chore: update SBOM for Python 3.12 (#5356)

Co-authored-by: GitHub <[email protected]>

Author: github-actions[bot]

sbom/cve-bin-tool-py3.12.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:80dd078c-5a7c-4c9e-b901-0824b2f1d13b",
+  "serialNumber": "urn:uuid:70cb2955-4d80-4b60-bc20-887809b6a3ea",
   "version": 1,
   "metadata": {
-    "timestamp": "2025-09-15T00:42:59Z",
+    "timestamp": "2025-09-22T00:46:01Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -2002,7 +2002,7 @@
       "type": "library",
       "bom-ref": "30-pyparsing",
       "name": "pyparsing",
-      "version": "3.2.4",
+      "version": "3.2.5",
       "supplier": {
         "name": "Paul McGuire",
         "contact": [
@@ -2011,31 +2011,25 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.4:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.5:*:*:*:*:*:*:*",
       "description": "pyparsing - Classes and methods to define and execute parsing grammars",
-      "hashes": [
-        {
-          "alg": "SHA-256",
-          "content": "91d0fcde680d42cd031daf3a6ba20da3107e08a75de50da58360e7d94ab24d36"
-        }
-      ],
       "externalReferences": [
         {
           "url": "https://github.com/pyparsing/pyparsing/",
           "type": "website",
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/pyparsing/3.2.4/#files",
+          "url": "https://pypi.org/project/pyparsing/3.2.5/#files",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/[email protected].4",
+      "purl": "pkg:pypi/[email protected].5",
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-09-13T05:47:17Z"
+          "value": "2022-02-03T00:00:29Z"
         },
         {
           "name": "language",
@@ -4720,6 +4714,12 @@
       },
       "cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.25.0:*:*:*:*:*:*:*",
       "description": "Zstandard bindings for Python",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "e59fdc271772f6686e01e1b3b74537259800f57e24280be3f29c8a0deb1904dd"
+        }
+      ],
       "externalReferences": [
         {
           "url": "https://github.com/indygreg/python-zstandard",
@@ -4740,7 +4740,7 @@
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-06-08T17:06:38Z"
+          "value": "2025-09-14T22:15:56Z"
         },
         {
           "name": "language",

sbom/cve-bin-tool-py3.12.spdx

@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-5bd4e1ff-4530-47bf-b2c2-bcd39c9b9b8a
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-33d6d49b-6aff-4c5e-b8c9-d52bbf0a8b69
 LicenseListVersion: 3.26
 Creator: Tool: sbom4python-0.12.4
-Created: 2025-09-15T00:42:40Z
+Created: 2025-09-22T00:45:34Z
 CreatorComment: <text>SBOM Type: Build - This document has been automatically generated.</text>
 ##### 
 
@@ -455,12 +455,11 @@ PackageSupplier: Person: Joshua Harlow
 PackageDownloadLocation: https://pypi.org/project/fasteners/0.20/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/harlowja/fasteners
-PackageChecksum: SHA256: 9422c40d1e350e4259f509fb2e608d6bc43c0136f79a00db1b49046029d0b3b7
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: NOASSERTION
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>A python package that provides useful locks</text>
-ReleaseDate: 2025-08-11T10:19:35Z
+ReleaseDate: 2010-06-27T14:35:29Z
 ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected]
 ExternalRef: SECURITY cpe23Type cpe:2.3:a:joshua_harlow:fasteners:0.20:*:*:*:*:*:*:*
 ##### 
@@ -619,20 +618,19 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:joe_gregorio:httplib2:0.20.4:*:*:*:*:*
 
 PackageName: pyparsing
 SPDXID: SPDXRef-30-pyparsing
-PackageVersion: 3.2.4
+PackageVersion: 3.2.5
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Paul McGuire ([email protected])
-PackageDownloadLocation: https://pypi.org/project/pyparsing/3.2.4/#files
+PackageDownloadLocation: https://pypi.org/project/pyparsing/3.2.5/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/pyparsing/pyparsing/
-PackageChecksum: SHA256: 91d0fcde680d42cd031daf3a6ba20da3107e08a75de50da58360e7d94ab24d36
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: NOASSERTION
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>pyparsing - Classes and methods to define and execute parsing grammars</text>
-ReleaseDate: 2025-09-13T05:47:17Z
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.2.4:*:*:*:*:*:*:*
+ReleaseDate: 2022-02-03T00:00:29Z
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].5
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.2.5:*:*:*:*:*:*:*
 ##### 
 
 PackageName: oauth2client
@@ -1539,11 +1537,12 @@ PackageSupplier: Person: Gregory Szorc ([email protected])
 PackageDownloadLocation: https://pypi.org/project/zstandard/0.25.0/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/indygreg/python-zstandard
+PackageChecksum: SHA256: e59fdc271772f6686e01e1b3b74537259800f57e24280be3f29c8a0deb1904dd
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: NOASSERTION
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Zstandard bindings for Python</text>
-ReleaseDate: 2025-06-08T17:06:38Z
+ReleaseDate: 2025-09-14T22:15:56Z
 ExternalRef: OTHER documentation https://python-zstandard.readthedocs.io/en/latest/
 ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected]
 ExternalRef: SECURITY cpe23Type cpe:2.3:a:gregory_szorc:zstandard:0.25.0:*:*:*:*:*:*:*