cyclonedx-core-java-13.1.0

What's Changed

Enhancements 🚀

• Make XML parsing and validation resilient to outdated XML parsers on the classpath by @patbaumgartner in #894

Bug Fixes 🐛

• Fix missing Streebog-256 and Streebog-512 hash algorithms by @nscuro in #893

Dependency Updates 🤖

• chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #892
• chore(deps): Bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 by @dependabot[bot] in #891
• chore(deps): Bump github/codeql-action/init from 4.37.0 to 4.37.1 by @dependabot[bot] in #890
• chore(deps): Bump github/codeql-action/analyze from 4.37.0 to 4.37.1 by @dependabot[bot] in #889
• chore(deps): Bump actions/setup-java from 5.5.0 to 5.6.0 by @dependabot[bot] in #888
• chore(deps): Bump org.junit:junit-bom from 6.1.1 to 6.1.2 by @dependabot[bot] in #887
• chore(deps): Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 by @dependabot[bot] in #903
• chore(deps): Bump github/codeql-action/init from 4.37.1 to 4.37.3 by @dependabot[bot] in #901
• chore(deps): Bump github/codeql-action/analyze from 4.37.1 to 4.37.3 by @dependabot[bot] in #900
• chore(deps): Bump github/codeql-action/autobuild from 4.37.1 to 4.37.3 by @dependabot[bot] in #899
• chore(deps-dev): Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 by @dependabot[bot] in #895

Full Changelog: cyclonedx-core-java-13.0.0...cyclonedx-core-java-13.1.0

cyclonedx-core-java-13.0.0

What's Changed

Breaking Changes 🚨

• Support for Spec 1.7 by @mr-zepol in #866

Enhancements 🚀

• Bump SPDX license list to 3.28.0 by @nscuro in #870
• Tolerate UTF8 byte order marker in file parsing by @nscuro in #885
• add LGPL mappping in caps lock by @mlynarczykkamil in #693
• Expose non-pretty printed XML generation by @rvesse in #873

Bug Fixes 🐛

• fix: register CycloneDX annotation keywords to silence schema validator warnings by @patbaumgartner in #860
• Fix XmlParserTest failing for locales other than English by @nscuro in #871
• Fix failure to load schema resources when context classloader can't by @nscuro in #872
• Add OrganizationalContactsDeserializer and tests by @mr-zepol in #816

Dependency Updates 🤖

• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.21.1 to 2.21.3 by @dependabot[bot] in #823
• chore(deps): Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #822
• chore(deps): Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 by @dependabot[bot] in #820
• chore(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #824
• chore(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in #832
• chore(deps): Bump actions/setup-java from 5.2.0 to 5.3.0 by @dependabot[bot] in #852
• chore(deps): Bump github/codeql-action from 4.35.4 to 4.36.2 by @dependabot[bot] in #847
• chore(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #846
• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.21.4 by @dependabot[bot] in #844
• chore(deps-dev): Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 by @dependabot[bot] in #839
• chore(deps): Bump org.junit:junit-bom from 6.0.3 to 6.1.0 by @dependabot[bot] in #836
• chore(deps-dev): Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 by @dependabot[bot] in #835
• chore(deps-dev): Bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0 by @dependabot[bot] in #854
• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.21.4 to 2.22.0 by @dependabot[bot] in #855
• chore(deps-dev): Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by @dependabot[bot] in #856
• chore(deps-dev): Bump net.javacrumbs.json-unit:json-unit-assertj from 5.1.1 to 5.1.2 by @dependabot[bot] in #857
• chore(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #858
• chore(deps): Bump actions/setup-java from 5.3.0 to 5.4.0 by @dependabot[bot] in #861
• Dependabot: don't suggest major version updates for json-schema-validator by @nscuro in #862
• chore(deps): Bump com.networknt:json-schema-validator from 2.0.1 to 2.0.2 by @dependabot[bot] in #863
• chore(deps-dev): Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 by @dependabot[bot] in #864
• chore(deps): Bump com.networknt:json-schema-validator from 2.0.2 to 2.0.3 by @dependabot[bot] in #865
• Bump CycloneDX v1.7 schema to 1.7.1 by @nscuro in #869
• chore(deps): Bump org.junit:junit-bom from 6.1.0 to 6.1.1 by @dependabot[bot] in #867
• chore(deps): Bump actions/setup-java from 5.4.0 to 5.5.0 by @dependabot[bot] in #878
• chore(deps-dev): Bump net.javacrumbs.json-unit:json-unit-assertj from 5.1.2 to 6.0.0 by @dependabot[bot] in #877
• chore(deps-dev): Bump net.javacrumbs.json-unit:json-unit-assertj from 6.0.0 to 6.0.1 by @dependabot[bot] in #879
• chore(deps): Bump com.networknt:json-schema-validator from 2.0.3 to 2.0.4 by @dependabot[bot] in #880
• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 by @dependabot[bot] in #881
• Bump CodeQL actions to 4.37.0 by @nscuro in #886

