Skip to content

Commit c91cf00

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.13 (#5118)
Co-authored-by: GitHub <[email protected]>
1 parent 63f4333 commit c91cf00

File tree

2 files changed

+80
-103
lines changed

2 files changed

+80
-103
lines changed

‎sbom/cve-bin-tool-py3.13.json

Lines changed: 41 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:97be6c6f-a887-453d-8035-b55783de4a71",
5+
"serialNumber": "urn:uuid:bb5ac25c-5df6-4680-b813-d70e4ed708e4",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-05-26T00:41:48Z",
8+
"timestamp": "2025-06-02T00:43:22Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -89,8 +89,14 @@
8989
"type": "library",
9090
"bom-ref": "2-aiohttp",
9191
"name": "aiohttp",
92-
"version": "3.12.0",
92+
"version": "3.12.6",
9393
"description": "Async http client/server framework (asyncio)",
94+
"hashes": [
95+
{
96+
"alg": "SHA-256",
97+
"content": "77ba53286c89486e8b02fb47352a5a8270bab1084e2a43fe8e35eb261befda13"
98+
}
99+
],
94100
"licenses": [
95101
{
96102
"license": {
@@ -107,7 +113,7 @@
107113
"comment": "Home page for project"
108114
},
109115
{
110-
"url": "https://pypi.org/project/aiohttp/3.12.0/#files",
116+
"url": "https://pypi.org/project/aiohttp/3.12.6/#files",
111117
"type": "distribution",
112118
"comment": "Download location for component"
113119
},
@@ -144,11 +150,11 @@
144150
"type": "vcs"
145151
}
146152
],
147-
"purl": "pkg:pypi/[email protected].0",
153+
"purl": "pkg:pypi/[email protected].6",
148154
"properties": [
149155
{
150156
"name": "release_date",
151-
"value": "2024-09-17T18:57:44Z"
157+
"value": "2025-05-31T05:54:32Z"
152158
},
153159
{
154160
"name": "language",
@@ -2917,7 +2923,7 @@
29172923
"type": "library",
29182924
"bom-ref": "44-zipp",
29192925
"name": "zipp",
2920-
"version": "3.21.0",
2926+
"version": "3.22.0",
29212927
"supplier": {
29222928
"name": "Jason R .",
29232929
"contact": [
@@ -2926,26 +2932,17 @@
29262932
}
29272933
]
29282934
},
2929-
"cpe": "cpe:2.3:a:jason_r.:zipp:3.21.0:*:*:*:*:*:*:*",
2935+
"cpe": "cpe:2.3:a:jason_r.:zipp:3.22.0:*:*:*:*:*:*:*",
29302936
"description": "Backport of pathlib-compatible object wrapper for zip files",
29312937
"hashes": [
29322938
{
29332939
"alg": "SHA-256",
2934-
"content": "ac1bbe05fd2991f160ebce24ffbac5f6d11d83dc90891255885223d42b3cd931"
2935-
}
2936-
],
2937-
"licenses": [
2938-
{
2939-
"license": {
2940-
"id": "MIT",
2941-
"url": "https://opensource.org/license/mit/",
2942-
"acknowledgement": "concluded"
2943-
}
2940+
"content": "fe208f65f2aca48b81f9e6fd8cf7b8b32c26375266b009b413d45306b6148343"
29442941
}
29452942
],
29462943
"externalReferences": [
29472944
{
2948-
"url": "https://pypi.org/project/zipp/3.21.0/#files",
2945+
"url": "https://pypi.org/project/zipp/3.22.0/#files",
29492946
"type": "distribution",
29502947
"comment": "Download location for component"
29512948
},
@@ -2954,11 +2951,11 @@
29542951
"type": "vcs"
29552952
}
29562953
],
2957-
"purl": "pkg:pypi/zipp@3.21.0",
2954+
"purl": "pkg:pypi/zipp@3.22.0",
29582955
"properties": [
29592956
{
29602957
"name": "release_date",
2961-
"value": "2024-11-10T15:05:19Z"
2958+
"value": "2025-05-26T14:46:30Z"
29622959
},
29632960
{
29642961
