diff --git a/jakarta-jsonp/pom.xml b/jakarta-jsonp/pom.xml
index 6774f53..335cb64 100644
--- a/jakarta-jsonp/pom.xml
+++ b/jakarta-jsonp/pom.xml
@@ -56,6 +56,11 @@ working with JSON-P (JSON Processing) node types (new Jakarta flavor) via data-b
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
       </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
       <plugin>
         <groupId>org.moditect</groupId>
         <artifactId>moditect-maven-plugin</artifactId>
diff --git a/jakarta-mail/pom.xml b/jakarta-mail/pom.xml
index 886ad94..e5cef28 100644
--- a/jakarta-mail/pom.xml
+++ b/jakarta-mail/pom.xml
@@ -45,6 +45,11 @@ working with Jakarta Mail types
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
       </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
       <plugin>
         <groupId>org.moditect</groupId>
         <artifactId>moditect-maven-plugin</artifactId>
diff --git a/javax-money/pom.xml b/javax-money/pom.xml
index 6a2ed74..4bb6b4f 100644
--- a/javax-money/pom.xml
+++ b/javax-money/pom.xml
@@ -91,6 +91,11 @@
                 <groupId>com.google.code.maven-replacer-plugin</groupId>
                 <artifactId>replacer</artifactId>
             </plugin>
+            <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
             <plugin>
                 <groupId>org.moditect</groupId>
                 <artifactId>moditect-maven-plugin</artifactId>
diff --git a/joda-money/pom.xml b/joda-money/pom.xml
index daa1201..0c1cedd 100644
--- a/joda-money/pom.xml
+++ b/joda-money/pom.xml
@@ -45,6 +45,11 @@
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
       </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
       <plugin>
         <groupId>org.moditect</groupId>
         <artifactId>moditect-maven-plugin</artifactId>
diff --git a/json-org/pom.xml b/json-org/pom.xml
index 5afecda..2310c83 100644
--- a/json-org/pom.xml
+++ b/json-org/pom.xml
@@ -46,6 +46,11 @@ mainly to make it easier to upgrade code to Jackson, using automated conversions
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
       </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
       <!--  19-Mar-2019, tatu: Add rudimentary JDK9+ module info. To build with JDK 8
              will have to use `moduleInfoFile` as anything else requires JDK 9+
         -->
diff --git a/jsr-353/pom.xml b/jsr-353/pom.xml
index c5fd6a7..a557ffd 100644
--- a/jsr-353/pom.xml
+++ b/jsr-353/pom.xml
@@ -56,6 +56,11 @@ working with JSR-353 (JSON-P) node types via data-binding
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
       </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
       <plugin>
         <groupId>org.moditect</groupId>
         <artifactId>moditect-maven-plugin</artifactId>
diff --git a/moneta/pom.xml b/moneta/pom.xml
index fe23f6b..c4a7809 100644
--- a/moneta/pom.xml
+++ b/moneta/pom.xml
@@ -95,6 +95,11 @@
                 <groupId>com.google.code.maven-replacer-plugin</groupId>
                 <artifactId>replacer</artifactId>
             </plugin>
+            <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
             <plugin>
                 <groupId>org.moditect</groupId>
                 <artifactId>moditect-maven-plugin</artifactId>
diff --git a/pom.xml b/pom.xml
index 513e30b..a018687 100644
--- a/pom.xml
+++ b/pom.xml
@@ -100,16 +100,6 @@
             </execution>
           </executions>
         </plugin>
-
-        <plugin>
-          <groupId>org.apache.maven.plugins</groupId>
-          <artifactId>maven-surefire-plugin</artifactId>
-          <configuration>
-            <excludes>
-              <exclude>com/fasterxml/jackson/**/failing/*.java</exclude>
-            </excludes>
-          </configuration>
-        </plugin>
       </plugins>
     </pluginManagement>
   </build>
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index 4111831..ba916bb 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -13,7 +13,7 @@ Modules:
 
 2.20.0 (not yet released)
 
--
+- Generate SBOMs [JSTEP-14]
 
 2.19.0 (24-Apr-2025)