diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml
index 31dc018f27..de24bf4cd5 100644
--- a/.github/workflows/test-python.yml
+++ b/.github/workflows/test-python.yml
@@ -53,7 +53,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-20.04]
-        python-version: ["3.7", "3.11", "pypy-3.8"]
+        python-version: ["3.7", "3.11", "pypy-3.9"]
     name: CPython ${{ matrix.python-version }}-${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
@@ -137,7 +137,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python: ["3.7", "3.11"]
+        python: ["3.8", "3.11"]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
diff --git a/MANIFEST.in b/MANIFEST.in
index bca389a746..f9d0e6b2f3 100644
--- a/MANIFEST.in
+++ b/MANIFEST.in
@@ -8,6 +8,7 @@ exclude .git-blame-ignore-revs
 exclude .pre-commit-config.yaml
 exclude .readthedocs.yaml
 exclude CONTRIBUTING.md
+include sbom.json
 exclude RELEASE.md
 recursive-include doc *.rst
 recursive-include doc *.py
diff --git a/sbom.json b/sbom.json
new file mode 100644
index 0000000000..dedd65e8b5
--- /dev/null
+++ b/sbom.json
@@ -0,0 +1,10 @@
+{
+  "metadata": {
+    "timestamp": "2024-06-05T10:36:04.606968+00:00"
+  },
+  "serialNumber": "urn:uuid:a94f1412-ea1f-4821-b9f0-e14788b0776e",
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5"
+}