Fix [JSTEP-14] for databind; generate SBOMs (#5129)

Author: cowtowncoder

pom.xml

@@ -278,7 +278,12 @@
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
       </plugin>
-
+      <!-- 28-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
+      
       <!--  04-Mar-2019, tatu: Add rudimentary JDK9+ module info. To build with JDK 8
              will have to use `moduleInfoFile` as anything else requires JDK 9+
         -->

release-notes/VERSION-2.x

@@ -10,6 +10,7 @@ Project: jackson-databind
   from 2.20
 #5103: Use `writeStartObject(Object forValue, int size)` for `ObjectNode`
   serialization
+- Generate SBOMs [JSTEP-14]
 
 2.19.0 (24-Apr-2025)