Skip to content

build(deps): bump csaf from 9362acd to 17f90fd #477

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aschierl-xitaso merged 4 commits into from
Mar 27, 2026
Merged

build(deps): bump csaf from 9362acd to 17f90fd #477

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
36d1e7f
build(deps): bump csaf from `9362acd` to `17f90fd`
dependabot[bot] Mar 16, 2026
9734968
chore: sync assets via workflow
Mar 16, 2026
e0e45cf
feat: adapt code generation to extensions feature, disable validators…
aschierl-xitaso Mar 25, 2026
0c77c50
Add issue numbers to TODOs
aschierl-xitaso Mar 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion csaf
Open in desktop
Submodule csaf updated 229 files
127 changes: 91 additions & 36 deletions csaf-rs/assets/csaf_2.1_json_schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,6 +129,16 @@
"additionalProperties": false
}
},
"extensions_t": {
"title": "List of extensions",
"description": "Contains a list of extension elements for the current context.",
"type": "array",
"minItems": 1,
"uniqueItems": true,
"items": {
"$ref": "https://docs.oasis-open.org/csaf/csaf/v2.1/schema/extension-content.json"
}
},
"full_product_name_t": {
"title": "Full product name",
"description": "Specifies information about the product and assigns the product_id.",
Expand Down Expand Up @@ -252,17 +262,17 @@
}
},
"purls": {
"title": "List of package URLs",
"description": "Contains a list of package URLs (purl).",
"title": "List of PURLs",
"description": "Contains a list of Package-URLs (PURL).",
"type": "array",
"minItems": 1,
"uniqueItems": true,
"items": {
"title": "package URL representation",
"description": "The package URL (purl) attribute refers to a method for reliably identifying and locating software packages external to this specification.",
"title": "Package-URL representation",
"description": "The Package-URL (PURL) attribute refers to a method for reliably identifying and locating software packages external to this specification.",
"type": "string",
"format": "uri",
"pattern": "^pkg:[A-Za-z\\.\\-\\+][A-Za-z0-9\\.\\-\\+]*\\/.+",
"pattern": "^pkg:[a-z][a-z0-9\\.\\-]*\\/.+",
"minLength": 7
}
},
Expand Down Expand Up @@ -293,12 +303,12 @@
},
"skus": {
"title": "List of stock keeping units",
"description": "Contains a list of full or abbreviated (partial) stock keeping units.",
"description": "Contains a list of stock keeping units.",
"type": "array",
"minItems": 1,
"items": {
"title": "Stock keeping unit",
"description": "Contains a full or abbreviated (partial) stock keeping unit (SKU) which is used in the ordering process to identify the component.",
"description": "Contains a stock keeping unit (SKU) which is used in the ordering process to identify the component - possibly with placeholders.",
"type": "string",
"minLength": 1
}
Expand Down Expand Up @@ -335,6 +345,11 @@
}
},
"additionalProperties": false
},
"x_extensions": {
"title": "Product-level Extensions",
"description": "Contains a list of extensions valid at the full product name element level of the CSAF document and associated with this full product name element.",
"$ref": "#/$defs/extensions_t"
}
},
"additionalProperties": false
Expand Down Expand Up @@ -501,6 +516,35 @@
"additionalProperties": false
}
},
"subpath_t": {
"title": "Subpath",
"description": "Contains the next node along the current path and its relationship to the previous node.",
"type": "object",
"required": [
"category",
"next_product_reference"
],
"properties": {
"category": {
"title": "Relationship category",
"description": "Defines the category of relationship between the previous item and the referenced next product.",
"type": "string",
"enum": [
"default_component_of",
"external_component_of",
"installed_on",
"installed_with",
"optional_component_of"
]
},
"next_product_reference": {
"title": "Next product reference",
"description": "Holds a Product ID that refers to the Full Product Name element, which is referenced as the second element of the relationship.",
"$ref": "#/$defs/product_id_t"
}
},
"additionalProperties": false
},
"version_t": {
"title": "Version",
"description": "Specifies a version string to denote clearly the evolution of the content of the document. Format must be either integer or semantic versioning.",
