From patchwork Wed Jun 24 16:53:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 90868 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D90D8CDE002 for ; Wed, 24 Jun 2026 16:54:20 +0000 (UTC) Received: from smtpout-02.galae.net (smtpout-02.galae.net [185.246.84.56]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12168.1782320054091785757 for ; Wed, 24 Jun 2026 09:54:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=WU2Utsx/; spf=pass (domain: bootlin.com, ip: 185.246.84.56, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-02.galae.net (Postfix) with ESMTPS id 424601A0923; Wed, 24 Jun 2026 16:54:12 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 17B01601C5; Wed, 24 Jun 2026 16:54:12 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 57CDC106C8415; Wed, 24 Jun 2026 18:54:10 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1782320051; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=0FfU/70D7G8YHQ5pPNwnGbp/WaaEI5EHsLUvdJqXuMg=; b=WU2Utsx/Iz+NHmlWRy7xnQ0Ckwv076bU9FcjeN5PT8LDSas1DPOB/Z6kbpYI3EnDoHqrUG nY6B56qIBtu9sHcgq1Lad7cu0o5X0XCbpiWVVVlaTGVPT8iwXCwOaaQDar3GaXtUjBYJgZ olM3uDcA3cvrK3PiwkrH0/NMhKsqqV1L0jJXuPP2QEBIqC81p031PbqAmdWBwFvcNGJVA8 I7G7fnGZEGqWyB2IvedqJHSROQzMq0fwvH1hRAcGsES9nrG9hftGCRspUO2fuwsy0gnwqU Pqfb6ioBBporsL3OVf2S8hBHe5M4N/X+RnvW8o4WHTdxwRQQ2ad7CemHXmQg0Q== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 24 Jun 2026 18:53:53 +0200 Subject: [PATCH 1/4] python3-spdx-python-model: update from version 0.0.5 to 0.0.6 MIME-Version: 1.0 Message-Id: <20260624-update-sbom-cve-check-1-3-2-v1-1-f7ab738bd785@bootlin.com> References: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> In-Reply-To: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 24 Jun 2026 16:54:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239527 Drop the patch which should no longer be necessary. This is a partial revert of f6557000abc90b0c3b7ca5b4560849e64425c853 Signed-off-by: Benjamin Robin (Schneider Electric) --- ...oml-Update-shacl2code-to-1.1.0-and-add-ke.patch | 41 ---------------------- ...0.0.5.bb => python3-spdx-python-model_0.0.6.bb} | 12 +++---- 2 files changed, 6 insertions(+), 47 deletions(-) diff --git a/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch b/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch deleted file mode 100644 index d9dc0a03c8d1..000000000000 --- a/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch +++ /dev/null @@ -1,41 +0,0 @@ -From b623473f634aebeb30028cc746fb7a3da4fb2ce3 Mon Sep 17 00:00:00 2001 -From: Arthit Suriyawongkul -Date: Sat, 6 Jun 2026 02:44:48 +0100 -Subject: [PATCH] pyproject.toml: Update shacl2code to 1.1.0 and add keywords - (#35) - -Signed-off-by: Arthit Suriyawongkul -Upstream-Status: Backport [https://github.com/spdx/spdx-python-model/commit/2d7b71a7c8e6270a1c8795cdeb4f3dcd9393b3a9] -Signed-off-by: Alexander Kanavin ---- - pyproject.toml | 10 +++++++++- - 1 file changed, 9 insertions(+), 1 deletion(-) - -diff --git a/pyproject.toml b/pyproject.toml -index c8b3e56..df011e8 100644 ---- a/pyproject.toml -+++ b/pyproject.toml -@@ -8,6 +8,14 @@ authors = [ - {name = "Joshua Watt", email = "JPEWhacker@gmail.com"}, - ] - readme = "README.md" -+keywords = [ -+ "spdx", -+ "sbom", -+ "spdx3", -+ "software-bill-of-materials", -+ "shacl2code", -+ "bindings", -+] - classifiers = [ - "Development Status :: 4 - Beta", - "Intended Audience :: Developers", -@@ -36,7 +44,7 @@ Issues = "https://github.com/spdx/spdx-python-model/issues" - requires = [ - "hatchling >= 1.27.0", - "hatch-build-scripts >= 0.0.4", -- "shacl2code == 1.0.1", -+ "shacl2code == 1.1.0", - ] - build-backend = "hatchling.build" - diff --git a/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb b/meta/recipes-devtools/python/python3-spdx-python-model_0.0.6.bb similarity index 72% rename from meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb rename to meta/recipes-devtools/python/python3-spdx-python-model_0.0.6.bb index 19d9bb815ba1..def12b204926 100644 --- a/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb +++ b/meta/recipes-devtools/python/python3-spdx-python-model_0.0.6.bb @@ -5,13 +5,13 @@ LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327" PYPI_PACKAGE = "spdx_python_model" -SRC_URI[sha256sum] = "4bcf7c6e5e2e8f0b787ed4eb8fb519e2ed776e820cb6d9eb93e44e98eb92ca2d" +SRC_URI[sha256sum] = "f1938eb08d08218278122849bba123b8993a0171e9b4f5ea6af7aeb71f3204d7" -SRC_URI += "https://spdx.org/rdf/3.0.1/spdx-context.jsonld;name=spdx1 \ - https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl;name=spdx2 \ - https://spdx.org/rdf/3.0.1/spdx-model.ttl;name=spdx3 \ - file://0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch \ - " +SRC_URI += " \ + https://spdx.org/rdf/3.0.1/spdx-context.jsonld;name=spdx1 \ + https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl;name=spdx2 \ + https://spdx.org/rdf/3.0.1/spdx-model.ttl;name=spdx3 \ +" SRC_URI[spdx1.sha256sum] = "c72b0928f094c83e5c127784edb1ebca2af74a104fcacc007c332b23cbc788bd" SRC_URI[spdx2.sha256sum] = "c6a54b51230eb2bf3b31302546af201f303e0b7931c1db404d7f5b72b6f863e6" From patchwork Wed Jun 24 16:53:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 90866 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 78B71CDB47F for ; Wed, 24 Jun 2026 16:54:20 +0000 (UTC) Received: from smtpout-02.galae.net (smtpout-02.galae.net [185.246.84.56]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.12314.1782320055300005347 for ; Wed, 24 Jun 2026 09:54:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=TEGFqsDs; spf=pass (domain: bootlin.com, ip: 185.246.84.56, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-02.galae.net (Postfix) with ESMTPS id A3BF81A0925; Wed, 24 Jun 2026 16:54:13 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 729C5601C5; Wed, 24 Jun 2026 16:54:13 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id A2F9E106C84E1; Wed, 24 Jun 2026 18:54:11 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1782320052; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=fNTz5ejRpYfVlB3lio0cXKiJtj4JFBW5tx60Tk+a0i0=; b=TEGFqsDsDqnFohr3GKb8fVQBBXWgn3+4pXF8EgqGtjzfFZXEBtDmMzZJBb279VcTL+KfQr jsttnQtQnbXMPq4Avn6BoXPY4Difpahq0WSj3zTG3nvcVzZ1ElOnCS3JU++Rg0lF3fqpJA ian7aC6vpKXyhCJFOU0/WAx8JOt/bDMK3OzrCbWIHyzX0sXIqbqyN70tfr55LZQV8jn5iR WCVMOCJHNE06A3GaVVGk5MAtV1Sye0xtzSqpb3q6qUunRuMFZHTFPDREJfEXmdkVjgCluJ QskN8qgAqnoWVzcQ85TTe7FVIKIf6AcAwr20KMLLn9pMWMQCv5UUZpIXpz18wA== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 24 Jun 2026 18:53:54 +0200 Subject: [PATCH 2/4] python3-sbom-cve-check: update to version 1.3.2 MIME-Version: 1.0 Message-Id: <20260624-update-sbom-cve-check-1-3-2-v1-2-f7ab738bd785@bootlin.com> References: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> In-Reply-To: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 24 Jun 2026 16:54:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239528 For details on this new release, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.2 Signed-off-by: Benjamin Robin (Schneider Electric) --- ...{python3-sbom-cve-check_1.3.1.bb => python3-sbom-cve-check_1.3.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb similarity index 82% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb index 8120848a667d..f14901e3008f 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb @@ -5,7 +5,7 @@ LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "675828b2f02f11620b7a229853a24d09264bf41161be5fbb80a92456f46a14e0" +SRC_URI[sha256sum] = "0a7f07a0c6ce45d40adc6d311ddc25c4466f59bafcbce149b6fb3663791a5d89" inherit pypi python_hatchling From patchwork Wed Jun 24 16:53:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 90865 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C8A2FCDB479 for ; Wed, 24 Jun 2026 16:54:20 +0000 (UTC) Received: from smtpout-04.galae.net (smtpout-04.galae.net [185.171.202.116]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12170.1782320056761517854 for ; Wed, 24 Jun 2026 09:54:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=C1LtijAT; spf=pass (domain: bootlin.com, ip: 185.171.202.116, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-04.galae.net (Postfix) with ESMTPS id 8250FC6B3B5; Wed, 24 Jun 2026 16:54:22 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 78615601C5; Wed, 24 Jun 2026 16:54:14 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id E6406106C846B; Wed, 24 Jun 2026 18:54:12 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1782320053; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=dDWqwh926T+OBg/iETJgvqz9zp1aPPFeI/LbCiY7UIY=; b=C1LtijATnqkTeIWeNwdYCFvzhRieVC9C+oN3u5Isr92HACIvjzecOlBgxodsnbs8uwmr7f u0FH/LwXSoRyDQ5DT2oT8IV1K9hu7nHc+lMgA+8iPMDIV+0TFocieQYaf0smgxlZY6zXxT oCfzFlprkozYSmxyvFfyIxJf2+g33OoA4V1jdNk/9qbz7vQbhfA9CykKqoxr0KbLHh9Z1x YohO5FdFKaAhePjCaC5xCSps9oy6nXM2m06wHPP2pxne4DX0EIYFcPrrYfSPwIRPuXJlSg C5g5WWVw/9eyRxHdEqQhG+ONDBMqkXCsQ4S2hqyBm5Na+gdqFeKgi3yU1n8UGw== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 24 Jun 2026 18:53:55 +0200 Subject: [PATCH 3/4] sbom-cve-check-update-cvelist-native: update to version 2026-06-24 MIME-Version: 1.0 Message-Id: <20260624-update-sbom-cve-check-1-3-2-v1-3-f7ab738bd785@bootlin.com> References: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> In-Reply-To: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 24 Jun 2026 16:54:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239529 Update cvelistV5 to the CVE database from 2026-06-24. Signed-off-by: Benjamin Robin (Schneider Electric) --- ...2026-05-07.bb => sbom-cve-check-update-cvelist-native_2026-06-24.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb index 7670172c40bb..ca192bc9cf3b 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" +SRCREV = "966bddf787997b471325e065cae82702a60c64ff" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc From patchwork Wed Jun 24 16:53:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 90867 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E64FDCDE006 for ; Wed, 24 Jun 2026 16:54:20 +0000 (UTC) Received: from smtpout-04.galae.net (smtpout-04.galae.net [185.171.202.116]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12172.1782320057337368106 for ; Wed, 24 Jun 2026 09:54:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=i9lfsFIv; spf=pass (domain: bootlin.com, ip: 185.171.202.116, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-04.galae.net (Postfix) with ESMTPS id ABC14C6B3B7; Wed, 24 Jun 2026 16:54:23 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id A64F2601C5; Wed, 24 Jun 2026 16:54:15 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 29B4B106C8210; Wed, 24 Jun 2026 18:54:14 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1782320055; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=amdfZDWAcJiQ0gAbeQIX/ENjkJO8oJCy8Gjt57C0v58=; b=i9lfsFIvJdq/Jbq4qR1wWHFBHsWmyoH9VyL0yw1vdOJjT5lI7QE2ytcoHA0PLWsbkL4cXt QFwkYy9pVeuW3JOFJiE4ym9hMDUrcKmNpnVk4yJz6FMRQLVX+TyGI6liQW11qJJGS9n9ZE OsWjh/S6G5tQFGBaQ1z/mB+wvuiHoMNK41BmwLMX6kQxLWDDq+WPsUidrwr9i3TU+6tVz2 9SEgWYZIiskbW0ilu/ONrPA6XLtv+Z5ZxLbVXpXR/asBMEe0BnkwLU/vR4+2BXMNm5dOwC D2NoOxJEzt50kcLYRhWbaJ925b/n155y0bD3LJFtoo6oJokwR7kCUyqQPDznkA== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 24 Jun 2026 18:53:56 +0200 Subject: [PATCH 4/4] sbom-cve-check-update-nvd-native: update to version 2026.06.24-000003 MIME-Version: 1.0 Message-Id: <20260624-update-sbom-cve-check-1-3-2-v1-4-f7ab738bd785@bootlin.com> References: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> In-Reply-To: <20260624-update-sbom-cve-check-1-3-2-v1-0-f7ab738bd785@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 24 Jun 2026 16:54:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239530 Update fkie-cad/nvd-json-data-feeds to the CVE database from 2026-06-24. Signed-off-by: Benjamin Robin (Schneider Electric) --- ...-000006.bb => sbom-cve-check-update-nvd-native_2026.06.24-000003.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb index 2917c89e6289..73d9e7769296 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "7ff4a0622bfdf5313c79635951112d2a45bbe9fd" +SRCREV = "11e62eba27133a54836b7a081d05ff96f72d879b" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc