Skip to content

Commit 668c595

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.10 (#5332)
Co-authored-by: GitHub <[email protected]>
1 parent 9ec66f6 commit 668c595

File tree

2 files changed

+94
-149
lines changed

2 files changed

+94
-149
lines changed

‎sbom/cve-bin-tool-py3.10.json‎

Lines changed: 48 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:a7790d3a-7321-438e-a789-1a0c5d9a150f",
5+
"serialNumber": "urn:uuid:7bd2087d-25dd-411f-a943-a49efb881ae4",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-09-08T00:42:17Z",
8+
"timestamp": "2025-09-15T00:42:54Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -2084,7 +2084,7 @@
20842084
"type": "library",
20852085
"bom-ref": "31-pyparsing",
20862086
"name": "pyparsing",
2087-
"version": "3.2.3",
2087+
"version": "3.2.4",
20882088
"supplier": {
20892089
"name": "Paul McGuire",
20902090
"contact": [
@@ -2093,21 +2093,12 @@
20932093
}
20942094
]
20952095
},
2096-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.3:*:*:*:*:*:*:*",
2097-
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
2096+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.4:*:*:*:*:*:*:*",
2097+
"description": "pyparsing - Classes and methods to define and execute parsing grammars",
20982098
"hashes": [
20992099
{
21002100
"alg": "SHA-256",
2101-
"content": "a749938e02d6fd0b59b356ca504a24982314bb090c383e3cf201c95ef7e2bfcf"
2102-
}
2103-
],
2104-
"licenses": [
2105-
{
2106-
"license": {
2107-
"id": "MIT",
2108-
"url": "https://opensource.org/license/mit/",
2109-
"acknowledgement": "concluded"
2110-
}
2101+
"content": "91d0fcde680d42cd031daf3a6ba20da3107e08a75de50da58360e7d94ab24d36"
21112102
}
21122103
],
21132104
"externalReferences": [
@@ -2117,16 +2108,16 @@
21172108
"comment": "Home page for project"
21182109
},
21192110
{
2120-
"url": "https://pypi.org/project/pyparsing/3.2.3/#files",
2111+
"url": "https://pypi.org/project/pyparsing/3.2.4/#files",
21212112
"type": "distribution",
21222113
"comment": "Download location for component"
21232114
}
21242115
],
2125-
"purl": "pkg:pypi/[email protected].3",
2116+
"purl": "pkg:pypi/[email protected].4",
21262117
"properties": [
21272118
{
21282119
"name": "release_date",
2129-
"value": "2025-03-25T05:01:24Z"
2120+
"value": "2025-09-13T05:47:17Z"
21302121
},
21312122
{
21322123
"name": "language",
@@ -2135,10 +2126,6 @@
21352126
{
21362127
"name": "python_version",
21372128
"value": "3.10.18"
2138-
},
2139-
{
2140-
"name": "License Comments",
2141-
"value": "pyparsing declares MIT License which is not currently a valid SPDX License identifier or expression."
21422129
}
21432130
]
21442131
},
@@ -2419,55 +2406,28 @@
24192406
"type": "library",
24202407
"bom-ref": "36-cffi",
24212408
"name": "cffi",
2422-
"version": "1.17.1",
2409+
"version": "2.0.0",
24232410
"supplier": {
2424-
"name": "Armin Maciej Fijalkowski",
2425-
"contact": [
2426-
{
2427-
"email": "[email protected]"
2428-
}
2429-
]
2411+
"name": "Armin Maciej Fijalkowski"
24302412
},
2431-
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.17.1:*:*:*:*:*:*:*",
2413+
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:2.0.0:*:*:*:*:*:*:*",
24322414
"description": "Foreign Function Interface for Python calling C code.",
24332415
"hashes": [
24342416
{
24352417
"alg": "SHA-256",
2436-
"content": "df8b1c11f177bc2313ec4b2d46baec87a5f3e71fc8b45dab2ee7cae86d9aba14"
2437-
}
2438-
],
2439-
"licenses": [
2440-
{
2441-
"license": {
2442-
"id": "MIT",
2443-
"url": "https://opensource.org/license/mit/",
2444-
"acknowledgement": "concluded"
2445-
}
2418+
"content": "0cf2d91ecc3fcc0625c2c530fe004f82c110405f101548512cce44322fa8ac44"
24462419
}
24472420
],
24482421
"externalReferences": [
24492422
{
2450-
"url": "http://cffi.readthedocs.org",
2451-
"type": "website",
2452-
"comment": "Home page for project"
2453-
},
2454-
{
2455-
