feat: add CycloneDX support and update release process for BOM generation

Author: TheMeinerLP

.github/workflows/sematic-releases.yml

@@ -51,3 +51,16 @@ jobs:
           # Token with permissions to push to the client repository
           CLIENT_REPO_TOKEN: ${{ secrets.CLIENT_REPO_TOKEN }}
         run: npx semantic-release
+      - name: Get Version
+        id: get_version
+        run: echo "VERSION=$(cat VERSION.txt)" >> $GITHUB_ENV
+      - name: Upload BOM to Dependency-Track
+        uses: DependencyTrack/gh-upload-sbom@v3
+        with:
+          serverhostname: ${{ secrets.DEPENDENCYTRACK_HOSTNAME }}
+          apikey: ${{ secrets.DEPENDENCYTRACK_APIKEY }}
+          projectname: 'AntiRedstoneClock-Remastered'
+          projectversion: ${{ env.VERSION }}
+          projecttags: 'bukkit,paper,plugin'
+          bomfilename: "build/reports/cyclonedx/bom.xml"
+          autocreate: true

.releaserc.json

@@ -10,7 +10,7 @@
       "@semantic-release/exec",
       {
         "verifyConditionsCmd": "./gradlew check",
-        "publishCmd": "./gradlew -Pversion=${nextRelease.version} shadowJar publishAllPublicationsToHangar modrinth"
+        "publishCmd": "./gradlew -Pversion=${nextRelease.version} shadowJar publishAllPublicationsToHangar modrinth cyclonedxBom && echo '${nextRelease.version}' > VERSION.txt"
       }
     ],
     [

build.gradle.kts

@@ -11,6 +11,7 @@ plugins {
     alias(libs.plugins.paper.yml)
     alias(libs.plugins.hangar)
     alias(libs.plugins.modrinth)
+    alias(libs.plugins.cyclonedx)
     jacoco
 }
 

settings.gradle.kts

@@ -21,6 +21,7 @@ dependencyResolutionManagement {
             version("paper.yml", "0.6.0")
             version("paper.run", "3.0.2")
             version("shadowJar", "9.2.2")
+            version("cyclonedx", "3.0.1")
 
             version("paper", "1.21.8-R0.1-SNAPSHOT")
             version("bstats", "3.1.0")
@@ -93,6 +94,7 @@ dependencyResolutionManagement {
             plugin("paper.yml", "net.minecrell.plugin-yml.paper").versionRef("paper.yml")
             plugin("paper.run", "xyz.jpenilla.run-paper").versionRef("paper.run")
             plugin("shadowJar", "com.gradleup.shadow").versionRef("shadowJar")
+            plugin("cyclonedx", "org.cyclonedx.bom").versionRef("cyclonedx")
         }
     }
 }