build: migrate to CycloneDX version 3.0.0

deactivate xml output format

Author: arimer

build.gradle

@@ -570,6 +570,8 @@ tasks.named('githubRelease').configure {
 cyclonedxDirectBom {
     //  destination directory and format
     jsonOutput = file("build/reports/sbom.json")
+    // Generate only JSON format
+    xmlOutput.unsetConvention()
     // Don't include license texts in generated SBOMs
     includeLicenseText = false
     // Include runtime only deps (bundled libs, language libs, mps)