"url": "https://pypi.org/project/cffi/1.17.1/#files",
2423+
"url": "https://pypi.org/project/cffi/2.0.0/#files",
24562424
"type": "distribution",
24572425
"comment": "Download location for component"
24582426
},
24592427
{
2460-
"url": "http://cffi.readthedocs.org/",
2428+
"url": "https://cffi.readthedocs.io/",
24612429
"type": "documentation"
24622430
},
2463-
{
2464-
"url": "https://github.com/python-cffi/cffi",
2465-
"type": "vcs"
2466-
},
2467-
{
2468-
"url": "https://github.com/python-cffi/cffi/issues",
2469-
"type": "issue-tracker"
2470-
},
24712431
{
24722432
"url": "https://cffi.readthedocs.io/en/latest/whatsnew.html",
24732433
"type": "log"
@@ -2479,13 +2439,21 @@
24792439
{
24802440
"url": "https://groups.google.com/forum/#!forum/python-cffi",
24812441
"type": "other"
2442+
},
2443+
{
2444+
"url": "https://github.com/python-cffi/cffi",
2445+
"type": "vcs"
2446+
},
2447+
{
2448+
"url": "https://github.com/python-cffi/cffi/issues",
2449+
"type": "issue-tracker"
24822450
}
24832451
],
2484-
"purl": "pkg:pypi/cffi@1.17.1",
2452+
"purl": "pkg:pypi/cffi@2.0.0",
24852453
"properties": [
24862454
{
24872455
"name": "release_date",
2488-
"value": "2024-09-04T20:43:30Z"
2456+
"value": "2025-09-08T23:22:08Z"
24892457
},
24902458
{
24912459
"name": "language",
@@ -2501,7 +2469,7 @@
25012469
"type": "library",
25022470
"bom-ref": "37-pycparser",
25032471
"name": "pycparser",
2504-
"version": "2.22",
2472+
"version": "2.23",
25052473
"supplier": {
25062474
"name": "Eli Bendersky",
25072475
"contact": [
@@ -2510,12 +2478,12 @@
25102478
}
25112479
]
25122480
},
2513-
"cpe": "cpe:2.3:a:eli_bendersky:pycparser:2.22:*:*:*:*:*:*:*",
2481+
"cpe": "cpe:2.3:a:eli_bendersky:pycparser:2.23:*:*:*:*:*:*:*",
25142482
"description": "C parser in Python",
25152483
"hashes": [
25162484
{
25172485
"alg": "SHA-256",
2518-
"content": "c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc"
2486+
"content": "e5c6e8d3fbad53479cab09ac03729e0a9faf2bee3db8208a550daf5af81a5934"
25192487
}
25202488
],
25212489
"licenses": [
@@ -2534,16 +2502,16 @@
25342502
"comment": "Home page for project"
25352503
},
25362504
{
2537-
"url": "https://pypi.org/project/pycparser/2.22/#files",
2505+
"url": "https://pypi.org/project/pycparser/2.23/#files",
25382506
"type": "distribution",
25392507
"comment": "Download location for component"
25402508
}
25412509
],
2542-
"purl": "pkg:pypi/pycparser@2.22",
2510+
"purl": "pkg:pypi/pycparser@2.23",
25432511
"properties": [
25442512
{
25452513
"name": "release_date",
2546-
"value": "2024-03-30T13:22:20Z"
2514+
"value": "2025-09-09T13:23:46Z"
25472515
},
25482516
{
25492517
"name": "language",
@@ -3123,7 +3091,7 @@
31233091
"type": "library",
31243092
"bom-ref": "47-jsonschema-specifications",
31253093
"name": "jsonschema-specifications",
3126-
"version": "2025.4.1",
3094+
"version": "2025.9.1",
31273095
"supplier": {
31283096
"name": "Julian Berman",
31293097
"contact": [
@@ -3132,12 +3100,12 @@
31323100
}
31333101
]
31343102
},
3135-
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2025.4.1:*:*:*:*:*:*:*",
3103+
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2025.9.1:*:*:*:*:*:*:*",
31363104
"description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
31373105
"hashes": [
31383106
{
31393107
"alg": "SHA-256",
3140-
"content": "4653bffbd6584f7de83a67e0d620ef16900b390ddc7939d56684d6c81e33f1af"
3108+
"content": "98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe"
31413109
}
31423110
],
31433111
"externalReferences": [
@@ -3147,7 +3115,7 @@
31473115
"comment": "Home page for project"
31483116
},
31493117
{
3150-
"url": "https://pypi.org/project/jsonschema-specifications/2025.4.1/#files",
3118+
"url": "https://pypi.org/project/jsonschema-specifications/2025.9.1/#files",
31513119
"type": "distribution",
31523120
"comment": "Download location for component"
31533121
},
@@ -3172,11 +3140,11 @@
31723140