"name": "language",
@@ -2967,10 +2964,6 @@
29672964
{
29682965
"name": "python_version",
29692966
"value": "3.13.3"
2970-
},
2971-
{
2972-
"name": "License Comments",
2973-
"value": "zipp declares MIT License which is not currently a valid SPDX License identifier or expression."
29742967
}
29752968
]
29762969
},
@@ -3105,7 +3098,7 @@
31053098
"type": "library",
31063099
"bom-ref": "47-jsonschema",
31073100
"name": "jsonschema",
3108-
"version": "4.23.0",
3101+
"version": "4.24.0",
31093102
"supplier": {
31103103
"name": "Julian Berman",
31113104
"contact": [
@@ -3114,21 +3107,12 @@
31143107
}
31153108
]
31163109
},
3117-
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.23.0:*:*:*:*:*:*:*",
3110+
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.24.0:*:*:*:*:*:*:*",
31183111
"description": "An implementation of JSON Schema validation for Python",
31193112
"hashes": [
31203113
{
31213114
"alg": "SHA-256",
3122-
"content": "fbadb6f8b144a8f8cf9f0b89ba94501d143e50411a1278633f56a7acf7fd5566"
3123-
}
3124-
],
3125-
"licenses": [
3126-
{
3127-
"license": {
3128-
"id": "MIT",
3129-
"url": "https://opensource.org/license/mit/",
3130-
"acknowledgement": "concluded"
3131-
}
3115+
"content": "a462455f19f5faf404a7902952b6f0e3ce868f3ee09a359b05eca6673bd8412d"
31323116
}
31333117
],
31343118
"externalReferences": [
@@ -3138,7 +3122,7 @@
31383122
"comment": "Home page for project"
31393123
},
31403124
{
3141-
"url": "https://pypi.org/project/jsonschema/4.23.0/#files",
3125+
"url": "https://pypi.org/project/jsonschema/4.24.0/#files",
31423126
"type": "distribution",
31433127
"comment": "Download location for component"
31443128
},
@@ -3167,11 +3151,11 @@
31673151
"type": "vcs"
31683152
}
31693153
],
3170-
"purl": "pkg:pypi/jsonschema@4.23.0",
3154+
"purl": "pkg:pypi/jsonschema@4.24.0",
31713155
"properties": [
31723156
{
31733157
"name": "release_date",
3174-
"value": "2024-07-08T18:40:00Z"
3158+
"value": "2025-05-26T18:48:08Z"
31753159
},
31763160
{
31773161
"name": "language",
@@ -4103,7 +4087,7 @@
41034087
"type": "library",
41044088
"bom-ref": "62-plotly",
41054089
"name": "plotly",
4106-
"version": "6.1.1",
4090+
"version": "6.1.2",
41074091
"supplier": {
41084092
"name": "Chris P",
41094093
"contact": [
@@ -4112,12 +4096,12 @@
41124096
}
41134097
]
41144098
},
4115-
"cpe": "cpe:2.3:a:chris_p:plotly:6.1.1:*:*:*:*:*:*:*",
4099+
"cpe": "cpe:2.3:a:chris_p:plotly:6.1.2:*:*:*:*:*:*:*",
41164100
"description": "An open-source interactive data visualization library for Python",
41174101
"hashes": [
41184102
{
41194103
"alg": "SHA-256",
4120-
"content": "9cca7167406ebf7ff541422738402159ec3621a608ff7b3e2f025573a1c76225"
4104+
"content": "f1548a8ed9158d59e03d7fed548c7db5549f3130d9ae19293c8638c202648f6d"
41214105
}
41224106
],
41234107
"externalReferences": [
@@ -4127,7 +4111,7 @@
41274111
"comment": "Home page for project"
41284112
},
41294113
{
4130-
"url": "https://pypi.org/project/plotly/6.1.1/#files",
4114+
"url": "https://pypi.org/project/plotly/6.1.2/#files",
41314115
"type": "distribution",
41324116
"comment": "Download location for component"
41334117
},
@@ -4144,11 +4128,11 @@
41444128
"type": "log"
41454129
}
41464130
],
4147-
