Skip to content

Commit b1ce2e5

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.13 (#5335)
Co-authored-by: GitHub <[email protected]>
1 parent 64987fd commit b1ce2e5

File tree

2 files changed

+94
-149
lines changed

2 files changed

+94
-149
lines changed

‎sbom/cve-bin-tool-py3.13.json‎

Lines changed: 48 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:1a1f6942-114f-468f-9701-57faeb352631",
5+
"serialNumber": "urn:uuid:fe5225ad-8d82-41ad-b1e0-aa0b1294f956",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-09-08T00:42:05Z",
8+
"timestamp": "2025-09-15T00:43:01Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -2002,7 +2002,7 @@
20022002
"type": "library",
20032003
"bom-ref": "30-pyparsing",
20042004
"name": "pyparsing",
2005-
"version": "3.2.3",
2005+
"version": "3.2.4",
20062006
"supplier": {
20072007
"name": "Paul McGuire",
20082008
"contact": [
@@ -2011,21 +2011,12 @@
20112011
}
20122012
]
20132013
},
2014-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.3:*:*:*:*:*:*:*",
2015-
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
2014+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.4:*:*:*:*:*:*:*",
2015+
"description": "pyparsing - Classes and methods to define and execute parsing grammars",
20162016
"hashes": [
20172017
{
20182018
"alg": "SHA-256",
2019-
"content": "a749938e02d6fd0b59b356ca504a24982314bb090c383e3cf201c95ef7e2bfcf"
2020-
}
2021-
],
2022-
"licenses": [
2023-
{
2024-
"license": {
2025-
"id": "MIT",
2026-
"url": "https://opensource.org/license/mit/",
2027-
"acknowledgement": "concluded"
2028-
}
2019+
"content": "91d0fcde680d42cd031daf3a6ba20da3107e08a75de50da58360e7d94ab24d36"
20292020
}
20302021
],
20312022
"externalReferences": [
@@ -2035,16 +2026,16 @@
20352026
"comment": "Home page for project"
20362027
},
20372028
{
2038-
"url": "https://pypi.org/project/pyparsing/3.2.3/#files",
2029+
"url": "https://pypi.org/project/pyparsing/3.2.4/#files",
20392030
"type": "distribution",
20402031
"comment": "Download location for component"
20412032
}
20422033
],
2043-
"purl": "pkg:pypi/[email protected].3",
2034+
"purl": "pkg:pypi/[email protected].4",
20442035
"properties": [
20452036
{
20462037
"name": "release_date",
2047-
"value": "2025-03-25T05:01:24Z"
2038+
"value": "2025-09-13T05:47:17Z"
20482039
},
20492040
{
20502041
"name": "language",
@@ -2053,10 +2044,6 @@
20532044
{
20542045
"name": "python_version",
20552046
"value": "3.13.7"
2056-
},
2057-
{
2058-
"name": "License Comments",
2059-
"value": "pyparsing declares MIT License which is not currently a valid SPDX License identifier or expression."
20602047
}
20612048
]
20622049
},
@@ -2337,55 +2324,28 @@
23372324
"type": "library",
23382325
"bom-ref": "35-cffi",
23392326
"name": "cffi",
2340-
"version": "1.17.1",
2327+
"version": "2.0.0",
23412328
"supplier": {
2342-
"name": "Armin Maciej Fijalkowski",
2343-
"contact": [
2344-
{
2345-
"email": "[email protected]"
2346-
}
2347-
]
2329+
"name": "Armin Maciej Fijalkowski"
23482330
},
2349-
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.17.1:*:*:*:*:*:*:*",
2331+
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:2.0.0:*:*:*:*:*:*:*",
23502332
"description": "Foreign Function Interface for Python calling C code.",
23512333
"hashes": [
23522334
{
23532335
"alg": "SHA-256",
2354-
"content": "df8b1c11f177bc2313ec4b2d46baec87a5f3e71fc8b45dab2ee7cae86d9aba14"
2355-
}
2356-
],
2357-
"licenses": [
2358-
{
2359-
"license": {
2360-
"id": "MIT",
2361-
"url": "https://opensource.org/license/mit/",
2362-
"acknowledgement": "concluded"
2363-
}
2336+
"content": "0cf2d91ecc3fcc0625c2c530fe004f82c110405f101548512cce44322fa8ac44"
23642337
}
23652338
],
23662339
"externalReferences": [
23672340
{
2368-
"url": "http://cffi.readthedocs.org",
2369-
"type": "website",
2370-
"comment": "Home page for project"
2371-
},
2372-
{
2373-
