Merging JSTEP-14 pom.xml changes from 2.x

Author: cowtowncoder

pom.xml

@@ -198,6 +198,11 @@
                 <groupId>com.google.code.maven-replacer-plugin</groupId>
                 <artifactId>replacer</artifactId>
             </plugin>
+            <!-- 28-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>