New Features

• Configure the main component's description in Direct and Aggregate SBOMs using componentDescription by @ooshka via #929

• Report unavailable or incomplete Maven metadata in the SBOM using cdx:maven:package:metadata-unresolved by @Donnerbart via #922

Bug Fixes

• Retain metadata declared in a component's own POM when effective-model resolution fails, and warn about unresolved dependencies by @Donnerbart via #922

What's Changed

• build(deps): bump org.cyclonedx.bom from 3.4.0 to 3.4.1 by @dependabot[bot] in #913
• build(deps): bump com.diffplug.spotless from 8.9.0 to 8.10.0 by @dependabot[bot] in #914
• build(deps): bump gradle-wrapper from 9.7.0 to 9.7.1 by @dependabot[bot] in #915
• build(deps): bump com.uber.nullaway:nullaway from 0.13.8 to 0.14.0 by @dependabot[bot] in #916
• build(deps): bump actions/setup-java from 5.7.0 to 6.0.0 by @dependabot[bot] in #917
• build(deps): bump net.ltgt.errorprone from 5.1.0 to 5.1.1 by @dependabot[bot] in #919
• build(deps): bump com.diffplug.spotless from 8.10.0 to 8.10.1 by @dependabot[bot] in #920
• build(deps): bump com.uber.nullaway:nullaway from 0.14.0 to 0.14.1 by @dependabot[bot] in #923
• refactor: drop Apache Commons usage from the plugin by @skhokhlov in #924
• build(deps): bump org.cyclonedx:cyclonedx-core-java from 13.1.0 to 13.2.0 by @dependabot[bot] in #918
• build(deps): bump com.gradle.plugin-publish from 2.1.1 to 2.2.0 by @dependabot[bot] in #926
• feat: allow configuring the root SBOM component description by @ooshka in #929
• build(deps): bump gradle-wrapper from 9.7.1 to 9.8.0 by @dependabot[bot] in #930
• build(deps): bump actions/setup-java from 6.0.0 to 6.0.1 by @dependabot[bot] in #928
• build(deps): bump com.gradle.plugin-publish from 2.2.0 to 2.2.1 by @dependabot[bot] in #927
• build(deps): bump com.uber.nullaway:nullaway from 0.14.1 to 0.14.2 by @dependabot[bot] in #931
• build(deps): bump com.diffplug.spotless from 8.10.1 to 8.10.3 by @dependabot[bot] in #932
• fix: report what the SBOM could not describe by @Donnerbart in #922
• build(deps): bump org.apache.maven:maven-core from 3.9.16 to 3.10.0 by @dependabot[bot] in #935
• build(deps): bump gradle/actions/dependency-submission from 6.3.0 to 6.4.0 by @dependabot[bot] in #934
• build(deps): bump gradle/actions/setup-gradle from 6.3.0 to 6.4.0 by @dependabot[bot] in #933
• build: prepare version 3.5.0 by @skhokhlov in #938

New Contributors

• @ooshka made their first contribution in #929
• @Donnerbart made their first contribution in #922

Full Changelog: cyclonedx-gradle-plugin-3.4.1...cyclonedx-gradle-plugin-3.5.0