continuous-delivery-scripts 4.4.0__tar.gz → 4.4.1__tar.gz

{continuous_delivery_scripts-4.4.0/continuous_delivery_scripts.egg-info → continuous_delivery_scripts-4.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: continuous-delivery-scripts
-Version: 4.4.0
+Version: 4.4.1
 Summary: Git-based CI/CD tools for releases, changelogs, SPDX SBOMs and licence reporting
 Home-page: https://github.com/ARMmbed/continuous-delivery-scripts
 Author: Arm

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/continuous_delivery_scripts/_version.py

@@ -11,8 +11,8 @@ References
 This file is autogenerated, do not modify by hand.
 """
 
-__version__ = "4.4.0"
-COMMIT = "b480ded441705a4dda9e7d2d3e7a3e1b45729688"
+__version__ = "4.4.1"
+COMMIT = "f1eb92251a8a3eaa65ca4bc27ca12e46a5e6a5d3"
 MAJOR = 4
 MINOR = 4
-PATCH = 0
+PATCH = 1

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/continuous_delivery_scripts/spdx_report/data/licence_assessment.toml

@@ -8,8 +8,8 @@
 schema_version = 1
 
 [settings]
-# Keep existing compliance exit codes unchanged unless a project opts in.
-fail_on = []
+# By default, only explicit DENY assessments fail. Projects may override this.
+fail_on = ["DENY"]
 
 [classifications]
 MIT = "PERMISSIVE"

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/continuous_delivery_scripts/spdx_report/licence_assessment.py

@@ -357,7 +357,19 @@ class LicenceAssessmentPolicy:
         override_path = configuration.get_value_or_default(ConfigurationVariable.LICENCE_ASSESSMENT_RULES_PATH, None)
         override = toml.load(Path(override_path)) if override_path else None
         inline_override = configuration.get_value_or_default(ConfigurationVariable.LICENCE_ASSESSMENT_RULES, None)
-        return cls(default, override, inline_override)
+        policy = cls(default, override, inline_override)
+        fail_on = configuration.get_value_or_default(ConfigurationVariable.LICENCE_ASSESSMENT_FAIL_ON, None)
+        if fail_on is not None:
+            policy._set_fail_on(fail_on, "ProjectConfig.LICENCE_ASSESSMENT_FAIL_ON")
+        return policy
+
+    def _set_fail_on(self, values: Any, source: str) -> None:
+        """Validate the same status list for inline, file and top-level settings."""
+        if not isinstance(values, list) or any(not isinstance(value, str) for value in values):
+            raise ValueError(f"{source}: fail_on must be a list of assessment statuses")
+        self.fail_on = tuple(_require_status(value, f"{source} fail_on") for value in values)
+        if LicenceAssessment.ALLOW in self.fail_on:
+            raise ValueError(f"{source}: ALLOW cannot be a failing assessment status")
 
     def _apply(self, data: dict, source: str) -> None:
         if not isinstance(data, dict) or set(data) - {
@@ -375,12 +387,7 @@ class LicenceAssessmentPolicy:
         if not isinstance(settings, dict) or set(settings) - {"fail_on"}:
             raise ValueError(f"{source}: unknown licence assessment settings")
         if "fail_on" in settings:
-            values = settings["fail_on"]
-            if not isinstance(values, list) or any(not isinstance(value, str) for value in values):
-                raise ValueError(f"{source}: fail_on must be a list of assessment statuses")
-            self.fail_on = tuple(_require_status(value, f"{source} fail_on") for value in values)
-            if LicenceAssessment.ALLOW in self.fail_on:
-                raise ValueError(f"{source}: ALLOW cannot be a failing assessment status")
+            self._set_fail_on(settings["fail_on"], source)
         classifications = data.get("classifications", {})
         if not isinstance(classifications, dict):
             raise ValueError(f"{source}: classifications must be a table")

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/continuous_delivery_scripts/spdx_report/spdx_project.py

@@ -83,6 +83,10 @@ class SpdxProject:
             self._licence_assessor = LicenceAssessor(LicenceAssessmentPolicy.from_config(), self._lookup_scancode)
         return self._licence_assessor
 
+    def has_assessment_gate(self) -> bool:
+        """Whether an older rules-file or inline setting opts into gating."""
+        return bool(self.licence_assessor.policy.fail_on)
+
     @property
     def licence_assessments(self) -> Dict[str, LicenceAssessmentResult]:
         """Assess already-discovered dependency licences against the project licence."""

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/continuous_delivery_scripts/tag_and_release.py

@@ -98,12 +98,16 @@ def _update_licensing_summary() -> Optional["SpdxProject"]:
     if not get_language_specifics().can_get_project_metadata():
         return None
 
-    project = get_language_specifics().get_current_spdx_project()
+    project: Optional["SpdxProject"] = get_language_specifics().get_current_spdx_project()
     if project:
         project.generate_licensing_summary(
             Path(configuration.get_value(ConfigurationVariable.DOCUMENTATION_PRODUCTION_OUTPUT_PATH))
         )
-        if configuration.get_value(ConfigurationVariable.FAIL_ON_INCOMPLETE_LICENCE_AUDIT):
+        if (
+            configuration.get_value(ConfigurationVariable.FAIL_ON_INCOMPLETE_LICENCE_AUDIT)
+            or configuration.get_value(ConfigurationVariable.LICENCE_ASSESSMENT_FAIL_ON)
+            or project.has_assessment_gate()
+        ):
             project.check_licence_compliance()
     return project
 

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/continuous_delivery_scripts/utils/configuration.py

@@ -107,6 +107,8 @@ class ConfigurationVariable(enum.Enum):
     """Optional inline licence assessment rules in the project's pyproject.toml."""
     REVIEWED_LICENCE_ASSESSMENTS = 44
     """Project-specific records explaining manual reviews of REVIEW assessments."""
+    LICENCE_ASSESSMENT_FAIL_ON = 45
+    """Optional top-level list of assessment statuses that fail compliance checks."""
 
