Skip to content

Commit f8f8c07

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.9
1 parent 7ad0a14 commit f8f8c07

File tree

2 files changed

+79
-104
lines changed

2 files changed

+79
-104
lines changed

‎sbom/cve-bin-tool-py3.9.json

Lines changed: 40 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:5bf150ae-9e66-44e4-a266-d4e87fd3a83e",
5+
"serialNumber": "urn:uuid:8d43bb02-7713-4031-9086-da6767d198d2",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2025-08-11T00:45:01Z",
8+
"timestamp": "2025-08-18T00:44:13Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -603,7 +603,7 @@
603603
"type": "library",
604604
"bom-ref": "9-multidict",
605605
"name": "multidict",
606-
"version": "6.6.3",
606+
"version": "6.6.4",
607607
"supplier": {
608608
"name": "Andrew Svetlov",
609609
"contact": [
@@ -612,12 +612,12 @@
612612
}
613613
]
614614
},
615-
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.6.3:*:*:*:*:*:*:*",
615+
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.6.4:*:*:*:*:*:*:*",
616616
"description": "multidict implementation",
617617
"hashes": [
618618
{
619619
"alg": "SHA-256",
620-
"content": "a2be5b7b35271f7fff1397204ba6708365e3d773579fe2a30625e16c4b4ce817"
620+
"content": "b8aa6f0bd8125ddd04a6593437bad6a7e70f300ff4180a531654aa2ab3f6d58f"
621621
}
622622
],
623623
"licenses": [
@@ -636,7 +636,7 @@
636636
"comment": "Home page for project"
637637
},
638638
{
639-
"url": "https://pypi.org/project/multidict/6.6.3/#files",
639+
"url": "https://pypi.org/project/multidict/6.6.4/#files",
640640
"type": "distribution",
641641
"comment": "Download location for component"
642642
},
@@ -677,11 +677,11 @@
677677
"type": "vcs"
678678
}
679679
],
680-
"purl": "pkg:pypi/[email protected].3",
680+
"purl": "pkg:pypi/[email protected].4",
681681
"properties": [
682682
{
683683
"name": "release_date",
684-
"value": "2025-06-30T15:50:58Z"
684+
"value": "2025-08-11T12:06:02Z"
685685
},
686686
{
687687
"name": "language",
@@ -1544,25 +1544,16 @@
15441544
"type": "library",
15451545
"bom-ref": "22-fasteners",
15461546
"name": "fasteners",
1547-
"version": "0.19",
1547+
"version": "0.20",
15481548
"supplier": {
15491549
"name": "Joshua Harlow"
15501550
},
1551-
"cpe": "cpe:2.3:a:joshua_harlow:fasteners:0.19:*:*:*:*:*:*:*",
1551+
"cpe": "cpe:2.3:a:joshua_harlow:fasteners:0.20:*:*:*:*:*:*:*",
15521552
"description": "A python package that provides useful locks",
15531553
"hashes": [
15541554
{
15551555
"alg": "SHA-256",
1556-
"content": "758819cb5d94cdedf4e836988b74de396ceacb8e2794d21f82d131fd9ee77237"
1557-
}
1558-
],
1559-
"licenses": [
1560-
{
1561-
"license": {
1562-
"id": "Apache-2.0",
1563-
"url": "https://www.apache.org/licenses/LICENSE-2.0",
1564-
"acknowledgement": "concluded"
1565-
}
1556+
"content": "9422c40d1e350e4259f509fb2e608d6bc43c0136f79a00db1b49046029d0b3b7"
15661557
}
15671558
],
15681559
"externalReferences": [
@@ -1572,16 +1563,16 @@
15721563
"comment": "Home page for project"
15731564
},
15741565
{
1575-
"url": "https://pypi.org/project/fasteners/0.19/#files",
1566+
"url": "https://pypi.org/project/fasteners/0.20/#files",
15761567
"type": "distribution",
15771568
"comment": "Download location for component"