Other Changes

• docs: fix Maven Central badge and modernize build status badge by @patbaumgartner in #859
• Bump version to 13.0.0-SNAPSHOT by @nscuro in #868

New Contributors

• @patbaumgartner made their first contribution in #859
• @mlynarczykkamil made their first contribution in #693
• @rvesse made their first contribution in #873

Full Changelog: cyclonedx-core-java-12.2.0...cyclonedx-core-java-13.0.0

cyclonedx-core-java-12.2.0

What's Changed

Breaking Changes 🚨

• Update usages of com.networknt:json-schema-validator to the new API. ( 1.5.9 -> 2.0.1 ) by @pedroboado in #802

Dependency Updates 🤖

• chore(deps): Bump github/codeql-action from 4.32.1 to 4.35.2 by @dependabot[bot] in #818
• chore(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 by @dependabot[bot] in #817
• chore(deps): Bump actions/download-artifact from 7.0.0 to 8.0.1 by @dependabot[bot] in #807
• chore(deps-dev): Bump net.javacrumbs.json-unit:json-unit-assertj from 5.1.0 to 5.1.1 by @dependabot[bot] in #806
• chore(deps): Bump org.junit:junit-bom from 6.0.2 to 6.0.3 by @dependabot[bot] in #790
• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to 2.21.1 by @dependabot[bot] in #796
• chore(deps-dev): Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 by @dependabot[bot] in #794

Other Changes

• Address zizmor GitHub Actions findings by @nscuro in #810
• Lower Java baseline to 8 again by @nscuro in #811

New Contributors

• @pedroboado made their first contribution in #802

Full Changelog: cyclonedx-core-java-12.1.0...cyclonedx-core-java-12.2.0

cyclonedx-core-java-12.1.0

What's Changed

Enhancements 🚀

• feat: allow computing specific digests instead of all digests by @jeremylong in #776

Dependency Updates 🤖

• chore(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #778
• chore(deps): Bump actions/setup-java from 5.1.0 to 5.2.0 by @dependabot[bot] in #777
• chore(deps): Bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #780
• chore(deps-dev): Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 by @dependabot[bot] in #779
• chore(deps): Bump github/codeql-action from 4.31.11 to 4.32.1 by @dependabot[bot] in #783
• chore(deps): Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 by @dependabot[bot] in #782

