From patchwork Thu Jul 23 20:48:31 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Tim Orling X-Patchwork-Id: 93378 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 56C50C531CC for ; Thu, 23 Jul 2026 20:48:44 +0000 (UTC) Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.6138.1784839721781482918 for ; Thu, 23 Jul 2026 13:48:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=V5Zf/4qy; spf=pass (domain: gmail.com, ip: 209.85.216.46, mailfrom: ticotimo@gmail.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-38deea72eebso1183037a91.1 for ; Thu, 23 Jul 2026 13:48:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784839721; x=1785444521; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=AjNmOxU+E4IXVpJgD+eag1j6YAzRO0lSHBR3cDm4OOI=; b=V5Zf/4qyoRf+N6Kwj32wqRvauP9L1PPEAunqeEEs3GjoOYODIxgWNUYCciMq9lHLVB MTxlEEqPmUrvTuCXFEY8SlCQsk319Jlbi9WjvWGz1++qqLxB8m8yV8JXPWRjJ+2DQHXq iWeyoCCQsF1Pe0QrHUPm2dKNDHVD7LxQUkmVXJuYEM5GzoijM12NJ79nm3NeValMaMDW 5J+W7gIPRE6Dnnfb4weiwJmGVNxeMG3eXjALOlviGSXLVavVUlYVvo53xap3iFxQB5tW AyA95Rm7WjVs8I1cfeKXRNhdgJRW0X2zitf1zzgZF0Dhi9/gMciH6kC1Lx+kFLXXNd5o w6AQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784839721; x=1785444521; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=AjNmOxU+E4IXVpJgD+eag1j6YAzRO0lSHBR3cDm4OOI=; b=TDN30/6FN6fFzkvDJ6xJaqsAPF7uq1XxmmlZHauI0pbgtWEzCf21ujYeQ5bOyEcCHH 0fqk9t2FrP7Nn39cGMl7Ql5mQUnF90dPgNLvFKkXz5A0KOjXWsyZJcH9sozlaydVF6XH p3ql0jaC4QTsWKMDPxeG2Z6z2/e3MI47svF5jz+Q/NJCtTcpg5tlgw/2tyXnsQmQ6Fb/ +JyRC+d+WDXPGe37Sei9ySsC2W6wR5YDjOe0P51+6JS5uMMTJA894nuS1Ffxyu9b1Z+x 5D7H3K79rZwguKGg/ezhUfAxr4ke0Bzp921XVydUZSAenmIJsLMrHqx9eU7Zh33B9VuK D4Fw== X-Gm-Message-State: AOJu0YzWUUiCmPY7GO4Z6Fb480dC3LRZUzgBYQpQfKIGl7XvRDCFdGDy oNyieEOqwf5z/VCwZ/xlnL5lBqF6DfvGIiSwZwMaQ13m2CMh+xQJp2905hiwuw== X-Gm-Gg: AR+sD13kJk2semYCiDypsZVpwEub0JezQih7HdMW89x2cYfWQ7yxwxVtN166qXgCMu8 TGp0u1sEwaUYQhH5y2onBS5cGj89vYRa2K0BuItyKq/WPpUSKBPd6p1kGq4PONKoxiOk2N4fWEa baSFQJRmokzy0RKOUf5Vi2mM2v84cmydKk0YwsWl1rFcN1E6GZSwwY2BvC5ihouW8W9LS/VPLIu tmHU/kRmx/6vmAF1F4dBYFUwJuR1G0OfWvt4mcYZwmh9tFQytmAl4P4GXLu6tdDhOe6y2gy5sa3 PlcjRsdbNzk5MOG+K5cNdcFsXsAbGsbwfySS2yANm/OICxWuemWU4T5kfpwMsHhy6htrQww2Wpg UlG/YoweWSIPuVn8G+3BAGrpy1FrnTivNi16Yi99MSCQUpjBBiP/7uP33OnBPipJ1bqSRIH9hvy 5+mcwFTVj31W7v3XR7MM86epDfb03+ZPYwlfBhYGeV8Umvbq0qZ1pf6DuJ9iGkRro/wEBS64iBK Q== X-Received: by 2002:a17:90b:57e4:b0:38e:79f:76ad with SMTP id 98e67ed59e1d1-38ec6566203mr4770963a91.23.1784839720973; Thu, 23 Jul 2026 13:48:40 -0700 (PDT) Received: from localhost.localdomain (c-98-232-159-17.hsd1.or.comcast.net. [98.232.159.17]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-38f03b0eabesm438508a91.6.2026.07.23.13.48.39 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Thu, 23 Jul 2026 13:48:40 -0700 (PDT) From: Tim Orling X-Google-Original-From: Tim Orling To: openembedded-core@lists.openembedded.org Cc: Tim Orling Subject: [PATCH 1/3] fragments/yocto/sbom-cve-check: fix conflict with tag= Date: Thu, 23 Jul 2026 13:48:31 -0700 Message-ID: <20260723204833.43562-1-tim.orling@konsulko.com> X-Mailer: git-send-email 2.55.