chore: update SBOM for Python 3.12

Author: web-flow

sbom/cve-bin-tool-py3.12.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:20de284a-3847-45ac-8489-a0be951dcff0",
+  "serialNumber": "urn:uuid:4e1cafc5-a4b8-40fa-8127-6d533fccdbdf",
   "version": 1,
   "metadata": {
-    "timestamp": "2025-11-10T00:41:52Z",
+    "timestamp": "2025-11-17T00:41:37Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -3137,7 +3137,7 @@
       "type": "library",
       "bom-ref": "48-rpds-py",
       "name": "rpds-py",
-      "version": "0.28.0",
+      "version": "0.29.0",
       "supplier": {
         "name": "Julian Berman",
         "contact": [
@@ -3146,12 +3146,12 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:julian_berman:rpds-py:0.28.0:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:julian_berman:rpds-py:0.29.0:*:*:*:*:*:*:*",
       "description": "Python bindings to Rust's persistent data structures (rpds)",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7b6013db815417eeb56b2d9d7324e64fcd4fa289caeee6e7a78b2e11fc9b438a"
+          "content": "4ae4b88c6617e1b9e5038ab3fccd7bac0842fdda2b703117b2aa99bc85379113"
         }
       ],
       "externalReferences": [
@@ -3161,7 +3161,7 @@
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/rpds-py/0.28.0/#files",
+          "url": "https://pypi.org/project/rpds-py/0.29.0/#files",
           "type": "distribution",
           "comment": "Download location for component"
         },
@@ -3190,11 +3190,11 @@
           "type": "other"
         }
       ],
-      "purl": "pkg:pypi/rpds-py@0.28.0",
+      "purl": "pkg:pypi/rpds-py@0.29.0",
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-10-22T22:21:15Z"
+          "value": "2025-11-16T14:47:36Z"
         },
         {
           "name": "language",
@@ -3210,7 +3210,7 @@
       "type": "library",
       "bom-ref": "49-lib4sbom",
       "name": "lib4sbom",
-      "version": "0.9.0",
+      "version": "0.9.1",
       "supplier": {
         "name": "Anthony Harrison",
         "contact": [
@@ -3219,12 +3219,12 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.9.0:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.9.1:*:*:*:*:*:*:*",
       "description": "Software Bill of Material (SBOM) generator and consumer library",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "78b8584d10fc7fa28fc3c17c0afcb2967f3c2b96974e4bdbb60b3eb3744d01fd"
+          "content": "f2423d5e06a82f5462b05d0c5b9273d6e3674753ade9f5a0d4abdcf73f799117"
         }
       ],
       "licenses": [
@@ -3243,16 +3243,16 @@
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/lib4sbom/0.9.0/#files",
+          "url": "https://pypi.org/project/lib4sbom/0.9.1/#files",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/lib4sbom@0.9.0",
+      "purl": "pkg:pypi/lib4sbom@0.9.1",
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-10-28T09:09:40Z"
+          "value": "2025-11-13T20:07:13Z"
         },
         {
           "name": "language",
@@ -4128,7 +4128,7 @@
       "type": "library",
       "bom-ref": "64-narwhals",
       "name": "narwhals",
-      "version": "2.10.2",
+      "version": "2.11.0",
       "supplier": {
         "name": "Marco Gorelli",
         "contact": [
@@ -4137,7 +4137,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.10.2:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.11.0:*:*:*:*:*:*:*",
       "description": "Extremely lightweight compatibility layer between dataframe libraries",
       "licenses": [
         {
@@ -4155,7 +4155,7 @@
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/narwhals/2.10.2/#files",
+          "url": "https://pypi.org/project/narwhals/2.11.0/#files",
           "type": "distribution",
           "comment": "Download location for component"
         },
@@ -4172,7 +4172,7 @@
           "type": "issue-tracker"
         }
       ],
-      "purl": "pkg:pypi/narwhals@2.10.2",
+      "purl": "pkg:pypi/narwhals@2.11.0",
       "properties": [
         {
           "name": "release_date",
@@ -4465,7 +4465,7 @@
       "type": "library",
       "bom-ref": "69-certifi",
       "name": "certifi",
-      "version": "2025.10.5",
+      "version": "2025.11.12",
       "supplier": {
         "name": "Kenneth Reitz",
         "contact": [
@@ -4474,12 +4474,12 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2025.10.5:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2025.11.12:*:*:*:*:*:*:*",
       "description": "Python package for providing Mozilla's CA Bundle.",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0f212c2744a9bb6de0c56639a6f68afe01ecd92d91f14ae897c4fe7bbeeef0de"
+          "content": "97de8790030bbd5c2d96b7ec782fc2f7820ef8dba6db909ccf95449f2d062d4b"
         }
       ],
       "licenses": [
@@ -4498,7 +4498,7 @@
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/certifi/2025.10.5/#files",
+          "url": "https://pypi.org/project/certifi/2025.11.12/#files",
           "type": "distribution",
           "comment": "Download location for component"
         },
@@ -4507,11 +4507,11 @@
           "type": "vcs"
         }
       ],
-      "purl": "pkg:pypi/certifi@2025.10.5",
+      "purl": "pkg:pypi/certifi@2025.11.12",
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-10-05T04:12:14Z"
+          "value": "2025-11-12T02:54:49Z"
         },
         {
           "name": "language",

sbom/cve-bin-tool-py3.12.spdx

@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-be94c513-94c6-4fd2-906e-21bab8481b6b
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c8ca6192-0408-4590-a2d7-4fb26557b180
 LicenseListVersion: 3.26
 Creator: Tool: sbom4python-0.12.4
-Created: 2025-11-10T00:41:40Z
+Created: 2025-11-17T00:41:26Z
 CreatorComment: <text>SBOM Type: Build - This document has been automatically generated.</text>
 ##### 
 