15781569
}
15791570
],
1580-
"purl": "pkg:pypi/fasteners@0.19",
1571+
"purl": "pkg:pypi/fasteners@0.20",
15811572
"properties": [
15821573
{
15831574
"name": "release_date",
1584-
"value": "2023-09-19T17:11:18Z"
1575+
"value": "2025-08-11T10:19:35Z"
15851576
},
15861577
{
15871578
"name": "language",
@@ -3703,7 +3694,7 @@
37033694
"type": "library",
37043695
"bom-ref": "56-elementpath",
37053696
"name": "elementpath",
3706-
"version": "5.0.3",
3697+
"version": "5.0.4",
37073698
"supplier": {
37083699
"name": "Davide Brunato",
37093700
"contact": [
@@ -3712,12 +3703,12 @@
37123703
}
37133704
]
37143705
},
3715-
"cpe": "cpe:2.3:a:davide_brunato:elementpath:5.0.3:*:*:*:*:*:*:*",
3706+
"cpe": "cpe:2.3:a:davide_brunato:elementpath:5.0.4:*:*:*:*:*:*:*",
37163707
"description": "XPath 1.0/2.0/3.0/3.1 parsers and selectors for ElementTree and lxml",
37173708
"hashes": [
37183709
{
37193710
"alg": "SHA-256",
3720-
"content": "8c93540556f743835b3c682a7bdb2d97371ee1e151430ff35498b59f2c14e5a0"
3711+
"content": "75d6f31c614d57e50eb749fc50806e3102880cd1f6552da3f2265f8eb8d3bbc6"
37213712
}
37223713
],
37233714
"externalReferences": [
@@ -3727,16 +3718,16 @@
37273718
"comment": "Home page for project"
37283719
},
37293720
{
3730-
"url": "https://pypi.org/project/elementpath/5.0.3/#files",
3721+
"url": "https://pypi.org/project/elementpath/5.0.4/#files",
37313722
"type": "distribution",
37323723
"comment": "Download location for component"
37333724
}
37343725
],
3735-
"purl": "pkg:pypi/[email protected].3",
3726+
"purl": "pkg:pypi/[email protected].4",
37363727
"properties": [
37373728
{
37383729
"name": "release_date",
3739-
"value": "2025-06-28T06:20:35Z"
3730+
"value": "2025-08-16T18:19:52Z"
37403731
},
37413732
{
37423733
"name": "language",
@@ -4247,7 +4238,7 @@
42474238
"type": "library",
42484239
"bom-ref": "65-plotly",
42494240
"name": "plotly",
4250-
"version": "6.2.0",
4241+
"version": "6.3.0",
42514242
"supplier": {
42524243
"name": "Chris P",
42534244
"contact": [
@@ -4256,12 +4247,12 @@
42564247
}
42574248
]
42584249
},
4259-
"cpe": "cpe:2.3:a:chris_p:plotly:6.2.0:*:*:*:*:*:*:*",
4250+
"cpe": "cpe:2.3:a:chris_p:plotly:6.3.0:*:*:*:*:*:*:*",
42604251
"description": "An open-source interactive data visualization library for Python",
42614252
"hashes": [
42624253
{
42634254
"alg": "SHA-256",
4264-
"content": "32c444d4c940887219cb80738317040363deefdfee4f354498cc0b6dab8978bd"
4255+
"content": "7ad806edce9d3cdd882eaebaf97c0c9e252043ed1ed3d382c3e3520ec07806d4"
42654256
}
42664257
],
42674258
"externalReferences": [
@@ -4271,7 +4262,7 @@
42714262
"comment": "Home page for project"
42724263
},
42734264
{
4274-
"url": "https://pypi.org/project/plotly/6.2.0/#files",
4265+
"url": "https://pypi.org/project/plotly/6.3.0/#files",
42754266
"type": "distribution",
42764267
"comment": "Download location for component"
42774268
},
@@ -4288,11 +4279,11 @@
42884279
"type": "log"
42894280
}
42904281
],
4291-
"purl": "pkg:pypi/plotly@6.2.0",
4282+
"purl": "pkg:pypi/plotly@6.3.0",
42924283
"properties": [
42934284
{
42944285
"name": "release_date",
4295-
"value": "2025-06-26T16:20:40Z"
4286+
"value": "2025-08-12T20:22:09Z"
42964287