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 23 Jul 2026 20:48:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/241871 Fixes: 00864cf5bc meta: Add tag in SRC_URI to multiple recipes When this fragment is enabled, SRCREV is set to AUTOREV, but this then causes do_unpack to fail for both sbom-cve-check-update-cvelist-native and sbom-cve-check-update-nvd-native, since the tag SRCREV does not match with the 'main' HEAD AUTOREV. Rather than allow the tag to float, for those that desire reproducible builds with just IMAGES_CLASSES:append = " sbom-cve-check" and not this fragment, set SRC_URI **without** the tag= in this fragment. Signed-off-by: Tim Orling --- meta/conf/fragments/yocto/sbom-cve-check.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/conf/fragments/yocto/sbom-cve-check.conf b/meta/conf/fragments/yocto/sbom-cve-check.conf index 73ed35be27..46f6965a0d 100644 --- a/meta/conf/fragments/yocto/sbom-cve-check.conf +++ b/meta/conf/fragments/yocto/sbom-cve-check.conf @@ -13,6 +13,9 @@ IMAGE_CLASSES:append = " sbom-cve-check" SRCREV:pn-sbom-cve-check-update-nvd-native = "${AUTOREV}" SRCREV:pn-sbom-cve-check-update-cvelist-native = "${AUTOREV}" +# Drop the tag= or else do_unpack fails +SRC_URI:pn-sbom-cve-check-update-cvelist-native = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" +SRC_URI:pn-sbom-cve-check-update-nvd-native = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SPDX_INCLUDE_VEX = "all" SPDX_INCLUDE_COMPILED_SOURCES:pn-linux-yocto = "1" From patchwork Thu Jul 23 20:48:32 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Tim Orling X-Patchwork-Id: 93379 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4B1AEC531F7 for ; Thu, 23 Jul 2026 20:48:54 +0000 (UTC) Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com [209.85.216.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.6272.1784839724901956916 for ; Thu, 23 Jul 2026 13:48:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=UdNn37vg; spf=pass (domain: gmail.com, ip: 209.85.216.43, mailfrom: ticotimo@gmail.com) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-381b831d535so1195008a91.0 for ; Thu, 23 Jul 2026 13:48:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784839724; x=1785444524; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=gbARJDX9edSa7gz13qCT52GxXM1QCCskCgf6cOChOTc=; b=UdNn37vg2g238B6YfMBDZ3RMglr02P4B2Zz5+6RKPm3EnDqsAt6CcJS2JoD1XCtFVA 5sr6c8844u730hguaFetxbHusVFYYEdDswM8N/ojgdtOLrGCcYnUL4v22OfFlf/EBu1c wq2ELPhKnlcQXDLlF0JgG496eem6FHCIXfMiQwEsIWX65h6kABYbFzod210lrY4T5mjm PW7VwSkcYvxfhl/ZVXzk/aMhJFSik79MlnPXQbTnjphoZwiYtTGnqDvtJD4fMpDYQid+ kND0+jWDZIDkDrlpQkhcK0APqpOqQDmRMbjOhFKGANF8PQgeC/tCrdTqlWKT4tiUCn71 Unjg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784839724; x=1785444524; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=gbARJDX9edSa7gz13qCT52GxXM1QCCskCgf6cOChOTc=; b=euhcE8whjbexY+H9Sff2W7YRigy7f0D0dXcrHKos4DXGdow0tiMlW4PJXqK+9TipAk Z2LZmJGJSGQQ5S9S/1JdUBDuLsjURIXiXNxmeHwk0bbvXTaVSP8T6juWXyV+EP0bnj9r 9NhVxlRvQnxN/UuHlt66XlA2vbqe6Bh4VuFSGfAoP5LCg87QuzmoMgzaswvoOn0IANzR 5K4J2t1L+MsJJMXPjVOWK19O2v8w1sknb2efgtYnca3e7H79yaEdibCgQ1LUunQ5yHMt 6aygvEHd5aeb48ZQ5gJAleR+uP3+pl4r3RdzM5NWOMwLqHLf7PSvqClfaF14m8wSGO6f FJ3g== X-Gm-Message-State: AOJu0Yz4zmjOg+YGShFGmnypQDStPawDMbe3mXb25mvYXf3jCWFR9jKU