pom updates

Author: rbri

pom.xml

@@ -20,16 +20,26 @@
 
         <selenium.version>4.34.0</selenium.version>
         <selenium.devtools.artifactId>selenium-devtools-v138</selenium.devtools.artifactId>
-        <htmlunit.version>4.14.0-SNAPSHOT</htmlunit.version>
+        <htmlunit.version>4.14.0</htmlunit.version>
 
         <jetty.version>9.4.57.v20241219</jetty.version>
 
-        <central-publishing.version>0.8.0</central-publishing.version>
+        <!-- test dependencies -->
+        <junit.version>4.13.2</junit.version>
 
-        <checkstyle.version>10.25.1</checkstyle.version>
+        <!-- quality -->
+        <checkstyle.version>10.26.1</checkstyle.version>
         <spotbugs.version>4.9.3</spotbugs.version>
         <archunit.version>1.4.1</archunit.version>
-        <dependencycheck.version>12.1.1</dependencycheck.version>
+        <dependencycheck.version>12.1.3</dependencycheck.version>
+
+        <!-- plugins -->
+        <central-publishing-plugin.version>0.8.0</central-publishing-plugin.version>
+        <checkstyle-plugin.version>3.6.0</checkstyle-plugin.version>
+        <spotbugs-plugin.version>4.9.3.2</spotbugs-plugin.version>
+        <gpg-plugin.version>3.2.8</gpg-plugin.version>
+        <enforcer-plugin.version>3.6.1</enforcer-plugin.version>
+        <cyclonedx-plugin.version>2.9.1</cyclonedx-plugin.version>
     </properties>
 
     <licenses>
@@ -175,7 +185,7 @@
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
-            <version>4.13.2</version>
+            <version>${junit.version}</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -208,7 +218,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-checkstyle-plugin</artifactId>
-                <version>3.6.0</version>
+                <version>${checkstyle-plugin.version}</version>
                 <configuration>
                     <configLocation>checkstyle.xml</configLocation>
                     <suppressionsLocation>checkstyle_suppressions.xml</suppressionsLocation>
@@ -225,7 +235,7 @@
             <plugin>
                 <groupId>com.github.spotbugs</groupId>
                 <artifactId>spotbugs-maven-plugin</artifactId>
-                <version>4.9.3.0</version>
+                <version>${spotbugs-plugin.version}</version>
                 <dependencies>
                     <dependency>
                         <groupId>com.github.spotbugs</groupId>
@@ -281,7 +291,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-gpg-plugin</artifactId>
-                <version>3.2.7</version>
+                <version>${gpg-plugin.version}</version>
                 <executions>
                     <execution>
                         <phase>verify</phase>
@@ -294,13 +304,12 @@
             <plugin>
                 <groupId>org.sonatype.central</groupId>
                 <artifactId>central-publishing-maven-plugin</artifactId>
-                <version>${central-publishing.version}</version>
+                <version>${central-publishing-plugin.version}</version>
                 <extensions>true</extensions>
                 <configuration>
                     <publishingServerId>central</publishingServerId>
                 </configuration>
             </plugin>
-            <!--
             <plugin>
                 <groupId>org.owasp</groupId>
                 <artifactId>dependency-check-maven</artifactId>
@@ -319,7 +328,6 @@
                     </execution>
                 </executions>
             </plugin>
-            -->
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-assembly-plugin</artifactId>
@@ -341,7 +349,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-enforcer-plugin</artifactId>
-                <version>3.5.0</version>
+                <version>${enforcer-plugin.version}</version>
                 <executions>
                     <execution>
                         <id>enforce</id>
@@ -363,6 +371,25 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+                <version>${cyclonedx-plugin.version}</version>
+                <executions>
+                    <execution>
+                        <phase>package</phase>
+                        <goals>
+                            <goal>makeAggregateBom</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <projectType>library</projectType>
+                    <outputFormat>json</outputFormat>
+                    <!-- strange but it helps -->
+                    <skipNotDeployed>false</skipNotDeployed>
+                </configuration>
+            </plugin>
         </plugins>
     </build>