Release v11.0.5 - hey quarkus
cdxgen now supports the Quarkus framework with automatic detection for Maven projects—no configuration changes needed. It uses the official dependency-sbom
goal but adds extra value by including phantom JARs that aren’t managed through Maven. With the research profile enabled (--profile research), cdxgen produces a highly detailed SBOM with occurrences and call stack evidence, offering better insights than the official implementation, which only tracks jar files.
cdxgenGPT is also updated to better understand the evidence information for decent reasoning performance.
What's Changed
Other Changes
- feat: quarkus maven support by @prabhu in #1480
- Improve printOccurrences function with streaming output for large SBO… by @deeshantk in #1482
New Contributors
- @deeshantk made their first contribution in #1482
Full Changelog: v11.0.4...v11.0.5