     @staticmethod
     def choices() -> List[str]:
@@ -214,6 +216,8 @@ class StaticConfig(GenericConfig):
     TAG_VERSION_SHORTCUTS = False
     SECRETS_BASELINE_FILENAME = ".secrets.baseline"
     FAIL_ON_INCOMPLETE_LICENCE_AUDIT = False
+    LICENCE_ASSESSMENT_FAIL_ON = None
+    """When unset, use fail_on from the embedded or project licence assessment rules."""
     GENERATE_LICENSING_SUMMARY_ON_RELEASE = False
     DEPENDENCY_UPDATE_NEWS_MESSAGE = "Dependency upgrade: {message}"
     DEPENDENCY_UPDATE_NEWS_TYPE = NewsType.bugfix

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1/continuous_delivery_scripts.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: continuous-delivery-scripts
-Version: 4.4.0
+Version: 4.4.1
 Summary: Git-based CI/CD tools for releases, changelogs, SPDX SBOMs and licence reporting
 Home-page: https://github.com/ARMmbed/continuous-delivery-scripts
 Author: Arm

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/pyproject.toml

@@ -22,6 +22,7 @@ VERSION_FILE_PATH = "continuous_delivery_scripts/_version.py"
 CHANGELOG_FILE_PATH = "CHANGELOG.md"
 PROGRAMMING_LANGUAGE = "Python"
 GENERATE_LICENSING_SUMMARY_ON_RELEASE = true
+LICENCE_ASSESSMENT_FAIL_ON = ["DENY"]
 TAG_VERSION_SHORTCUTS = true
 TAG_LATEST = true
 
@@ -72,10 +73,8 @@ reason = "Used separately to generate docs; not bundled or modified."
 
 [ProjectConfig.REVIEWED_LICENCE_ASSESSMENTS.certifi]
 licence = "MPL-2.0"
-version = "2025.10.5"
 reason = "Used indirectly for HTTPS; retain its MPL licence and notices."
 
-
 [AutoVersionConfig]
 CONFIG_NAME = "DEFAULT"
 PRERELEASE_TOKEN = "beta"

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/GitPython.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (Sebastian Thiel <byronimo@gmail.com>, Michael Trier <mtrier@gmail.com>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/Incremental.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (unknown)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/Jinja2.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (unknown)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/Mako.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (Mike Bayer <mike@zzzcomputing.com>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/Markdown.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Manfred Stienstra, Yuri Takhteyev (Waylan limberg <python.markdown@gmail.com>)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/MarkupSafe.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (unknown)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/PyYAML.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Kirill Simonov (xi@resolvent.net)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/Pygments.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (Georg Brandl <georg@python.org>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/SecretStorage.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (Dmitry Shachnev <mitya57@gmail.com>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/boolean.py.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Sebastian Kraemer (basti.kr@gmail.com)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/boto3.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Amazon Web Services (unknown)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/botocore.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Amazon Web Services (unknown)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/bracex.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (Isaac Muse <Isaac.Muse@gmail.com>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/certifi.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Kenneth Reitz (me@kennethreitz.com)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/cffi.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Armin Rigo, Maciej Fijalkowski (unknown)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/charset-normalizer.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown ("Ahmed R. TAHRI" <tahri.ahmed@proton.me>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/click-default-group.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (Heungsub Lee <heungsub@subl.ee>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/click.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (unknown)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/continuous-delivery-scripts.spdx

