Bug report
Bug description:
There's a bad comparison against the magic string == "libexpat" where it should check against == "expat" for the package name. This means that SBOM data for expat doesn't get cross-checked automatically against the refresh.sh script.
Found while reviewing #139319
CPython versions tested on:
CPython main branch
Operating systems tested on:
No response
Linked PRs
- gh-139330: Check expat version/checksum in SBOM with refresh.sh #139331
- [3.14] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139336
- [3.13] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139337
- [3.12] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139338
- [3.12] gh-139330: Check expat version/checksum in SBOM with refresh.sh #139339