Full Changelog: cyclonedx-core-java-12.0.1...cyclonedx-core-java-12.1.0

cyclonedx-core-java-12.0.1

What's Changed

Bug Fixes 🐛

• Fix serialization of empty authors for CycloneDX v1.6 by @nscuro in #773

Other Changes

• Bump version to 12.0.1-SNAPSHOT by @nscuro in #774

Full Changelog: cyclonedx-core-java-12.0.0...cyclonedx-core-java-12.0.1

cyclonedx-core-java-12.0.0

What's Changed

Breaking Changes 🚨

• Raise baseline Java version to 17 by @nscuro in #770

Enhancements 🚀

• Add custom Vulnerability serializer and tests by @mr-zepol in #743

Bug Fixes 🐛

• Refactor author/authors serialization for Component by @mr-zepol in #730

Dependency Updates 🤖

• chore(deps): Bump github/codeql-action from 4.31.2 to 4.31.8 by @dependabot[bot] in #759
• chore(deps): Bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #760
• chore(deps): Bump actions/setup-java from 5.0.0 to 5.1.0 by @dependabot[bot] in #756
• chore(deps): Bump JamesIves/github-pages-deploy-action from 4.7.4 to 4.7.6 by @dependabot[bot] in #758
• chore(deps): Bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in #755
• chore(deps): Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0 by @dependabot[bot] in #753
• chore(deps): Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 by @dependabot[bot] in #745
• chore(deps): Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0 by @dependabot[bot] in #746
• chore(deps-dev): Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.1 by @dependabot[bot] in #761
• chore(deps): Bump github/codeql-action from 4.31.8 to 4.31.10 by @dependabot[bot] in #764
• chore(deps): Bump JamesIves/github-pages-deploy-action from 4.7.6 to 4.8.0 by @dependabot[bot] in #765
• chore(deps): Bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #767
• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.21.0 by @dependabot[bot] in #762
• chore(deps-dev): Bump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0 by @dependabot[bot] in #763
• chore(deps): Bump org.junit:junit-bom from 5.13.4 to 6.0.2 by @dependabot[bot] in #766

Other Changes

• New Apache 2.0 mapping for license resolution by @alexey-tschudnowsky in #747
• Add IntelliJ project icon by @nscuro in #769
• Fix missing schema support entry for 11.x by @nscuro in #771
• Bump version to 12.0.0-SNAPSHOT by @nscuro in #772

New Contributors

• @alexey-tschudnowsky made their first contribution in #747

Full Changelog: cyclonedx-core-java-11.0.1...cyclonedx-core-java-12.0.0

cyclonedx-core-java-11.0.1

What's Changed

Bug Fixes 🐛

• Fix SchemaFactory configuration of XML validator (GHSA-6fhj-vr9j-g45r) by @nscuro in #737

Dependency Updates 🤖

• chore(deps): Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 by @dependabot[bot] in #727
• chore(deps): Bump github/codeql-action from 3.30.4 to 4.30.8 by @dependabot[bot] in #728
• chore(deps): Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #725
• chore(deps): Bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #729
• chore(deps): Bump com.fasterxml.jackson:jackson-bom from 2.20.0 to 2.20.1 by @dependabot[bot] in #736
• chore(deps): Bump github/codeql-action from 4.30.9 to 4.31.2 by @dependabot[bot] in #735
• chore(deps): Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #733
• chore(deps): Bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #732
• chore(deps): Bump commons-io:commons-io from 2.20.0 to 2.21.0 by @dependabot[bot] in #742
• chore(deps): Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0 by @dependabot[bot] in #741
• chore(deps): Bump commons-codec:commons-codec from 1.19.0 to 1.20.0 by @dependabot[bot] in #740
• chore(deps): Bump JamesIves/github-pages-deploy-action from 4.7.3 to 4.7.4 by @dependabot[bot] in #739

Full Changelog: cyclonedx-core-java-11.0.0...cyclonedx-core-java-11.0.1

cyclonedx-core-java-11.0.0

What's Changed

Breaking Changes 🚨

• Fix CryptoRef array type by @mr-zepol in #628

Enhancements 🚀

• Polish code for Validation by @mr-zepol in #613
• Add Extra Validations For Metadata by @mr-zepol in #612
• Bump SPDX license list to 3.26.0 by @nscuro in #647
• #640 Added license names to license-mapping.json by @bilak in #641
• chore: GH workflow permissions by @jkowalleck in #654
• feat: Add Apache 2 License by @jakub-bochenski in #677
• feat: Add Eclipse Public License Version 1.0 by @jakub-bochenski in #676
• feat: Add ASL, version 2 and LGPL, version 2.1 by @jakub-bochenski in #675
• feat: Add GPL v2 with the Classpath exception by @jakub-bochenski in #673
• Added mapping for CPL license by @t-swstk in #697
• Adjust release process for new Maven Central publishing by @nscuro in #713
• Bump SPDX license list to 3.27.0 by @stevenbuccini in #715
• Update README with steps to update license list by @stevenbuccini in #720

Bug Fixes 🐛

• Fix wrong property type in ComponentData.content by @mr-zepol in #627
• Fix failing GitHub Actions builds by @nscuro in #648
• Deserializer Nested Components in Metadata - Regression by @mr-zepol in #703
• Fix publish-snapshot workflow by @nscuro in #719
• Fix names of Maven Central secrets by @nscuro in #721