@@ -2,75 +2,75 @@
 
 SPDXVersion: SPDX-1.2
 DataLicense: CC0-1.0
-DocumentName: continuous-delivery-scripts-4.3.0
+DocumentName: continuous-delivery-scripts-4.4.0
 SPDXID: SPDXRef-DOCUMENT
-DocumentNamespace: http://spdx.org/spdx/spdxdocs/continuous-delivery-scripts-4.3.0-d9e2187c-30b4-11eb-adc1-0242ac120002
+DocumentNamespace: http://spdx.org/spdx/spdxdocs/continuous-delivery-scripts-4.4.0-d9e2187c-30b4-11eb-adc1-0242ac120002
 DocumentComment: <text>This document was created automatically using available project and dependency information.</text>
-ExternalDocumentRef: setuptools-80.10.2 http://spdx.org/spdxdocs/setuptools-80.10.2-e903f47b-53fe-a1b7-075e-9d75adf7e755 SHA1:15c3b8467d2be2c455f887f9fcef29696557bb77
-ExternalDocumentRef: GitPython-3.2.0 http://spdx.org/spdxdocs/GitPython-3.2.0-0a5e1f02-4c09-09ab-36ae-24d1a67f7533 SHA1:ecc7a785cecf2cf8404d2cb48bc2d16bff12886a
-ExternalDocumentRef: gitdb-4.0.12 http://spdx.org/spdxdocs/gitdb-4.0.12-273955d6-6b67-f274-09b9-d5d728876c65 SHA1:82442d257cd241093f9d2d6ac62e1ce67d411d9a
-ExternalDocumentRef: smmap-5.0.3 http://spdx.org/spdxdocs/smmap-5.0.3-92f9f057-ebf8-69fd-9da4-621aaea5697e SHA1:cb825a0760d8d69001ecc658505e7d0a016a7756
-ExternalDocumentRef: towncrier-22.12.0 http://spdx.org/spdxdocs/towncrier-22.12.0-8936a3d8-df59-fbef-34c2-7d0c5b1c9716 SHA1:9a1c78273a0dff47829f9b1fa4e18933eacd0b79
-ExternalDocumentRef: click-8.5.0 http://spdx.org/spdxdocs/click-8.5.0-3bf7bc2a-49a1-7e01-1efb-43a928b9ef39 SHA1:f61a4a17d54b96d94c1ecf51b0e9e5a99ec894b6
-ExternalDocumentRef: click-default-group-1.2.4 http://spdx.org/spdxdocs/click-default-group-1.2.4-f5db4568-e262-1920-e4c0-537c58b90109 SHA1:5a727ed589684b63d1e7e2450df0036ef904bcc0
-ExternalDocumentRef: Incremental-24.11.0 http://spdx.org/spdxdocs/Incremental-24.11.0-18e3f959-7986-566a-6cb6-cdc66b18772b SHA1:3cd92eddf356bb58622e27e88fc51aeb869650a7
-ExternalDocumentRef: packaging-26.3 http://spdx.org/spdxdocs/packaging-26.3-a25bad6a-ae4d-28bf-b2f0-279bc4b845f4 SHA1:10795e5e327c2a02cc68983f239bc2387352b5f8
-ExternalDocumentRef: Jinja2-3.1.6 http://spdx.org/spdxdocs/Jinja2-3.1.6-24312ea7-6130-d44f-65fb-505010790099 SHA1:41a778ac87492937ce6d1b1ea3ff3c7e7ed3f2de
-ExternalDocumentRef: MarkupSafe-3.0.3 http://spdx.org/spdxdocs/MarkupSafe-3.0.3-4094bc86-4101-a699-03c1-5f9be18c5531 SHA1:d2d7b34ee72a5512216bbb81e6a326e47f2d6ab3
-ExternalDocumentRef: pyautoversion-1.2.0 http://spdx.org/spdxdocs/pyautoversion-1.2.0-40d58e10-712d-e437-e446-98b1e6fe55fc SHA1:d6936fdd2735f1b183341aaeba08511185b5a8f9
-ExternalDocumentRef: toml-0.10.2 http://spdx.org/spdxdocs/toml-0.10.2-e5787dfe-1584-d671-1c3a-cd698fb8ff55 SHA1:77d5cfa25480bee9c3a47f15399d3bd13aa9851d
-ExternalDocumentRef: semver-2.13.0 http://spdx.org/spdxdocs/semver-2.13.0-baaded3e-32af-ec68-8ca9-1ce044efe8d1 SHA1:4f3ea6faf0f627a0b9c50cd3b4a49c7d641484cd
-ExternalDocumentRef: pdoc3-0.11.6 http://spdx.org/spdxdocs/pdoc3-0.11.6-cda34805-4497-a7d6-3f9d-d757d940c92a SHA1:94b948cb7a0a74878b26f3d69860fd78151cb64c
-ExternalDocumentRef: Mako-1.4.3 http://spdx.org/spdxdocs/Mako-1.4.3-811e264d-5610-0b99-c416-d2dfa8d0fe08 SHA1:a32bc3850810481d980cd227fb99afc7d9541999
-ExternalDocumentRef: Markdown-3.11 http://spdx.org/spdxdocs/Markdown-3.11-4805e479-8c92-abbc-7756-b63a47804aad SHA1:52cbf6c18d581586f2c6a64434f38c204c836d64
-ExternalDocumentRef: python-dotenv-1.2.4 http://spdx.org/spdxdocs/python-dotenv-1.2.4-1063031e-af2d-904e-ea97-9e66498e59f6 SHA1:5aa69fd13e97b54e4cfacc11bec81a7f716e20ac
-ExternalDocumentRef: twine-7.0.0 http://spdx.org/spdxdocs/twine-7.0.0-922b4c72-ce63-a05c-28d0-78011e363531 SHA1:3d91504e4ba6d72950fa10e5e30e3b4710e4dbc1
-ExternalDocumentRef: readme_renderer-46.0 http://spdx.org/spdxdocs/readme_renderer-46.0-2101d4f4-e38b-ef50-a4d8-ab6abac4432e SHA1:49a1ae94f3b299a5d236063a7e332f3456143f85
-ExternalDocumentRef: nh3-0.3.7 http://spdx.org/spdxdocs/nh3-0.3.7-ed7840a0-b960-296f-6a6c-68565ba5fb71 SHA1:546c8947d32f50c40eaa5e81ddcaf8154b54e02f
-ExternalDocumentRef: docutils-0.23 http://spdx.org/spdxdocs/docutils-0.23-12b5b89b-5a69-56d3-1b79-14e0c7408c2c SHA1:6290f10deee70bd117e539edcd39c479205bdf65
-ExternalDocumentRef: Pygments-2.21.0 http://spdx.org/spdxdocs/Pygments-2.21.0-799b3142-7d9c-177c-b23a-4089c4ee78ae SHA1:fdb7e515339f818464517d6cbc3fa4b915a70d9c
-ExternalDocumentRef: requests-2.34.2 http://spdx.org/spdxdocs/requests-2.34.2-db35888e-ad68-a1d8-8e65-27825febcc00 SHA1:3ec2c056c4f53fe4615c20e6af686fe013a9ce87
