From 66bdbd7f6f6d1601fa090ffce0fa31467d964633 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 17:55:40 +0000
Subject: [PATCH] chore(deps): update dependency org.cyclonedx.bom to v3.4.0

---
 gradle/libs.versions.toml        |  2 +-
 gradle/verification-metadata.xml | 18 +++++++++++++++++-
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 7319566..b7c71c7 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -20,7 +20,7 @@ dokka = "2.2.0"
 publish = "0.37.0"
 release = "3.1.0"
 kover = "0.9.9"
-cyclonedx = "3.3.0"
+cyclonedx = "3.4.0"
 sonarqube = "7.3.1.8318"
 
 [libraries]
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 6e634d7..feb6534 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -125,7 +125,10 @@
          <trusted-key id="F296234986E39C622D32918BA6DCA467BAE34C82" group="io.github.nsk90"/>
          <trusted-key id="F3184BCD55F4D016E30D4C9BF42E87F9665015C9" group="org.jsoup" name="jsoup"/>
          <trusted-key id="F3D15B8FF9902805DE4BE6B18DC6F3D0ABDBD017" group="org.codehaus.plexus" name="plexus-sec-dispatcher"/>
-         <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F" group="commons-codec"/>
+         <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F">
+            <trusting group="commons-codec"/>
+            <trusting group="commons-io"/>
+         </trusted-key>
          <trusted-key id="FA7929F83AD44C4590F6CC6815C71C0A4E0B8EDD" group="net.java.dev.jna"/>
          <trusted-key id="FC411CD3CB7DCB0ABC9801058118B3BCDB1A5000" group="jakarta.xml.bind"/>
          <trusted-key id="FF6E2C001948C5F2F38B0CC385911F425EC61B51">
@@ -479,6 +482,14 @@
             <sha256 value="92c20482c05782eec05b9c0db1b2ed615160147e52c179c3e080538103e26239" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx" name="cyclonedx-gradle-plugin" version="3.4.0">
+         <artifact name="cyclonedx-gradle-plugin-3.4.0.jar">
+            <sha256 value="dd8a863f69d1e6ba40245d2374a3a4984f04702139e43eeb0c9f660d734b735f" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="cyclonedx-gradle-plugin-3.4.0.module">
+            <sha256 value="9453522f8e5c95e11cda2b81c0247f3fe034b02906cbd08137a4d043dae230cb" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.2.4">
          <artifact name="org.cyclonedx.bom.gradle.plugin-3.2.4.pom">
             <sha256 value="9a8e381d2369288b6c3198b3062e8099229abddafd0a49beb631fd999ea07b9a" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -489,6 +500,11 @@
             <sha256 value="f59df2c670269e7f5e3d9b2b539b9f435db5e88a2d545ab4811f2217d2cc5c68" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.4.0">
+         <artifact name="org.cyclonedx.bom.gradle.plugin-3.4.0.pom">
+            <sha256 value="69cc9bef594385e4547b97a66170dffd66455056ef0c8b1575d30fa4b343ea4f" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.eclipse.ee4j" name="project" version="1.0.5">
          <artifact name="project-1.0.5.pom">
             <sha256 value="916b4794d8d8220a59a3fdf6a64dbe794aeb23395e888b81ae36a9b5a2c591a6" origin="Generated by Gradle"/>