@@ -986,44 +986,44 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.37.0:*:*:*
 
 PackageName: rpds-py
 SPDXID: SPDXRef-48-rpds-py
-PackageVersion: 0.28.0
+PackageVersion: 0.29.0
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Julian Berman (Julian+rpds@GrayVines.com)
-PackageDownloadLocation: https://pypi.org/project/rpds-py/0.28.0/#files
+PackageDownloadLocation: https://pypi.org/project/rpds-py/0.29.0/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/crate-py/rpds
-PackageChecksum: SHA256: 7b6013db815417eeb56b2d9d7324e64fcd4fa289caeee6e7a78b2e11fc9b438a
+PackageChecksum: SHA256: 4ae4b88c6617e1b9e5038ab3fccd7bac0842fdda2b703117b2aa99bc85379113
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: NOASSERTION
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Python bindings to Rust's persistent data structures (rpds)</text>
-ReleaseDate: 2025-10-22T22:21:15Z
+ReleaseDate: 2025-11-16T14:47:36Z
 ExternalRef: OTHER documentation https://rpds.readthedocs.io/
 ExternalRef: OTHER issue-tracker https://github.com/crate-py/rpds/issues/
 ExternalRef: OTHER other https://github.com/sponsors/Julian
 ExternalRef: OTHER other https://tidelift.com/subscription/pkg/pypi-rpds-py?utm_source=pypi-rpds-py&utm_medium=referral&utm_campaign=pypi-link
 ExternalRef: OTHER vcs https://github.com/crate-py/rpds
 ExternalRef: OTHER other https://github.com/orium/rpds
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.28.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.28.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.29.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.29.0:*:*:*:*:*:*:*
 ##### 
 
 PackageName: lib4sbom
 SPDXID: SPDXRef-49-lib4sbom
-PackageVersion: 0.9.0
+PackageVersion: 0.9.1
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Anthony Harrison (anthony.p.harrison@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.9.0/#files
+PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.9.1/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/anthonyharrison/lib4sbom
-PackageChecksum: SHA256: 78b8584d10fc7fa28fc3c17c0afcb2967f3c2b96974e4bdbb60b3eb3744d01fd
+PackageChecksum: SHA256: f2423d5e06a82f5462b05d0c5b9273d6e3674753ade9f5a0d4abdcf73f799117
 PackageLicenseDeclared: Apache-2.0
 PackageLicenseConcluded: Apache-2.0
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Software Bill of Material (SBOM) generator and consumer library</text>
-ReleaseDate: 2025-10-28T09:09:40Z
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.9.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.9.0:*:*:*:*:*:*:*
+ReleaseDate: 2025-11-13T20:07:13Z
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.9.1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.9.1:*:*:*:*:*:*:*
 ##### 
 
 PackageName: pyyaml
@@ -1322,10 +1322,10 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:6.4.0:*:*:*:*:*:*:*
 
 PackageName: narwhals
 SPDXID: SPDXRef-64-narwhals
-PackageVersion: 2.10.2
+PackageVersion: 2.11.0
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Marco Gorelli (hello_narwhals@proton.me)
-PackageDownloadLocation: https://pypi.org/project/narwhals/2.10.2/#files
+PackageDownloadLocation: https://pypi.org/project/narwhals/2.11.0/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/narwhals-dev/narwhals
 PackageLicenseDeclared: NOASSERTION
@@ -1337,8 +1337,8 @@ ReleaseDate: 2025-11-04T17:59:22Z
 ExternalRef: OTHER documentation https://narwhals-dev.github.io/narwhals/
 ExternalRef: OTHER vcs https://github.com/narwhals-dev/narwhals
 ExternalRef: OTHER issue-tracker https://github.com/narwhals-dev/narwhals/issues
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@2.10.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:2.10.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@2.11.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:2.11.0:*:*:*:*:*:*:*
 ##### 
 
 PackageName: python-gnupg
@@ -1427,21 +1427,21 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:2.5.0:*:*:*:*:*:
 
 PackageName: certifi
 SPDXID: SPDXRef-69-certifi
-PackageVersion: 2025.10.5
+PackageVersion: 2025.11.12
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Kenneth Reitz (me@kennethreitz.com)
-PackageDownloadLocation: https://pypi.org/project/certifi/2025.10.5/#files
+PackageDownloadLocation: https://pypi.org/project/certifi/2025.11.12/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/certifi/python-certifi
-PackageChecksum: SHA256: 0f212c2744a9bb6de0c56639a6f68afe01ecd92d91f14ae897c4fe7bbeeef0de
+PackageChecksum: SHA256: 97de8790030bbd5c2d96b7ec782fc2f7820ef8dba6db909ccf95449f2d062d4b
 PackageLicenseDeclared: MPL-2.0
 PackageLicenseConcluded: MPL-2.0
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Python package for providing Mozilla's CA Bundle.</text>
-ReleaseDate: 2025-10-05T04:12:14Z
+ReleaseDate: 2025-11-12T02:54:49Z
 ExternalRef: OTHER vcs https://github.com/certifi/python-certifi
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/certifi@2025.10.5
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2025.10.5:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/certifi@2025.11.12
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2025.11.12:*:*:*:*:*:*:*
 ##### 
 
 PackageName: rpmfile