-ExternalDocumentRef: charset-normalizer-3.5.2 http://spdx.org/spdxdocs/charset-normalizer-3.5.2-8dee20a8-14b3-5c05-b443-fa92a83ba0da SHA1:e6d5e0573367fde492f9f53269f97fdebb5d8ca1
-ExternalDocumentRef: idna-3.20 http://spdx.org/spdxdocs/idna-3.20-a30aef09-90b0-cea4-ac69-acf9511e8f7c SHA1:b4938c58e7db265ddbbe82298fafe8081d708715
-ExternalDocumentRef: urllib3-2.8.0 http://spdx.org/spdxdocs/urllib3-2.8.0-2a4a739b-4849-bad1-521a-5587356260b9 SHA1:d4a335eda82518a713b7fd2ffcb4f0f4151d6318
-ExternalDocumentRef: certifi-2026.7.22 http://spdx.org/spdxdocs/certifi-2026.7.22-cd1b90a6-5061-7341-306d-0b13acf2015e SHA1:59f7a1e66ec8944f294c4f9c81ee231cf83c520f
-ExternalDocumentRef: requests-toolbelt-1.0.0 http://spdx.org/spdxdocs/requests-toolbelt-1.0.0-3557a367-b672-fd4f-0859-85d05e2f323b SHA1:abf240b436f3fed0f4ef1cd545ba3a0ece60db92
-ExternalDocumentRef: keyring-25.7.0 http://spdx.org/spdxdocs/keyring-25.7.0-04e8c264-1252-9d96-4dca-4130949fdfc0 SHA1:4633484350fb1e92ae8b2cbc499fe7481842e8aa
-ExternalDocumentRef: SecretStorage-3.5.0 http://spdx.org/spdxdocs/SecretStorage-3.5.0-7162d4b1-5796-5136-bb1f-93e495e31633 SHA1:c57ed09b40bf3e66deab6a23031a82ab1689e140
-ExternalDocumentRef: cryptography-50.0.2 http://spdx.org/spdxdocs/cryptography-50.0.2-cddbe02d-fccd-a380-612f-0d65343561e9 SHA1:581dd2fb2f1d81be5d846a9e736b83166e7317ec
-ExternalDocumentRef: cffi-2.1.1 http://spdx.org/spdxdocs/cffi-2.1.1-31406c67-283d-38dd-2cb2-304e7d214269 SHA1:f8d0b606cb7a15a715c7e7ec8bd3852d6209200b
-ExternalDocumentRef: pycparser-3.0 http://spdx.org/spdxdocs/pycparser-3.0-caf41315-1a07-f38a-a48a-25cde23b0c71 SHA1:08285f45d7fa1366aa55f7273d526ad30f2f64ae
-ExternalDocumentRef: jeepney-0.9.0 http://spdx.org/spdxdocs/jeepney-0.9.0-1ae06d67-52ea-4e08-4de3-1804eddb1fea SHA1:89d17381709ac036db5c2c4c18ba760783700bc3
-ExternalDocumentRef: jaraco.classes-3.4.0 http://spdx.org/spdxdocs/jaraco.classes-3.4.0-f4672d10-eb8d-17eb-ec5b-2a14bbfdfe7f SHA1:62a801ff90aa568e750653594cb2dc3ed5f9c131
-ExternalDocumentRef: more-itertools-11.1.0 http://spdx.org/spdxdocs/more-itertools-11.1.0-33d745f9-14bb-9fa9-6867-509b092c1e5b SHA1:1615c683c8d6c17bb38312341f367a76735c3028
-ExternalDocumentRef: jaraco.functools-4.6.0 http://spdx.org/spdxdocs/jaraco.functools-4.6.0-a81e8d95-04fc-5370-3ab0-991bcfec49f8 SHA1:38d0af4a9e012c799912b4cb45ff755b7d64c000
-ExternalDocumentRef: jaraco.context-6.1.2 http://spdx.org/spdxdocs/jaraco.context-6.1.2-50c2a79e-ddcb-24d4-88c0-fbbfb8d56b14 SHA1:f16d5242cc375f001ce9d7b11b8adb76de413b7a
-ExternalDocumentRef: rfc3986-2.0.0 http://spdx.org/spdxdocs/rfc3986-2.0.0-90823585-e57e-2341-4016-0ff3f6a5c3f0 SHA1:20cbd94879f80610be6259f44b5368bf09125703
-ExternalDocumentRef: rich-15.0.0 http://spdx.org/spdxdocs/rich-15.0.0-383ae37d-1add-e17b-4c34-7f116de23128 SHA1:3b40b76863a33016612e761da138345d9895b176
-ExternalDocumentRef: markdown-it-py-4.2.0 http://spdx.org/spdxdocs/markdown-it-py-4.2.0-2df880e4-deea-9d07-b133-d891e4a5c758 SHA1:b9bb183ed0ecebb32877aeb3fde4ec7ab45001a3
-ExternalDocumentRef: mdurl-0.1.2 http://spdx.org/spdxdocs/mdurl-0.1.2-f6b150b9-ec1b-d1a1-4a66-2a7a8d291dde SHA1:77e7a33c4319f46f4e2885cb72919554b2c70010
-ExternalDocumentRef: id-1.6.1 http://spdx.org/spdxdocs/id-1.6.1-ebfa4b8b-a09c-f200-fa90-aea7b53dc31a SHA1:3b68620ff5a1591474f81a54532faab9bf910c6c
-ExternalDocumentRef: boto3-1.43.106 http://spdx.org/spdxdocs/boto3-1.43.106-5312fb83-fdd6-b8dc-38af-244f66958ad3 SHA1:3522e73796cb725e9768f370578616897753053c
-ExternalDocumentRef: botocore-1.43.106 http://spdx.org/spdxdocs/botocore-1.43.106-10e147fd-3ba0-1292-77d7-1e630c192997 SHA1:3b8618d463144ed34b8dae19bfccf18734afc934
-ExternalDocumentRef: jmespath-1.1.0 http://spdx.org/spdxdocs/jmespath-1.1.0-3648e6f3-4d86-3a4b-6b20-f00de6a8ce3f SHA1:b87a7c1a2f860faabdbf3d4df5ba2c0530b42323
-ExternalDocumentRef: python-dateutil-2.9.0.post0 http://spdx.org/spdxdocs/python-dateutil-2.9.0.post0-a5ea4b82-5bbc-014e-bb47-89ab06554d4e SHA1:7c2e6a7a18a53d18664b46fb9fe9e4c36aa892b7
-ExternalDocumentRef: six-1.17.0 http://spdx.org/spdxdocs/six-1.17.0-ab5dbe44-f335-e53e-8099-e89d0e2ef71a SHA1:48873e9b3e686e1ff211c5f11e5a650ab3b256e2
-ExternalDocumentRef: s3transfer-0.19.2 http://spdx.org/spdxdocs/s3transfer-0.19.2-2fa880cf-8a66-fa97-282b-6e267f6eb5d2 SHA1:7f0d1188267531fb20e84935c63053ba1e6570f8
