From 4f983feb836836cf99326cdf70a552c94036d153 Mon Sep 17 00:00:00 2001
From: Jens Papenhagen <jens.papenhagen@web.de>
Date: Thu, 22 Oct 2026 09:49:18 +0200
Subject: [PATCH] update deps

---
 build.gradle                             |  6 ++--
 gradle/verification-metadata.xml         | 37 ++++++++++++++++++++++++
 gradle/wrapper/gradle-wrapper.jar.sha256 |  2 +-
 gradle/wrapper/gradle-wrapper.properties |  2 +-
 4 files changed, 42 insertions(+), 5 deletions(-)

diff --git a/build.gradle b/build.gradle
index 57f7e0e4..e48a6aa0 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,11 +3,11 @@ plugins {
     id 'maven-publish'
     id 'signing'
     id 'jacoco'
-    id 'com.github.spotbugs' version '6.5.12'
+    id 'com.github.spotbugs' version '6.5.13'
     id 'pmd'
     id 'checkstyle'
     id 'org.owasp.dependencycheck' version '13.0.0'
-    id 'org.cyclonedx.bom' version '3.5.0'
+    id 'org.cyclonedx.bom' version '3.5.1'
     id 'info.solidsoft.pitest' version '1.19.0'
     id 'net.ltgt.errorprone' version '5.1.1'
 }
@@ -176,7 +176,7 @@ tasks.checkstyleTest {
 dependencies {
     implementation 'tools.jackson.core:jackson-databind:3.2.3'
     implementation 'tools.jackson.module:jackson-module-blackbird:3.2.3'
-    compileOnly 'com.github.spotbugs:spotbugs-annotations:4.10.4'
+    compileOnly 'com.github.spotbugs:spotbugs-annotations:4.10.5'
 
     // NullAway + Error Prone for compile-time null safety
     errorprone 'com.uber.nullaway:nullaway:0.14.2'
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 97513da2..584b910e 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -244,6 +244,11 @@
             <sha256 value="3c9febd66aa3f115b124bf935b5d38978a58e95368b3fa2d2861c7869fd66ab2" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.github.spotbugs" name="com.github.spotbugs.gradle.plugin" version="6.5.13">
+         <artifact name="com.github.spotbugs.gradle.plugin-6.5.13.pom">
+            <sha256 value="5385235c3a2d55c037d1ea1a9b64f34dd752d8abbea80cbbec21be45cca54bff" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.github.spotbugs" name="spotbugs" version="4.9.8">
          <artifact name="spotbugs-4.9.8.jar">
             <sha256 value="4469bc080afe7cd2290a20bf63e28392b80abcc7c7ace33c8f55da52a17c7ca5" origin="Generated by Gradle"/>
@@ -266,6 +271,17 @@
             <sha256 value="b832475e1a2f077938cbbf7b79450f1f11bdbaaee17acddd8a71278aee6abdcc" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.github.spotbugs" name="spotbugs-annotations" version="4.10.5">
+         <artifact name="spotbugs-annotations-4.10.5.jar">
+            <sha256 value="2f28af17ad61a7daad0f3df070198c4a5807d3ffd98a5408f670cd19fc2dce84" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="spotbugs-annotations-4.10.5.module">
+            <sha256 value="4fc0afc3801386f9db42ce68de3e5e545e0cb3904871c89d4e648ccb5b267ade" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="spotbugs-annotations-4.10.5.pom">
+            <sha256 value="6c33a7bdd1152db96d57b10659c29df5cb2ca32032698b7e58486783269973ef" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.github.spotbugs" name="spotbugs-annotations" version="4.9.8">
          <artifact name="spotbugs-annotations-4.9.8.jar">
             <sha256 value="6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c" origin="Generated by Gradle"/>
@@ -285,6 +301,14 @@
             <sha256 value="5607bbf4749438573e64ed707054c5d3db2eb9d43fd2341846db888c8bf34a89" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.github.spotbugs.snom" name="spotbugs-gradle-plugin" version="6.5.13">
+         <artifact name="spotbugs-gradle-plugin-6.5.13.jar">
+            <sha256 value="80c39fb8108bc4717d744b1a1f08f1eb60a808765b9f54b88498518704e8f92b" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="spotbugs-gradle-plugin-6.5.13.module">
+            <sha256 value="7313a7cfc9a96190245c861e38389c959d18c823d623ea2e9b68717941d10f74" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.github.spullara.mustache.java" name="compiler" version="0.9.6">
          <artifact name="compiler-0.9.6.jar">
             <sha256 value="c4d697fd3619cb616cc5e22e9530c8a4fd4a8e9a76953c0655ee627cb2d22318" origin="Generated by Gradle"/>
@@ -2025,11 +2049,24 @@
             <sha256 value="6a1c3789d516492d9ef460a9465d3d3501deef0dc3f46bcf3f0c1c03ea94cb51" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx" name="cyclonedx-gradle-plugin" version="3.5.1">
+         <artifact name="cyclonedx-gradle-plugin-3.5.1.jar">
+            <sha256 value="c03e9c88be094d899072e5f9c5ae3f7ad8fb058a3c77eb695ff2509e6f49d623" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="cyclonedx-gradle-plugin-3.5.1.module">
+            <sha256 value="7c958f7da3ec7a2401458ff50206e3c18846a938bbfa71046ec726d61c5b9f22" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.5.0">
          <artifact name="org.cyclonedx.bom.gradle.plugin-3.5.0.pom">
             <sha256 value="71e02a5843c00c0b14065aece1f2a5583dc07a833bb7d02188c2513271b738a7" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.5.1">
+         <artifact name="org.cyclonedx.bom.gradle.plugin-3.5.1.pom">
+            <sha256 value="eb4e43932992b58307925ca2433503b734e8c498a98f699c6ac51782f21a2935" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.dom4j" name="dom4j" version="2.2.0">
          <artifact name="dom4j-2.2.0.jar">
             <sha256 value="3fae79e081096e1410645eb3557c63b79ca266d510ab479889511109becd1690" origin="Generated by Gradle"/>
diff --git a/gradle/wrapper/gradle-wrapper.jar.sha256 b/gradle/wrapper/gradle-wrapper.jar.sha256
index 66b2f5d4..7b7b0678 100644
--- a/gradle/wrapper/gradle-wrapper.jar.sha256
+++ b/gradle/wrapper/gradle-wrapper.jar.sha256
@@ -1 +1 @@
-7a9ce74cff467ca1bf60a4fcd9f05185acceda4d0f382434d393e17864262c5d
+238e777fcddd7e34f9708186085def2abd6e08e658505b38718d79d74c21abd5
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 9b7cb4af..2e7bb9fd 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.0-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.1-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500