Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport: Support ingestion of CycloneDX v1.6 BOMs #3863

Merged
merged 1 commit into from
Jun 22, 2024

Commits on Jun 22, 2024

  1. Support ingestion of CycloneDX v1.6 BOMs

    * Updates `cyclonedx-core-java` to version `9.0.3`
    * Bumps Jackson to version `2.17.1` to resolve compatibility issues with `cyclonedx-core-java`
    * Resolve various compilation errors due to refactoring in `cyclonedx-core-java`
    * Add validator tests for all CycloneDX versions
    
    Note that BOM exports will continue to use v1.5 for the time being. This avoids breaking users' workflows in case their tooling doesn't yet support v1.6.
    
    Closes DependencyTrack#3584
    
    Signed-off-by: nscuro <nscuro@protonmail.com>
    nscuro committed Jun 22, 2024
    Configuration menu
    Copy the full SHA
    3706c3b View commit details
    Browse the repository at this point in the history