-ExternalDocumentRef: detect-secrets-1.5.0 http://spdx.org/spdxdocs/detect-secrets-1.5.0-b1cd74c5-22c1-411c-d1df-4dcad3137b25 SHA1:e8805a7b44622f1d5d40ca5fdee40a1bb8b85d5a
-ExternalDocumentRef: PyYAML-6.0.3 http://spdx.org/spdxdocs/PyYAML-6.0.3-b3937378-08ec-515f-724f-bce6629153da SHA1:a9c97c47d2c384ccc6b2095ce44e032932d3e2aa
-ExternalDocumentRef: gibberish-detector-0.1.1 http://spdx.org/spdxdocs/gibberish-detector-0.1.1-f6ece812-d6a2-4d7e-3d6a-04cda280b35d SHA1:927fde6a2a37f7ec60ff552bc4b7de41fae8ba07
-ExternalDocumentRef: licenseheaders-0.8.8 http://spdx.org/spdxdocs/licenseheaders-0.8.8-50195f6e-b9f0-5b43-bd23-4f86b8a7d0b0 SHA1:467b9f47401e25e750c792f2af23e195605a1fc1
-ExternalDocumentRef: regex-2026.9.29 http://spdx.org/spdxdocs/regex-2026.9.29-be2c8b87-785d-0247-c737-1d4e1ba910ed SHA1:9a6cd394f2ecc73fae0f77a4ebe620395b3b3b20
-ExternalDocumentRef: spdx-tools-0.6.1 http://spdx.org/spdxdocs/spdx-tools-0.6.1-4d536489-011c-553e-cc3f-8b1a412b1c9e SHA1:f4be474e1892303c7dfb8d47bf1e0c79afa7b4f1
-ExternalDocumentRef: ply-3.11 http://spdx.org/spdxdocs/ply-3.11-e04e4432-9776-b366-27e3-a05ebb987f6f SHA1:887459873f3517994a0d64521a3e549e9f44e6eb
-ExternalDocumentRef: rdflib-7.6.0 http://spdx.org/spdxdocs/rdflib-7.6.0-7f7ba72a-88cb-c56b-4843-71db48a502a8 SHA1:985920795a200747a09c730099fbd1afcd026f63
-ExternalDocumentRef: pyparsing-3.3.3 http://spdx.org/spdxdocs/pyparsing-3.3.3-9ec14b72-a7bc-bab0-ddbf-59056c28049c SHA1:afb08fd336f95b31d0248fea217bfccbe89c7379
-ExternalDocumentRef: xmltodict-1.0.4 http://spdx.org/spdxdocs/xmltodict-1.0.4-9268d9c9-6c3e-7f34-921f-b014696d16a8 SHA1:894b01bfe5b6ff9617b99c19db70f1d07a3b38db
-ExternalDocumentRef: license-expression-30.4.4 http://spdx.org/spdxdocs/license-expression-30.4.4-cfd4769f-7d3d-f2c5-fb28-3690b877ea96 SHA1:c9c840eed3117b4d49cd2fbd99ef11e45b44e860
-ExternalDocumentRef: boolean.py-5.0 http://spdx.org/spdxdocs/boolean.py-5.0-d48bd43e-56cc-80b9-de7b-171b0a52cc58 SHA1:b11b1754153392332bf2469bc931cf3f4455e1ae
-ExternalDocumentRef: wcmatch-11.0.1 http://spdx.org/spdxdocs/wcmatch-11.0.1-97cc7bde-8e4d-15a5-4e11-3ead8177db5b SHA1:215bf2dbbd555822a37ce7cbabfb11fae9f4e2a0
-ExternalDocumentRef: bracex-3.0.1 http://spdx.org/spdxdocs/bracex-3.0.1-51adbe5a-8948-0445-4c3b-af655311e757 SHA1:f9094dcdf3acbae0227cc51aca2c2d405e0d63b1
-ExternalDocumentRef: jellyfish-1.2.1 http://spdx.org/spdxdocs/jellyfish-1.2.1-5d53a25e-0663-83d6-0953-983bca58c1ea SHA1:977c7cd4b05b5c451509d708ceae7b7913d7a386
+ExternalDocumentRef: setuptools-80.10.2 http://spdx.org/spdxdocs/setuptools-80.10.2-e903f47b-53fe-a1b7-075e-9d75adf7e755 SHA1:69d215a4621b825f85d50ba89291bc717f98f495
+ExternalDocumentRef: GitPython-3.2.0 http://spdx.org/spdxdocs/GitPython-3.2.0-0a5e1f02-4c09-09ab-36ae-24d1a67f7533 SHA1:a07e067b996abd8b6c62668065f4c24d6299edb2
+ExternalDocumentRef: gitdb-4.0.12 http://spdx.org/spdxdocs/gitdb-4.0.12-273955d6-6b67-f274-09b9-d5d728876c65 SHA1:b822cd160bf174e5e63ca492dd0da5d055fcf374
+ExternalDocumentRef: smmap-5.0.3 http://spdx.org/spdxdocs/smmap-5.0.3-92f9f057-ebf8-69fd-9da4-621aaea5697e SHA1:a856a32958791832cb0013fa1f78a2d2e0ab1a37
+ExternalDocumentRef: towncrier-22.12.0 http://spdx.org/spdxdocs/towncrier-22.12.0-8936a3d8-df59-fbef-34c2-7d0c5b1c9716 SHA1:6b037b3dfad37eb3778dd5727af1ab00ca79ae6e
+ExternalDocumentRef: click-8.5.0 http://spdx.org/spdxdocs/click-8.5.0-3bf7bc2a-49a1-7e01-1efb-43a928b9ef39 SHA1:f1159ef56ef09e247e6f8debd918c632a0284062
+ExternalDocumentRef: click-default-group-1.2.4 http://spdx.org/spdxdocs/click-default-group-1.2.4-f5db4568-e262-1920-e4c0-537c58b90109 SHA1:d8acf5cc6040f1374d321a72845cfe0e8734dfab
+ExternalDocumentRef: Incremental-24.11.0 http://spdx.org/spdxdocs/Incremental-24.11.0-18e3f959-7986-566a-6cb6-cdc66b18772b SHA1:89e7cf8ee4a70e1f322296e5a7efd90d39167681
+ExternalDocumentRef: packaging-26.3 http://spdx.org/spdxdocs/packaging-26.3-a25bad6a-ae4d-28bf-b2f0-279bc4b845f4 SHA1:311460d923ba81f31773beca74c84e2cba7f4b47
+ExternalDocumentRef: Jinja2-3.1.6 http://spdx.org/spdxdocs/Jinja2-3.1.6-24312ea7-6130-d44f-65fb-505010790099 SHA1:f4c925948352db8882cadf145ba13b7eb8c5a211
+ExternalDocumentRef: MarkupSafe-3.0.3 http://spdx.org/spdxdocs/MarkupSafe-3.0.3-4094bc86-4101-a699-03c1-5f9be18c5531 SHA1:041e39cfef71ce306c8c9de32ec58b98efdf0915
+ExternalDocumentRef: pyautoversion-1.2.0 http://spdx.org/spdxdocs/pyautoversion-1.2.0-40d58e10-712d-e437-e446-98b1e6fe55fc SHA1:310e6e606f73babe24dbb7d0fb31ee901aed9302
