Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *python3-sbom-cve-check* to *1.3.4* has Succeeded.
Next steps:
- apply the patch: git am
0001-python3-sbom-cve-check-upgrade-1.3.3-1.3.4.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From 28e9dd796e888b58e1c4b080aa06797655be303f Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Tue, 8 Sep 2026 05:36:19 +0000
Subject: [PATCH] python3-sbom-cve-check: upgrade 1.3.3 -> 1.3.4
Source: CHANGELOG.md
## v1.3.4
### Added or Changed
- Added configurable logging through the `[logging]` TOML table, including log
files, per-logger levels, custom formats, and optional Rich output.
- Added `offline_mode=` database configuration and the `--offline-mode` option
to prevent operations that require network access.
- Changed SBOM, vulnerability database, and export class registration to use the
`type_name` class keyword. The `register_sbom()`, `register_vuln_db()`, and
`register_export()` decorators are now deprecated.
- Updated supported `spdx-python-model` versions to 0.0.6 through 0.0.7.
- Added an OpenSSF Best Practices badge to the project documentation.
### Fixed
- Fixed the error when a TOML configuration file does not contain a
`databases` section.
- Fixed reproducible TOML configuration export when plugins are used.
- Avoided unnecessary Git database updates when automatic updates are disabled
with either `--disable-auto-updates` or `auto_update_max_age=off`.
- Generate a "not affected" assessment if the vulnerability is disputed ([#27](
https://github.com/bootlin/sbom-cve-check/pull/27) by Peter Marko).
prefixed by a comparison operator (`<`, `<=`, `>`, `>=`, or `=`) ([#28](
https://github.com/bootlin/sbom-cve-check/pull/28) by Peter Marko).
### New Contributors
- Peter Marko made their first contribution in [#27](
https://github.com/bootlin/sbom-cve-check/pull/27).
- Updated the Yocto Project Developer Guide link to the Scarthgap release, which
retains documentation for the `cve-check` JSON report format ([#22](
https://github.com/bootlin/sbom-cve-check/pull/22) by Aaron Honeycutt).
### New Contributors
- Aaron Honeycutt made their first contribution in [#22](
https://github.com/bootlin/sbom-cve-check/pull/22).
- Fixed the type used for the version attribute in Yocto exports ([#18](
https://github.com/bootlin/sbom-cve-check/pull/18) by Ross Burton).
https://github.com/bootlin/sbom-cve-check/issues/16), [#17](
https://github.com/bootlin/sbom-cve-check/pull/17) by Miguel Gazquez)
### New Contributors
- Miguel Gazquez made their first contribution in [#17](
https://github.com/bootlin/sbom-cve-check/pull/17).
https://github.com/bootlin/sbom-cve-check/pull/11) by Ross Burton).
- Fixed a typo in the documentation ([#14](
https://github.com/bootlin/sbom-cve-check/pull/14) by Clayton Casciato).
### New Contributors
- Ross Burton made their first contribution in [#11](
https://github.com/bootlin/sbom-cve-check/pull/11).
- Clayton Casciato made their first contribution in [#14](
https://github.com/bootlin/sbom-cve-check/pull/14).
### Added or Changed
- Improved the project description and short documentation ([#1](
https://github.com/bootlin/sbom-cve-check/pull/1) by Thomas Petazzoni).
### New Contributors
- Thomas Petazzoni made their first contribution in [#1](
https://github.com/bootlin/sbom-cve-check/pull/1).
---
...-sbom-cve-check_1.3.3.bb => python3-sbom-cve-check_1.3.4.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.3.bb
=> python3-sbom-cve-check_1.3.4.bb} (82%)
diff --git
a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb
b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb
similarity index 82%
rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb
rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb
index 2aca100569..c26ce6e6b3 100644
--- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb
+++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.4.bb
@@ -5,7 +5,7 @@ LICENSE = "GPL-2.0-or-later"
LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce"
PYPI_PACKAGE = "sbom_cve_check"
-SRC_URI[sha256sum] =
"8b766be1ae92b4eceaa2f694dd4724e310886c6436f44267a6bbc6a7b81ab8b9"
+SRC_URI[sha256sum] =
"aa2f4e183b600fdad7ce6eb67f7d642bd3e7c67293ae9ffda7d3a2fde433e02b"
inherit pypi python_hatchling
--
2.47.1
packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check: FILELIST: directory renamed /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.3.dist-info -> /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.4.dist-info, directory renamed /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.3.dist-info/licenses -> /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.4.dist-info/licenses, added "/usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/logging.cpython-314.pyc /usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/registry.cpython-314.pyc /usr/lib/python3.14/site-packages/sbom_cve_check/utils/registry.py /usr/lib/python3.14/site-packages/sbom_cve_check/utils/logging.py" Changes to packages/x86-64-v3-poky-linux/python3-sbom-cve-check (sysroot): /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.3.dist-info moved to /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.4.dist-info /usr/lib/python3.14/site-packages/sbom_cve_check/utils/logging.py was added /usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/logging.cpython-314.pyc was added /usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/registry.cpython-314.pyc was added /usr/lib/python3.14/site-packages/sbom_cve_check/utils/registry.py was added
0001-python3-sbom-cve-check-upgrade-1.3.3-1.3.4.patch
Description: Binary data
