Skip to content

Commit d1c00e9

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.12 (#5365)
Co-authored-by: GitHub <[email protected]>
1 parent 99c22a0 commit d1c00e9

File tree

2 files changed

+61
-86
lines changed

2 files changed

+61
-86
lines changed

‎sbom/cve-bin-tool-py3.12.json‎

Lines changed: 32 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:70cb2955-4d80-4b60-bc20-887809b6a3ea",
5+
"serialNumber": "urn:uuid:39a4a4b2-5d2a-4415-a1e5-65b50302caef",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-09-22T00:46:01Z",
8+
"timestamp": "2025-09-29T00:40:55Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -876,7 +876,7 @@
876876
"type": "library",
877877
"bom-ref": "12-beautifulsoup4",
878878
"name": "beautifulsoup4",
879-
"version": "4.13.5",
879+
"version": "4.14.0",
880880
"supplier": {
881881
"name": "Leonard Richardson",
882882
"contact": [
@@ -885,12 +885,12 @@
885885
}
886886
]
887887
},
888-
"cpe": "cpe:2.3:a:leonard_richardson:beautifulsoup4:4.13.5:*:*:*:*:*:*:*",
888+
"cpe": "cpe:2.3:a:leonard_richardson:beautifulsoup4:4.14.0:*:*:*:*:*:*:*",
889889
"description": "Screen-scraping library",
890890
"hashes": [
891891
{
892892
"alg": "SHA-256",
893-
"content": "642085eaa22233aceadff9c69651bc51e8bf3f874fb6d7104ece2beb24b47c4a"
893+
"content": "aee96fbccdf2d2a8d1288b2afa51fc76bb60823b7881a50fb1ed5f711d1a7d73"
894894
}
895895
],
896896
"licenses": [
@@ -909,7 +909,7 @@
909909
"comment": "Home page for project"
910910
},
911911
{
912-
"url": "https://pypi.org/project/beautifulsoup4/4.13.5/#files",
912+
"url": "https://pypi.org/project/beautifulsoup4/4.14.0/#files",
913913
"type": "distribution",
914914
"comment": "Download location for component"
915915
},
@@ -918,11 +918,11 @@
918918
"type": "other"
919919
}
920920
],
921-
"purl": "pkg:pypi/beautifulsoup4@4.13.5",
921+
"purl": "pkg:pypi/beautifulsoup4@4.14.0",
922922
"properties": [
923923
{
924924
"name": "release_date",
925-
"value": "2025-08-24T14:06:14Z"
925+
"value": "2025-09-27T17:22:16Z"
926926
},
927927
{
928928
"name": "language",
@@ -2013,6 +2013,12 @@
20132013
},
20142014
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.5:*:*:*:*:*:*:*",
20152015
"description": "pyparsing - Classes and methods to define and execute parsing grammars",
2016+
"hashes": [
2017+
{
2018+
"alg": "SHA-256",
2019+
"content": "e38a4f02064cf41fe6593d328d0512495ad1f3d8a91c4f73fc401b3079a59a5e"
2020+
}
2021+
],
20162022
"externalReferences": [
20172023
{
20182024
"url": "https://github.com/pyparsing/pyparsing/",
@@ -2029,7 +2035,7 @@
20292035
"properties": [
20302036
{
20312037
"name": "release_date",
2032-
"value": "2022-02-03T00:00:29Z"
2038+
"value": "2025-09-21T04:11:04Z"
20332039
},
20342040
{
20352041
"name": "language",
@@ -2679,7 +2685,7 @@
26792685
"type": "library",
26802686
"bom-ref": "41-google-apitools",
26812687
"name": "google-apitools",
2682-
"version": "0.5.32",
2688+
"version": "0.5.35",
26832689
"supplier": {
26842690
"name": "Craig Citro",
26852691
"contact": [
@@ -2688,12 +2694,12 @@
26882694
}
26892695
]
26902696
},
2691-
"cpe": "cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*:*:*:*:*:*",
2697+
"cpe": "cpe:2.3:a:craig_citro:google-apitools:0.5.35:*:*:*:*:*:*:*",
26922698
"description": "client libraries for humans",
26932699
"hashes": [
26942700
{
26952701
"alg": "SHA-256",
2696-
"content": "b78f74116558e0476e19501b5b4b2ac7c93261a69c5449c861ea95cbc853c688"
2702+
"content": "0f6f67fbe6f228f4777ae7e9d00e01476f7b8a48dca3a4353a1c32369437bbd0"
26972703
}
26982704
],
26992705
"licenses": [
@@ -2712,16 +2718,16 @@
27122718
"comment": "Home page for project"
27132719
},
27142720
{
2715-
"url": "https://pypi.org/project/google-apitools/0.5.32/#files",
2721+
"url": "https://pypi.org/project/google-apitools/0.5.35/#files",
27162722
"type": "distribution",
27172723
"comment": "Download location for component"
27182724
}
27192725
],
2720-
"purl": "pkg:pypi/[email protected].32",
2726+
"purl": "pkg:pypi/[email protected].35",
27212727
