diff --git a/sbom/cve-bin-tool-py3.13.json b/sbom/cve-bin-tool-py3.13.json
index 683892c529..7c673319a0 100644
--- a/sbom/cve-bin-tool-py3.13.json
+++ b/sbom/cve-bin-tool-py3.13.json
@@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
- "serialNumber": "urn:uuid:1456c7a7-7d48-4e40-8380-eb2a6c917420",
+ "serialNumber": "urn:uuid:1185e9c3-72d1-4919-86bf-0e6766e636b8",
"version": 1,
"metadata": {
- "timestamp": "2025-08-04T00:53:00Z",
+ "timestamp": "2025-08-11T00:45:54Z",
"lifecycles": [
{
"phase": "build"
@@ -71,7 +71,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -149,7 +149,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -218,7 +218,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -291,7 +291,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -380,7 +380,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -449,7 +449,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -513,7 +513,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -607,7 +607,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -705,7 +705,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -799,7 +799,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -864,7 +864,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -930,7 +930,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -992,7 +992,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1004,7 +1004,7 @@
"type": "library",
"bom-ref": "14-cvss",
"name": "cvss",
- "version": "3.4",
+ "version": "3.6",
"supplier": {
"name": "Stanislav Red Hat Product Security",
"contact": [
@@ -1013,12 +1013,12 @@
}
]
},
- "cpe": "cpe:2.3:a:stanislav_red_hat_product_security:cvss:3.4:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:stanislav_red_hat_product_security:cvss:3.6:*:*:*:*:*:*:*",
"description": "CVSS2/3/4 library with interactive calculator for Python 2 and Python 3",
"hashes": [
{
"alg": "SHA-256",
- "content": "d9950613758e60820f7fac37ca5f35158712f8f2ea4f6629858a60c4984fe4ef"
+ "content": "e342c6ad9c7eb69d2aebbbc2768a03cabd57eb947c806e145de5b936219833ea"
}
],
"licenses": [
@@ -1037,7 +1037,7 @@
"comment": "Home page for project"
},
{
- "url": "https://pypi.org/project/cvss/3.4/#files",
+ "url": "https://pypi.org/project/cvss/3.6/#files",
"type": "distribution",
"comment": "Download location for component"
},
@@ -1058,11 +1058,11 @@
"type": "build-system"
}
],
- "purl": "pkg:pypi/cvss@3.4",
+ "purl": "pkg:pypi/cvss@3.6",
"properties": [
{
"name": "release_date",
- "value": "2025-02-11T17:28:21Z"
+ "value": "2025-08-04T10:50:12Z"
},
{
"name": "language",
@@ -1070,7 +1070,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1132,7 +1132,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1194,7 +1194,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1256,7 +1256,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -1314,7 +1314,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1392,7 +1392,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1454,7 +1454,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -1507,7 +1507,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -1565,7 +1565,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1627,7 +1627,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1705,7 +1705,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -1763,7 +1763,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -1821,7 +1821,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1883,7 +1883,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -1945,7 +1945,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2003,7 +2003,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2061,7 +2061,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2123,7 +2123,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2197,7 +2197,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2263,7 +2263,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2338,7 +2338,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2420,7 +2420,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2478,7 +2478,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2536,7 +2536,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2594,7 +2594,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2656,7 +2656,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -2714,7 +2714,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2776,7 +2776,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2838,7 +2838,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2906,7 +2906,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -2965,7 +2965,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -3042,7 +3042,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3111,7 +3111,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3184,7 +3184,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3192,7 +3192,7 @@
