9.0.4

What's Changed

Enhancements 🚀

• Add GitHub release notes config; Remove release-drafter by @nscuro in #432

Bug Fixes 🐛

• Fix possible XXE during XML schema version detection by @mr-zepol in #434
  • See also security advisory GHSA-683x-4444-jxh8
• Fix path to jacoco.xml for PR coverage reporting by @nscuro in #433

Dependency Updates 🤖

• Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.1 to 3.4.2 by @dependabot in #435
• Bump com.networknt:json-schema-validator from 1.4.0 to 1.4.2 by @dependabot in #436

Full Changelog: cyclonedx-core-java-9.0.3...cyclonedx-core-java-9.0.4

cyclonedx-core-java-9.0.3

What's Changed

• Code Improvements by @mr-zepol in #376
• Add extensible types during license serialization by @mr-zepol in #414
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0 by @dependabot in #417
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 by @dependabot in #415
• Add missing equals and hashCode by @mr-zepol in #419
• Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #420
• Fix Evidence Serialization by @mr-zepol in #423
• Improve De/Serializer by @mr-zepol in #421
• Add Missing Annotations to filter based on spec by @mr-zepol in #416
• External References and Metadata Validations by @mr-zepol in #426
• Add CODEOWNERS file by @nscuro in #425
• Serializer for Properties and Hashes for backwards compatibility by @mr-zepol in #428
• Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.0 by @dependabot in #429
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.3.0 by @dependabot in #430
• CI pipeline improvements by @nscuro in #424
• Fix order of elements for generated SBOMs to match the specs by @mr-zepol in #431

Full Changelog: https://github.com/CycloneDX/cyclonedx-core-java/commits/cyclonedx-core-java-9.0.3