Skip to content

Commit 9ec66f6

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.9 (#5336)
Co-authored-by: GitHub <[email protected]>
1 parent 9f5f806 commit 9ec66f6

File tree

2 files changed

+94
-149
lines changed

2 files changed

+94
-149
lines changed

‎sbom/cve-bin-tool-py3.9.json‎

Lines changed: 48 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:c0992a50-1617-4b71-80cc-1ca45e216492",
5+
"serialNumber": "urn:uuid:e95d818a-d226-4cdc-ab2e-458ba245d4a8",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-09-08T00:42:26Z",
8+
"timestamp": "2025-09-15T00:43:01Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -2084,7 +2084,7 @@
20842084
"type": "library",
20852085
"bom-ref": "31-pyparsing",
20862086
"name": "pyparsing",
2087-
"version": "3.2.3",
2087+
"version": "3.2.4",
20882088
"supplier": {
20892089
"name": "Paul McGuire",
20902090
"contact": [
@@ -2093,21 +2093,12 @@
20932093
}
20942094
]
20952095
},
2096-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.3:*:*:*:*:*:*:*",
2097-
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
2096+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.4:*:*:*:*:*:*:*",
2097+
"description": "pyparsing - Classes and methods to define and execute parsing grammars",
20982098
"hashes": [
20992099
{
21002100
"alg": "SHA-256",
2101-
"content": "a749938e02d6fd0b59b356ca504a24982314bb090c383e3cf201c95ef7e2bfcf"
2102-
}
2103-
],
2104-
"licenses": [
2105-
{
2106-
"license": {
2107-
"id": "MIT",
2108-
"url": "https://opensource.org/license/mit/",
2109-
"acknowledgement": "concluded"
2110-
}
2101+
"content": "91d0fcde680d42cd031daf3a6ba20da3107e08a75de50da58360e7d94ab24d36"
21112102
}
21122103
],
21132104
"externalReferences": [
@@ -2117,16 +2108,16 @@
21172108
"comment": "Home page for project"
21182109
},
21192110
{
2120-
"url": "https://pypi.org/project/pyparsing/3.2.3/#files",
2111+
"url": "https://pypi.org/project/pyparsing/3.2.4/#files",
21212112
"type": "distribution",
21222113
"comment": "Download location for component"
21232114
}
21242115
],
2125-
"purl": "pkg:pypi/[email protected].3",
2116+
"purl": "pkg:pypi/[email protected].4",
21262117
"properties": [
21272118
{
21282119
"name": "release_date",
2129-
"value": "2025-03-25T05:01:24Z"
2120+
"value": "2025-09-13T05:47:17Z"
21302121
},
21312122
{
21322123
"name": "language",
@@ -2135,10 +2126,6 @@
21352126
{
21362127
"name": "python_version",
21372128
"value": "3.9.23"
2138-
},
2139-
{
2140-
"name": "License Comments",
2141-
"value": "pyparsing declares MIT License which is not currently a valid SPDX License identifier or expression."
21422129
}
21432130
]
21442131
},
@@ -2419,55 +2406,28 @@
24192406
"type": "library",
24202407
"bom-ref": "36-cffi",
24212408
"name": "cffi",
2422-
"version": "1.17.1",
2409+
"version": "2.0.0",
24232410
"supplier": {
2424-
"name": "Armin Maciej Fijalkowski",
2425-
"contact": [
2426-
{
2427-
"email": "[email protected]"
2428-
}
2429-
]
2411+
"name": "Armin Maciej Fijalkowski"
24302412
},
2431-
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.17.1:*:*:*:*:*:*:*",
2413+
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:2.0.0:*:*:*:*:*:*:*",
24322414
"description": "Foreign Function Interface for Python calling C code.",
24332415
"hashes": [
24342416
{
24352417
"alg": "SHA-256",
2436-
"content": "df8b1c11f177bc2313ec4b2d46baec87a5f3e71fc8b45dab2ee7cae86d9aba14"
2437-
}
2438-
],
2439-
"licenses": [
2440-
{
2441-
"license": {
2442-
"id": "MIT",
2443-
"url": "https://opensource.org/license/mit/",
2444-
"acknowledgement": "concluded"
2445-
}
2418+
"content": "0cf2d91ecc3fcc0625c2c530fe004f82c110405f101548512cce44322fa8ac44"
24462419
}
24472420
],
24482421
"externalReferences": [
24492422
{
2450-
"url": "http://cffi.readthedocs.org",
2451-
"type": "website",
2452-
"comment": "Home page for project"
2453-
},
2454-
{
2455-
