SERVER-106764 Upgrade SafeInt to 3.0.28a (#41536)

GitOrigin-RevId: 841dde43cde78bfff34efd7dc8e36d59cc092f49

sbom.json

@@ -540,11 +540,11 @@
     },
     {
       "type": "library",
-      "bom-ref": "pkg:github/dcleblanc/safeint@3.0.26",
+      "bom-ref": "pkg:github/dcleblanc/safeint@3.0.28a",
       "author": "David LeBlanc",
       "group": "dcleblanc",
       "name": "SafeInt",
-      "version": "3.0.26",
+      "version": "3.0.28a",
       "description": "SafeInt is a class library for C++ that manages integer overflows.",
       "licenses": [
         {
@@ -554,7 +554,7 @@
         }
       ],
       "copyright": "Copyright David LeBlanc - dcl@dleblanc.net",
-      "purl": "pkg:github/dcleblanc/safeint@3.0.26",
+      "purl": "pkg:github/dcleblanc/safeint@3.0.28a",
       "properties": [
         {
           "name": "internal:team_responsible",
@@ -570,7 +570,7 @@
         },
         {
           "name": "import_script_path",
-          "value": "src/third_party/scripts/safeint_get_sources.sh"
+          "value": "src/third_party/SafeInt/scripts/import.sh"
         }
       ],
       "evidence": {

src/third_party/SafeInt/scripts/import.sh

@@ -5,11 +5,15 @@ set -o errexit
 # This script downloads and imports SafeInt.
 
 SAFEINT_GIT_URL="https://raw.githubusercontent.com/mongodb-forks/SafeInt"
-VERSION=3.0.26
+# VERSION isn't used to get the SafeInt header here, but marks the release
+# version that the file was retrieved from, and silences the sbom_linter.py which
+# expects a VERSION.
+VERSION="3.0.28a"
+REVISION="3.0.28a-mongo"
 SAFEINT_GIT_DIR="$(git rev-parse --show-toplevel)/src/third_party/SafeInt"
 
 mkdir -p "${SAFEINT_GIT_DIR}"
 
-wget "${SAFEINT_GIT_URL}/${VERSION}/SafeInt.hpp" \
+wget "${SAFEINT_GIT_URL}/${REVISION}/SafeInt.hpp" \
     -O "${SAFEINT_GIT_DIR}/SafeInt.hpp"