"type": "library",
"bom-ref": "48-rpds-py",
"name": "rpds-py",
- "version": "0.26.0",
+ "version": "0.27.0",
"supplier": {
"name": "Julian Berman",
"contact": [
@@ -3201,21 +3201,12 @@
}
]
},
- "cpe": "cpe:2.3:a:julian_berman:rpds-py:0.26.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:julian_berman:rpds-py:0.27.0:*:*:*:*:*:*:*",
"description": "Python bindings to Rust's persistent data structures (rpds)",
"hashes": [
{
"alg": "SHA-256",
- "content": "4c70c70f9169692b36307a95f3d8c0a9fcd79f7b4a383aad5eaa0e9718b79b37"
- }
- ],
- "licenses": [
- {
- "license": {
- "id": "MIT",
- "url": "https://opensource.org/license/mit/",
- "acknowledgement": "concluded"
- }
+ "content": "130c1ffa5039a333f5926b09e346ab335f0d4ec393b030a18549a7c7e7c2cea4"
}
],
"externalReferences": [
@@ -3225,7 +3216,7 @@
"comment": "Home page for project"
},
{
- "url": "https://pypi.org/project/rpds-py/0.26.0/#files",
+ "url": "https://pypi.org/project/rpds-py/0.27.0/#files",
"type": "distribution",
"comment": "Download location for component"
},
@@ -3254,11 +3245,11 @@
"type": "other"
}
],
- "purl": "pkg:pypi/rpds-py@0.26.0",
+ "purl": "pkg:pypi/rpds-py@0.27.0",
"properties": [
{
"name": "release_date",
- "value": "2025-07-01T15:53:40Z"
+ "value": "2025-08-07T08:23:06Z"
},
{
"name": "language",
@@ -3266,7 +3257,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3324,7 +3315,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3402,7 +3393,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3460,7 +3451,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -3513,7 +3504,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3562,7 +3553,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3620,7 +3611,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3678,7 +3669,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3686,16 +3677,16 @@
"type": "library",
"bom-ref": "56-packageurl-python",
"name": "packageurl-python",
- "version": "0.17.3",
+ "version": "0.17.5",
"supplier": {
"name": "the purl authors"
},
- "cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.17.3:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.17.5:*:*:*:*:*:*:*",
"description": "A purl aka. Package URL parser and builder",
"hashes": [
{
"alg": "SHA-256",
- "content": "f51b5aab570159f07258c8e998e9972ff3bf060da16b7334a42bd9f9737777d9"
+ "content": "f0e55452ab37b5c192c443de1458e3f3b4d8ac27f747df6e8c48adeab081d321"
}
],
"licenses": [
@@ -3714,16 +3705,16 @@
"comment": "Home page for project"
},
{
- "url": "https://pypi.org/project/packageurl-python/0.17.3/#files",
+ "url": "https://pypi.org/project/packageurl-python/0.17.5/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/packageurl-python@0.17.3",
+ "purl": "pkg:pypi/packageurl-python@0.17.5",
"properties": [
{
"name": "release_date",
- "value": "2025-08-01T03:24:33Z"
+ "value": "2025-08-06T14:08:19Z"
},
{
"name": "language",
@@ -3731,7 +3722,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3793,7 +3784,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -3855,7 +3846,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -3917,7 +3908,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -3995,7 +3986,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4053,7 +4044,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -4118,7 +4109,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -4192,7 +4183,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -4204,7 +4195,7 @@
"type": "library",
"bom-ref": "64-python-gnupg",
"name": "python-gnupg",
- "version": "0.5.4",
+ "version": "0.5.5",
"supplier": {
"name": "Vinay Sajip",
"contact": [
@@ -4213,12 +4204,12 @@
}
]
},
- "cpe": "cpe:2.3:a:vinay_sajip:python-gnupg:0.5.4:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:vinay_sajip:python-gnupg:0.5.5:*:*:*:*:*:*:*",
"description": "A wrapper for the Gnu Privacy Guard (GPG or GnuPG)",
"hashes": [
{
"alg": "SHA-256",
- "content": "40ce25cde9df29af91fe931ce9df3ce544e14a37f62b13ca878c897217b2de6c"
+ "content": "51fa7b8831ff0914bc73d74c59b99c613de7247b91294323c39733bb85ac3fc1"
}
],
"licenses": [
@@ -4237,7 +4228,7 @@
"comment": "Home page for project"
},
{
- "url": "https://pypi.org/project/python-gnupg/0.5.4/#files",
+ "url": "https://pypi.org/project/python-gnupg/0.5.5/#files",
"type": "distribution",
"comment": "Download location for component"
},
@@ -4254,11 +4245,11 @@
"type": "issue-tracker"
}
],
- "purl": "pkg:pypi/python-gnupg@0.5.4",
+ "purl": "pkg:pypi/python-gnupg@0.5.5",
"properties": [
{
"name": "release_date",
- "value": "2025-01-07T11:58:32Z"
+ "value": "2025-08-04T19:26:54Z"
},
{
"name": "language",
@@ -4266,7 +4257,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
@@ -4336,7 +4327,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4344,7 +4335,7 @@
"type": "library",
"bom-ref": "66-charset-normalizer",
"name": "charset-normalizer",