+ExternalDocumentRef: toml-0.10.2 http://spdx.org/spdxdocs/toml-0.10.2-e5787dfe-1584-d671-1c3a-cd698fb8ff55 SHA1:b5bf669665122bf8728b969480bb0e1e8db7eaa5
+ExternalDocumentRef: semver-2.13.0 http://spdx.org/spdxdocs/semver-2.13.0-baaded3e-32af-ec68-8ca9-1ce044efe8d1 SHA1:54d89654b2ca34b0e02272bff9f7fa77c77d3f5c
+ExternalDocumentRef: pdoc3-0.11.6 http://spdx.org/spdxdocs/pdoc3-0.11.6-cda34805-4497-a7d6-3f9d-d757d940c92a SHA1:9d3738edf5eeead81b66ee14f4dc5482e728c4c6
+ExternalDocumentRef: Mako-1.4.3 http://spdx.org/spdxdocs/Mako-1.4.3-811e264d-5610-0b99-c416-d2dfa8d0fe08 SHA1:0636f8822b02cf038d7815433a5edcb9831c92a6
+ExternalDocumentRef: Markdown-3.11 http://spdx.org/spdxdocs/Markdown-3.11-4805e479-8c92-abbc-7756-b63a47804aad SHA1:5199aedcbc8b24dd3c75cbfda29ddf0ff15c6d44
+ExternalDocumentRef: python-dotenv-1.2.4 http://spdx.org/spdxdocs/python-dotenv-1.2.4-1063031e-af2d-904e-ea97-9e66498e59f6 SHA1:5e9224ad1daf9e4c6b604581948068a3a37ec06c
+ExternalDocumentRef: twine-7.0.0 http://spdx.org/spdxdocs/twine-7.0.0-922b4c72-ce63-a05c-28d0-78011e363531 SHA1:4db1c579039168e7b0f355d19e4686bdc6fd3d4b
+ExternalDocumentRef: readme_renderer-46.0 http://spdx.org/spdxdocs/readme_renderer-46.0-2101d4f4-e38b-ef50-a4d8-ab6abac4432e SHA1:0de0003260ccc20f31ffa82cda5b4dfe30facd0c
+ExternalDocumentRef: nh3-0.3.7 http://spdx.org/spdxdocs/nh3-0.3.7-ed7840a0-b960-296f-6a6c-68565ba5fb71 SHA1:a3061e5ac374925a275c4ec0dfeb1af84e565d1b
+ExternalDocumentRef: docutils-0.23 http://spdx.org/spdxdocs/docutils-0.23-12b5b89b-5a69-56d3-1b79-14e0c7408c2c SHA1:e5d6adeb430cdd69f932944cf401263dc3624302
+ExternalDocumentRef: Pygments-2.21.0 http://spdx.org/spdxdocs/Pygments-2.21.0-799b3142-7d9c-177c-b23a-4089c4ee78ae SHA1:739b19b01c66c6d236a35dea48b40428524f77db
+ExternalDocumentRef: requests-2.34.2 http://spdx.org/spdxdocs/requests-2.34.2-db35888e-ad68-a1d8-8e65-27825febcc00 SHA1:08df440bbf05c15cdf9c0ed2b97fe389849a2941
+ExternalDocumentRef: charset-normalizer-3.5.2 http://spdx.org/spdxdocs/charset-normalizer-3.5.2-8dee20a8-14b3-5c05-b443-fa92a83ba0da SHA1:31853b7676ff554e5c0a9529c60b42791060c91b
+ExternalDocumentRef: idna-3.20 http://spdx.org/spdxdocs/idna-3.20-a30aef09-90b0-cea4-ac69-acf9511e8f7c SHA1:ca527010ed57e792bf87dfbe2314f0a62c7cccef
+ExternalDocumentRef: urllib3-2.8.0 http://spdx.org/spdxdocs/urllib3-2.8.0-2a4a739b-4849-bad1-521a-5587356260b9 SHA1:5389a5c87e452c33677957f108a7b07ed8077c47
+ExternalDocumentRef: certifi-2026.7.22 http://spdx.org/spdxdocs/certifi-2026.7.22-cd1b90a6-5061-7341-306d-0b13acf2015e SHA1:e01fb386bd93176f461fd182f8ab0a799a6ffa01
+ExternalDocumentRef: requests-toolbelt-1.0.0 http://spdx.org/spdxdocs/requests-toolbelt-1.0.0-3557a367-b672-fd4f-0859-85d05e2f323b SHA1:bf778992d5a10778ed615d7907525f3475a11579
+ExternalDocumentRef: keyring-25.7.0 http://spdx.org/spdxdocs/keyring-25.7.0-04e8c264-1252-9d96-4dca-4130949fdfc0 SHA1:cc7a31b40fb6df14907b7d01ece601f963578a52
+ExternalDocumentRef: SecretStorage-3.5.0 http://spdx.org/spdxdocs/SecretStorage-3.5.0-7162d4b1-5796-5136-bb1f-93e495e31633 SHA1:282c32a65fa6b2e17b108ae4e7acf55e2593b4ed
+ExternalDocumentRef: cryptography-50.0.2 http://spdx.org/spdxdocs/cryptography-50.0.2-cddbe02d-fccd-a380-612f-0d65343561e9 SHA1:5961ec4c15866a673f6a77117ddf7bed0f5984a3
+ExternalDocumentRef: cffi-2.1.1 http://spdx.org/spdxdocs/cffi-2.1.1-31406c67-283d-38dd-2cb2-304e7d214269 SHA1:c0526b004f2685f02196e71dd6a24664462919b9
+ExternalDocumentRef: pycparser-3.0 http://spdx.org/spdxdocs/pycparser-3.0-caf41315-1a07-f38a-a48a-25cde23b0c71 SHA1:728f89eea19c09753ddc8ce577e78b46e10bff72
+ExternalDocumentRef: jeepney-0.9.0 http://spdx.org/spdxdocs/jeepney-0.9.0-1ae06d67-52ea-4e08-4de3-1804eddb1fea SHA1:78826c0eca2ab0c3ed4d9232b08891952cbbded2
+ExternalDocumentRef: jaraco.classes-3.4.0 http://spdx.org/spdxdocs/jaraco.classes-3.4.0-f4672d10-eb8d-17eb-ec5b-2a14bbfdfe7f SHA1:17aaaa9cf27274662ce698681e4e636a2798147a
+ExternalDocumentRef: more-itertools-11.1.0 http://spdx.org/spdxdocs/more-itertools-11.1.0-33d745f9-14bb-9fa9-6867-509b092c1e5b SHA1:2f219bce036accce81f65aefa15082b0290f5639
+ExternalDocumentRef: jaraco.functools-4.6.0 http://spdx.org/spdxdocs/jaraco.functools-4.6.0-a81e8d95-04fc-5370-3ab0-991bcfec49f8 SHA1:52122d544bb32f6631f038cee8f22ceb714f57b1
