10.3.0

This minor release contains several small improvements.

Added

• Add support to extend the bnd-maven-plugin configuration with bnd-extra-config property (apache/logging-log4j2#1895)
• Add support to replace project.build.outputTimestamp Maven property in CI (#50)
• Add XSLT transformation step to add a deterministic serialNumber and VDR links to the SBOM
• Add support for an optional spotbugs-exclude.xml file

Changed

• deploy-release-reusable.yaml is improved to automatically derive deployed artifacts as attachments. This renders both distribution-attachment-filepath-pattern and distribution-attachment-count input arguments redundant for almost all cases.
• Disable the usage of <distributionManagement> and alpha releases in the bnd-baseline-maven-plugin
• Convert bnd-maven-plugin API leakage warnings to errors (apache/logging-log4j2#1895)
• Update com.github.spotbugs:spotbugs-annotations to version 4.8.1 (#58)
• Update com.github.spotbugs:spotbugs-maven-plugin to version 4.8.1.0 (#57)
• Update com.google.errorprone:error_prone_core to version 2.23.0 (#49)
• Update org.apache.maven.plugins:maven-artifact-plugin to version 3.5.0
• Update org.cyclonedx:cyclonedx-maven-plugin to version 2.7.10 (#54)

Fixed

• Fix broken changelog entry validation
• Attach flatten:clean to clean phase
• Add missing Implementation- and Specification- entries in MANIFEST.MF to bnd-maven-plugin configuration (apache/logging-log4j2#1923)