- "version": "3.4.2",
+ "version": "3.4.3",
"supplier": {
"name": "Ahmed R .",
"contact": [
@@ -4353,12 +4344,12 @@
}
]
},
- "cpe": "cpe:2.3:a:ahmed_r.:charset-normalizer:3.4.2:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:ahmed_r.:charset-normalizer:3.4.3:*:*:*:*:*:*:*",
"description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
"hashes": [
{
"alg": "SHA-256",
- "content": "7c48ed483eb946e6c04ccbe02c6b4d1d48e51944b6db70f697e089c193404941"
+ "content": "fb7f67a1bfa6e40b438170ebdc8158b78dc465a5a67b6dde178a46987b244a72"
}
],
"licenses": [
@@ -4372,7 +4363,7 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/charset-normalizer/3.4.2/#files",
+ "url": "https://pypi.org/project/charset-normalizer/3.4.3/#files",
"type": "distribution",
"comment": "Download location for component"
},
@@ -4393,11 +4384,11 @@
"type": "issue-tracker"
}
],
- "purl": "pkg:pypi/charset-normalizer@3.4.2",
+ "purl": "pkg:pypi/charset-normalizer@3.4.3",
"properties": [
{
"name": "release_date",
- "value": "2025-05-02T08:31:46Z"
+ "value": "2025-08-09T07:55:36Z"
},
{
"name": "language",
@@ -4405,7 +4396,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4465,7 +4456,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4527,7 +4518,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4585,7 +4576,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4641,7 +4632,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4689,7 +4680,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
}
]
},
@@ -4747,7 +4738,7 @@
},
{
"name": "python_version",
- "value": "3.13.5"
+ "value": "3.13.6"
},
{
"name": "License Comments",
diff --git a/sbom/cve-bin-tool-py3.13.spdx b/sbom/cve-bin-tool-py3.13.spdx
index c4f4ef6775..46a49ea88c 100644
--- a/sbom/cve-bin-tool-py3.13.spdx
+++ b/sbom/cve-bin-tool-py3.13.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-f2900e1d-553c-4e25-a2db-a7c18cd9b2e2
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-3584feae-8125-42c6-a97d-9735fc218fdc
LicenseListVersion: 3.26
Creator: Tool: sbom4python-0.12.4
-Created: 2025-08-04T00:52:52Z
+Created: 2025-08-11T00:45:47Z
CreatorComment: SBOM Type: Build - This document has been automatically generated.
#####
@@ -310,25 +310,25 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:isaac_muse:soupsieve:2.7:*:*:*:*:*:*:*
PackageName: cvss
SPDXID: SPDXRef-14-cvss
-PackageVersion: 3.4
+PackageVersion: 3.6
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Stanislav Red Hat Product Security (skontar@redhat.com)
-PackageDownloadLocation: https://pypi.org/project/cvss/3.4/#files
+PackageDownloadLocation: https://pypi.org/project/cvss/3.6/#files
FilesAnalyzed: false
PackageHomePage: https://github.com/RedHatProductSecurity/cvss
-PackageChecksum: SHA256: d9950613758e60820f7fac37ca5f35158712f8f2ea4f6629858a60c4984fe4ef
+PackageChecksum: SHA256: e342c6ad9c7eb69d2aebbbc2768a03cabd57eb947c806e145de5b936219833ea
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: LGPL-3.0-or-later
PackageLicenseComments: cvss declares LGPLv3+ which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
-ReleaseDate: 2025-02-11T17:28:21Z
+ReleaseDate: 2025-08-04T10:50:12Z
ExternalRef: OTHER other https://github.com/RedHatProductSecurity/cvss/releases
ExternalRef: OTHER vcs https://github.com/RedHatProductSecurity/cvss
ExternalRef: OTHER issue-tracker https://github.com/RedHatProductSecurity/cvss/issues
ExternalRef: OTHER build-system https://github.com/RedHatProductSecurity/cvss/actions
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cvss@3.4
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:stanislav_red_hat_product_security:cvss:3.4:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cvss@3.6
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:stanislav_red_hat_product_security:cvss:3.6:*:*:*:*:*:*:*
#####
PackageName: defusedxml
@@ -1018,26 +1018,26 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.36.2:*:*:*
PackageName: rpds-py
SPDXID: SPDXRef-48-rpds-py
-PackageVersion: 0.26.0
+PackageVersion: 0.27.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman (Julian+rpds@GrayVines.com)
-PackageDownloadLocation: https://pypi.org/project/rpds-py/0.26.0/#files
+PackageDownloadLocation: https://pypi.org/project/rpds-py/0.27.0/#files
FilesAnalyzed: false
PackageHomePage: https://github.com/crate-py/rpds
-PackageChecksum: SHA256: 4c70c70f9169692b36307a95f3d8c0a9fcd79f7b4a383aad5eaa0e9718b79b37
-PackageLicenseDeclared: MIT
-PackageLicenseConcluded: MIT
+PackageChecksum: SHA256: 130c1ffa5039a333f5926b09e346ab335f0d4ec393b030a18549a7c7e7c2cea4
+PackageLicenseDeclared: NOASSERTION
+PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: Python bindings to Rust's persistent data structures (rpds)
-ReleaseDate: 2025-07-01T15:53:40Z
+ReleaseDate: 2025-08-07T08:23:06Z
ExternalRef: OTHER documentation https://rpds.readthedocs.io/