+ExternalDocumentRef: jaraco.context-6.1.2 http://spdx.org/spdxdocs/jaraco.context-6.1.2-50c2a79e-ddcb-24d4-88c0-fbbfb8d56b14 SHA1:ad9f60a3227aba380e8ada482a25e1d0d0fa4a85
+ExternalDocumentRef: rfc3986-2.0.0 http://spdx.org/spdxdocs/rfc3986-2.0.0-90823585-e57e-2341-4016-0ff3f6a5c3f0 SHA1:dbe9bfe35e14f6f28d00fea4bb75c8421ba716d8
+ExternalDocumentRef: rich-15.0.0 http://spdx.org/spdxdocs/rich-15.0.0-383ae37d-1add-e17b-4c34-7f116de23128 SHA1:fecd4606816b05793e34b1cd56433e4f636bdead
+ExternalDocumentRef: markdown-it-py-4.2.0 http://spdx.org/spdxdocs/markdown-it-py-4.2.0-2df880e4-deea-9d07-b133-d891e4a5c758 SHA1:0a0e0d386489d082d6c2dc964f66158b771e9fa2
+ExternalDocumentRef: mdurl-0.1.2 http://spdx.org/spdxdocs/mdurl-0.1.2-f6b150b9-ec1b-d1a1-4a66-2a7a8d291dde SHA1:642b0ebff43fecc76dfb336f323f8d7140b18311
+ExternalDocumentRef: id-1.6.1 http://spdx.org/spdxdocs/id-1.6.1-ebfa4b8b-a09c-f200-fa90-aea7b53dc31a SHA1:279ff70bf99047dc46adc1b6d58adc3bc6d2d9fd
+ExternalDocumentRef: boto3-1.43.106 http://spdx.org/spdxdocs/boto3-1.43.106-5312fb83-fdd6-b8dc-38af-244f66958ad3 SHA1:261fe183c1e499c895ca79eaba89d02206945ef2
+ExternalDocumentRef: botocore-1.43.106 http://spdx.org/spdxdocs/botocore-1.43.106-10e147fd-3ba0-1292-77d7-1e630c192997 SHA1:c69bd150f7fd86de593847c8df7b21722dfac11b
+ExternalDocumentRef: jmespath-1.1.0 http://spdx.org/spdxdocs/jmespath-1.1.0-3648e6f3-4d86-3a4b-6b20-f00de6a8ce3f SHA1:29ee4af3df3aafe6f9df134b6a79bb1091cab54f
+ExternalDocumentRef: python-dateutil-2.9.0.post0 http://spdx.org/spdxdocs/python-dateutil-2.9.0.post0-a5ea4b82-5bbc-014e-bb47-89ab06554d4e SHA1:392aa2253fc52df101d5c010d92c095cc8ca8d73
+ExternalDocumentRef: six-1.17.0 http://spdx.org/spdxdocs/six-1.17.0-ab5dbe44-f335-e53e-8099-e89d0e2ef71a SHA1:9fb17d64e7b52a9f265219a6fc811ba1c3056087
+ExternalDocumentRef: s3transfer-0.19.2 http://spdx.org/spdxdocs/s3transfer-0.19.2-2fa880cf-8a66-fa97-282b-6e267f6eb5d2 SHA1:7734a8be4773ec903b91a093752cf6d131ca4d42
+ExternalDocumentRef: detect-secrets-1.5.0 http://spdx.org/spdxdocs/detect-secrets-1.5.0-b1cd74c5-22c1-411c-d1df-4dcad3137b25 SHA1:b2005802a0cafd23ec3f25b5db0c7a5d82167a78
+ExternalDocumentRef: PyYAML-6.0.3 http://spdx.org/spdxdocs/PyYAML-6.0.3-b3937378-08ec-515f-724f-bce6629153da SHA1:cdb5559d34e8fd4283407c3d7cab26431c0cec78
+ExternalDocumentRef: gibberish-detector-0.1.1 http://spdx.org/spdxdocs/gibberish-detector-0.1.1-f6ece812-d6a2-4d7e-3d6a-04cda280b35d SHA1:4968ee6eea47d18f2346796da7b1b034565e7c70
+ExternalDocumentRef: licenseheaders-0.8.8 http://spdx.org/spdxdocs/licenseheaders-0.8.8-50195f6e-b9f0-5b43-bd23-4f86b8a7d0b0 SHA1:ddb445abea7ce5dd6a7aa56c0fbd532301f2790f
+ExternalDocumentRef: regex-2026.9.29 http://spdx.org/spdxdocs/regex-2026.9.29-be2c8b87-785d-0247-c737-1d4e1ba910ed SHA1:4e35f2423ab99bcb9e0332a66bdf76d4a0de47d5
+ExternalDocumentRef: spdx-tools-0.6.1 http://spdx.org/spdxdocs/spdx-tools-0.6.1-4d536489-011c-553e-cc3f-8b1a412b1c9e SHA1:c23ec31e4f2d4689d241a93b1e317b8a26a226f1
+ExternalDocumentRef: ply-3.11 http://spdx.org/spdxdocs/ply-3.11-e04e4432-9776-b366-27e3-a05ebb987f6f SHA1:5442403e72ad1aa70323b8e293634fb094d9ebff
+ExternalDocumentRef: rdflib-7.6.0 http://spdx.org/spdxdocs/rdflib-7.6.0-7f7ba72a-88cb-c56b-4843-71db48a502a8 SHA1:5c847574ea4d7b34e0009f0ddb3c2287b611dc55
+ExternalDocumentRef: pyparsing-3.3.3 http://spdx.org/spdxdocs/pyparsing-3.3.3-9ec14b72-a7bc-bab0-ddbf-59056c28049c SHA1:0c06bb266017ea214e06edd8f8013d79eab5718f
+ExternalDocumentRef: xmltodict-1.0.4 http://spdx.org/spdxdocs/xmltodict-1.0.4-9268d9c9-6c3e-7f34-921f-b014696d16a8 SHA1:b5aab2a287519009cc8113203addfdaebc4884c8
+ExternalDocumentRef: license-expression-30.4.4 http://spdx.org/spdxdocs/license-expression-30.4.4-cfd4769f-7d3d-f2c5-fb28-3690b877ea96 SHA1:d671c6d55d5aedcb119f7efce2a2e236b20100e4
+ExternalDocumentRef: boolean.py-5.0 http://spdx.org/spdxdocs/boolean.py-5.0-d48bd43e-56cc-80b9-de7b-171b0a52cc58 SHA1:fa98d4aa43a3cb19e2e844bbab245d294f40d186
+ExternalDocumentRef: wcmatch-11.0.1 http://spdx.org/spdxdocs/wcmatch-11.0.1-97cc7bde-8e4d-15a5-4e11-3ead8177db5b SHA1:6dd9a0edf28dc738f9bb49fabc119b8ac4d08084
+ExternalDocumentRef: bracex-3.0.1 http://spdx.org/spdxdocs/bracex-3.0.1-51adbe5a-8948-0445-4c3b-af655311e757 SHA1:8eefcb942a937e7905f9bf8e33e3fc82d19d5415
+ExternalDocumentRef: jellyfish-1.2.1 http://spdx.org/spdxdocs/jellyfish-1.2.1-5d53a25e-0663-83d6-0953-983bca58c1ea SHA1:96003e07a69c7786e51e12f5f19d48e925cb49ee
 
