[PySide] Build provenance for official PySide6 6.9.2 Windows x64 wheels

[Muhamad Rozaimi]

Hello Qt for Python team,

RZM Network is reviewing the open-source release materials for
ZaiMiXplorer, a Windows application branded ZaiCloX5. We use the official
PySide6_Essentials, PySide6_Addons, and shiboken6 6.9.2 cp39-abi3-win_amd64
wheels. We have the published Qt and PySide source archives, but need to
identify the build inputs and third-party source corresponding to the
binaries in those wheels. Could you point us to a release-specific build
record or SPDX SBOM, or answer the following?

   1. What Qt/PySide/Shiboken source revisions, configuration options,
   build patches, and third-party dependency versions produced the published
   Windows wheels? If a build-specific SBOM exists, where is it available?
   2. The wheel’s qjpeg.dll identifies libjpeg-turbo 3.0.3, whereas the Qt
   6.9.2 source declaration identifies 3.1.1. Which libjpeg-turbo source and
   patches correspond to this binary, and is it statically linked?
   3. Which PDFium revision, build options, and nested third-party
   components produced Qt6Pdf.dll, Qt6PdfWidgets.dll, and qpdf.dll? Where
   are the notices applicable to those wheel binaries?
   4. Which Mesa and LLVM sources, patches, and build settings produced the
   bundled opengl32sw.dll? Its binary indicators point to Mesa 11.2.2 and
   LLVM 3.6.2, but we have not established the exact build provenance.
   5. Are there release-specific materials or instructions for replacing
   LGPL-covered Qt/PySide/Shiboken components from these wheels when
   redistributed in a PyInstaller onedir application?

For unambiguous identification, the PyPI wheel SHA-256 values we reviewed
are:

   - PySide6_Essentials:
   b2f746f795138ac63eb173f9850a6db293461a1b6ce22cf6dafac7d194a38951
   - PySide6_Addons:
   98d2413904ee4b2b754b077af7875fa6ec08468c01a6628a2c9c3d2cece4874f
   - shiboken6:
   68c33d565cd4732be762d19ff67dfc53763256bac413d392aa8598b524980bc4

Thank you for any build records, source links, or a pointer to the
appropriate team.

RZM Network
ZaiCloX5
admin.zaiclox5 at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/pyside/attachments/20261018/6b018725/attachment.htm>