Expand Down Expand Up @@ -951,6 +995,11 @@
}
},
"additionalProperties": false
},
"x_extensions": {
"title": "Document-level Extensions",
"description": "Contains a list of extensions valid at the document property level of the CSAF document and associated with this document metadata.",
"$ref": "#/$defs/extensions_t"
}
},
"additionalProperties": false
Expand Down Expand Up @@ -1014,46 +1063,37 @@
"additionalProperties": false
}
},
"relationships": {
"title": "List of relationships",
"description": "Contains a list of relationships.",
"product_paths": {
"title": "List of product paths",
"description": "Contains a list of product paths.",
"type": "array",
"minItems": 1,
"items": {
"title": "Relationship",
"description": "Establishes a link between two existing full_product_name_t elements, allowing the document producer to define a combination of two products that form a new full_product_name entry.",
"title": "Product path",
"description": "Establishes a path along existing full_product_name_t elements, allowing the document producer to define a path of multiple products that form a new full_product_name entry.",
"type": "object",
"required": [
"category",
"beginning_product_reference",
"full_product_name",
"product_reference",
"relates_to_product_reference"
"subpaths"
],
"properties": {
"category": {
"title": "Relationship category",
"description": "Defines the category of relationship for the referenced component.",
"type": "string",
"enum": [
"default_component_of",
"external_component_of",
"installed_on",
"installed_with",
"optional_component_of"
]
"beginning_product_reference": {
"title": "Beginning product reference",
"description": "Holds a Product ID that refers to the Full Product Name element, which is the beginning node of the product path.",
"$ref": "#/$defs/product_id_t"
},
"full_product_name": {
"$ref": "#/$defs/full_product_name_t"
},
"product_reference": {
"title": "Product reference",
"description": "Holds a Product ID that refers to the Full Product Name element, which is referenced as the first element of the relationship.",
"$ref": "#/$defs/product_id_t"
},
"relates_to_product_reference": {
"title": "Relates to product reference",
"description": "Holds a Product ID that refers to the Full Product Name element, which is referenced as the second element of the relationship.",
"$ref": "#/$defs/product_id_t"
"subpaths": {
"title": "List of product subpaths",
"description": "Contains an ordered list of product subpaths, each one relating to the path defined by all previous elements up to the beginning node of the product path.",
"type": "array",
"minItems": 1,
"items": {
"$ref": "#/$defs/subpath_t"
}
}
},
"additionalProperties": false
Expand Down Expand Up @@ -1379,7 +1419,7 @@
},
"cvss_v4": {
"title": "CVSS v4",
"$ref": "https://www.first.org/cvss/cvss-v4.0.1.json"
"$ref": "https://www.first.org/cvss/cvss-v4.0.2.json"
},
"epss": {
"title": "EPSS",
Expand Down Expand Up @@ -1427,6 +1467,11 @@
"ssvc_v2": {
"title": "SSVC v2",
"$ref": "https://certcc.github.io/SSVC/data/schema/v2/SelectionList_2_0_0.schema.json"
},
"x_extensions": {
"title": "Metrics-content-level Extensions",
"description": "Contains a list of extensions valid at the metrics-content-level of the CSAF document and associated with this metric element.",
"$ref": "#/$defs/extensions_t"
}
},
"additionalProperties": false
Expand Down Expand Up @@ -1660,10 +1705,20 @@
"description": "Gives the document producer the ability to apply a canonical name or title to the vulnerability.",
"type": "string",
"minLength": 1
},
"x_extensions": {
"title": "Vulnerability-level Extensions",
"description": "Contains a list of extensions valid at the vulnerability item level of the CSAF document and associated with this vulnerability element.",
"$ref": "#/$defs/extensions_t"
}
},
"additionalProperties": false
}
},
"x_extensions": {
"title": "Root-level Extensions",
"description": "Contains a list of extensions valid at the root-level of the CSAF document and associated with this CSAF document.",
"$ref": "#/$defs/extensions_t"
}
},
"additionalProperties": false
Expand Down
Loading
Loading