9 Commits

Author	SHA1	Message	Date
Seth Michael Larson	889cc43cb1	gh-112302: Move pip SBOM discovery to release-tools (#115360)	2024-02-14 12:47:15 -07:00
Seth Michael Larson	4b2d1786cc	gh-115399: Upgrade bundled libexpat to 2.6.0 (#115431)	2024-02-14 16:29:06 +00:00
Seth Michael Larson	4bf41879d0	gh-112302: Change 'licenseConcluded' field to 'NOASSERTION' (#115038)	2024-02-06 12:25:58 +02:00
Stéphane Bidoul	a4c298c149	gh-114965: Updated bundled pip to 24.0 (gh-114966) ... Updated bundled pip to 24.0	2024-02-03 17:45:09 +00:00
Seth Michael Larson	582d95e8bb	gh-114250: Fetch metadata for pip and its vendored dependencies from PyPI (#114450)	2024-01-26 09:48:13 +00:00
Seth Michael Larson	b221e03010	gh-113257: Automatically generate pip SBOM metadata from wheel (#113295) ... Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>	2023-12-20 17:28:20 +00:00
Seth Michael Larson	4658464e9c	gh-113257: Fix SBOM metadata for pip 23.3.2 (#113262) ... Fix SBOM metadata for pip 23.3.2	2023-12-19 08:34:53 +02:00
Stéphane Bidoul	4a24bf9a13	gh-113246: Updated bundled pip to 23.3.2 (gh-113249) ... Updated bundled pip to 23.3.2	2023-12-18 10:21:46 +00:00
Seth Michael Larson	21221c398f	gh-112302: Add Software Bill-of-Materials (SBOM) tracking for dependencies (#112303)	2023-12-07 18:01:58 +02:00