From patchwork Sun Sep 20 19:15:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98742 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6C7A8C982D8 for ; Sun, 20 Sep 2026 19:16:04 +0000 (UTC) Received: from mta-65-226.siemens.flowmailer.net (mta-65-226.siemens.flowmailer.net [185.136.65.226]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.35014.1789931755106866435 for ; Sun, 20 Sep 2026 12:15:56 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=kA6x5uPw; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.226, mailfrom: fm-256628-20260920191551bc92c8c17300020734-u_hypb@rts-flowmailer.siemens.com) Received: by mta-65-226.siemens.flowmailer.net with ESMTPSA id 20260920191551bc92c8c17300020734 for ; Sun, 20 Sep 2026 21:15:52 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=Mf3eUDuHb0IZgItgvxL6NIMo5zVZf2bS6G41uVx9C7w=; b=kA6x5uPw2WS/VNDESKPcn9ZzwE0MoOtQ+Ddx4NQp7kD0XxSGM9S7ZJde+sH0Ehn4IgZEjo +q22cf+/CDiwwAR7h+g57mm9a/WUnAh5b0QtsvaoqzdgjbJOIIRlw8OPrhZ8Xw+xMLHWHA5W dVHCV3FGNM+u5qH1lexpSUj8KiqtrEM6DF0EOXQxDctqAPANsZANQxZF/yH+o5w57wzSj45j vRK99mgEWR5rDUrv31we8mj9MR/dJr8PVhHHxNjzu+QRqJAW4cYyUXt3ZHRSL4QKepfqtKUz CPYjxiieV42Mos474ECkgiW7RGkla+8AF2xBZdHXHK0UimfVisY5xtyw==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 1/5] sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native: upgrade 2026.08.03-000011 -> 2026.08.25-000009 Date: Sun, 20 Sep 2026 21:15:27 +0200 Message-ID: <20260920191531.113024-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 20 Sep 2026 19:16:04 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246263 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: 8d6b930f4d11627b90db3e902e382692c38cde15) Signed-off-by: Peter Marko --- ...03.bb => sbom-cve-check-update-cvelist-native_2026-08-25.bb} | 2 +- ...bb => sbom-cve-check-update-nvd-native_2026.08.25-000009.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-08-03.bb => sbom-cve-check-update-cvelist-native_2026-08-25.bb} (89%) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.08.03-000011.bb => sbom-cve-check-update-nvd-native_2026.08.25-000009.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-25.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-25.bb index aa21b06953..dcbd98396d 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-25.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "b160e6f2915ac726b29ee0689fc920f5016abef5" +SRCREV = "ce11dbdcf79189e965d64b29161af93993619281" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.25-000009.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.25-000009.bb index 720b5ded0a..473e33411c 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.25-000009.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "b9f52bb052695dac5cabbd58e049eaac73697161" +SRCREV = "08cb7bde86fe9057c2338d7d61a705e642775bfd" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc From patchwork Sun Sep 20 19:15:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98743 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 41288C982D8 for ; Sun, 20 Sep 2026 19:16:14 +0000 (UTC) Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net [185.136.64.225]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.35017.1789931764589105380 for ; Sun, 20 Sep 2026 12:16:04 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=UCBkyiVb; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.225, mailfrom: fm-256628-2026092019160269b9a3c8c100020760-ww9zec@rts-flowmailer.siemens.com) Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 2026092019160269b9a3c8c100020760 for ; Sun, 20 Sep 2026 21:16:02 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=orCWDOMw1DwiZrfcX6uy/3rDjqLr2JlB7JA2a6c9y5o=; b=UCBkyiVbKDVzqeBzH44XHAYOi3ArnXrfqd7BGEGjMckWMVPRY25fc5G/AYK+SEUXrnVyqe cikXsGcXsFDLgvkbmV8LCpVR9GkeDUIcJ/vqCkQgaiTRgWl+1wCyx7YGXTvxJ37FWalShMLA O/OpckaN591cEqJJ/fddwt/LQhk8dopnCe9MKcBfT5ZHPhsgfmiLIDbLvXSx2m1blMH1TiI6 RbKgHnWEM4/3QrV4k4cZJnKkVpv50kteIoP23rMzIwLI0nsFdsNaHX2fsYe0n4SF+oiY6wxG tIzyTYMIyWaHDh6MBDBYTtofkOOojoFVoDH3VvunpoyQ+D37Dy0c70yA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 2/5] sbom-cve-check-update-db: Exclude recipes from rm_work Date: Sun, 20 Sep 2026 21:15:28 +0200 Message-ID: <20260920191531.113024-2-peter.marko@siemens.com> In-Reply-To: <20260920191531.113024-1-peter.marko@siemens.com> References: <20260920191531.113024-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 20 Sep 2026 19:16:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246264 From: Benjamin Robin If the "rm_work" task runs on these recipes, the next execution of the do_sbom_cve_check task would force the CVE databases to be extracted again. Excluding the recipes from "rm_work" allows the build system to remember that the unpack and patch tasks were already executed, so it does not run them a second time. Extracting the CVE databases is slow, and it also removes the database "index", which sbom-cve-check has to regenerate — an even slower step. Keeping WORKDIR around is cheap: for the recipes downloading the CVE databases, it stays below 400 kB (not counting the "temp" directory, which rm_work leaves in place anyway). Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie (From OE-Core rev: 3b81e8bc30552359125f2ca40f36ad11ce8ee969) Signed-off-by: Peter Marko --- .../recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc index fbdc561e8c..2efc080b93 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc @@ -2,6 +2,7 @@ INHIBIT_DEFAULT_DEPS = "1" EXCLUDE_FROM_WORLD = "1" +RM_WORK_EXCLUDE += "${PN}" inherit native require conf/sbom-cve-check-config.inc From patchwork Sun Sep 20 19:15:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98744 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3DD27C982D8 for ; Sun, 20 Sep 2026 19:16:24 +0000 (UTC) Received: from mta-65-225.siemens.flowmailer.net (mta-65-225.siemens.flowmailer.net [185.136.65.225]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.34763.1789931775659225772 for ; Sun, 20 Sep 2026 12:16:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=c1BFNQ2L; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.225, mailfrom: fm-256628-202609201916133025eacfdc00020735-zoutez@rts-flowmailer.siemens.com) Received: by mta-65-225.siemens.flowmailer.net with ESMTPSA id 202609201916133025eacfdc00020735 for ; Sun, 20 Sep 2026 21:16:13 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=y9At5QHnYJRSNkCTs/4meOl0kZ2x9stu1QeRrrtTWZM=; b=c1BFNQ2LNyG9s1KnNf2Qi7eXupAdj3wM3dMyaNWbtYhT7ot07oZU/SM+B11+iO9aXlaldQ FWHcWsuitBRiUPQ4Lg/q6voUxEHp9t4arOYJu5yrrd+aohgXqTfDjmaLx0vb2CodFbZVOOUM 1cVKi7qFClkxi90Jtphqv1u8VARO2syGFpRwBc8/anwGgK91RWYKQ3j+Ujo3yhRUwqM+XgKd dWjx9YeCEWCDYgDW3J+ba7W0jWxHGEtoGQfny8lfm0mS8bACXcufe1Cw7PeQafwPvaLhlzRw Zv0/9U6tn1CLDZrReKe+Hod2NrZPhFuDcO8b8DWQpYGLm+5uw2EpsDxA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 3/5] python3-sbom-cve-check: update to version 1.3.4 Date: Sun, 20 Sep 2026 21:15:29 +0200 Message-ID: <20260920191531.113024-3-peter.marko@siemens.com> In-Reply-To: <20260920191531.113024-1-peter.marko@siemens.com> References: <20260920191531.113024-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 20 Sep 2026 19:16:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246265 From: Benjamin Robin For details on this new release, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.4 Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie (From OE-Core rev: 9fcb4b9b16594710b8be34b228042c426b48ee0e) Signed-off-by: Peter Marko --- ...-sbom-cve-check_1.3.3.bb => python3-sbom-cve-check_1.3.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.3.bb => python3-sbom-cve-check_1.3.4.bb} (82%) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb similarity index 82% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb index 2aca100569..c26ce6e6b3 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb @@ -5,7 +5,7 @@ LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "8b766be1ae92b4eceaa2f694dd4724e310886c6436f44267a6bbc6a7b81ab8b9" +SRC_URI[sha256sum] = "aa2f4e183b600fdad7ce6eb67f7d642bd3e7c67293ae9ffda7d3a2fde433e02b" inherit pypi python_hatchling From patchwork Sun Sep 20 19:15:30 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98745 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6A0E9C982DA for ; Sun, 20 Sep 2026 19:16:34 +0000 (UTC) Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net [185.136.64.228]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.34764.1789931786109972823 for ; Sun, 20 Sep 2026 12:16:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=c3lfGOmK; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.228, mailfrom: fm-256628-20260920191624c3b3d2c42500020738-mcailh@rts-flowmailer.siemens.com) Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 20260920191624c3b3d2c42500020738 for ; Sun, 20 Sep 2026 21:16:24 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=9iKavfBMKRp3cpBouYbNpRKeRBpvtIx7co+Xt6z9R/8=; b=c3lfGOmKYgu66FWcDq5uqdUv8GQsKIVmBm6LR7z6f8eFqd9iUZCq7PwOtQduo+kTHrXjke DdfsfRNWZXhNfWmnvQ7iBQ8/PU5+QF6I9QvGTAPr0oWlLil7XRLcdpS2Q7hNmuxjJykrJpCM wZBn5ezs7kNVOPRzsFxcKoHW8DmwEzk0BB4fgZDKND5tGhIYO8DVhFm3KMRBtRNKN5gwDXiQ zV1Qq4hkXESF+xsAh/umkR61NnVIU9hta78Qnjj7fIilfkiRQ6dNj+mrwjTbl8jzx1X9uB0o Ye0Kgc7p1+k+1O5m/4gnYO8nnlM/RMBNX2OSVWF6nXqygd/Fs6qim+3w==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 4/5] sbom-cve-check-update-{nvd-native,cvelist-native}: upgrade 2026.08.25 -> 2026.09.12 Date: Sun, 20 Sep 2026 21:15:30 +0200 Message-ID: <20260920191531.113024-4-peter.marko@siemens.com> In-Reply-To: <20260920191531.113024-1-peter.marko@siemens.com> References: <20260920191531.113024-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 20 Sep 2026 19:16:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246266 From: Richard Purdie Update to newer database versions. Signed-off-by: Richard Purdie (From OE-Core rev: 5bc50f5f1d7a8b4c37d32d78558f79a2337c3752) Signed-off-by: Peter Marko --- ...25.bb => sbom-cve-check-update-cvelist-native_2026-09-12.bb} | 2 +- ...bb => sbom-cve-check-update-nvd-native_2026.09.12-000023.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-08-25.bb => sbom-cve-check-update-cvelist-native_2026-09-12.bb} (89%) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.08.25-000009.bb => sbom-cve-check-update-nvd-native_2026.09.12-000023.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-25.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-09-12.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-25.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-09-12.bb index dcbd98396d..b609b43f22 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-25.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-09-12.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "ce11dbdcf79189e965d64b29161af93993619281" +SRCREV = "9b9889cfd98306bf29b91df076c5118aae80b63f" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.25-000009.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.09.12-000023.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.25-000009.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.09.12-000023.bb index 473e33411c..7ba8647d6a 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.25-000009.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.09.12-000023.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "08cb7bde86fe9057c2338d7d61a705e642775bfd" +SRCREV = "82336c26ab85706ae56efaa36ef5851ab92dd32c" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc From patchwork Sun Sep 20 19:15:31 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98746 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 41CDFC982DA for ; Sun, 20 Sep 2026 19:16:44 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.34767.1789931797434874674 for ; Sun, 20 Sep 2026 12:16:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=ZUZbnC1q; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-256628-20260920191635a980d90df40002075d-tlsyvk@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 20260920191635a980d90df40002075d for ; Sun, 20 Sep 2026 21:16:35 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=Werjr/goA7oNV449HbavqZlkkUVNQuS4g0S+a9r0EQM=; b=ZUZbnC1qmbhl+pWfBbpkGNjT4xRioMpTloAvRUeWmhBLfgBEu/WvlLN3UcmvuAa7FmmR0e tEYUrtKB4Vp3bMcqUDHwLG3b/14M9ayk6tI04DZXlDRFyPyGwLSgbTecSWfNRLjg1W23ISP5 TDXNHfq7ht0SkA8zKefGlVFf1iULRPFrNU/rR5pFL3Mu3lImZ1hZ4CmX3M9cUXDGAH9V1LJH 5TF46l8SGpGs3MDG+mOjtQAlnWgto19WaJDOPkSOF4UBc0qJS6SxxprOfFsnBc/c7+G9sCZR a79KR20JJEc6WSdxLOjMOkOukKvzlkRAidOVqUCr/1xKa7u+tK5OGtow==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 5/5] python3-sbom-cve-check: update to version 1.3.5 Date: Sun, 20 Sep 2026 21:15:31 +0200 Message-ID: <20260920191531.113024-5-peter.marko@siemens.com> In-Reply-To: <20260920191531.113024-1-peter.marko@siemens.com> References: <20260920191531.113024-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 20 Sep 2026 19:16:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246267 From: Benjamin Robin For details on this new release, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.5 Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie (From OE-Core rev: 65804d3f2eec44a3bdba68d8865619818886a4d1) Signed-off-by: Peter Marko --- ...-sbom-cve-check_1.3.4.bb => python3-sbom-cve-check_1.3.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.4.bb => python3-sbom-cve-check_1.3.5.bb} (82%) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.5.bb similarity index 82% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.5.bb index c26ce6e6b3..83d420835d 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.5.bb @@ -5,7 +5,7 @@ LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "aa2f4e183b600fdad7ce6eb67f7d642bd3e7c67293ae9ffda7d3a2fde433e02b" +SRC_URI[sha256sum] = "9ed8b0e9c46015444cd3e30332d9558e0be5f5fec97f6df47c6760166a314167" inherit pypi python_hatchling