Fix #5361: SBOM publishing (#5396)

Author: cowtowncoder

pom.xml

@@ -207,9 +207,17 @@
       </plugin>
 
       <!-- 28-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <!-- 16-Nov-2025: [databind#5361] - use makeBom goal instead of makeAggregateBom for single-module project -->
       <plugin>
         <groupId>org.cyclonedx</groupId>
         <artifactId>cyclonedx-maven-plugin</artifactId>
+        <executions>
+          <execution>
+            <id>make-bom</id>
+            <phase>package</phase>
+            <goals><goal>makeBom</goal></goals>
+          </execution>
+        </executions>
       </plugin>      
 
       <plugin>

release-notes/VERSION

@@ -9,6 +9,7 @@ Versions: 3.x (for earlier see VERSION-2.x)
 
 #5350: Add `DeserializationFeature.USE_NULL_FOR_MISSING_REFERENCE_VALUES` for
   selecting `null` vs "empty/absent" value when deserializing missing `Optional` value
+#5361: Fix Maven SBOM publishing (worked in 3.0.0-rc4 but not in rc5 or later)
 
 3.0.2 (07-Nov-2025)