All pull requests

Pull requests

• build(deps): bump org.apache.maven:maven-core from 3.9.16 to 3.10.0

  dependenciesjava
  #935·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  1

• build(deps): bump gradle/actions/dependency-submission from 6.3.0 to 6.4.0

  dependenciesgithub_actions
  #934·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  1

• build(deps): bump gradle/actions/setup-gradle from 6.3.0 to 6.4.0

  dependenciesgithub_actions
  #933·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  1

• fix: prefer a declared license url over its name when the two disagree

  #904·JonasVautherin opened Aug 7, 2026·

  ·
  2

• docs: match includeConfigs to corresponding comment

  #896·chkpnt opened Aug 5, 2026·

  ·
  2

• feat: support user-declared properties on metadata and main BOM component objects

  #890·transcengopher opened Jul 28, 2026Contributor·

  ·
  1

  2

• #848 - Migrate multi-project aggregation to an explicit aggregator setup

  #863·JonasMorrissey opened Jul 1, 2026·4 of 7 tasks·

  ·
  1

• fix: set license and manufacturer for the main component #654

  #836·dimitarp opened Apr 30, 2026·

  ·
  1

  10

• #821 - build fails with 'Cannot mutate when maven-publish attaches SBOM artifacts to publication

  #822·skhokhlov opened Apr 7, 2026Member·

  ·
  2

• test: add failing test for Maven 4 built libraries (#793)

  #815·skhokhlov opened Apr 1, 2026Member·

  ·
  1

• perf: batch POM resolution and cache parent POM lookups

  #802·MalickBurger opened Mar 13, 2026Contributor·

  ·
  2

• feat: add support for configurable hash algorithms

  #785·ctran opened Feb 23, 2026Contributor·

  ·
  8

• feat: exclude artifacts from sbom generation

  #783·bilak opened Feb 18, 2026·

  ·
  1

  9

• test: verify that only resolved dependency version included in the bom

  #641·skhokhlov opened Jul 15, 2025Member·

  ·