Release v10.6.0

externalReferences urls are now validated and filtered. Thanks @timmyteo. There is a new option to use maven dependency tree plugin for Java, instead of the cyclonedx plugin. Set the environment variable PREFER_MAVEN_DEPS_TREE=true to try this out.

What's Changed

• Fallback on 'cdx' or 'bom' JSON files for Java BOM by @nekhtan in #1127
• Switch to pnpm by @prabhu in #1134
• build: update biomejs by @setchy in #1138
• Add IRI Validation for externalReference URL by @timmyteo in #1140
• Feature/dotnet roll forward by @prabhu in #1139
• Feature/component duplicate tracking by @prabhu in #1146

New Contributors

• @nekhtan made their first contribution in #1127
• @timmyteo made their first contribution in #1140

Full Changelog: v10.5.2...v10.6.0