ExternalRef: OTHER issue-tracker https://github.com/crate-py/rpds/issues/
ExternalRef: OTHER other https://github.com/sponsors/Julian
ExternalRef: OTHER other https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link
ExternalRef: OTHER vcs https://github.com/crate-py/rpds
ExternalRef: OTHER other https://github.com/orium/rpds
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.26.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.26.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.27.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.27.0:*:*:*:*:*:*:*
#####
PackageName: lib4sbom
@@ -1174,20 +1174,20 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:csaf-tool:0.3.2:*:*:*
PackageName: packageurl-python
SPDXID: SPDXRef-56-packageurl-python
-PackageVersion: 0.17.3
+PackageVersion: 0.17.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: the purl authors
-PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.17.3/#files
+PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.17.5/#files
FilesAnalyzed: false
PackageHomePage: https://github.com/package-url/packageurl-python
-PackageChecksum: SHA256: f51b5aab570159f07258c8e998e9972ff3bf060da16b7334a42bd9f9737777d9
+PackageChecksum: SHA256: f0e55452ab37b5c192c443de1458e3f3b4d8ac27f747df6e8c48adeab081d321
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: A purl aka. Package URL parser and builder
-ReleaseDate: 2025-08-01T03:24:33Z
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packageurl-python@0.17.3
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.17.3:*:*:*:*:*:*:*
+ReleaseDate: 2025-08-06T14:08:19Z
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packageurl-python@0.17.5
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.17.5:*:*:*:*:*:*:*
#####
PackageName: rich
@@ -1357,24 +1357,24 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:2.0.1:*:*:*:*:*
PackageName: python-gnupg
SPDXID: SPDXRef-64-python-gnupg
-PackageVersion: 0.5.4
+PackageVersion: 0.5.5
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Vinay Sajip (vinay_sajip@yahoo.co.uk)
-PackageDownloadLocation: https://pypi.org/project/python-gnupg/0.5.4/#files
+PackageDownloadLocation: https://pypi.org/project/python-gnupg/0.5.5/#files
FilesAnalyzed: false
PackageHomePage: https://github.com/vsajip/python-gnupg
-PackageChecksum: SHA256: 40ce25cde9df29af91fe931ce9df3ce544e14a37f62b13ca878c897217b2de6c
+PackageChecksum: SHA256: 51fa7b8831ff0914bc73d74c59b99c613de7247b91294323c39733bb85ac3fc1
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: BSD-3-Clause
PackageLicenseComments: python-gnupg declares BSD which is not currently a valid SPDX License identifier or expression.
PackageCopyrightText: NOASSERTION
PackageSummary: A wrapper for the Gnu Privacy Guard (GPG or GnuPG)
-ReleaseDate: 2025-01-07T11:58:32Z
+ReleaseDate: 2025-08-04T19:26:54Z
ExternalRef: OTHER documentation https://gnupg.readthedocs.io/
ExternalRef: OTHER vcs https://github.com/vsajip/python-gnupg
ExternalRef: OTHER issue-tracker https://github.com/vsajip/python-gnupg/issues
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/python-gnupg@0.5.4
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.4:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/python-gnupg@0.5.5
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.5:*:*:*:*:*:*:*
#####
PackageName: requests
@@ -1399,23 +1399,23 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.4:*:*:*:*:
PackageName: charset-normalizer
SPDXID: SPDXRef-66-charset-normalizer
-PackageVersion: 3.4.2
+PackageVersion: 3.4.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Ahmed R. (tahri.ahmed@proton.me)
-PackageDownloadLocation: https://pypi.org/project/charset-normalizer/3.4.2/#files
+PackageDownloadLocation: https://pypi.org/project/charset-normalizer/3.4.3/#files
FilesAnalyzed: false
-PackageChecksum: SHA256: 7c48ed483eb946e6c04ccbe02c6b4d1d48e51944b6db70f697e089c193404941
+PackageChecksum: SHA256: fb7f67a1bfa6e40b438170ebdc8158b78dc465a5a67b6dde178a46987b244a72
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.
-ReleaseDate: 2025-05-02T08:31:46Z
+ReleaseDate: 2025-08-09T07:55:36Z
ExternalRef: OTHER log https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md
ExternalRef: OTHER documentation https://charset-normalizer.readthedocs.io/
ExternalRef: OTHER vcs https://github.com/jawah/charset_normalizer
ExternalRef: OTHER issue-tracker https://github.com/jawah/charset_normalizer/issues
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/charset-normalizer@3.4.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:ahmed_r.:charset-normalizer:3.4.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/charset-normalizer@3.4.3
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:ahmed_r.:charset-normalizer:3.4.3:*:*:*:*:*:*:*
#####
PackageName: urllib3