diff mbox series

[AUH] python3-sbom-cve-check: upgrading to 1.3.4 SUCCEEDED

Message ID 010101a07f9d3e0a-0a18c0f3-f054-4823-8f14-3dca5367c317-000000@us-west-2.amazonses.com
State New
Headers show
Series [AUH] python3-sbom-cve-check: upgrading to 1.3.4 SUCCEEDED | expand

Commit Message

auh@yoctoproject.org Sept. 8, 2026, 6:03 a.m. UTC
Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *python3-sbom-cve-check* to *1.3.4* has Succeeded.

Next steps:
    - apply the patch: git am 0001-python3-sbom-cve-check-upgrade-1.3.3-1.3.4.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From 28e9dd796e888b58e1c4b080aa06797655be303f Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Tue, 8 Sep 2026 05:36:19 +0000
Subject: [PATCH] python3-sbom-cve-check: upgrade 1.3.3 -> 1.3.4

Source: CHANGELOG.md

## v1.3.4

### Added or Changed

- Added configurable logging through the `[logging]` TOML table, including log
  files, per-logger levels, custom formats, and optional Rich output.
- Added `offline_mode=` database configuration and the `--offline-mode` option
  to prevent operations that require network access.
- Changed SBOM, vulnerability database, and export class registration to use the
  `type_name` class keyword. The `register_sbom()`, `register_vuln_db()`, and
  `register_export()` decorators are now deprecated.
- Updated supported `spdx-python-model` versions to 0.0.6 through 0.0.7.
- Added an OpenSSF Best Practices badge to the project documentation.

### Fixed

- Fixed the error when a TOML configuration file does not contain a
  `databases` section.
- Fixed reproducible TOML configuration export when plugins are used.
- Avoided unnecessary Git database updates when automatic updates are disabled
  with either `--disable-auto-updates` or `auto_update_max_age=off`.
- Generate a "not affected" assessment if the vulnerability is disputed ([#27](
  https://github.com/bootlin/sbom-cve-check/pull/27) by Peter Marko).
  prefixed by a comparison operator (`<`, `<=`, `>`, `>=`, or `=`) ([#28](
  https://github.com/bootlin/sbom-cve-check/pull/28) by Peter Marko).
### New Contributors

- Peter Marko made their first contribution in [#27](
  https://github.com/bootlin/sbom-cve-check/pull/27).

- Updated the Yocto Project Developer Guide link to the Scarthgap release, which
  retains documentation for the `cve-check` JSON report format ([#22](
  https://github.com/bootlin/sbom-cve-check/pull/22) by Aaron Honeycutt).

### New Contributors

- Aaron Honeycutt made their first contribution in [#22](
  https://github.com/bootlin/sbom-cve-check/pull/22).
- Fixed the type used for the version attribute in Yocto exports ([#18](
  https://github.com/bootlin/sbom-cve-check/pull/18) by Ross Burton).
  https://github.com/bootlin/sbom-cve-check/issues/16), [#17](
  https://github.com/bootlin/sbom-cve-check/pull/17) by Miguel Gazquez)
### New Contributors

- Miguel Gazquez made their first contribution in [#17](
  https://github.com/bootlin/sbom-cve-check/pull/17).

  https://github.com/bootlin/sbom-cve-check/pull/11) by Ross Burton).
- Fixed a typo in the documentation ([#14](
  https://github.com/bootlin/sbom-cve-check/pull/14) by Clayton Casciato).
### New Contributors

- Ross Burton made their first contribution in [#11](
  https://github.com/bootlin/sbom-cve-check/pull/11).
- Clayton Casciato made their first contribution in [#14](
  https://github.com/bootlin/sbom-cve-check/pull/14).

### Added or Changed

- Improved the project description and short documentation ([#1](
  https://github.com/bootlin/sbom-cve-check/pull/1) by Thomas Petazzoni).

### New Contributors

- Thomas Petazzoni made their first contribution in [#1](
  https://github.com/bootlin/sbom-cve-check/pull/1).
---
 ...-sbom-cve-check_1.3.3.bb => python3-sbom-cve-check_1.3.4.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.3.bb => python3-sbom-cve-check_1.3.4.bb} (82%)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb
similarity index 82%
rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb
rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb
index 2aca100569..c26ce6e6b3 100644
--- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb
+++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb
@@ -5,7 +5,7 @@  LICENSE = "GPL-2.0-or-later"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce"
 
 PYPI_PACKAGE = "sbom_cve_check"
-SRC_URI[sha256sum] = "8b766be1ae92b4eceaa2f694dd4724e310886c6436f44267a6bbc6a7b81ab8b9"
+SRC_URI[sha256sum] = "aa2f4e183b600fdad7ce6eb67f7d642bd3e7c67293ae9ffda7d3a2fde433e02b"
 
 inherit pypi python_hatchling