GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — gh-139330: Check expat version/checksum in SBOM with refresh.sh by sethmlarson · Pull Request #139331 · python/cpython

Conversation

@sethmlarson

@sethmlarson sethmlarson commented Sep 25, 2025 •
edited by bedevere-app Bot
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

Will need to be backported to all SBOM branches.

  • Issue: SBOM tool doesn't cross-check libexpat version and checksum against refresh.sh #139330

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
masoudahg00 reacted with thumbs up emoji
All reactions
  • 👍 1 reaction
@bedevere-app bedevere-app Bot added the awaiting review label Sep 25, 2025
@bedevere-app bedevere-app Bot mentioned this pull request Sep 25, 2025
SBOM tool doesn't cross-check libexpat version and checksum against refresh.sh #139330
Closed
@sethmlarson sethmlarson added 3.12 only security fixes 3.13 only security fixes 3.14 bugs and security fixes 3.15 bugs and security fixes and removed awaiting review labels Sep 25, 2025
@sethmlarson
sethmlarson requested a review from hugovk September 25, 2025 15:32
@sethmlarson sethmlarson added the release-blocker label Sep 25, 2025
@github-project-automation github-project-automation Bot added this to Release and Deferred blockers 🚫 Sep 25, 2025
@github-project-automation github-project-automation Bot moved this to Todo in Release and Deferred blockers 🚫 Sep 25, 2025
@sethmlarson sethmlarson added needs backport to 3.12 only security fixes needs backport to 3.13 only security fixes needs backport to 3.14 bugs and security fixes labels Sep 25, 2025
@sethmlarson
Check expat version/checksum in SBOM with refresh.sh
d95df91
@sethmlarson
sethmlarson force-pushed the sbom-expat-versioninfo branch from 6c0e9c0 to d95df91 Compare September 25, 2025 15:39
@StanFromIreland
StanFromIreland requested a review from gpshead September 25, 2025 15:46
StanFromIreland
StanFromIreland approved these changes Sep 25, 2025
View reviewed changes

@StanFromIreland StanFromIreland left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@bedevere-app bedevere-app Bot added the awaiting core review label Sep 25, 2025
@StanFromIreland StanFromIreland removed 3.12 only security fixes 3.13 only security fixes 3.14 bugs and security fixes 3.15 bugs and security fixes labels Sep 25, 2025
@sethmlarson sethmlarson mentioned this pull request Sep 25, 2025
gh-139312: Update bundled libexpat to 2.7.3 #139319
Merged
hugovk
hugovk approved these changes Sep 25, 2025
View reviewed changes
@bedevere-app bedevere-app Bot added awaiting merge and removed awaiting core review labels Sep 25, 2025
@sethmlarson
sethmlarson merged commit 89b5571 into python:main Sep 25, 2025
@github-project-automation github-project-automation Bot moved this from Todo to Done in Release and Deferred blockers 🚫 Sep 25, 2025
@miss-islington-app

miss-islington-app Bot commented Sep 25, 2025

Copy link
Copy Markdown

Thanks @sethmlarson for the PR 🌮🎉.. I'm working now to backport this PR to: 3.12, 3.13, 3.14.
🐍🍒⛏🤖
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@bedevere-app bedevere-app Bot removed the awaiting merge label Sep 25, 2025
@sethmlarson
sethmlarson deleted the sbom-expat-versioninfo branch September 25, 2025 17:13
@hugovk hugovk removed needs backport to 3.12 only security fixes needs backport to 3.13 only security fixes needs backport to 3.14 bugs and security fixes labels Sep 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hugovk hugovk hugovk approved these changes
@StanFromIreland StanFromIreland StanFromIreland approved these changes
@gpshead gpshead Awaiting requested review from gpshead

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

release-blocker

Projects

Release and Deferred blockers 🚫
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@sethmlarson @hugovk @StanFromIreland
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.