Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.0 to 2.9.0

[dependabot[bot]]

Bumps org.cyclonedx:cyclonedx-maven-plugin from 2.8.0 to 2.9.0.

Release notes

Sourced from org.cyclonedx:cyclonedx-maven-plugin's releases.

2.9.0

:tada: Major features and improvements

• Support 1.6 spec (#556) @​thesurlydev

🔧 Build

• run mvn verify in CI instead of package (#560) @​hboutemy
• Avoid resources filtering warning (#543) @​Bananeweizen
• fix site issues created by upgrades #553 and #552 (#559) @​hboutemy
• Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0 (#553) @​dependabot
• Bump actions/checkout from 4.1.7 to 4.2.0 (#555) @​dependabot
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.1 (#558) @​dependabot

2.8.2

🐛 Bug Fixes

• display configured classifier from #506 (#550) @​hboutemy

📦 Dependency updates

• Bump plugin-tools.version from 3.13.1 to 3.15.0 (#551) @​dependabot
• Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.6.1 to 3.7.0 (#552) @​dependabot
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 (#546) @​dependabot
• Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 (#537) @​dependabot

2.8.1

🚀 New features and improvements

• replace CDX 1.5 deprecated tool (#517) @​hboutemy
• make classifier used to attach the sbom configurable (#506) @​hboutemy

📦 Dependency updates

• upgrade cyclonedx-maven-plugin from 2.7.9 to 2.8.0 (#536) @​hboutemy
• Bump net.javacrumbs.json-unit:json-unit-assertj from 2.38.0 to 2.40.1 (#532) @​dependabot
• Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.1 (#535) @​dependabot
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.7.0 to 3.8.0 (#533) @​dependabot
• Bump org.junit:junit-bom from 5.10.2 to 5.10.3 (#527) @​dependabot
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.1 to 3.4.2 (#528) @​dependabot
• Bump plugin-tools.version from 3.13.0 to 3.13.1 (#519) @​dependabot
• Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.5.0 to 3.6.1 (#525) @​dependabot
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0 (#511) @​dependabot
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.6.1 to 3.7.0 (#512) @​dependabot
• Bump actions/checkout from 4.1.6 to 4.1.7 (#515) @​dependabot
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 (#509) @​dependabot
• Bump org.apache.maven.shared:maven-dependency-tree from 3.2.1 to 3.3.0 (#508) @​dependabot

... (truncated)

Commits

• 4a217a9 [maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.0
• 2ffab8d run mvn verify in CI instead of package
• 072dcd7 Avoid resources filtering warning
• be23759 fix site issues created by upgrades #553 and #552
• 999d5fb Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0
• 69d3cfd Bump actions/checkout from 4.1.7 to 4.2.0
• 73a108d Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.8.0 to 3.10.1
• a86023a Merge pull request #556 from thesurlydev/support-1.6-spec
• 567818d Add support for 1.6 specification
• dce6ee2 [maven-release-plugin] prepare for next development iteration
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)