093,16 @@
31053093
}
31063094
]
31073095
},
3108-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:72.1.0:*:*:*:*:*:*:*",
3096+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:72.2.0:*:*:*:*:*:*:*",
31093097
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
31103098
"externalReferences": [
31113099
{
3112-
"url": "https://pypi.org/project/setuptools/72.1.0",
3100+
"url": "https://pypi.org/project/setuptools/72.2.0",
31133101
"type": "distribution",
31143102
"comment": "Download location for component"
31153103
}
31163104
],
3117-
"purl": "pkg:pypi/setuptools@72.1.0",
3105+
"purl": "pkg:pypi/setuptools@72.2.0",
31183106
"properties": [
31193107
{
31203108
"name": "language",

0 commit comments

Comments
 (0)