 
 # Creation Info
@@ -78,27 +78,27 @@ ExternalDocumentRef: jellyfish-1.2.1 http://spdx.org/spdxdocs/jellyfish-1.2.1-5d
 Creator: Person: Arm (adrien.cabarbaye@arm.com)
 Creator: Organization: Arm Limited (support@arm.com)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Review
 
 Reviewer: Person: Monty Bot (monty-bot@arm.com)
-ReviewDate: 2026-10-01T15:10:20Z
+ReviewDate: 2026-10-01T16:56:04Z
 
 
 # Package
 
 PackageName: continuous-delivery-scripts
 SPDXID: SPDXRef-f0cfd7a4-30b4-11eb-adc1-0242ac120002
-PackageVersion: 4.3.0
+PackageVersion: 4.4.0
 PackageDownloadLocation: NONE
 FilesAnalyzed: True
 PackageSummary: <text>Git-based CI/CD tools for releases, changelogs, SPDX SBOMs and licence reporting</text>
 PackageFileName: continuous-delivery-scripts
 PackageOriginator: Person: Arm (adrien.cabarbaye@arm.com)
 PackageChecksum: SHA1: NOASSERTION
-PackageVerificationCode: 3c5eb315f0207761e8208f8a2a984d1ef9002c6c
+PackageVerificationCode: f1d941145e2090b632fd26d36419a30a36600e79
 PackageDescription: <text>NOASSERTION</text>
 PackageLicenseDeclared: Apache-2.0
 PackageLicenseConcluded: Apache-2.0
@@ -185,7 +185,7 @@ FileComment: <text>NONE</text>
 FileName: ./continuous_delivery_scripts/_version.py
 SPDXID: SPDXRef-15e6fc01-7089-ed2e-76c2-f56ac9330802
 FileType: SOURCE
-FileChecksum: SHA1: 110598c48a74782334f98e70e937ed346f83c109
+FileChecksum: SHA1: 21be79b15dd5d6bb0f6720bf2557fb803a77d787
 LicenseConcluded: Apache-2.0
 LicenseInfoInFile: Apache-2.0
 FileCopyrightText: <text>Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.</text>
@@ -509,7 +509,7 @@ FileComment: <text>NONE</text>
 FileName: ./continuous_delivery_scripts/spdx_report/data/licence_assessment.toml
 SPDXID: SPDXRef-26be1720-41e5-2e8d-d683-6b95bb1bfe64
 FileType: SOURCE
-FileChecksum: SHA1: 3f04857a505dd4887d5b28c964b05d132f4114eb
+FileChecksum: SHA1: 9d77512ce59933769afcee24580179636ee18325
 LicenseConcluded: Apache-2.0
 LicenseInfoInFile: Apache-2.0
 FileCopyrightText: NONE
@@ -521,7 +521,7 @@ FileComment: <text>NONE</text>
 FileName: ./continuous_delivery_scripts/spdx_report/licence_assessment.py
 SPDXID: SPDXRef-c68e82f4-a178-5671-b0ab-23965026a0cf
 FileType: SOURCE
-FileChecksum: SHA1: cc10a6f727af5cd60bfbe1a2ac4ccf27fdfefa9f
+FileChecksum: SHA1: b5fdecee9221d8e632996aae4ba374a6f563f3b0
 LicenseConcluded: Apache-2.0
 LicenseInfoInFile: Apache-2.0
 FileCopyrightText: <text>Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.</text>
@@ -605,7 +605,7 @@ FileComment: <text>NONE</text>
 FileName: ./continuous_delivery_scripts/spdx_report/spdx_project.py
 SPDXID: SPDXRef-9a4d6544-0537-7e14-2f36-e0edcdf8e697
 FileType: SOURCE
-FileChecksum: SHA1: 5c3246911d8fa0adbad3a5f4ce169bec21fd8e80
+FileChecksum: SHA1: 368dccb6cb8d738a58603076638b69cd798f2e16
 LicenseConcluded: Apache-2.0
 LicenseInfoInFile: Apache-2.0
 FileCopyrightText: <text>Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.</text>
@@ -665,7 +665,7 @@ FileComment: <text>NONE</text>
 FileName: ./continuous_delivery_scripts/tag_and_release.py
 SPDXID: SPDXRef-efced172-e76a-d6fd-cb9b-842ea6c73f48
 FileType: SOURCE
-FileChecksum: SHA1: 92ce13b54e6786643f87f2e39859a4d787ecb60e
+FileChecksum: SHA1: 2f0481e6779ddc987179c5dd00959284f6013c30
 LicenseConcluded: Apache-2.0
 LicenseInfoInFile: Apache-2.0
 FileCopyrightText: <text>Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.</text>
@@ -713,7 +713,7 @@ FileComment: <text>NONE</text>
 FileName: ./continuous_delivery_scripts/utils/configuration.py
 SPDXID: SPDXRef-c7e4f2fd-85ad-2080-e0c7-cb4cbdfc116d
 FileType: SOURCE
-FileChecksum: SHA1: 5aff9bab82fdf6c6394c15fa842604ed2279034b
+FileChecksum: SHA1: e7c17f23146a25df11213ae5d989a13fce2355c4
 LicenseConcluded: Apache-2.0
 LicenseInfoInFile: Apache-2.0
 FileCopyrightText: <text>Copyright (C) 2020-2026 Arm Limited or its affiliates and Contributors. All rights reserved.</text>

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/cryptography.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (The Python Cryptographic Authority and individual contributors <cryptography-dev@python.org>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/detect-secrets.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Person: Yelp, Inc. (opensource@yelp.com)
 Creator: Tool: mbed-spdx-generator
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package

{continuous_delivery_scripts-4.4.0 → continuous_delivery_scripts-4.4.1}/spdx-tmp/docutils.spdx

@@ -12,7 +12,7 @@ DocumentComment: <text>This document was created automatically using available p
 
 Creator: Tool: mbed-spdx-generator
 Creator: Person: unknown (David Goodger <goodger@python.org>)
-Created: 2026-10-01T15:10:20Z
+Created: 2026-10-01T16:56:04Z
 
 
 # Package