From 3d1a04ae71b62e9499d467886014a2a57840788e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Jun 2026 21:02:40 +0000
Subject: [PATCH] Bump @cyclonedx/cyclonedx-npm from 4.2.1 to 5.0.0 in /app

Bumps [@cyclonedx/cyclonedx-npm](https://github.com/CycloneDX/cyclonedx-node-npm) from 4.2.1 to 5.0.0.
- [Release notes](https://github.com/CycloneDX/cyclonedx-node-npm/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/HISTORY.md)
- [Commits](https://github.com/CycloneDX/cyclonedx-node-npm/compare/v4.2.1...v5.0.0)

---
updated-dependencies:
- dependency-name: "@cyclonedx/cyclonedx-npm"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 app/package-lock.json | 15 +++++++--------
 app/package.json      |  2 +-
 2 files changed, 8 insertions(+), 9 deletions(-)

diff --git a/app/package-lock.json b/app/package-lock.json
index b0195dc0b..f8486de37 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -30,7 +30,7 @@
         "pouchdb-browser": "^8.0.1"
       },
       "devDependencies": {
-        "@cyclonedx/cyclonedx-npm": "^4.2.1",
+        "@cyclonedx/cyclonedx-npm": "^5.0.0",
         "@parcel/plugin": "^2.16.4",
         "@parcel/reporter-cli": "^2.16.4",
         "@parcel/transformer-less": "^2.16.4",
@@ -101,9 +101,9 @@
       }
     },
     "node_modules/@cyclonedx/cyclonedx-npm": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-4.2.1.tgz",
-      "integrity": "sha512-SOA/96sf0wsgUYCRtFkLFm6WoFhG+q1BxdC84hPSn9J3xWlH1e7OnTPJT+WNUzTqzX1nSm5JhjRX4krozu2X+g==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-5.0.0.tgz",
+      "integrity": "sha512-pEz/pqYJHQ0ZvY5xFJa+GQ5AjNL7JOEJCXCHymvKo2N1VnzKE1ROpkumduJt8a0DukQjQfBGRXouGQ9xqJtJaQ==",
       "dev": true,
       "funding": [
         {
@@ -111,7 +111,6 @@
           "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
         }
       ],
-      "license": "Apache-2.0",
       "dependencies": {
         "@cyclonedx/cyclonedx-library": "^10.0.0",
         "commander": "^14.0.0",
@@ -7513,9 +7512,9 @@
       "requires": {}
     },
     "@cyclonedx/cyclonedx-npm": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-4.2.1.tgz",
-      "integrity": "sha512-SOA/96sf0wsgUYCRtFkLFm6WoFhG+q1BxdC84hPSn9J3xWlH1e7OnTPJT+WNUzTqzX1nSm5JhjRX4krozu2X+g==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-5.0.0.tgz",
+      "integrity": "sha512-pEz/pqYJHQ0ZvY5xFJa+GQ5AjNL7JOEJCXCHymvKo2N1VnzKE1ROpkumduJt8a0DukQjQfBGRXouGQ9xqJtJaQ==",
       "dev": true,
       "requires": {
         "@cyclonedx/cyclonedx-library": "^10.0.0",
diff --git a/app/package.json b/app/package.json
index c65df5c2d..bce635b75 100644
--- a/app/package.json
+++ b/app/package.json
@@ -21,7 +21,7 @@
     "sbom": "cyclonedx-npm --output-format JSON --output-file target/npm-bom.cdx.json --omit dev"
   },
   "devDependencies": {
-    "@cyclonedx/cyclonedx-npm": "^4.2.1",
+    "@cyclonedx/cyclonedx-npm": "^5.0.0",
     "@parcel/plugin": "^2.16.4",
     "@parcel/reporter-cli": "^2.16.4",
     "@parcel/transformer-less": "^2.16.4",