[commons-parent] 10/10: Add SPDX SBOM in the package phase.

[ggregory]

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-parent.git

commit 5ac5ceed4916b473c0a6176ab0882202629dba39
Author: Gary Gregory <garydgreg...@gmail.com>
AuthorDate: Wed Aug 2 09:38:53 2023 -0400

    Add SPDX SBOM in the package phase.
---
 pom.xml                 | 5 +++--
 src/changes/changes.xml | 3 ++-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index a5d9922..7ff91fb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -835,7 +835,7 @@
           <version>${commons.cyclonedx.version}</version>
           <executions>
             <execution>
-              <id>make-bom</id>
+              <id>build-sbom-cyclonedx</id>
               <phase>package</phase>
               <goals>
                 <goal>makeAggregateBom</goal>
@@ -852,7 +852,8 @@
           <version>${commons.spdx.version}</version>
           <executions>
             <execution>
-              <id>build-spdx</id>
+              <id>build-sbom-spdx</id>
+              <phase>package</phase>
               <goals>
                 <goal>createSPDX</goal>
               </goals>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 8e8765c..12673b3 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -71,8 +71,9 @@ The <action> type attribute can be add,update,fix,remove.
            <action type="add" dev="ggregory" due-to="Gary Gregory">Add POM 
property commons.javadoc.javaee9.link.</action>
            <action type="add" dev="ggregory" due-to="Gary Gregory">Add POM 
property commons.javadoc.javaee9.1.link.</action>
            <action type="add" dev="ggregory" due-to="Gary Gregory">Add POM 
property commons.javadoc.javaee10.link.</action>
-           <action type="add" dev="ggregory" due-to="Gary Gregory">Don't use 
the animal sniffer plugin on Java >=9, use the release flag instead.</action>
+           <action type="add" dev="ggregory" due-to="Gary Gregory">Add SPDX 
SBOM in the package phase.</action>
            <!-- FIX -->           
+           <action type="add" dev="ggregory" due-to="Gary Gregory">Don't use 
the animal sniffer plugin on Java >=9, use the release flag instead.</action>
            <!-- UPDATE -->
            <action type="update" dev="ggregory" due-to="Dependabot">Bump 
GitHub actions in .github.</action>
            <action type="update" dev="ggregory" due-to="Dependabot">Bump 
versions-maven-plugin from 2.15.0 to 2.16.0 #276.</action>