Skip to content

chore(deps): bump pyasn1 from 0.6.4 to 0.6.5 in /docs/supply-chain #342

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump pyasn1 from 0.6.4 to 0.6.5 in /docs/supply-chain #342

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions docs/supply-chain/runtime-toolchain-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -217,7 +217,7 @@ cryptography==50.0.1 \
--hash=sha256:fd3718b960d0b5dd213cdf03f3bcb7000e69dda0de8b956061947ff6bcff5558 \
--hash=sha256:ff838d62ec1bfce4f9ba7fa16f4a7b554cd8d0c299e6be37502161a660c84eef
# via
# -r docs/supply-chain/runtime-toolchain-requirements.in
# -r runtime-toolchain-requirements.in
# pyopenssl
# webauthn
license-expression==30.4.4 \
Expand All @@ -228,9 +228,9 @@ ply==3.11 \
--hash=sha256:00c7c1aaa88358b9c765b6d3000c6eec0ba42abca5351b095321aef446081da3 \
--hash=sha256:096f9b8350b65ebd2fd1346b12452efe5b9607f7482813ffca50c22722a807ce
# via spdx-tools
pyasn1==0.6.4 \
--hash=sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81 \
--hash=sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b
pyasn1==0.6.5 \
--hash=sha256:4017b0fce125096b8573b39c989fdb1a4b19cf761e683398184550fea0e66587 \
--hash=sha256:6b11616a6bcf3a40e635f082bb232fa57b5e0dd7f517bd7ddd69ec3794508a47
Comment on lines +231 to +233

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 31, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Regenerate the bound software inventories

In the checked .github/workflows/ci.yml inventory-validation job, this modified lockfile is still recorded in docs/supply-chain/software-inventories/manifest.json with the old Git blob 06d7398.... validate_input_receipts() compares the working blob with that recorded subject blob and will raise inventory input differs from subject commit, so CI fails for every checkout of this commit. Regenerate and commit the inventory manifest/artifacts against a subject containing the updated lockfile.

Useful? React with 👍 / 👎.

# via
# pyasn1-modules
# webauthn
Expand Down Expand Up @@ -332,15 +332,15 @@ rdflib==7.6.0 \
rfc8785==0.1.4 \
--hash=sha256:520d690b448ecf0703691c76e1a34a24ddcd4fc5bc41d589cb7c58ec651bcd48 \
--hash=sha256:e545841329fe0eee4f6a3b44e7034343100c12b4ec566dc06ca9735681deb4da
# via -r docs/supply-chain/runtime-toolchain-requirements.in
# via -r runtime-toolchain-requirements.in
semantic-version==2.10.0 \
--hash=sha256:bdabb6d336998cbb378d4b9db3a4b56a1e3235701dc05ea2690d9a997ed5041c \
--hash=sha256:de78a3b8e0feda74cabc54aab2da702113e33ac9d9eb9d2389bcf1f58b7d9177
# via spdx-tools
spdx-tools==0.8.5 \
--hash=sha256:7c2d5865941be9d2e898f5b084e8d5422dd298dc5a29320ddb198fec304f59c4 \
--hash=sha256:be600beb2f762f0116025e05490d399e724f668bef84025a7c421bb266688bdb
# via -r docs/supply-chain/runtime-toolchain-requirements.in
# via -r runtime-toolchain-requirements.in
typing-extensions==4.16.0 \
--hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \
--hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5
Expand All @@ -352,7 +352,7 @@ uritools==6.1.3 \
webauthn==3.0.0 \
--hash=sha256:324e54e1f6eeef486623b5d90df6fcd74ae04ff0c137d2b818a8f709b6ca3ab8 \
--hash=sha256:b5d0c02b6efa16be683f8a75abd2073f5e59a15f42623cc22c31f27600259e64
# via -r docs/supply-chain/runtime-toolchain-requirements.in
# via -r runtime-toolchain-requirements.in
xmltodict==1.0.4 \
--hash=sha256:6d94c9f834dd9e44514162799d344d815a3a4faec913717a9ecbfa5be1bb8e61 \
--hash=sha256:a4a00d300b0e1c59fc2bfccb53d7b2e88c32f200df138a0dd2229f842497026a
Expand Down
Loading