"url": "https://pypi.org/project/cffi/1.17.1/#files",
2341+
"url": "https://pypi.org/project/cffi/2.0.0/#files",
23742342
"type": "distribution",
23752343
"comment": "Download location for component"
23762344
},
23772345
{
2378-
"url": "http://cffi.readthedocs.org/",
2346+
"url": "https://cffi.readthedocs.io/",
23792347
"type": "documentation"
23802348
},
2381-
{
2382-
"url": "https://github.com/python-cffi/cffi",
2383-
"type": "vcs"
2384-
},
2385-
{
2386-
"url": "https://github.com/python-cffi/cffi/issues",
2387-
"type": "issue-tracker"
2388-
},
23892349
{
23902350
"url": "https://cffi.readthedocs.io/en/latest/whatsnew.html",
23912351
"type": "log"
@@ -2397,13 +2357,21 @@
23972357
{
23982358
"url": "https://groups.google.com/forum/#!forum/python-cffi",
23992359
"type": "other"
2360+
},
2361+
{
2362+
"url": "https://github.com/python-cffi/cffi",
2363+
"type": "vcs"
2364+
},
2365+
{
2366+
"url": "https://github.com/python-cffi/cffi/issues",
2367+
"type": "issue-tracker"
24002368
}
24012369
],
2402-
"purl": "pkg:pypi/cffi@1.17.1",
2370+
"purl": "pkg:pypi/cffi@2.0.0",
24032371
"properties": [
24042372
{
24052373
"name": "release_date",
2406-
"value": "2024-09-04T20:43:30Z"
2374+
"value": "2025-09-08T23:22:08Z"
24072375
},
24082376
{
24092377
"name": "language",
@@ -2419,7 +2387,7 @@
24192387
"type": "library",
24202388
"bom-ref": "36-pycparser",
24212389
"name": "pycparser",
2422-
"version": "2.22",
2390+
"version": "2.23",
24232391
"supplier": {
24242392
"name": "Eli Bendersky",
24252393
"contact": [
@@ -2428,12 +2396,12 @@
24282396
}
24292397
]
24302398
},
2431-
"cpe": "cpe:2.3:a:eli_bendersky:pycparser:2.22:*:*:*:*:*:*:*",
2399+
"cpe": "cpe:2.3:a:eli_bendersky:pycparser:2.23:*:*:*:*:*:*:*",
24322400
"description": "C parser in Python",
24332401
"hashes": [
24342402
{
24352403
"alg": "SHA-256",
2436-
"content": "c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc"
2404+
"content": "e5c6e8d3fbad53479cab09ac03729e0a9faf2bee3db8208a550daf5af81a5934"
24372405
}
24382406
],
24392407
"licenses": [
@@ -2452,16 +2420,16 @@
24522420
"comment": "Home page for project"
24532421
},
24542422
{
2455-
"url": "https://pypi.org/project/pycparser/2.22/#files",
2423+
"url": "https://pypi.org/project/pycparser/2.23/#files",
24562424
"type": "distribution",
24572425
"comment": "Download location for component"
24582426
}
24592427
],
2460-
"purl": "pkg:pypi/pycparser@2.22",
2428+
"purl": "pkg:pypi/pycparser@2.23",
24612429
"properties": [
24622430
{
24632431
"name": "release_date",
2464-
"value": "2024-03-30T13:22:20Z"
2432+
"value": "2025-09-09T13:23:46Z"
24652433
},
24662434
{
24672435
"name": "language",
@@ -3041,7 +3009,7 @@
30413009
"type": "library",
30423010
"bom-ref": "46-jsonschema-specifications",
30433011
"name": "jsonschema-specifications",
3044-
"version": "2025.4.1",
3012+
"version": "2025.9.1",
30453013
"supplier": {
30463014
"name": "Julian Berman",
30473015
"contact": [
@@ -3050,12 +3018,12 @@
30503018
}
30513019
]
30523020
},
3053-
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2025.4.1:*:*:*:*:*:*:*",
3021+
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2025.9.1:*:*:*:*:*:*:*",
30543022
"description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
30553023
"hashes": [
30563024
{
30573025
"alg": "SHA-256",
3058-
"content": "4653bffbd6584f7de83a67e0d620ef16900b390ddc7939d56684d6c81e33f1af"
3026+
"content": "98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe"
30593027
}
30603028
],
30613029
"externalReferences": [
@@ -3065,7 +3033,7 @@
30653033
"comment": "Home page for project"
30663034
},
30673035
{
3068-
"url": "https://pypi.org/project/jsonschema-specifications/2025.4.1/#files",
3036+
"url": "https://pypi.org/project/jsonschema-specifications/2025.9.1/#files",
30693037
"type": "distribution",
30703038
"comment": "Download location for component"
30713039
},
@@ -3090,11 +3058,11 @@
