Update dependency cargo-cyclonedx to v0.5.4

[renovate]

This PR contains the following updates:

Package	Update	Change
cargo-cyclonedx	patch	0.5.3 -> 0.5.4

---

Release Notes

CycloneDX/cyclonedx-rust-cargo (cargo-cyclonedx)

v0.5.4: 0.5.4 - 2024-07-17

Compare Source

Release Notes

Fixed

• Fixed PURLs being percent-encoded incorrectly when using the purl crate v0.1.3 or later ([#​746])

Install cargo-cyclonedx 0.5.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CycloneDX/cyclonedx-rust-cargo/releases/download/cargo-cyclonedx-0.5.4/cargo-cyclonedx-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/CycloneDX/cyclonedx-rust-cargo/releases/download/cargo-cyclonedx-0.5.4/cargo-cyclonedx-installer.ps1 | iex"

Download cargo-cyclonedx 0.5.4

File	Platform	Checksum
cargo-cyclonedx-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-cyclonedx-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-cyclonedx-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-cyclonedx-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-cyclonedx-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo CycloneDX/cyclonedx-rust-cargo

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.