From 6c49945abdd403ddc988f1165414f019fb0311f3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Oct 2026 18:16:43 +0000
Subject: [PATCH] chore(deps): update dependency org.cyclonedx.bom to v3.5.1

---
 gradle/libs.versions.toml        |  2 +-
 gradle/verification-metadata.xml | 54 ++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+), 1 deletion(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 5b76c898..d3aefacc 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -22,7 +22,7 @@ dokka = "2.2.0"
 publish = "0.37.0"
 release = "3.2.0"
 kover = "0.9.11"
-cyclonedx = "3.4.1"
+cyclonedx = "3.5.1"
 sonarqube = "7.5.0.8588"
 
 [libraries]
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 94ab8431..3281bcf5 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -449,6 +449,7 @@
       <component group="org.apache" name="apache" version="21">
          <artifact name="apache-21.pom">
             <pgp value="FA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A"/>
+            <sha256 value="af10c108da014f17cafac7b52b2b4b5a3a1c18265fa2af97a325d9143537b380" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="org.apache" name="apache" version="33">
@@ -491,11 +492,26 @@
             <sha256 value="b042b41f2391edb00d35f7f4e509aed2123648c1d246ce58d0f7b905c9fe1f73" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.httpcomponents" name="httpcomponents-core" version="4.4.16">
+         <artifact name="httpcomponents-core-4.4.16.pom">
+            <sha256 value="f2d75a2c2d423ad18539bf21656d56f88a4091944a662fcaf159d5ae283db7f7" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.httpcomponents" name="httpcomponents-parent" version="10">
          <artifact name="httpcomponents-parent-10.pom">
             <sha256 value="caaf967d94afb21753f36082c6086206bd1f48825ff596932cceba72b65d39fa" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.httpcomponents" name="httpcomponents-parent" version="11">
+         <artifact name="httpcomponents-parent-11.pom">
+            <sha256 value="a901f87b115c55070c7ee43efff63e20e7b02d30af2443ae292bf1f4e532d3aa" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.httpcomponents" name="httpcore" version="4.4.16">
+         <artifact name="httpcore-4.4.16.pom">
+            <sha256 value="3cbad849b35dacfe6cec31adada2c623c026c3261141b0d26eec7e399c6cd7fa" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.bouncycastle" name="bcprov-jdk18on" version="1.84">
          <artifact name="bcprov-jdk18on-1.84.pom">
             <sha256 value="ce7abb4a91ba5d2a73fdf17a3df4762e3605a0392cc7983ef2f1ae16cd384cc3" origin="Generated by Gradle"/>
@@ -558,6 +574,14 @@
             <sha256 value="ae38ca3bdd9a222e847e7377f0f763762169a9cb5f311b494b2d76a8edd9c6ee" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx" name="cyclonedx-gradle-plugin" version="3.5.1">
+         <artifact name="cyclonedx-gradle-plugin-3.5.1.jar">
+            <sha256 value="c03e9c88be094d899072e5f9c5ae3f7ad8fb058a3c77eb695ff2509e6f49d623" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="cyclonedx-gradle-plugin-3.5.1.module">
+            <sha256 value="7c958f7da3ec7a2401458ff50206e3c18846a938bbfa71046ec726d61c5b9f22" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.2.4">
          <artifact name="org.cyclonedx.bom.gradle.plugin-3.2.4.pom">
             <sha256 value="9a8e381d2369288b6c3198b3062e8099229abddafd0a49beb631fd999ea07b9a" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -578,11 +602,21 @@
             <sha256 value="0c2e911686234163d2702761c1043b430532c88d6275940165d9c1b36068994b" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.5.1">
+         <artifact name="org.cyclonedx.bom.gradle.plugin-3.5.1.pom">
+            <sha256 value="eb4e43932992b58307925ca2433503b734e8c498a98f699c6ac51782f21a2935" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.eclipse.ee4j" name="project" version="1.0.5">
          <artifact name="project-1.0.5.pom">
             <sha256 value="916b4794d8d8220a59a3fdf6a64dbe794aeb23395e888b81ae36a9b5a2c591a6" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.eclipse.jetty" name="jetty-bom" version="12.1.13">
+         <artifact name="jetty-bom-12.1.13.pom">
+            <pgp value="716EE302674CDBB2E660E1B44DB5EA09F2E3C800"/>
+         </artifact>
+      </component>
       <component group="org.eclipse.jgit" name="org.eclipse.jgit" version="7.6.0.202603022253-r">
          <artifact name="org.eclipse.jgit-7.6.0.202603022253-r.jar">
             <pgp value="7C669810892CBD3148FA92995B05CCDE140C2876"/>
@@ -774,6 +808,11 @@
             <sha256 value="d7a08a99b2502f0bb68cd4e1f984f0bf69324aaa208bd0f73366c03fc3548a42" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.junit" name="junit-bom" version="5.14.3">
+         <artifact name="junit-bom-5.14.3.pom">
+            <sha256 value="08a02856e487c9357f9b29e38745f8ae805848111e72d15aad0352338f1632e1" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.jvnet.staxex" name="stax-ex" version="1.8.1">
          <artifact name="stax-ex-1.8.1.jar">
             <pgp value="04543577D6A9CC626239C50C7ECBD740FF06AEB5"/>
@@ -801,16 +840,31 @@
             <sha256 value="6c2c7f2c02774cc2b7b619fbd2df7873cdad29718926e44754b87f70d1eb43cb" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.slf4j" name="slf4j-api" version="2.0.19">
+         <artifact name="slf4j-api-2.0.19.pom">
+            <sha256 value="b04a4843eaa29966807cc9508a9f2513fa563d0d0794cb0edd6a8d2c8f4620d0" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.slf4j" name="slf4j-bom" version="2.0.18">
          <artifact name="slf4j-bom-2.0.18.pom">
             <sha256 value="9219aab601575126c4e66e1331eb2b0c6c17a330ac4d5a07e3cd11d580a0c12d" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.slf4j" name="slf4j-bom" version="2.0.19">
+         <artifact name="slf4j-bom-2.0.19.pom">
+            <sha256 value="e14a9ab180f60247f347de369b7a44ccd591d0c47f4d96bc644056c4f83b51a0" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.slf4j" name="slf4j-parent" version="2.0.18">
          <artifact name="slf4j-parent-2.0.18.pom">
             <sha256 value="0b3896bedad2c9ed9697edcbea1da0c54cd238a723583a81358a83bfb782e9fa" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.slf4j" name="slf4j-parent" version="2.0.19">
+         <artifact name="slf4j-parent-2.0.19.pom">
+            <sha256 value="452831ef96fbebe64d855dd5c98ec6086d7478a9e568422c8343c6da00b2750d" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.sonarqube" name="org.sonarqube.gradle.plugin" version="7.3.0.8198">
          <artifact name="org.sonarqube.gradle.plugin-7.3.0.8198.pom">
             <sha256 value="268f335d7106a3c055b83df8d952f7659e098ae3b8ace66c33ea8383997fe5f5" origin="Generated by Gradle" reason="Artifact is not signed"/>