30903058
"type": "vcs"
30913059
}
30923060
],
3093-
"purl": "pkg:pypi/jsonschema-specifications@2025.4.1",
3061+
"purl": "pkg:pypi/jsonschema-specifications@2025.9.1",
30943062
"properties": [
30953063
{
30963064
"name": "release_date",
3097-
"value": "2025-04-23T12:34:05Z"
3065+
"value": "2025-09-08T01:34:57Z"
30983066
},
30993067
{
31003068
"name": "language",
@@ -4174,7 +4142,7 @@
41744142
"type": "library",
41754143
"bom-ref": "64-narwhals",
41764144
"name": "narwhals",
4177-
"version": "2.3.0",
4145+
"version": "2.5.0",
41784146
"supplier": {
41794147
"name": "Marco Gorelli",
41804148
"contact": [
@@ -4183,12 +4151,12 @@
41834151
}
41844152
]
41854153
},
4186-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.3.0:*:*:*:*:*:*:*",
4154+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.5.0:*:*:*:*:*:*:*",
41874155
"description": "Extremely lightweight compatibility layer between dataframe libraries",
41884156
"hashes": [
41894157
{
41904158
"alg": "SHA-256",
4191-
"content": "5507b1a9a9c2b1c55a627fdf6cf722fef2e23498bd14362a332c8848a311c321"
4159+
"content": "7e213f9ca7db3f8bf6f7eff35eaee6a1cf80902997e1b78d49b7755775d8f423"
41924160
}
41934161
],
41944162
"licenses": [
@@ -4207,7 +4175,7 @@
42074175
"comment": "Home page for project"
42084176
},
42094177
{
4210-
"url": "https://pypi.org/project/narwhals/2.3.0/#files",
4178+
"url": "https://pypi.org/project/narwhals/2.5.0/#files",
42114179
"type": "distribution",
42124180
"comment": "Download location for component"
42134181
},
@@ -4224,11 +4192,11 @@
42244192
"type": "issue-tracker"
42254193
}
42264194
],
4227-
"purl": "pkg:pypi/narwhals@2.3.0",
4195+
"purl": "pkg:pypi/narwhals@2.5.0",
42284196
"properties": [
42294197
{
42304198
"name": "release_date",
4231-
"value": "2025-09-01T08:29:25Z"
4199+
"value": "2025-09-12T10:04:22Z"
42324200
},
42334201
{
42344202
"name": "language",
@@ -4741,7 +4709,7 @@
47414709
"type": "library",
47424710
"bom-ref": "73-zstandard",
47434711
"name": "zstandard",
4744-
"version": "0.24.0",
4712+
"version": "0.25.0",
47454713
"supplier": {
47464714
"name": "Gregory Szorc",
47474715
"contact": [
@@ -4750,31 +4718,16 @@
47504718
}
47514719
]
47524720
},
4753-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.24.0:*:*:*:*:*:*:*",
4721+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.25.0:*:*:*:*:*:*:*",
47544722
"description": "Zstandard bindings for Python",
4755-
"hashes": [
4756-
{
4757-
"alg": "SHA-256",
4758-
"content": "af1394c2c5febc44e0bbf0fc6428263fa928b50d1b1982ce1d870dc793a8e5f4"
4759-
}
4760-
],
4761-
"licenses": [
4762-
{
4763-
"license": {
4764-
"id": "BSD-3-Clause",
4765-
"url": "https://opensource.org/licenses/BSD-3-Clause",
4766-
"acknowledgement": "concluded"
4767-
}
4768-
}
4769-
],
47704723
"externalReferences": [
47714724
{
47724725
"url": "https://github.com/indygreg/python-zstandard",
47734726
"type": "website",
47744727
"comment": "Home page for project"
47754728
},
47764729
{
4777-
"url": "https://pypi.org/project/zstandard/0.24.0/#files",
4730+
"url": "https://pypi.org/project/zstandard/0.25.0/#files",
47784731
"type": "distribution",
47794732
"comment": "Download location for component"
47804733
},
@@ -4783,11 +4736,11 @@
47834736
"type": "documentation"
47844737
}
47854738
],
4786-
"purl": "pkg:pypi/zstandard@0.24.0",
4739+
"purl": "pkg:pypi/zstandard@0.25.0",
47874740
"properties": [
47884741
{
47894742
"name": "release_date",
4790-
"value": "2025-08-17T18:21:12Z"
4743+
"value": "2025-06-08T17:06:38Z"
47914744
},
47924745
{
47934746
"name": "language",
@@ -4796,10 +4749,6 @@
47964749
{
47974750
"name": "python_version",
47984751
"value": "3.13.7"
4799-
},
4800-
{
4801-
"name": "License Comments",
4802-
"value": "zstandard declares BSD which is not currently a valid SPDX License identifier or expression."
48034752
}
48044753
]
48054754
}

0 commit comments

Comments
 (0)