"properties": [
27222728
{
27232729
"name": "release_date",
2724-
"value": "2021-05-05T22:12:58Z"
2730+
"value": "2025-09-24T20:22:49Z"
27252731
},
27262732
{
27272733
"name": "language",
@@ -2871,17 +2877,17 @@
28712877
"type": "library",
28722878
"bom-ref": "44-markupsafe",
28732879
"name": "markupsafe",
2874-
"version": "3.0.2",
2880+
"version": "3.0.3",
28752881
"description": "Safely add untrusted strings to HTML/XML markup.",
28762882
"hashes": [
28772883
{
28782884
"alg": "SHA-256",
2879-
"content": "7e94c425039cde14257288fd61dcfb01963e658efbc0ff54f5306b06054700f8"
2885+
"content": "2f981d352f04553a7171b8e44369f2af4055f888dfb147d55e42d29e29e74559"
28802886
}
28812887
],
28822888
"externalReferences": [
28832889
{
2884-
"url": "https://pypi.org/project/markupsafe/3.0.2/#files",
2890+
"url": "https://pypi.org/project/markupsafe/3.0.3/#files",
28852891
"type": "distribution",
28862892
"comment": "Download location for component"
28872893
},
@@ -2894,7 +2900,7 @@
28942900
"type": "documentation"
28952901
},
28962902
{
2897-
"url": "https://markupsafe.palletsprojects.com/changes/",
2903+
"url": "https://markupsafe.palletsprojects.com/page/changes/",
28982904
"type": "log"
28992905
},
29002906
{
@@ -2906,11 +2912,11 @@
29062912
"type": "chat"
29072913
}
29082914
],
2909-
"purl": "pkg:pypi/[email protected].2",
2915+
"purl": "pkg:pypi/[email protected].3",
29102916
"properties": [
29112917
{
29122918
"name": "release_date",
2913-
"value": "2024-10-18T15:20:51Z"
2919+
"value": "2025-09-27T18:36:05Z"
29142920
},
29152921
{
29162922
"name": "language",
@@ -2919,10 +2925,6 @@
29192925
{
29202926
"name": "python_version",
29212927
"value": "3.12.11"
2922-
},
2923-
{
2924-
"name": "License Comments",
2925-
"value": "markupsafe declares Copyright 2010 Pallets\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n1. Redistributions of source code must retain the above copyright\n notice, this list of conditions and the following disclaimer.\n\n2. Redistributions in binary form must reproduce the above copyright\n notice, this list of conditions and the following disclaimer in the\n documentation and/or other materials provided with the distribution.\n\n3. Neither the name of the copyright holder nor the names of its\n contributors may be used to endorse or promote products derived from\n this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A\nPARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nHOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED\nTO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR\nPROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF\nLIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING\nNEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n which is not currently a valid SPDX License identifier or expression."
29262928
}
29272929
]
29282930
},
@@ -3276,7 +3278,7 @@
32763278
"type": "library",
32773279
"bom-ref": "50-pyyaml",
32783280
"name": "pyyaml",
3279-
"version": "6.0.2",
3281+
"version": "6.0.3",
32803282
"supplier": {
32813283
"name": "Kirill Simonov",
32823284
"contact": [
@@ -3285,12 +3287,12 @@
32853287
}
32863288
]
32873289
},
3288-
"cpe": "cpe:2.3:a:kirill_simonov:pyyaml:6.0.2:*:*:*:*:*:*:*",
3290+
"cpe": "cpe:2.3:a:kirill_simonov:pyyaml:6.0.3:*:*:*:*:*:*:*",
32893291
"description": "YAML parser and emitter for Python",
32903292
"hashes": [
32913293
{
32923294
"alg": "SHA-256",
3293-
"content": "0a9a2848a5b7feac301353437eb7d5957887edbf81d56e903999a75a3d743086"
3295+
"content": "214ed4befebe12df36bcc8bc2b64b396ca31be9304b8f59e25c11cf94a4c033b"
32943296
}
32953297
],
32963298
"licenses": [
@@ -3334,11 +3336,11 @@
33343336
"type": "vcs"
33353337
}
33363338
],
3337-
"purl": "pkg:pypi/[email protected].2",
3339+
"purl": "pkg:pypi/[email protected].3",
33383340
"properties": [
33393341
{
33403342
"name": "release_date",
3341-
"value": "2024-08-06T20:31:40Z"
3343+
"value": "2025-09-25T21:31:46Z"
33423344
},
33433345
{
33443346
"name": "language",

0 commit comments

Comments
 (0)