From 35d2a16af7a8ca2fdb765020b9b9482fafbd1da6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 05:33:04 +0000
Subject: [PATCH] fix(deps): update dependency
 com.github.spotbugs.snom:spotbugs-gradle-plugin to v6.5.9

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 build.gradle                     |  2 +-
 gradle/verification-metadata.xml | 17 +++++++++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index ec1758ec10..9dc226b47a 100644
--- a/build.gradle
+++ b/build.gradle
@@ -25,7 +25,7 @@ buildscript {
         classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:${kotlinVersion}"
         classpath "org.jetbrains.kotlin:kotlin-serialization:${kotlinVersion}"
         classpath "com.android.legacy-kapt:com.android.legacy-kapt.gradle.plugin:9.2.1"
-        classpath 'com.github.spotbugs.snom:spotbugs-gradle-plugin:6.5.5'
+        classpath 'com.github.spotbugs.snom:spotbugs-gradle-plugin:6.5.9'
         classpath "io.gitlab.arturbosch.detekt:detekt-gradle-plugin:1.23.8"
         classpath "org.jlleitschuh.gradle:ktlint-gradle:14.2.0"
         // NOTE: Do not place your application dependencies here; they belong
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 39ab26e5c2..8654fb8ddd 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -15,6 +15,9 @@
          <trust file=".*-sources[.]jar" regex="true" reason="Android Studio downloads source jars but doesn't add checksums - fixes building in AS"/>
          <trust file="gradle-9.4.1-src.zip" regex="true" reason="Android Studio downloads gradle source zip but doesn't add checksums - fixes building in AS"/>
       </trusted-artifacts>
+      <ignored-keys>
+         <ignored-key id="80EF47E549604C05" reason="Key couldn't be downloaded from any key server"/>
+      </ignored-keys>
       <trusted-keys>
          <trusted-key id="02A36B6DB7056EB5E6FFEF893DA731F041734930" group="org.parceler"/>
          <trusted-key id="03C123038C20AAE9E286C857479D601F3A7B5C1A" group="com.github.ajalt.clikt"/>
@@ -464,6 +467,7 @@
          </trusted-key>
          <trusted-key id="F3184BCD55F4D016E30D4C9BF42E87F9665015C9" group="org.jsoup" name="jsoup" version="1.12.2"/>
          <trusted-key id="F3BD845679DD6A30F3F50F91597852B0B140F0BC" group="com.caverock" name="androidsvg-aar" version="1.4"/>
+         <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F" group="^org[.]apache($|([.].*))" regex="true"/>
          <trusted-key id="FA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A" group="org.apache" name="apache"/>
          <trusted-key id="FA7929F83AD44C4590F6CC6815C71C0A4E0B8EDD" group="net.java.dev.jna"/>
          <trusted-key id="FAABC3738B1F58DA2D776FA2EB380DC13C39F675" group="com.intellij" name="annotations" version="12.0"/>
@@ -24134,11 +24138,24 @@
             <sha256 value="3c507f5b485842374cefa5148b46f99850f692900e16adc22fa04e75340c6dff" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="jaxen" name="jaxen" version="2.0.6">
+         <artifact name="jaxen-2.0.6.jar">
+            <sha256 value="3e2a755b283fd492fa4be204294c7abb7cd63ac94fb366baab9c7bb9afb00b6d" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="jaxen-2.0.6.pom">
+            <sha256 value="154da1400c3a405860ec3ae58e974c700033a646287c0bb6aa55c763871eb503" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="jaxen" name="jaxen-parent" version="2.0.0">
          <artifact name="jaxen-parent-2.0.0.pom">
             <sha256 value="263387fed91cc35813bffcd51efc60d5122d2043124ff49f94e35118169857e2" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="jaxen" name="jaxen-parent" version="2.0.6">
+         <artifact name="jaxen-parent-2.0.6.pom">
+            <sha256 value="21b45b6bdc6e8fc4c27f938ac111b1e86322c5627b79bb3e381f8ce72e64fe16" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="joda-time" name="joda-time" version="2.13.1">
          <artifact name="joda-time-2.13.1.jar">
             <sha256 value="a9be47b46390f7a6dabacc7c055b4feb6fb8f2225477a7270a8233b296e26677" origin="Generated by Gradle"/>