From 09006a5179cd448db01eab94cfeed8164b447213 Mon Sep 17 00:00:00 2001
From: "Piotr P. Karwasz" <pkarwasz-github@apache.org>
Date: Mon, 4 Aug 2025 13:49:27 +0200
Subject: [PATCH] fix: Ensure unique serial number for VEX file

This update corrects the serial number in the VEX file, which was mistakenly copied from apache/commons-bcel#446. With this fix, all published VEX files will now have unique serial numbers, preventing potential conflicts or duplication.
---
 src/conf/security/VEX.cyclonedx.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/conf/security/VEX.cyclonedx.xml b/src/conf/security/VEX.cyclonedx.xml
index 7ef177f808..9c0875aa99 100644
--- a/src/conf/security/VEX.cyclonedx.xml
+++ b/src/conf/security/VEX.cyclonedx.xml
@@ -23,11 +23,11 @@
 <bom xmlns="http://cyclonedx.org/schema/bom/1.6"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://cyclonedx.org/schema/bom/1.6 https://cyclonedx.org/schema/bom-1.6.xsd"
-     serialNumber="urn:uuid:f70dec29-fc7d-41f2-8c60-97e9075e0e73"
-     version="1">
+     serialNumber="urn:uuid:9d64577b-0376-4ee7-b154-5ec26a1803f4"
+     version="2">
 
   <metadata>
-    <timestamp>2025-07-29T12:26:42Z</timestamp>
+    <timestamp>2025-08-04T11:45:36Z</timestamp>
     <component type="library" bom-ref="main_component">
       <group>org.apache.commons</group>
       <name>commons-text</name>