chore(deps): update dependency org.cyclonedx.bom:org.cyclonedx.bom.gradle.plugin to v3.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.cyclonedx.bom:org.cyclonedx.bom.gradle.plugin	3.2.4 → 3.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Vulnerability summary (fs) — latest: run #1726

Critical	High	Medium	Low	Unknown
0	1	6	1	0

Change since last run: no change
Risk≥40: 1 (=)

Grype (risk-based)

⚠️ 1 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
1	1	6	1	0	0

Top by risk

Vulnerability	Package	Sev	Risk	EPSS	KEV
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	68.7	0.73
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.2	0.02
GHSA-j288-q9x7-2f5v	commons-lang3 3.4	Medium	1.2	0.02
GHSA-j288-q9x7-2f5v	commons-lang3 3.8.1	Medium	1.2	0.02
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
GHSA-pvp8-3xj6-8c6x	commons-configuration 1.6	Low	0.5	0.02
GHSA-8wh2-6qhj-h7j9	snappy 0.3	Medium	0.3	0.00
GHSA-r7wm-3cxj-wff9	jackson-core 3.1.2	High	0.0	-
GHSA-xx22-p4ch-683r	lz4-java 1.10.2	Medium	0.0	-

Links: workflow run · HTML report · SBOM · Grype report

Previous runs (1)

run #1681 · 2026-07-15T16:49:59.411Z

Critical	High	Medium	Low	Unknown
0	0	5	1	0

Risk≥40: 1