"url": "https://pypi.org/project/cffi/1.17.1/#files",
2423+
"url": "https://pypi.org/project/cffi/2.0.0/#files",
24562424
"type": "distribution",
24572425
"comment": "Download location for component"
24582426
},
24592427
{
2460-
"url": "http://cffi.readthedocs.org/",
2428+
"url": "https://cffi.readthedocs.io/",
24612429
"type": "documentation"
24622430
},
2463-
{
2464-
"url": "https://github.com/python-cffi/cffi",
2465-
"type": "vcs"
2466-
},
2467-
{
2468-
"url": "https://github.com/python-cffi/cffi/issues",
2469-
"type": "issue-tracker"
2470-
},
24712431
{
24722432
"url": "https://cffi.readthedocs.io/en/latest/whatsnew.html",
24732433
"type": "log"
@@ -2479,13 +2439,21 @@
24792439
{
24802440
"url": "https://groups.google.com/forum/#!forum/python-cffi",
24812441
"type": "other"
2442+
},
2443+
{
2444+
"url": "https://github.com/python-cffi/cffi",
2445+
"type": "vcs"
2446+
},
2447+
{
2448+
"url": "https://github.com/python-cffi/cffi/issues",
2449+
"type": "issue-tracker"
24822450
}
24832451
],
2484-
"purl": "pkg:pypi/cffi@1.17.1",
2452+
"purl": "pkg:pypi/cffi@2.0.0",
24852453
"properties": [
24862454
{
24872455
"name": "release_date",
2488-
"value": "2024-09-04T20:43:30Z"
2456+
"value": "2025-09-08T23:22:08Z"
24892457
},
24902458
{
24912459
"name": "language",
@@ -2501,7 +2469,7 @@
25012469
"type": "library",
25022470
"bom-ref": "37-pycparser",
25032471
"name": "pycparser",
2504-
"version": "2.22",
2472+
"version": "2.23",
25052473
"supplier": {
25062474
"name": "Eli Bendersky",
25072475
"contact": [
@@ -2510,12 +2478,12 @@
25102478
}
25112479
]
25122480
},
2513-
"cpe": "cpe:2.3:a:eli_bendersky:pycparser:2.22:*:*:*:*:*:*:*",
2481+
"cpe": "cpe:2.3:a:eli_bendersky:pycparser:2.23:*:*:*:*:*:*:*",
25142482
"description": "C parser in Python",
25152483
"hashes": [
25162484
{
25172485
"alg": "SHA-256",
2518-
"content": "c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc"
2486+
"content": "e5c6e8d3fbad53479cab09ac03729e0a9faf2bee3db8208a550daf5af81a5934"
25192487
}
25202488
],
25212489
"licenses": [
@@ -2534,16 +2502,16 @@
25342502
"comment": "Home page for project"
25352503
},
25362504
{
2537-
"url": "https://pypi.org/project/pycparser/2.22/#files",
2505+
"url": "https://pypi.org/project/pycparser/2.23/#files",
25382506
"type": "distribution",
25392507
"comment": "Download location for component"
25402508
}
25412509
],
2542-
"purl": "pkg:pypi/pycparser@2.22",
2510+
"purl": "pkg:pypi/pycparser@2.23",
25432511
"properties": [
25442512
{
25452513
"name": "release_date",
2546-
"value": "2024-03-30T13:22:20Z"
2514+
"value": "2025-09-09T13:23:46Z"
25472515
},
25482516
{
25492517
"name": "language",
@@ -3232,7 +3200,7 @@
32323200
"type": "library",
32333201
"bom-ref": "49-jsonschema-specifications",
32343202
"name": "jsonschema-specifications",
3235-
"version": "2025.4.1",
3203+
"version": "2025.9.1",
32363204
"supplier": {
32373205
"name": "Julian Berman",
32383206
"contact": [
@@ -3241,12 +3209,12 @@
32413209
}
32423210
]
32433211
},
3244-
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2025.4.1:*:*:*:*:*:*:*",
3212+
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2025.9.1:*:*:*:*:*:*:*",
32453213
"description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
32463214
"hashes": [
32473215
{
32483216
"alg": "SHA-256",
3249-
"content": "4653bffbd6584f7de83a67e0d620ef16900b390ddc7939d56684d6c81e33f1af"
3217+
"content": "98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe"
32503218
}
32513219
],
32523220
"externalReferences": [
@@ -3256,7 +3224,7 @@
32563224
"comment": "Home page for project"
32573225
},
32583226
{
3259-
"url": "https://pypi.org/project/jsonschema-specifications/2025.4.1/#files",
3227+
"url": "https://pypi.org/project/jsonschema-specifications/2025.9.1/#files",
32603228
"type": "distribution",
32613229
"comment": "Download location for component"
32623230
},
@@ -3281,11 +3249,11 @@
32813249