Dependency Updates 🤖

• Bump org.junit.jupiter:junit-jupiter-params from 5.12.0 to 5.12.1 by @dependabot[bot] in #615
• Bump org.junit.jupiter:junit-jupiter-engine from 5.12.0 to 5.12.1 by @dependabot[bot] in #614
• Bump actions/download-artifact from 4.1.9 to 4.2.0 by @dependabot[bot] in #617
• Bump actions/upload-artifact from 4.6.1 to 4.6.2 by @dependabot[bot] in #619
• Bump github/codeql-action from 3.28.11 to 3.28.12 by @dependabot[bot] in #620
• Bump actions/download-artifact from 4.2.0 to 4.2.1 by @dependabot[bot] in #618
• Bump github/codeql-action from 3.28.12 to 3.28.13 by @dependabot[bot] in #621
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.3 by @dependabot[bot] in #623
• Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.13 by @dependabot[bot] in #624
• Bump github/codeql-action from 3.28.13 to 3.28.15 by @dependabot[bot] in #625
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 by @dependabot[bot] in #631
• Bump org.junit.jupiter:junit-jupiter-params from 5.12.1 to 5.12.2 by @dependabot[bot] in #630
• Bump org.junit.jupiter:junit-jupiter-engine from 5.12.1 to 5.12.2 by @dependabot[bot] in #629
• Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0 by @dependabot[bot] in #633
• Bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in #634
• Bump actions/download-artifact from 4.2.1 to 4.3.0 by @dependabot[bot] in #635
• Bump com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.18.3 to 2.19.0 by @dependabot[bot] in #636
• Bump com.networknt:json-schema-validator from 1.5.6 to 1.5.7 by @dependabot[bot] in #644
• Bump github/codeql-action from 3.28.16 to 3.28.18 by @dependabot[bot] in #639
• Bump org.junit.jupiter:junit-jupiter-engine from 5.12.2 to 5.13.0 by @dependabot[bot] in #646
• Bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot[bot] in #649
• Bump org.junit.jupiter:junit-jupiter-params from 5.12.2 to 5.13.0 by @dependabot[bot] in #645
• Bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot[bot] in #650
• Bump com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.19.0 to 2.19.1 by @dependabot[bot] in #651
• Bump org.junit.jupiter:junit-jupiter-params from 5.13.1 to 5.13.2 by @dependabot[bot] in #653
• Bump org.junit.jupiter:junit-jupiter-engine from 5.13.1 to 5.13.2 by @dependabot[bot] in #652
• Bump org.junit.jupiter:junit-jupiter-params from 5.13.2 to 5.13.3 by @dependabot[bot] in #660
• Bump org.junit.jupiter:junit-jupiter-engine from 5.13.2 to 5.13.3 by @dependabot[bot] in #661
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0 by @dependabot[bot] in #659
• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 by @dependabot[bot] in #658
• Bump github/codeql-action from 3.29.0 to 3.29.2 by @dependabot[bot] in #657
• Bump com.networknt:json-schema-validator from 1.5.7 to 1.5.8 by @dependabot[bot] in #656
• Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 by @dependabot[bot] in #662
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1 by @dependabot[bot] in #664
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 by @dependabot[bot] in #668
• Bump github/codeql-action from 3.29.2 to 3.29.3 by @dependabot[bot] in #669
• Bump commons-codec:commons-codec from 1.18.0 to 1.19.0 by @dependabot[bot] in #671
• Use Maven BOM for Jackson and JUnit by @nscuro in #670
• Bump github/codeql-action from 3.29.3 to 3.29.4 by @dependabot[bot] in #672
• Bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #680
• Bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in #690
• Bump github/codeql-action from 3.29.7 to 3.29.9 by @dependabot[bot] in #695
• Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #694
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 by @dependabot[bot] in #691
• Bump actions/setup-java from 4.7.1 to 5.0.0 by @dependabot[bot] in #700
• Bump github/codeql-action from 3.29.9 to 3.29.11 by @dependabot[bot] in #701
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 by @dependabot[bot] in #696
• Bump com.fasterxml.jackson:jackson-bom from 2.19.2 to 2.20.0 by @dependabot[bot] in #702
• chore(deps): Bump github/codeql-action from 3.29.11 to 3.30.0 by @dependabot[bot] in #704
• chore(deps): Bump github/codeql-action from 3.30.0 to 3.30.1 by @dependabot[bot] in #705
• chore(deps): Bump github/codeql-action from 3.30.1 to 3.30.2 by @dependabot[bot] in #706
• chore(deps): Bump github/codeql-action from 3.30.2 to 3.30.3 by @dependabot[bot] in #707
• chore(deps): Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #709
• chore(...

