New Features

• Support for CycloneDX 1.7 schema by @skhokhlov via #886
• Additional configurations can be marked as "test" using testConfigs for cdx:maven:package:test by @luczus via #882

What's Changed

• chore: add agentic skills with apm by @skhokhlov in #871
• docs: document project context and architecture decisions by @skhokhlov in #873
• ci: pin GitHub Actions to commit SHAs by @skhokhlov in #872
• docs: add AGENTS.md with build, architecture, and workflow guidance by @skhokhlov in #874
• ci: harden Gradle workflows by @skhokhlov in #875
• build: make test tasks cacheable across checkouts by @skhokhlov in #876
• build(deps): bump org.cyclonedx.bom from 3.2.4 to 3.3.0 by @dependabot[bot] in #877
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #881
• build(deps): bump com.uber.nullaway:nullaway from 0.13.7 to 0.13.8 by @dependabot[bot] in #880
• build(deps): bump actions/setup-java from 5.5.0 to 5.6.0 by @dependabot[bot] in #878
• feat: configurable testConfigs for cdx:maven:package:test by @luczus in #882
• build(deps): bump com.diffplug.spotless from 8.8.0 to 8.9.0 by @dependabot[bot] in #889
• build(deps): bump org.jspecify:jspecify from 1.0.0 to 1.0.1 by @dependabot[bot] in #891
• build(deps): bump actions/setup-java from 5.6.0 to 5.7.0 by @dependabot[bot] in #892
• build(deps): bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0 by @dependabot[bot] in #895
• build(deps): bump gradle/actions/dependency-submission from 6.2.0 to 6.3.0 by @dependabot[bot] in #894
• build(deps): bump cyclonedx-core-java from 11.0.1 to 13.0.0 by @skhokhlov in #885
• feat: add opt-in CycloneDX 1.7 (Version.VERSION_17) schema support by @skhokhlov in #886
• refactor: isolate Core version-branching behind an internal SchemaVersion type by @skhokhlov in #887
• test: add binary-compatibility fixture against published plugin 3.3.0 by @skhokhlov in #888
• docs: simplify README user guide by @skhokhlov in #898
• ci: attest release artifacts and publish sbom by @skhokhlov in #899
• ci: add release rehearsal workflow by @skhokhlov in #900
• build: prepare version 3.4.0 by @skhokhlov in #901
• ci: fix release rehearsal permissions by @skhokhlov in #902

New Contributors

• @luczus made their first contribution in #882

Full Changelog: cyclonedx-gradle-plugin-3.3.0...cyclonedx-gradle-plugin-3.4.0