CycloneDX/cyclonedx-gradle-plugin cyclonedx-gradle-plugin-3.3.0

3.3.0

on GitHub

Bug Fixes

• This version changes how the plugin tasks being registered. Instead of registering them in afterEvaluate now it is done lazily using addAllLater. This should solve issues including #821 and make the plugin more robust. If some SBOMs are not generated, the plugin will fail loudly on that. Done by @sergej-koscejev in #853

What's Changed

• build(deps): bump org.cyclonedx.bom from 3.2.2 to 3.2.4 by @dependabot[bot] in #825
• build(deps): bump gradle/actions from 5.0.2 to 6.1.0 by @dependabot[bot] in #820
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #827
• build(deps): bump org.apache.maven:maven-core from 3.9.14 to 3.9.15 by @dependabot[bot] in #829
• build(deps): bump com.uber.nullaway:nullaway from 0.13.1 to 0.13.4 by @dependabot[bot] in #833
• build(deps): bump com.google.errorprone:error_prone_core from 2.48.0 to 2.49.0 by @dependabot[bot] in #823
• build(deps): bump gradle-wrapper from 9.4.1 to 9.5.1 by @dependabot[bot] in #839
• build(deps): bump com.diffplug.spotless from 8.4.0 to 8.5.0 by @dependabot[bot] in #840
• build(deps): bump org.apache.maven:maven-core from 3.9.15 to 3.9.16 by @dependabot[bot] in #842
• build(deps): bump com.diffplug.spotless from 8.5.0 to 8.6.0 by @dependabot[bot] in #844
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #849
• fix: publish direct SBOMs lazily by @sergej-koscejev in #853
• build(deps): bump com.google.errorprone:error_prone_core from 2.49.0 to 2.50.0 by @dependabot[bot] in #854
• build(deps): bump com.diffplug.spotless from 8.6.0 to 8.7.0 by @dependabot[bot] in #856
• build(deps): bump com.uber.nullaway:nullaway from 0.13.4 to 0.13.7 by @dependabot[bot] in #858
• test: add Gradle 9.5 and 9.6 coverage by @skhokhlov in #866
• build(deps): bump com.diffplug.spotless from 8.7.0 to 8.8.0 by @dependabot[bot] in #867
• build(deps): bump gradle-wrapper from 9.5.1 to 9.6.1 by @dependabot[bot] in #868
• build(deps): bump actions/setup-java from 5.2.0 to 5.5.0 by @dependabot[bot] in #864
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #859
• build(deps): bump gradle/actions from 6.1.0 to 6.2.0 by @dependabot[bot] in #855
• build: prepare version 3.3.0 by @skhokhlov in #870

Full Changelog: cyclonedx-gradle-plugin-3.2.4...cyclonedx-gradle-plugin-3.3.0