Merge pull request #3010 from DependencyTrack/nscuro-patch-1

Bump `cyclonedx-core-java` to `7.4.0-SNAPSHOT`
DependencyTrack · Sep 6, 2023 · 939f3e8 · 939f3e8
2 parents 2e28685 + 74fbaf5
commit 939f3e8
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/pom.xml b/pom.xml
@@ -86,7 +86,7 @@
         <lib.cpe-parser.version>2.0.2</lib.cpe-parser.version>
         <lib.cvss-calculator.version>1.4.1</lib.cvss-calculator.version>
         <lib.owasp-rr-calculator.version>1.0.1</lib.owasp-rr-calculator.version>
-        <lib.cyclonedx-java.version>7.3.2</lib.cyclonedx-java.version>
+        <lib.cyclonedx-java.version>7.4.0-SNAPSHOT</lib.cyclonedx-java.version>
         <lib.jaxb.runtime.version>2.3.8</lib.jaxb.runtime.version>
         <lib.json-unit.version>3.0.0</lib.json-unit.version>
         <lib.lucene.version>8.11.2</lib.lucene.version>

diff --git a/src/test/java/org/dependencytrack/resources/v1/BomResourceTest.java b/src/test/java/org/dependencytrack/resources/v1/BomResourceTest.java
@@ -169,7 +169,7 @@ public void exportProjectAsCycloneDxInventoryTest() {
                 .isEqualTo(json("""
                 {
                     "bomFormat": "CycloneDX",
-                    "specVersion": "1.4",
+                    "specVersion": "1.5",
                     "serialNumber": "${json-unit.ignore}",
                     "version": 1,
                     "metadata": {
@@ -318,7 +318,7 @@ public void exportProjectAsCycloneDxInventoryWithVulnerabilitiesTest() {
                 .isEqualTo(json("""
                 {
                     "bomFormat": "CycloneDX",
-                    "specVersion": "1.4",
+                    "specVersion": "1.5",
                     "serialNumber": "${json-unit.ignore}",
                     "version": 1,
                     "metadata": {
@@ -511,7 +511,7 @@ public void exportProjectAsCycloneDxVdrTest() {
                 .isEqualTo(json("""
                 {
                     "bomFormat": "CycloneDX",
-                    "specVersion": "1.4",
+                    "specVersion": "1.5",
                     "serialNumber": "${json-unit.ignore}",
                     "version": 1,
                     "metadata": {