},
42974288
{
42984289
"name": "language",
@@ -4312,7 +4303,7 @@
43124303
"type": "library",
43134304
"bom-ref": "66-narwhals",
43144305
"name": "narwhals",
4315-
"version": "2.0.1",
4306+
"version": "2.1.2",
43164307
"supplier": {
43174308
"name": "Marco Gorelli",
43184309
"contact": [
@@ -4321,14 +4312,8 @@
43214312
}
43224313
]
43234314
},
4324-
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.0.1:*:*:*:*:*:*:*",
4315+
"cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.1.2:*:*:*:*:*:*:*",
43254316
"description": "Extremely lightweight compatibility layer between dataframe libraries",
4326-
"hashes": [
4327-
{
4328-
"alg": "SHA-256",
4329-
"content": "837457e36a2ba1710c881fb69e1f79ce44fb81728c92ac378f70892a53af8ddb"
4330-
}
4331-
],
43324317
"licenses": [
43334318
{
43344319
"license": {
@@ -4345,7 +4330,7 @@
43454330
"comment": "Home page for project"
43464331
},
43474332
{
4348-
"url": "https://pypi.org/project/narwhals/2.0.1/#files",
4333+
"url": "https://pypi.org/project/narwhals/2.1.2/#files",
43494334
"type": "distribution",
43504335
"comment": "Download location for component"
43514336
},
@@ -4362,11 +4347,11 @@
43624347
"type": "issue-tracker"
43634348
}
43644349
],
4365-
"purl": "pkg:pypi/narwhals@2.0.1",
4350+
"purl": "pkg:pypi/narwhals@2.1.2",
43664351
"properties": [
43674352
{
43684353
"name": "release_date",
4369-
"value": "2025-07-29T08:39:03Z"
4354+
"value": "2025-08-12T20:22:09Z"
43704355
},
43714356
{
43724357
"name": "language",
@@ -4889,7 +4874,7 @@
48894874
"type": "library",
48904875
"bom-ref": "75-zstandard",
48914876
"name": "zstandard",
4892-
"version": "0.23.0",
4877+
"version": "0.24.0",
48934878
"supplier": {
48944879
"name": "Gregory Szorc",
48954880
"contact": [
@@ -4898,14 +4883,8 @@
48984883
}
48994884
]
49004885
},
4901-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.23.0:*:*:*:*:*:*:*",
4886+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.24.0:*:*:*:*:*:*:*",
49024887
"description": "Zstandard bindings for Python",
4903-
"hashes": [
4904-
{
4905-
"alg": "SHA-256",
4906-
"content": "bf0a05b6059c0528477fba9054d09179beb63744355cab9f38059548fedd46a9"
4907-
}
4908-
],
49094888
"licenses": [
49104889
{
49114890
"license": {
@@ -4922,16 +4901,20 @@
49224901
"comment": "Home page for project"
49234902
},
49244903
{
4925-
"url": "https://pypi.org/project/zstandard/0.23.0/#files",
4904+
"url": "https://pypi.org/project/zstandard/0.24.0/#files",
49264905
"type": "distribution",
49274906
"comment": "Download location for component"
4907+
},
4908+
{
4909+
"url": "https://python-zstandard.readthedocs.io/en/latest/",
4910+
"type": "documentation"
49284911
}
49294912
],
4930-
"purl": "pkg:pypi/zstandard@0.23.0",
4913+
"purl": "pkg:pypi/zstandard@0.24.0",
49314914
"properties": [
49324915
{
49334916
"name": "release_date",
4934-
"value": "2024-07-15T00:13:27Z"
4917+
"value": "2020-11-01T01:40:20Z"
49354918
},
49364919
{
49374920
"name": "language",
@@ -5230,12 +5213,6 @@
52305213
"70-urllib3",
52315214
"71-certifi"
52325215
]
5233-
},
5234-
{
5235-
"ref": "75-zstandard",
5236-
"dependsOn": [
5237-
"36-cffi"
5238-
]
52395216
}
52405217
]
52415218
}

0 commit comments

Comments
 (0)