diff --git a/sbom/cve-bin-tool-py3.11.json b/sbom/cve-bin-tool-py3.11.json
index 88caf18de9..2f642c924b 100644
--- a/sbom/cve-bin-tool-py3.11.json
+++ b/sbom/cve-bin-tool-py3.11.json
@@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.5",
- "serialNumber": "urn:uuid:10e08bb0-5663-41cc-a2a4-d425c73ac4e7",
+ "serialNumber": "urn:uuid:f8bcd705-2c81-42d8-83ff-c4e4db6d001d",
"version": 1,
"metadata": {
- "timestamp": "2024-02-26T00:27:51Z",
+ "timestamp": "2024-03-04T00:26:57Z",
"tools": {
"components": [
{
@@ -1508,7 +1508,7 @@
"type": "library",
"bom-ref": "36-cachetools",
"name": "cachetools",
- "version": "5.3.2",
+ "version": "5.3.3",
"supplier": {
"name": "Thomas Kemmer",
"contact": [
@@ -1517,7 +1517,7 @@
}
]
},
- "cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.2:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.3:*:*:*:*:*:*:*",
"description": "Extensible memoizing collections and decorators",
"licenses": [
{
@@ -1529,12 +1529,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/cachetools/5.3.2",
+ "url": "https://pypi.org/project/cachetools/5.3.3",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/cachetools@5.3.2",
+ "purl": "pkg:pypi/cachetools@5.3.3",
"properties": [
{
"name": "language",
@@ -1940,11 +1940,11 @@
"type": "library",
"bom-ref": "47-packageurl-python",
"name": "packageurl-python",
- "version": "0.13.4",
+ "version": "0.14.0",
"supplier": {
"name": "the purl authors"
},
- "cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.13.4:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.14.0:*:*:*:*:*:*:*",
"description": "A purl aka. Package URL parser and builder",
"licenses": [
{
@@ -1956,12 +1956,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/packageurl-python/0.13.4",
+ "url": "https://pypi.org/project/packageurl-python/0.14.0",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/packageurl-python@0.13.4",
+ "purl": "pkg:pypi/packageurl-python@0.14.0",
"properties": [
{
"name": "language",
@@ -2309,7 +2309,7 @@
"type": "library",
"bom-ref": "56-rich",
"name": "rich",
- "version": "13.7.0",
+ "version": "13.7.1",
"supplier": {
"name": "Will McGugan",
"contact": [
@@ -2318,7 +2318,7 @@
}
]
},
- "cpe": "cpe:2.3:a:will_mcgugan:rich:13.7.0:*:*:*:*:*:*:*",
+ "cpe": "cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*",
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
"licenses": [
{
@@ -2330,12 +2330,12 @@
],
"externalReferences": [
{
- "url": "https://pypi.org/project/rich/13.7.0",
+ "url": "https://pypi.org/project/rich/13.7.1",
"type": "distribution",
"comment": "Download location for component"
}
],
- "purl": "pkg:pypi/rich@13.7.0",
+ "purl": "pkg:pypi/rich@13.7.1",
"properties": [
{
"name": "language",
diff --git a/sbom/cve-bin-tool-py3.11.spdx b/sbom/cve-bin-tool-py3.11.spdx
index 2f1bfc6575..8c934757c6 100644
--- a/sbom/cve-bin-tool-py3.11.spdx
+++ b/sbom/cve-bin-tool-py3.11.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-940c064e-414e-4c09-b423-b3cd23c0b81e
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-35396493-d109-41f9-a42e-b8d506c2a89a
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.10.3
-Created: 2024-02-26T00:26:21Z
+Created: 2024-03-04T00:25:30Z
CreatorComment: This document has been automatically generated.
#####
@@ -552,17 +552,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.28
PackageName: cachetools
SPDXID: SPDXRef-Package-36-cachetools
-PackageVersion: 5.3.2
+PackageVersion: 5.3.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Thomas Kemmer (tkemmer@computer.org)
-PackageDownloadLocation: https://pypi.org/project/cachetools/5.3.2
+PackageDownloadLocation: https://pypi.org/project/cachetools/5.3.3
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: Extensible memoizing collections and decorators
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cachetools@5.3.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cachetools@5.3.3
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.3:*:*:*:*:*:*:*
#####
PackageName: monotonic
@@ -717,17 +717,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:raphael_barrois:semantic-version:2.10.
PackageName: packageurl-python
SPDXID: SPDXRef-Package-47-packageurl-python
-PackageVersion: 0.13.4
+PackageVersion: 0.14.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: the purl authors
-PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.13.4
+PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.14.0
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: A purl aka. Package URL parser and builder
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packageurl-python@0.13.4
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.13.4:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packageurl-python@0.14.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.14.0:*:*:*:*:*:*:*
#####
PackageName: packaging
@@ -855,17 +855,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:2.2.1:*:*:*:*:*:
PackageName: rich
SPDXID: SPDXRef-Package-56-rich
-PackageVersion: 13.7.0
+PackageVersion: 13.7.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com)
-PackageDownloadLocation: https://pypi.org/project/rich/13.7.0
+PackageDownloadLocation: https://pypi.org/project/rich/13.7.1
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rich@13.7.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.7.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rich@13.7.1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*
#####
PackageName: markdown-it-py