Running nixpkgs-update (https://nix-community.org/update-bot/) with UPDATE_INFO: dependency-track 4.14.5 -> 5.2.0 https://github.com/DependencyTrack/dependency-track/releases
attrpath: dependency-track
Checking auto update branch...
[version] 
[version] generic version rewriter does not support multiple hashes
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] skipping because derivation has updateScript
[updateScript] 
[updateScript] Success
[updateScript] this derivation will be built:
  /nix/store/29wycq5dgy3cqpazrgys1sjxa60jcn4z-packages.json.drv
building '/nix/store/29wycq5dgy3cqpazrgys1sjxa60jcn4z-packages.json.drv'...
structuredAttrs is enabled

Going to be running update for following packages:
 - dependency-track-4.14.5

Press Enter key to continue...
Running update for:
Enqueuing group of 1 packages
 - dependency-track-4.14.5: UPDATING ...
 - dependency-track-4.14.5: DONE.

Packages updated!

Diff after rewrites:
diff --git a/pkgs/by-name/de/dependency-track/package.nix b/pkgs/by-name/de/dependency-track/package.nix
index fabd175c3b69..8f875dd05143 100644
--- a/pkgs/by-name/de/dependency-track/package.nix
+++ b/pkgs/by-name/de/dependency-track/package.nix
@@ -12,7 +12,7 @@
   nixosTests,
 }:
 let
-  version = "4.14.5";
+  version = "5.2.0";
 
   frontend = buildNpmPackage {
     pname = "dependency-track-frontend";
@@ -22,7 +22,7 @@ let
       owner = "DependencyTrack";
       repo = "frontend";
       tag = version;
-      hash = "sha256-lvuupRL2MfYSEijZPirigE6RmlOmFGNFny1AbIPCfAg=";
+      hash = "sha256-QB5I/kyKUT3MWEO9To7QkVhBiWLtWh9cbSaZB06m6YI=";
     };
 
     installPhase = ''
@@ -30,7 +30,7 @@ let
       cp -R ./dist $out/
     '';
 
-    npmDepsHash = "sha256-awQQ0Q4vLXc8SHUNJ+vb9YPxtvfcA/qGYY5+KIn5mFw=";
+    npmDepsHash = "sha256-qA23Lcg+5bbXOru7mjh4OmS/wHcc9bWktX4qvcgQ7dI=";
     forceGitDeps = true;
     makeCacheWritable = true;
 
@@ -47,7 +47,7 @@ maven.buildMavenPackage rec {
     owner = "DependencyTrack";
     repo = "dependency-track";
     tag = version;
-    hash = "sha256-1Ri1iEu6CSMFHFeZ7SNVtGWQk+bl6R40zTtTRGdR3jo=";
+    hash = "sha256-3l9nZfcQNkNeiuQRkvzlpCLw0xwrz/7ByQFvIMTdPbo=";
   };
 
   postPatch = ''
@@ -80,7 +80,7 @@ maven.buildMavenPackage rec {
   '';
 
   mvnJdk = jre_headless;
-  mvnHash = "sha256-hCiDcmZENAiaZ3cao9bzXsJk2U8TmVYlHeIgNutFUGM=";
+  mvnHash = "sha256-uGLULoF4bQi6GWsRzc33kRkYNSwKXLfcZR+1q3uuEzE=";
   manualMvnArtifacts = [
     "com.coderplus.maven.plugins:copy-rename-maven-plugin:1.0.1"
     # added to saticfy protobuf compiler plugin dependency resolving

No auto update branch exists
Received ExitFailure 1 when running
Raw command: nix-build --option sandbox true --arg config "{ allowUnfree = true; allowAliases = false; }" --arg overlays "[ ]" -A dependency-track
nix build failed.
[INFO] Vulnerability Analysis :: Parent ................... SKIPPED
[INFO] Vulnerability Analysis :: API ...................... SKIPPED
[INFO] Vulnerability Analysis :: Analyzer :: Checkmarx .... SKIPPED
[INFO] Vulnerability Analysis :: Analyzer :: Internal ..... SKIPPED
[INFO] Vulnerability Analysis :: Analyzer :: OSS Index .... SKIPPED
[INFO] Vulnerability Analysis :: Analyzer :: Snyk ......... SKIPPED
[INFO] Vulnerability Analysis :: Analyzer :: Trivy ........ SKIPPED
[INFO] Vulnerability Analysis :: Analyzer :: VulnDB ....... SKIPPED
[INFO] Vulnerability Data Source :: Parent ................ SKIPPED
[INFO] Vulnerability Data Source :: API ................... SKIPPED
[INFO] Vulnerability Data Source :: GitHub ................ SKIPPED
[INFO] Vulnerability Data Source :: JVN ................... SKIPPED
[INFO] Vulnerability Data Source :: NVD ................... SKIPPED
[INFO] Vulnerability Data Source :: OSV ................... SKIPPED
[INFO] API Server ......................................... SKIPPED
[INFO] End-to-End Tests ................................... SKIPPED
[INFO] Coverage Report .................................... SKIPPED
[INFO] ------------------------------------------------------------------------
[ERROR] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  0.697 s (Wall Clock)
[INFO] Finished at: 2026-10-24T08:12:42Z
[INFO] ------------------------------------------------------------------------
[ERROR] No plugin found for prefix 'cyclonedx' in the current project and in the plugin groups [com.diffplug.spotless, org.jacoco, org.datanucleus, org.jsonschema2pojo, org.openapitools, io.github.ascopes, org.apache.maven.plugins, org.codehaus.mojo] available from the repositories [local (/build/source/.m2), central (https://repo.maven.apache.org/maven2)] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/NoPluginFoundForPrefixException