diff --git a/sbom/cve-bin-tool-py3.8.json b/sbom/cve-bin-tool-py3.8.json index 61795a6406..dfdcfea7cd 100644 --- a/sbom/cve-bin-tool-py3.8.json +++ b/sbom/cve-bin-tool-py3.8.json @@ -2,10 +2,10 @@ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", - "serialNumber": "urn:uuid:fa7e8647-2a53-4040-98a5-f2a9e85c908b", + "serialNumber": "urn:uuid:e9a90c0d-57bf-43a3-aa85-b952ebf9e653", "version": 1, "metadata": { - "timestamp": "2024-09-30T00:39:57Z", + "timestamp": "2024-10-07T00:38:47Z", "lifecycles": [ { "phase": "build" @@ -15,7 +15,7 @@ "components": [ { "name": "sbom4python", - "version": "0.11.2", + "version": "0.11.3", "type": "application" } ] @@ -79,7 +79,7 @@ "type": "library", "bom-ref": "2-aiohttp", "name": "aiohttp", - "version": "3.10.8", + "version": "3.10.9", "description": "Async http client/server framework (asyncio)", "licenses": [ { @@ -97,12 +97,12 @@ "comment": "Home page for project" }, { - "url": "https://pypi.org/project/aiohttp/3.10.8/#files", + "url": "https://pypi.org/project/aiohttp/3.10.9/#files", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/aiohttp@3.10.8", + "purl": "pkg:pypi/aiohttp@3.10.9", "properties": [ { "name": "language", @@ -118,7 +118,7 @@ "type": "library", "bom-ref": "3-aiohappyeyeballs", "name": "aiohappyeyeballs", - "version": "2.4.2", + "version": "2.4.3", "supplier": { "name": "J. Nick Koston", "contact": [ @@ -127,13 +127,13 @@ } ] }, - "cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.2:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:*", "description": "Happy Eyeballs for asyncio", "licenses": [ { "license": { - "id": "Python-2.0.1", - "url": "https://www.python.org/download/releases/2.0.1/license/", + "id": "PSF-2.0", + "url": "https://opensource.org/licenses/Python-2.0", "acknowledgement": "concluded" } } @@ -145,12 +145,12 @@ "comment": "Home page for project" }, { - "url": "https://pypi.org/project/aiohappyeyeballs/2.4.2/#files", + "url": "https://pypi.org/project/aiohappyeyeballs/2.4.3/#files", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/aiohappyeyeballs@2.4.2", + "purl": "pkg:pypi/aiohappyeyeballs@2.4.3", "properties": [ { "name": "language", @@ -2890,7 +2890,7 @@ "type": "library", "bom-ref": "59-rich", "name": "rich", - "version": "13.8.1", + "version": "13.9.2", "supplier": { "name": "Will McGugan", "contact": [ @@ -2899,7 +2899,7 @@ } ] }, - "cpe": "cpe:2.3:a:will_mcgugan:rich:13.8.1:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:will_mcgugan:rich:13.9.2:*:*:*:*:*:*:*", "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal", "licenses": [ { @@ -2917,12 +2917,12 @@ "comment": "Home page for project" }, { - "url": "https://pypi.org/project/rich/13.8.1/#files", + "url": "https://pypi.org/project/rich/13.9.2/#files", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/rich@13.8.1", + "purl": "pkg:pypi/rich@13.9.2", "properties": [ { "name": "language", diff --git a/sbom/cve-bin-tool-py3.8.spdx b/sbom/cve-bin-tool-py3.8.spdx index 1f717e7838..a4364771ac 100644 --- a/sbom/cve-bin-tool-py3.8.spdx +++ b/sbom/cve-bin-tool-py3.8.spdx @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: Python-cve-bin-tool -DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-67d768e8-361a-4a6e-a850-ebb5216403f8 +DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-dc9c460e-f653-4394-a9de-b9bfdf557f55 LicenseListVersion: 3.22 -Creator: Tool: sbom4python-0.11.2 -Created: 2024-09-30T00:38:20Z +Creator: Tool: sbom4python-0.11.3 +Created: 2024-10-07T00:37:22Z CreatorComment: This document has been automatically generated. ##### @@ -27,10 +27,10 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.4:*:*:*:*:*:* PackageName: aiohttp SPDXID: SPDXRef-2-aiohttp -PackageVersion: 3.10.8 +PackageVersion: 3.10.9 PrimaryPackagePurpose: LIBRARY PackageSupplier: NOASSERTION -PackageDownloadLocation: https://pypi.org/project/aiohttp/3.10.8/#files +PackageDownloadLocation: https://pypi.org/project/aiohttp/3.10.9/#files FilesAnalyzed: false PackageHomePage: https://github.com/aio-libs/aiohttp PackageLicenseDeclared: NOASSERTION @@ -38,23 +38,23 @@ PackageLicenseConcluded: Apache-2.0 PackageLicenseComments: aiohttp declares Apache 2 which is not currently a valid SPDX License identifier or expression. PackageCopyrightText: NOASSERTION PackageSummary: Async http client/server framework (asyncio) -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohttp@3.10.8 +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohttp@3.10.9 ##### PackageName: aiohappyeyeballs SPDXID: SPDXRef-3-aiohappyeyeballs -PackageVersion: 2.4.2 +PackageVersion: 2.4.3 PrimaryPackagePurpose: LIBRARY PackageSupplier: Organization: J. Nick Koston (nick@koston.org) -PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.2/#files +PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.3/#files FilesAnalyzed: false PackageHomePage: https://github.com/aio-libs/aiohappyeyeballs -PackageLicenseDeclared: Python-2.0.1 -PackageLicenseConcluded: Python-2.0.1 +PackageLicenseDeclared: PSF-2.0 +PackageLicenseConcluded: PSF-2.0 PackageCopyrightText: NOASSERTION PackageSummary: Happy Eyeballs for asyncio -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohappyeyeballs@2.4.2 -ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.2:*:*:*:*:*:*:* +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohappyeyeballs@2.4.3 +ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:* ##### PackageName: aiosignal @@ -978,18 +978,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.1 PackageName: rich SPDXID: SPDXRef-59-rich -PackageVersion: 13.8.1 +PackageVersion: 13.9.2 PrimaryPackagePurpose: LIBRARY PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com) -PackageDownloadLocation: https://pypi.org/project/rich/13.8.1/#files +PackageDownloadLocation: https://pypi.org/project/rich/13.9.2/#files FilesAnalyzed: false PackageHomePage: https://github.com/Textualize/rich PackageLicenseDeclared: MIT PackageLicenseConcluded: MIT PackageCopyrightText: NOASSERTION PackageSummary: Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.8.1 -ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.8.1:*:*:*:*:*:*:* +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.9.2 +ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.9.2:*:*:*:*:*:*:* ##### PackageName: markdown-it-py