From 07d27f69bb49d099eb424224d2bddb624217b6dd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 19:40:43 +0000
Subject: [PATCH] ci(deps): bump @cyclonedx/cdxgen

Bumps the node-workflow-tools group in /.github/tools with 1 update: [@cyclonedx/cdxgen](https://github.com/cdxgen/cdxgen).


Updates `@cyclonedx/cdxgen` from 12.2.1 to 12.3.3
- [Release notes](https://github.com/cdxgen/cdxgen/releases)
- [Commits](https://github.com/cdxgen/cdxgen/compare/v12.2.1...v12.3.3)

---
updated-dependencies:
- dependency-name: "@cyclonedx/cdxgen"
  dependency-version: 12.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-workflow-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/tools/package-lock.json | 29 ++++++++++++++++-------------
 .github/tools/package.json      |  2 +-
 2 files changed, 17 insertions(+), 14 deletions(-)

diff --git a/.github/tools/package-lock.json b/.github/tools/package-lock.json
index 5778d13..6452923 100644
--- a/.github/tools/package-lock.json
+++ b/.github/tools/package-lock.json
@@ -6,7 +6,7 @@
     "": {
       "name": "github-workflow-tools",
       "dependencies": {
-        "@cyclonedx/cdxgen": "12.2.1"
+        "@cyclonedx/cdxgen": "12.3.3"
       }
     },
     "node_modules/@appthreat/atom": {
@@ -395,9 +395,9 @@
       ]
     },
     "node_modules/@cyclonedx/cdxgen": {
-      "version": "12.2.1",
-      "resolved": "https://registry.npmjs.org/@cyclonedx/cdxgen/-/cdxgen-12.2.1.tgz",
-      "integrity": "sha512-Omk8tVH29a4S50yDyX45IjmbvwkNk57CezIQi00+vUobNB8A1KWlHoAGKsvDGKW/3lofBBBcuCB7GXvL1zPT3A==",
+      "version": "12.3.3",
+      "resolved": "https://registry.npmjs.org/@cyclonedx/cdxgen/-/cdxgen-12.3.3.tgz",
+      "integrity": "sha512-CE+fW6npO9PkiRIiegSgj5N/bHkvJXOalZoF5jtS89YZ9Xzbwk55j+lKZGCyDrfA6kkrX7UEW77LfYs7eB4ZNw==",
       "license": "Apache-2.0",
       "dependencies": {
         "@babel/parser": "7.29.2",
@@ -408,7 +408,7 @@
         "@npmcli/map-workspaces": "5.0.3",
         "@npmcli/name-from-folder": "4.0.0",
         "@npmcli/package-json": "7.0.5",
-        "ajv": "8.18.0",
+        "ajv": "8.20.0",
         "ajv-formats": "3.0.1",
         "bin-links": "6.0.0",
         "cheerio": "1.2.0",
@@ -430,7 +430,7 @@
         "ssri": "13.0.1",
         "tar": "7.5.13",
         "treeverse": "3.0.0",
-        "uuid": "13.0.0",
+        "uuid": "14.0.0",
         "walk-up-path": "4.0.0",
         "xml-js": "1.6.11",
         "yaml": "2.8.3",
@@ -439,6 +439,8 @@
       },
       "bin": {
         "cbom": "bin/cdxgen.js",
+        "cdx-audit": "bin/audit.js",
+        "cdx-convert": "bin/convert.js",
         "cdx-sign": "bin/sign.js",
         "cdx-validate": "bin/validate.js",
         "cdx-verify": "bin/verify.js",
@@ -447,7 +449,8 @@
         "cdxi": "bin/repl.js",
         "evinse": "bin/evinse.js",
         "obom": "bin/cdxgen.js",
-        "saasbom": "bin/cdxgen.js"
+        "saasbom": "bin/cdxgen.js",
+        "spdxgen": "bin/cdxgen.js"
       },
       "engines": {
         "node": "^20 || ^22 || ^24 || ^25",
@@ -687,9 +690,9 @@
       "license": "MIT"
     },
     "node_modules/ajv": {
-      "version": "8.18.0",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz",
-      "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
       "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
@@ -2749,9 +2752,9 @@
       }
     },
     "node_modules/uuid": {
-      "version": "13.0.0",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.0.tgz",
-      "integrity": "sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==",
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-14.0.0.tgz",
+      "integrity": "sha512-Qo+uWgilfSmAhXCMav1uYFynlQO7fMFiMVZsQqZRMIXp0O7rR7qjkj+cPvBHLgBqi960QCoo/PH2/6ZtVqKvrg==",
       "funding": [
         "https://github.com/sponsors/broofa",
         "https://github.com/sponsors/ctavan"
diff --git a/.github/tools/package.json b/.github/tools/package.json
index 1e2e7f2..5ff1eb3 100644
--- a/.github/tools/package.json
+++ b/.github/tools/package.json
@@ -2,6 +2,6 @@
   "name": "github-workflow-tools",
   "private": true,
   "dependencies": {
-    "@cyclonedx/cdxgen": "12.2.1"
+    "@cyclonedx/cdxgen": "12.3.3"
   }
 }