"type": "vcs"
32823250
}
32833251
],
3284-
"purl": "pkg:pypi/jsonschema-specifications@2025.4.1",
3252+
"purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
32853253
"properties": [
32863254
{
32873255
"name": "release_date",
3288-
"value": "2025-04-23T12:34:05Z"
3256+
"value": "2025-09-08T01:34:57Z"
32893257
},
32903258
{
32913259
"name": "language",
@@ -4365,7 +4333,7 @@
43654333
"type": "library",
43664334
"bom-ref": "67-narwhals",
43674335
"name": "narwhals",
4368-
"version": "2.3.0",
4336+
"version": "2.5.0",
43694337
"supplier": {
43704338
"name": "Marco Gorelli",
43714339
"contact": [
@@ -4374,12 +4342,12 @@
43744342
}
43754343
]
43764344
},
4377-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.3.0:*:*:*:*:*:*:*",
4345+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.5.0:*:*:*:*:*:*:*",
43784346
"description": "Extremely lightweight compatibility layer between dataframe libraries",
43794347
"hashes": [
43804348
{
43814349
"alg": "SHA-256",
4382-
"content": "5507b1a9a9c2b1c55a627fdf6cf722fef2e23498bd14362a332c8848a311c321"
4350+
"content": "7e213f9ca7db3f8bf6f7eff35eaee6a1cf80902997e1b78d49b7755775d8f423"
43834351
}
43844352
],
43854353
"licenses": [
@@ -4398,7 +4366,7 @@
43984366
"comment": "Home page for project"
43994367
},
44004368
{
4401-
"url": "https://pypi.org/project/narwhals/2.3.0/#files",
4369+
"url": "https://pypi.org/project/narwhals/2.5.0/#files",
44024370
"type": "distribution",
44034371
"comment": "Download location for component"
44044372
},
@@ -4415,11 +4383,11 @@
44154383
"type": "issue-tracker"
44164384
}
44174385
],
4418-
"purl": "pkg:pypi/narwhals@2.3.0",
4386+
"purl": "pkg:pypi/narwhals@2.5.0",
44194387
"properties": [
44204388
{
44214389
"name": "release_date",
4422-
"value": "2025-09-01T08:29:25Z"
4390+
"value": "2025-09-12T10:04:22Z"
44234391
},
44244392
{
44254393
"name": "language",
@@ -4942,7 +4910,7 @@
49424910
"type": "library",
49434911
"bom-ref": "76-zstandard",
49444912
"name": "zstandard",
4945-
"version": "0.24.0",
4913+
"version": "0.25.0",
49464914
"supplier": {
49474915
"name": "Gregory Szorc",
49484916
"contact": [
@@ -4951,31 +4919,16 @@
49514919
}
49524920
]
49534921
},
4954-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.24.0:*:*:*:*:*:*:*",
4922+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.25.0:*:*:*:*:*:*:*",
49554923
"description": "Zstandard bindings for Python",
4956-
"hashes": [
4957-
{
4958-
"alg": "SHA-256",
4959-
"content": "af1394c2c5febc44e0bbf0fc6428263fa928b50d1b1982ce1d870dc793a8e5f4"
4960-
}
4961-
],
4962-
"licenses": [
4963-
{
4964-
"license": {
4965-
"id": "BSD-3-Clause",
4966-
"url": "https://opensource.org/licenses/BSD-3-Clause",
4967-
"acknowledgement": "concluded"
4968-
}
4969-
}
4970-
],
49714924
"externalReferences": [
49724925
{
49734926
"url": "https://github.com/indygreg/python-zstandard",
49744927
"type": "website",
49754928
"comment": "Home page for project"
49764929
},
49774930
{
4978-
"url": "https://pypi.org/project/zstandard/0.24.0/#files",
4931+
"url": "https://pypi.org/project/zstandard/0.25.0/#files",
49794932
"type": "distribution",
49804933
"comment": "Download location for component"
49814934
},
@@ -4984,11 +4937,11 @@
49844937
"type": "documentation"
49854938
}
49864939
],
4987-
"purl": "pkg:pypi/zstandard@0.24.0",
4940+
"purl": "pkg:pypi/zstandard@0.25.0",
49884941
"properties": [
49894942
{
49904943
"name": "release_date",
4991-
"value": "2025-08-17T18:21:12Z"
4944+
"value": "2020-11-01T01:40:20Z"
49924945
},
49934946
{
49944947
"name": "language",
@@ -4997,10 +4950,6 @@
49974950
{
49984951
"name": "python_version",
49994952
"value": "3.9.23"
5000-
},
5001-
{
5002-
"name": "License Comments",
5003-
"value": "zstandard declares BSD which is not currently a valid SPDX License identifier or expression."
50044953
}
50054954
]
50064955
}

0 commit comments

Comments
 (0)