Update to sbom-toolkit v0.3.0 (#31993)

Author: IlyaKhD

packages/sbom/README.md

@@ -0,0 +1,44 @@
+# SBOM Generator
+
+Generates Software Bill of Materials (SBOM) files in CycloneDX format for DevExtreme packages.
+
+## Prerequisites
+
+- GitHub personal access token (classic) with package read permissions ([GitHub Packages authentication guide](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry#authenticating-with-a-personal-access-token))
+
+## Usage
+
+### Build SBOM for All Public Packages
+
+```shell
+pnpm nx build sbom
+```
+
+Generates SBOM files for all public packages:
+- `devextreme`
+- `devextreme-react`
+- `devextreme-angular`
+- `devextreme-vue`
+- `devextreme-themebuilder`
+
+**Output:** `dist/*.sbom.json`
+
+### Generate SBOM for Specific Package (development)
+
+```shell
+pnpm nx make sbom <package-name> [--debug]
+```
+
+Generates SBOM for a single package. Use `--debug` to preserve the raw output from [cdxgen](https://github.com/cdxgen/cdxgen).
+
+**Example:**
+
+```shell
+pnpm nx make sbom devextreme --debug
+```
+
+## Notes
+
+- This workspace operates as an isolated pnpm workspace due to GitHub Packages access constraints and requires separate `pnpm install` or `pnpm add` commands
+- Dependencies are installed automatically before each build via the `install-dependencies` target
+- The `devextreme-dist.sbom.json` file is identical to `devextreme.sbom.json`

packages/sbom/package.json

@@ -3,7 +3,13 @@
   "version": "25.2.3",
   "private": true,
   "devDependencies": {
-    "@devexpress/sbom-toolkit": "0.2.0"
+    "@devexpress/sbom-toolkit": "0.3.0"
   },
-  "packageManager": "[email protected]"
+  "packageManager": "[email protected]",
+  "pnpm": {
+    "overrides": {
+      "body-parser@>=2.2.0 <2.2.1": ">=2.2.1",
+      "jws@=4.0.0": ">=4.0.1"
+    }
+  }
 }

packages/sbom/pnpm-lock.yaml

@@ -2,34 +2,6 @@
   "name": "sbom",
   "projectType": "library",
   "targets": {
-    "build": {
-      "executor": "nx:noop",
-      "dependsOn": [
-        "install-dependencies",
-        "make-devextreme-sbom",
-        "make-devextreme-dist-sbom",
-        "make-devextreme-react-sbom",
-        "make-devextreme-angular-sbom",
-        "make-devextreme-vue-sbom"
-      ],
-      "cache": false
-    },
-    "prepare": {
-      "dependsOn": [
-        "install-dependencies",
-        "clean"
-      ],
-      "executor": "nx:noop",
-      "cache": false
-    },
-    "clean": {
-      "executor": "nx:run-commands",
-      "options": {
-        "cwd": "{projectRoot}",
-        "command": "rm -rf dist/"
-      },
-      "cache": false
-    },
     "install-dependencies": {
       "executor": "nx:run-commands",
       "options": {
@@ -38,48 +10,27 @@
       },
       "cache": false
     },
-    "make-devextreme-sbom": {
-      "dependsOn": ["prepare"],
-      "executor": "nx:run-commands",
-      "options": {
-        "cwd": "{projectRoot}",
-        "command": "pnpm dx-make-sbom ../../ dist/ devextreme"
-      },
-      "cache": false
-    },
-    "make-devextreme-dist-sbom": {
-      "dependsOn": ["prepare", "make-devextreme-sbom"],
-      "executor": "nx:run-commands",
-      "options": {
-        "cwd": "{projectRoot}",
-        "command": "cp dist/devextreme.sbom.json dist/devextreme-dist.sbom.json"
-      },
-      "cache": false
-    },
-    "make-devextreme-react-sbom": {
-      "dependsOn": ["prepare"],
-      "executor": "nx:run-commands",
-      "options": {
-        "cwd": "{projectRoot}",
-        "command": "pnpm dx-make-sbom ../../ dist/ devextreme-react"
-      },
-      "cache": false
-    },
-    "make-devextreme-angular-sbom": {
-      "dependsOn": ["prepare"],
+    "build": {
       "executor": "nx:run-commands",
+      "dependsOn": ["install-dependencies"],
       "options": {
         "cwd": "{projectRoot}",
-        "command": "pnpm dx-make-sbom ../../ dist/ devextreme-angular"
+        "parallel": false,
+        "commands": [
+          "rm -rf dist/",
+          "pnpm dx-make-sbom ../../ dist/ devextreme,devextreme-react,devextreme-angular,devextreme-vue,devextreme-themebuilder",
+          "cp dist/devextreme.sbom.json dist/devextreme-dist.sbom.json"
+        ]
       },
       "cache": false
     },
-    "make-devextreme-vue-sbom": {
-      "dependsOn": ["prepare"],
+    "make": {
       "executor": "nx:run-commands",
+      "dependsOn": ["install-dependencies"],
       "options": {
         "cwd": "{projectRoot}",
-        "command": "pnpm dx-make-sbom ../../ dist/ devextreme-vue"
+        "parallel": false,
+        "commands": ["pnpm dx-make-sbom ../../ dist/"]
       },
       "cache": false
     }