chore: update SBOM for Python 3.11

Author: web-flow

sbom/cve-bin-tool-py3.11.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:7028081c-321c-4f41-83d9-e4fb54855c7b",
+  "serialNumber": "urn:uuid:4a902649-ff6d-4934-be86-2eb8dd79be62",
   "version": 1,
   "metadata": {
-    "timestamp": "2025-11-03T00:42:32Z",
+    "timestamp": "2025-11-10T00:41:52Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -4063,7 +4063,7 @@
       "type": "library",
       "bom-ref": "63-plotly",
       "name": "plotly",
-      "version": "6.3.1",
+      "version": "6.4.0",
       "supplier": {
         "name": "Chris P",
         "contact": [
@@ -4072,12 +4072,12 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:chris_p:plotly:6.3.1:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:chris_p:plotly:6.4.0:*:*:*:*:*:*:*",
       "description": "An open-source interactive data visualization library for Python",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8b4420d1dcf2b040f5983eed433f95732ed24930e496d36eb70d211923532e64"
+          "content": "a1062eafbdc657976c2eedd276c90e184ccd6c21282a5e9ee8f20efca9c9a4c5"
         }
       ],
       "externalReferences": [
@@ -4087,7 +4087,7 @@
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/plotly/6.3.1/#files",
+          "url": "https://pypi.org/project/plotly/6.4.0/#files",
           "type": "distribution",
           "comment": "Download location for component"
         },
@@ -4104,11 +4104,11 @@
           "type": "log"
         }
       ],
-      "purl": "pkg:pypi/plotly@6.3.1",
+      "purl": "pkg:pypi/plotly@6.4.0",
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-10-02T16:10:22Z"
+          "value": "2025-11-04T17:59:22Z"
         },
         {
           "name": "language",
@@ -4128,7 +4128,7 @@
       "type": "library",
       "bom-ref": "64-narwhals",
       "name": "narwhals",
-      "version": "2.10.1",
+      "version": "2.10.2",
       "supplier": {
         "name": "Marco Gorelli",
         "contact": [
@@ -4137,7 +4137,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.10.1:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:marco_gorelli:narwhals:2.10.2:*:*:*:*:*:*:*",
       "description": "Extremely lightweight compatibility layer between dataframe libraries",
       "licenses": [
         {
@@ -4155,7 +4155,7 @@
           "comment": "Home page for project"
         },
         {
-          "url": "https://pypi.org/project/narwhals/2.10.1/#files",
+          "url": "https://pypi.org/project/narwhals/2.10.2/#files",
           "type": "distribution",
           "comment": "Download location for component"
         },
@@ -4172,11 +4172,11 @@
           "type": "issue-tracker"
         }
       ],
-      "purl": "pkg:pypi/narwhals@2.10.1",
+      "purl": "pkg:pypi/narwhals@2.10.2",
       "properties": [
         {
           "name": "release_date",
-          "value": "2025-10-02T16:10:22Z"
+          "value": "2025-11-04T17:59:22Z"
         },
         {
           "name": "language",

sbom/cve-bin-tool-py3.11.spdx

@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-5cf11eb5-8c66-4959-9c9a-48fa6274697a
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c21d4eba-37d8-4ed9-b75c-5654f6ff8187
 LicenseListVersion: 3.26
 Creator: Tool: sbom4python-0.12.4
-Created: 2025-11-03T00:42:21Z
+Created: 2025-11-10T00:41:40Z
 CreatorComment: <text>SBOM Type: Build - This document has been automatically generated.</text>
 ##### 
 
@@ -1279,13 +1279,13 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft:packaging:25.0:*:*:*:*:*
 
 PackageName: plotly
 SPDXID: SPDXRef-63-plotly
-PackageVersion: 6.3.1
+PackageVersion: 6.4.0
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Chris P (chris@plot.ly)
-PackageDownloadLocation: https://pypi.org/project/plotly/6.3.1/#files
+PackageDownloadLocation: https://pypi.org/project/plotly/6.4.0/#files
 FilesAnalyzed: false
 PackageHomePage: https://plotly.com/python/
-PackageChecksum: SHA256: 8b4420d1dcf2b040f5983eed433f95732ed24930e496d36eb70d211923532e64
+PackageChecksum: SHA256: a1062eafbdc657976c2eedd276c90e184ccd6c21282a5e9ee8f20efca9c9a4c5
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: NOASSERTION
 PackageLicenseComments: <text>plotly declares MIT License
@@ -1312,33 +1312,33 @@ THE SOFTWARE.
  which is not currently a valid SPDX License identifier or expression.</text>
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>An open-source interactive data visualization library for Python</text>
-ReleaseDate: 2025-10-02T16:10:22Z
+ReleaseDate: 2025-11-04T17:59:22Z
 ExternalRef: OTHER documentation https://plotly.com/python/
 ExternalRef: OTHER vcs https://github.com/plotly/plotly.py
 ExternalRef: OTHER log https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@6.3.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:6.3.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@6.4.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:6.4.0:*:*:*:*:*:*:*
 ##### 
 
 PackageName: narwhals
 SPDXID: SPDXRef-64-narwhals
-PackageVersion: 2.10.1
+PackageVersion: 2.10.2
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Marco Gorelli (hello_narwhals@proton.me)
-PackageDownloadLocation: https://pypi.org/project/narwhals/2.10.1/#files
+PackageDownloadLocation: https://pypi.org/project/narwhals/2.10.2/#files
 FilesAnalyzed: false
 PackageHomePage: https://github.com/narwhals-dev/narwhals
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: MIT
 PackageLicenseComments: <text>narwhals declares MIT License which is not currently a valid SPDX License identifier or expression.</text>
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Extremely lightweight compatibility layer between dataframe libraries</text>
-ReleaseDate: 2025-10-02T16:10:22Z
+ReleaseDate: 2025-11-04T17:59:22Z
 ExternalRef: OTHER documentation https://narwhals-dev.github.io/narwhals/
 ExternalRef: OTHER vcs https://github.com/narwhals-dev/narwhals
 ExternalRef: OTHER issue-tracker https://github.com/narwhals-dev/narwhals/issues
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@2.10.1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:2.10.1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/narwhals@2.10.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:marco_gorelli:narwhals:2.10.2:*:*:*:*:*:*:*
 ##### 
 
 PackageName: python-gnupg