packages/x86-64-v3-poky-linux/python3-sbom-cve-check: SRC_URI changed from "https://files.pythonhosted.org/packages/source/s/sbom_cve_check/sbom_cve_check-1.3.3.tar.gz"; to "https://files.pythonhosted.org/packages/source/s/sbom_cve_check/sbom_cve_check-1.3.4.tar.gz"; packages/x86-64-v3-poky-linux/python3-sbom-cve-check: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-dbg: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-dbg: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-dev: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-dev: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-doc: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-doc: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-locale: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-locale: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-src: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-src: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-staticdev: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check-staticdev: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check: PKGV changed from 1.3.3 [default] to 1.3.4 [default] packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check: PKGSIZE changed from 1336424 to 1355819 (+1%) packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check: PV changed from "1.3.3" to "1.3.4" packages/x86-64-v3-poky-linux/python3-sbom-cve-check/python3-sbom-cve-check: FILELIST: directory renamed /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.3.dist-info -> /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.4.dist-info, directory renamed /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.3.dist-info/licenses -> /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.4.dist-info/licenses, added "/usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/registry.cpython-314.pyc /usr/lib/python3.14/site-packages/sbom_cve_check/utils/logging.py /usr/lib/python3.14/site-packages/sbom_cve_check/utils/registry.py /usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/logging.cpython-314.pyc" Changes to packages/x86-64-v3-poky-linux/python3-sbom-cve-check (sysroot): /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.3.dist-info moved to /usr/lib/python3.14/site-packages/sbom_cve_check-1.3.4.dist-info /usr/lib/python3.14/site-packages/sbom_cve_check/utils/logging.py was added /usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/logging.cpython-314.pyc was added /usr/lib/python3.14/site-packages/sbom_cve_check/utils/__pycache__/registry.cpython-314.pyc was added /usr/lib/python3.14/site-packages/sbom_cve_check/utils/registry.py was added
Changelog for python3-sbom-cve-check: 1.3.3 -> 1.3.4 Source: CHANGELOG.md ## v1.3.4 ### Added or Changed - Added configurable logging through the `[logging]` TOML table, including log files, per-logger levels, custom formats, and optional Rich output. - Added `offline_mode=` database configuration and the `--offline-mode` option to prevent operations that require network access. - Changed SBOM, vulnerability database, and export class registration to use the `type_name` class keyword. The `register_sbom()`, `register_vuln_db()`, and `register_export()` decorators are now deprecated. - Updated supported `spdx-python-model` versions to 0.0.6 through 0.0.7. - Added an OpenSSF Best Practices badge to the project documentation. ### Fixed - Fixed the error when a TOML configuration file does not contain a `databases` section. - Fixed reproducible TOML configuration export when plugins are used. - Avoided unnecessary Git database updates when automatic updates are disabled with either `--disable-auto-updates` or `auto_update_max_age=off`. - Generate a "not affected" assessment if the vulnerability is disputed ([#27]( https://github.com/bootlin/sbom-cve-check/pull/27) by Peter Marko). prefixed by a comparison operator (`<`, `<=`, `>`, `>=`, or `=`) ([#28]( https://github.com/bootlin/sbom-cve-check/pull/28) by Peter Marko). ### New Contributors - Peter Marko made their first contribution in [#27]( https://github.com/bootlin/sbom-cve-check/pull/27). - Updated the Yocto Project Developer Guide link to the Scarthgap release, which retains documentation for the `cve-check` JSON report format ([#22]( https://github.com/bootlin/sbom-cve-check/pull/22) by Aaron Honeycutt). ### New Contributors - Aaron Honeycutt made their first contribution in [#22]( https://github.com/bootlin/sbom-cve-check/pull/22). - Fixed the type used for the version attribute in Yocto exports ([#18]( https://github.com/bootlin/sbom-cve-check/pull/18) by Ross Burton). https://github.com/bootlin/sbom-cve-check/issues/16), [#17]( https://github.com/bootlin/sbom-cve-check/pull/17) by Miguel Gazquez) ### New Contributors - Miguel Gazquez made their first contribution in [#17]( https://github.com/bootlin/sbom-cve-check/pull/17). https://github.com/bootlin/sbom-cve-check/pull/11) by Ross Burton). - Fixed a typo in the documentation ([#14]( https://github.com/bootlin/sbom-cve-check/pull/14) by Clayton Casciato). ### New Contributors - Ross Burton made their first contribution in [#11]( https://github.com/bootlin/sbom-cve-check/pull/11). - Clayton Casciato made their first contribution in [#14]( https://github.com/bootlin/sbom-cve-check/pull/14). ### Added or Changed - Improved the project description and short documentation ([#1]( https://github.com/bootlin/sbom-cve-check/pull/1) by Thomas Petazzoni). ### New Contributors - Thomas Petazzoni made their first contribution in [#1]( https://github.com/bootlin/sbom-cve-check/pull/1).
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#245323): https://lists.openembedded.org/g/openembedded-core/message/245323 Mute This Topic: https://lists.openembedded.org/mt/121140934/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