"type": "vcs"
31733141
}
31743142
],
3175-
"purl": "pkg:pypi/jsonschema-specifications@2025.4.1",
3143+
"purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
31763144
"properties": [
31773145
{
31783146
"name": "release_date",
3179-
"value": "2025-04-23T12:34:05Z"
3147+
"value": "2025-09-08T01:34:57Z"
31803148
},
31813149
{
31823150
"name": "language",
@@ -4256,7 +4224,7 @@
42564224
"type": "library",
42574225
"bom-ref": "65-narwhals",
42584226
"name": "narwhals",
4259-
"version": "2.3.0",
4227+
"version": "2.5.0",
42604228
"supplier": {
42614229
"name": "Marco Gorelli",
42624230
"contact": [
@@ -4265,12 +4233,12 @@
42654233
}
42664234
]
42674235
},
4268-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.3.0:*:*:*:*:*:*:*",
4236+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.5.0:*:*:*:*:*:*:*",
42694237
"description": "Extremely lightweight compatibility layer between dataframe libraries",
42704238
"hashes": [
42714239
{
42724240
"alg": "SHA-256",
4273-
"content": "5507b1a9a9c2b1c55a627fdf6cf722fef2e23498bd14362a332c8848a311c321"
4241+
"content": "7e213f9ca7db3f8bf6f7eff35eaee6a1cf80902997e1b78d49b7755775d8f423"
42744242
}
42754243
],
42764244
"licenses": [
@@ -4289,7 +4257,7 @@
42894257
"comment": "Home page for project"
42904258
},
42914259
{
4292-
"url": "https://pypi.org/project/narwhals/2.3.0/#files",
4260+
"url": "https://pypi.org/project/narwhals/2.5.0/#files",
42934261
"type": "distribution",
42944262
"comment": "Download location for component"
42954263
},
@@ -4306,11 +4274,11 @@
43064274
"type": "issue-tracker"
43074275
}
43084276
],
4309-
"purl": "pkg:pypi/narwhals@2.3.0",
4277+
"purl": "pkg:pypi/narwhals@2.5.0",
43104278
"properties": [
43114279
{
43124280
"name": "release_date",
4313-
"value": "2025-09-01T08:29:25Z"
4281+
"value": "2025-09-12T10:04:22Z"
43144282
},
43154283
{
43164284
"name": "language",
@@ -4881,7 +4849,7 @@
48814849
"type": "library",
48824850
"bom-ref": "75-zstandard",
48834851
"name": "zstandard",
4884-
"version": "0.24.0",
4852+
"version": "0.25.0",
48854853
"supplier": {
48864854
"name": "Gregory Szorc",
48874855
"contact": [
@@ -4890,31 +4858,16 @@
48904858
}
48914859
]
48924860
},
4893-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.24.0:*:*:*:*:*:*:*",
4861+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.25.0:*:*:*:*:*:*:*",
48944862
"description": "Zstandard bindings for Python",
4895-
"hashes": [
4896-
{
4897-
"alg": "SHA-256",
4898-
"content": "af1394c2c5febc44e0bbf0fc6428263fa928b50d1b1982ce1d870dc793a8e5f4"
4899-
}
4900-
],
4901-
"licenses": [
4902-
{
4903-
"license": {
4904-
"id": "BSD-3-Clause",
4905-
"url": "https://opensource.org/licenses/BSD-3-Clause",
4906-
"acknowledgement": "concluded"
4907-
}
4908-
}
4909-
],
49104863
"externalReferences": [
49114864
{
49124865
"url": "https://github.com/indygreg/python-zstandard",
49134866
"type": "website",
49144867
"comment": "Home page for project"
49154868
},
49164869
{
4917-
"url": "https://pypi.org/project/zstandard/0.24.0/#files",
4870+
"url": "https://pypi.org/project/zstandard/0.25.0/#files",
49184871
"type": "distribution",
49194872
"comment": "Download location for component"
49204873
},
@@ -4923,11 +4876,11 @@
49234876
"type": "documentation"
49244877
}
49254878
],
4926-
"purl": "pkg:pypi/zstandard@0.24.0",
4879+
"purl": "pkg:pypi/zstandard@0.25.0",
49274880
"properties": [
49284881
{
49294882
"name": "release_date",
4930-
"value": "2025-08-17T18:21:12Z"
4883+
"value": "2025-06-08T17:06:38Z"
49314884
},
49324885
{
49334886
"name": "language",
@@ -4936,10 +4889,6 @@
49364889
{
49374890
"name": "python_version",
49384891
"value": "3.10.18"
4939-
},
4940-
{
4941-
"name": "License Comments",
4942-
"value": "zstandard declares BSD which is not currently a valid SPDX License identifier or expression."
49434892
}
49444893
]
49454894
}

0 commit comments

Comments
 (0)