tVysTyBZbJfkZNTa5P3vCwyuJcRNRLfVLGAcmCNkRETLXHX8MM08vT2AoYZaOQ== X-Gm-Gg: AR+sD105QF9xr+tQkw6UJ+v6YA06jQkwsHghEpQtvrT9/AuWNqDMgihDGNLGLVpwRbB +ZvuJSGp0Tuoaz7y0RvpuqXTmNXsYetnI5fmKcvueLPNEZMQjy2jtru7SeaONSGVge2Ij/3PVgc 9IrAwtPO16pFYBbeFyB2mNI/PAfn+Nh28smhsXFG2iUYHvQwCExSkdGYe/R58B2kupxTRrQvWEf orLqfO+hx2qZFPAzJu/hy0raIyb3gUo7PTYXNDHGr8+eV7616PVxaq0z63M4RNkBEaFm3/eB3dc Kpf/cpJX3qKtl6OvyC4ubvQe5S3WXCXzdri+OtgZR2ckXEFaKafNRPmOn08sUJfMc3GcUVIalxK rx7C7iUvtWcEYGOtgweQNH5Pg8pggX1h5I0JXMnXCBLlX9aYj1WVPidgZ5Y5QJyUYamOef6mONV EFmOgQtlMgFoke2SsLV0qBpNUnRpYI80FMF2rJXLgU4PSZiVB8EoowghXZP23Y75YD5yxEYJ1tb PCzGAL53xlH X-Received: by 2002:a17:90b:254b:b0:38e:101f:c867 with SMTP id 98e67ed59e1d1-38ec658a132mr4789603a91.18.1784839724057; Thu, 23 Jul 2026 13:48:44 -0700 (PDT) Received: from localhost.localdomain (c-98-232-159-17.hsd1.or.comcast.net. [98.232.159.17]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-38f03b0eabesm438508a91.6.2026.07.23.13.48.42 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Thu, 23 Jul 2026 13:48:42 -0700 (PDT) From: Tim Orling X-Google-Original-From: Tim Orling To: openembedded-core@lists.openembedded.org Cc: Tim Orling Subject: [PATCH 2/3] sbom-cve-check-update-cvelist-native: -> 2026-07-23 Date: Thu, 23 Jul 2026 13:48:32 -0700 Message-ID: <20260723204833.43562-2-tim.orling@konsulko.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260723204833.43562-1-tim.orling@konsulko.com> References: <20260723204833.43562-1-tim.orling@konsulko.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 23 Jul 2026 20:48:54 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/241872 The diff is quite large, but a partial comparison can be seen: https://github.com/CVEProject/cvelistV5/compare/2026-06-24_baseline..2026-07-23_baseline Signed-off-by: Tim Orling --- ...24.bb => sbom-cve-check-update-cvelist-native_2026-07-23.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-06-24.bb => sbom-cve-check-update-cvelist-native_2026-07-23.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb index ef61eb4628..0ada6e89f3 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=${PV}_baseline" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "966bddf787997b471325e065cae82702a60c64ff" +SRCREV = "7a274ec07043f54c07d0a3b5c7fc89ba5793f023" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc From patchwork Thu Jul 23 20:48:33 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Tim Orling X-Patchwork-Id: 93380 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3E0D8C531D0 for ; Thu, 23 Jul 2026 20:48:54 +0000 (UTC) Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.6274.1784839728464374123 for ; Thu, 23 Jul 2026 13:48:48 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Sw2YB5fU; spf=pass (domain: gmail.com, ip: 209.85.216.49, mailfrom: ticotimo@gmail.com) Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-38e347638adso1264516a91.0 for ; Thu, 23 Jul 2026 13:48:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784839728; x=1785444528; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=jYGV/ImgU/t0SGvBNTspnkQNxY0Rrrnx96j6QGIqMn8=; b=Sw2YB5fUZE00+olKiz5zTvGcgHfg1zQ7rNNJ6xGS+Y7X6ZigvASkr2i6IZoAjJ6yXx