gh-112844: Add SBOM for external dependencies (#115789)

3 files changed