cyclonedx-core-java-10.2.1

What's Changed

Enhancements 🚀

• Support extended ISO 8601 for Date parsing by @mr-zepol in #588
• Remove duplicated code by @mr-zepol in #591

Dependency Updates 🤖

• Bump org.assertj:assertj-core from 3.27.0 to 3.27.1 by @dependabot in #584
• Bump commons-codec:commons-codec from 1.17.1 to 1.17.2 by @dependabot in #586
• Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 by @dependabot in #585
• Bump actions/upload-artifact from 4.5.0 to 4.6.0 by @dependabot in #587
• Bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #589
• Bump com.networknt:json-schema-validator from 1.5.4 to 1.5.5 by @dependabot in #590
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 by @dependabot in #592
• Bump github/codeql-action from 3.28.1 to 3.28.3 by @dependabot in #594
• Bump github/codeql-action from 3.28.3 to 3.28.4 by @dependabot in #595
• Bump github/codeql-action from 3.28.4 to 3.28.5 by @dependabot in #596
• Bump commons-codec:commons-codec from 1.17.2 to 1.18.0 by @dependabot in #598
• Bump github/codeql-action from 3.28.5 to 3.28.6 by @dependabot in #597
• Bump github/codeql-action from 3.28.6 to 3.28.8 by @dependabot in #601
• Bump com.networknt:json-schema-validator from 1.5.5 to 1.5.6 by @dependabot in #603
• Bump JamesIves/github-pages-deploy-action from 4.7.2 to 4.7.3 by @dependabot in #604
• Bump github/codeql-action from 3.28.8 to 3.28.9 by @dependabot in #602
• Bump github/codeql-action from 3.28.9 to 3.28.10 by @dependabot in #608
• Bump actions/upload-artifact from 4.6.0 to 4.6.1 by @dependabot in #607
• Bump org.junit.jupiter:junit-jupiter-engine from 5.11.4 to 5.12.0 by @dependabot in #606
• Bump org.junit.jupiter:junit-jupiter-params from 5.11.4 to 5.12.0 by @dependabot in #605
• Bump actions/download-artifact from 4.1.8 to 4.1.9 by @dependabot in #609
• Bump github/codeql-action from 3.28.10 to 3.28.11 by @dependabot in #611
• Bump com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.18.2 to 2.18.3 by @dependabot in #610

Full Changelog: cyclonedx-core-java-10.1.0...cyclonedx-core-java-10.2.1

cyclonedx-core-java-10.1.0

What's Changed

Enhancements 🚀

• Add new Enum based on the spec for acknoledgement by @mr-zepol in #579
• Add util methods in different classes by @mr-zepol in #578
• Better separation of tests depending on specific Java versions by @Bananeweizen in #581

Bug Fixes 🐛

• Fix UnsupportedOperationException when modifying an existing metadata.tools list by @mr-zepol in #574

Dependency Updates 🤖

• Bump github/codeql-action from 3.27.7 to 3.27.9 by @dependabot in #572
• Bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in #577
• Bump org.junit.jupiter:junit-jupiter-params from 5.11.3 to 5.11.4 by @dependabot in #575
• Bump org.junit.jupiter:junit-jupiter-engine from 5.11.3 to 5.11.4 by @dependabot in #576
• Bump org.assertj:assertj-core from 3.26.3 to 3.27.0 by @dependabot in #580
• Bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #582

Other Changes

• docs: add version 10.x by @jkowalleck in #573

New Contributors

• @Bananeweizen made their first contribution in #581

Full Changelog: cyclonedx-core-java-10.0.0...cyclonedx-core-java-10.1.0