RR54lsOgFiFjZMTtG6g7699xWvNckHZj5OdUOBcoWYd+MU26QFbLLy7hkfruvAHC+QgI GvcWc+fxQWB+TbkXfMRtZl0A2SRjDnnkXNPJPOhNdO/QH+ujaqyFXTqIIfKlZDgcWKB/ BcjREMmEon5Yf6Z4LPk5OTsI2W5PbqUlFJafHLo1OEB81YVBghGvG6KgkT6N24oDMMp5 RaaqcPt/GvuwIH8UuUQ6W2stpb9Vo7VdaMXPZ7gutXIXTG2PQv9XNetMMKXfZBaEqSUJ 8lGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784839728; x=1785444528; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=jYGV/ImgU/t0SGvBNTspnkQNxY0Rrrnx96j6QGIqMn8=; b=gn3SJHPXvyAeJ5iCdVRzm/ayJrGjAjdH5zbaZZsXKcinQUzJ5+W++ocKrqNdCNOUAt iumPr7Ei98mPWsaXcdy+3h0tF1S45WqGwFvv2VUG9KcM4o5F8V1o+lyWKozhyrthTz8z /hqDmFp/YANF83OA+r4/wdC2s0TOTduh85xlyZhsFCoE+qN9JXjcZEuL/Iqu1BEuibg9 Pli/wtgNbPfEDqFpRG9YCsZRVXRKUDiihFrLjUms6N1FLTuI00HCGkuP/tmDvAJSA8fl DpAfHOIu2MyJUBgb0mZUZcEPwhVtnXyl3fplQfLS6efdh76UB0cs7y3P0b+FuVTa4cMj F0rw== X-Gm-Message-State: AOJu0Yy7tPG2+i7rhjhedMmAg33JDLt7/tHCQtoPakvHQ9JG07s9LwUf enRwPa+lkNry6xNTTsSjL5qKYN+smw0sA+ar90PowdLVJQFfsO9y0c3ABDfmoQ== X-Gm-Gg: AR+sD10WlrLGbbZ+EAgbpeQ14T37KT924XuvPKRSnkNML4NMuDsUNdrWvHTrXZNJ1VQ QPIEplp9OcMBPZ/6twoo8Oc4VJQ2KmmpMTDbVEKresaSb+e3f57G/s5VVFT4Xku8tcq9fua0m5X 0v8bpsT6eNgWEr/WslcGZca4NGpVWljNAHSxkJKk3eIbwLN1JGr12XOl6icOSvwgtI4vY0QtUeX Uokd5Gh5c0CMg+vB9sgfhN4iWw3KpJKjLnKE37hvs7SjpZWyS4fPsYpKx5w7Unvyp8dv3KEPOOO ur9o5/zmD5z+FzOb37+4VN/RhN+QmgJ+cDMR31vsz6k7jyXVv5Pr3wK/zLKJZRwf6XcvEwoJvG4 UVYzjBwsQvzi3FGoO8VsIs4nRSw4mihDwGxKwimeOjBw0MnIXF9davYz3XyH5n5+P0F/JzrtOSM YZbtRDCyXW58tAyVUbvUFmEUzd4hnD6GZgbRH6JeQKTCWgTEQsRBqpKIr0ppmCcSaWnFct+q6hJ w== X-Received: by 2002:a17:90a:dfc5:b0:38e:d3b:436f with SMTP id 98e67ed59e1d1-38ec65ae18fmr4382493a91.36.1784839727708; Thu, 23 Jul 2026 13:48:47 -0700 (PDT) Received: from localhost.localdomain (c-98-232-159-17.hsd1.or.comcast.net. [98.232.159.17]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-38f03b0eabesm438508a91.6.2026.07.23.13.48.45 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Thu, 23 Jul 2026 13:48:45 -0700 (PDT) From: Tim Orling X-Google-Original-From: Tim Orling To: openembedded-core@lists.openembedded.org Cc: Tim Orling Subject: [PATCH 3/3] sbom-cve-check-update-nvd-native: -> 2026.07.23-000007 Date: Thu, 23 Jul 2026 13:48:33 -0700 Message-ID: <20260723204833.43562-3-tim.orling@konsulko.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260723204833.43562-1-tim.orling@konsulko.com> References: <20260723204833.43562-1-tim.orling@konsulko.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 23 Jul 2026 20:48:54 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/241873 The diff is quite large, but a partial comparison can be seen: https://github.com/fkie-cad/nvd-json-data-feeds/compare/v2026.06.24-000003..v2026.07.23-000007 Signed-off-by: Tim Orling --- ...bb => sbom-cve-check-update-nvd-native_2026.07.23-000007.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.06.24-000003.bb => sbom-cve-check-update-nvd-native_2026.07.23-000007.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb index 95af1a5805..b0b6fb7d8c 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=;tag=v${PV}" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "11e62eba27133a54836b7a081d05ff96f72d879b" +SRCREV = "64a0cea215628d780438fba8bfe0f3300db1b702" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc