diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index d998f77..05d0893 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -20,7 +20,7 @@ dokka = "2.2.0"
 publish = "0.37.0"
 release = "3.1.0"
 kover = "0.9.9"
-cyclonedx = "3.4.0"
+cyclonedx = "3.4.1"
 sonarqube = "7.3.1.8318"
 
 [libraries]
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 0445559..cab81ff 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -128,7 +128,9 @@
          <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F">
             <trusting group="commons-codec"/>
             <trusting group="commons-io"/>
+            <trusting group="org.apache.commons" name="commons-parent"/>
          </trusted-key>
+         <trusted-key id="FA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A" group="org.apache"/>
          <trusted-key id="FA7929F83AD44C4590F6CC6815C71C0A4E0B8EDD" group="net.java.dev.jna"/>
          <trusted-key id="FC411CD3CB7DCB0ABC9801058118B3BCDB1A5000" group="jakarta.xml.bind"/>
          <trusted-key id="FF6E2C001948C5F2F38B0CC385911F425EC61B51">
@@ -495,6 +497,14 @@
             <sha256 value="9453522f8e5c95e11cda2b81c0247f3fe034b02906cbd08137a4d043dae230cb" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx" name="cyclonedx-gradle-plugin" version="3.4.1">
+         <artifact name="cyclonedx-gradle-plugin-3.4.1.jar">
+            <sha256 value="61666c361da1164737c7a2f3faad88ba879c5090c3b3bdd4cd878eda153bd1b2" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="cyclonedx-gradle-plugin-3.4.1.module">
+            <sha256 value="ae38ca3bdd9a222e847e7377f0f763762169a9cb5f311b494b2d76a8edd9c6ee" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.2.4">
          <artifact name="org.cyclonedx.bom.gradle.plugin-3.2.4.pom">
             <sha256 value="9a8e381d2369288b6c3198b3062e8099229abddafd0a49beb631fd999ea07b9a" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -510,6 +520,11 @@
             <sha256 value="69cc9bef594385e4547b97a66170dffd66455056ef0c8b1575d30fa4b343ea4f" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.cyclonedx.bom" name="org.cyclonedx.bom.gradle.plugin" version="3.4.1">
+         <artifact name="org.cyclonedx.bom.gradle.plugin-3.4.1.pom">
+            <sha256 value="0c2e911686234163d2702761c1043b430532c88d6275940165d9c1b36068994b" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.eclipse.ee4j" name="project" version="1.0.5">
          <artifact name="project-1.0.5.pom">
             <sha256 value="916b4794d8d8220a59a3fdf6a64dbe794aeb23395e888b81ae36a9b5a2c591a6" origin="Generated by Gradle"/>
@@ -696,6 +711,11 @@
             <pgp value="04543577D6A9CC626239C50C7ECBD740FF06AEB5"/>
          </artifact>
       </component>
+      <component group="org.mockito" name="mockito-bom" version="4.11.0">
+         <artifact name="mockito-bom-4.11.0.pom">
+            <pgp value="147B691A19097624902F4EA9689CBE64F4BC997F"/>
+         </artifact>
+      </component>
       <component group="org.ow2" name="ow2" version="1.5">
          <artifact name="ow2-1.5.pom">
             <sha256 value="0f8a1b116e760b8fe6389c51b84e4b07a70fc11082d4f936e453b583dd50b43b" origin="Generated by Gradle" reason="Artifact is not signed"/>