"purl": "pkg:pypi/[email protected].1",
4131+
"purl": "pkg:pypi/[email protected].2",
41484132
"properties": [
41494133
{
41504134
"name": "release_date",
4151-
"value": "2025-05-20T20:09:26Z"
4135+
"value": "2025-05-27T20:21:46Z"
41524136
},
41534137
{
41544138
"name": "language",
@@ -4168,7 +4152,7 @@
41684152
"type": "library",
41694153
"bom-ref": "63-narwhals",
41704154
"name": "narwhals",
4171-
"version": "1.40.0",
4155+
"version": "1.41.0",
41724156
"supplier": {
41734157
"name": "Marco Gorelli",
41744158
"contact": [
@@ -4177,14 +4161,8 @@
41774161
}
41784162
]
41794163
},
4180-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.40.0:*:*:*:*:*:*:*",
4164+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:1.41.0:*:*:*:*:*:*:*",
41814165
"description": "Extremely lightweight compatibility layer between dataframe libraries",
4182-
"hashes": [
4183-
{
4184-
"alg": "SHA-256",
4185-
"content": "1e6c731811d01c61147c52433b4d4edfb6511aaf2c859aa01c2e8ca6ff4d27e5"
4186-
}
4187-
],
41884166
"licenses": [
41894167
{
41904168
"license": {
@@ -4201,7 +4179,7 @@
42014179
"comment": "Home page for project"
42024180
},
42034181
{
4204-
"url": "https://pypi.org/project/narwhals/1.40.0/#files",
4182+
"url": "https://pypi.org/project/narwhals/1.41.0/#files",
42054183
"type": "distribution",
42064184
"comment": "Download location for component"
42074185
},
@@ -4218,11 +4196,11 @@
42184196
"type": "issue-tracker"
42194197
}
42204198
],
4221-
"purl": "pkg:pypi/narwhals@1.40.0",
4199+
"purl": "pkg:pypi/narwhals@1.41.0",
42224200
"properties": [
42234201
{
42244202
"name": "release_date",
4225-
"value": "2025-05-19T07:44:10Z"
4203+
"value": "2025-05-27T20:21:46Z"
42264204
},
42274205
{
42284206
"name": "language",
@@ -4631,7 +4609,7 @@
46314609
"type": "library",
46324610
"bom-ref": "70-setuptools",
46334611
"name": "setuptools",
4634-
"version": "80.8.0",
4612+
"version": "80.9.0",
46354613
"supplier": {
46364614
"name": "Python Packaging Authority",
46374615
"contact": [
@@ -4640,17 +4618,17 @@
46404618
}
46414619
]
46424620
},
4643-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:80.8.0:*:*:*:*:*:*:*",
4621+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:80.9.0:*:*:*:*:*:*:*",
46444622
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
46454623
"hashes": [
46464624
{
46474625
"alg": "SHA-256",
4648-
"content": "95a60484590d24103af13b686121328cc2736bee85de8936383111e421b9edc0"
4626+
"content": "062d34222ad13e0cc312a4c02d73f059e86a4acbfbdea8f8f76b28c99f306922"
46494627
}
46504628
],
46514629
"externalReferences": [
46524630
{
4653-
"url": "https://pypi.org/project/setuptools/80.8.0/#files",
4631+
"url": "https://pypi.org/project/setuptools/80.9.0/#files",
46544632
"type": "distribution",
46554633
"comment": "Download location for component"
46564634
},
@@ -4667,11 +4645,11 @@
46674645
"type": "log"
46684646
}
46694647
],
4670-
"purl": "pkg:pypi/setuptools@80.8.0",
4648+
"purl": "pkg:pypi/setuptools@80.9.0",
46714649
"properties": [
46724650
{
46734651
"name": "release_date",
4674-
"value": "2025-05-20T14:02:51Z"
4652+
"value": "2025-05-27T00:56:49Z"
46754653
},
46764654
{
46774655
"name": "language",

0 commit comments

Comments
 (0)