From 54e509c10a23f642b94623daa9f82affed8aa634 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?David=20Mat=C4=9Bj=C4=8Dek?= <david.matejcek@omnifish.ee>
Date: Wed, 3 Jun 2026 22:46:11 +0200
Subject: [PATCH] CycloneDX files moved to release profiles
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- They are not useful for us in development, but they are required to be
  published to Maven Central.
- The sbom profile was enabled by default, we had to override it
- -Dcyclonedx.skip would skip the plugin execution
- -Dcyclonedx.skipAttach executes the plugin, but doesn't deploy files.
- Tested locally -Poss-release or -Pstage-release enable it

Signed-off-by: David Matějček <david.matejcek@omnifish.ee>
---
 parent/pom.xml | 72 ++++++++++++++++++++++++++------------------------
 1 file changed, 38 insertions(+), 34 deletions(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 1426492..e13d2d5 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -166,40 +166,6 @@
     </build>
 
     <profiles>
-
-        <profile>
-        <!-- Generates SBOM. Skip with '-DskipSBOM'.-->
-            <id>sbom</id>
-            <activation>
-              <property>
-                <name>!skipSBOM</name>
-              </property>
-            </activation>
-            <build>
-                <plugins>
-                    <plugin>
-                        <groupId>org.cyclonedx</groupId>
-                        <artifactId>cyclonedx-maven-plugin</artifactId>
-                        <configuration>
-                            <schemaVersion>1.4</schemaVersion>
-                            <projectType>library</projectType>
-                            <!-- Without this it doesn't generate cyclonedx files at all. -->
-                            <!-- Watch https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/597 -->
-                            <skipNotDeployed>false</skipNotDeployed>
-                        </configuration>
-                        <executions>
-                            <execution>
-                                <phase>package</phase>
-                                <goals>
-                                    <goal>makeAggregateBom</goal>
-                                </goals>
-                            </execution>
-                        </executions>
-                    </plugin>
-                </plugins>
-            </build>
-        </profile>
-
         <!--
             This profile provides configuration for the plugins that are required in
             order to deploy both release and snapshot artifacts.
@@ -268,6 +234,25 @@
                             </execution>
                         </executions>
                     </plugin>
+                    <plugin>
+                        <groupId>org.cyclonedx</groupId>
+                        <artifactId>cyclonedx-maven-plugin</artifactId>
+                        <configuration>
+                            <schemaVersion>1.4</schemaVersion>
+                            <projectType>library</projectType>
+                            <!-- Without this it doesn't generate cyclonedx files at all. -->
+                            <!-- Watch https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/597 -->
+                            <skipNotDeployed>false</skipNotDeployed>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <phase>package</phase>
+                                <goals>
+                                    <goal>makeAggregateBom</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-gpg-plugin</artifactId>
@@ -376,6 +361,25 @@
                             </execution>
                         </executions>
                     </plugin>
+                    <plugin>
+                        <groupId>org.cyclonedx</groupId>
+                        <artifactId>cyclonedx-maven-plugin</artifactId>
+                        <configuration>
+                            <schemaVersion>1.4</schemaVersion>
+                            <projectType>library</projectType>
+                            <!-- Without this it doesn't generate cyclonedx files at all. -->
+                            <!-- Watch https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/597 -->
+                            <skipNotDeployed>false</skipNotDeployed>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <phase>package</phase>
+                                <goals>
+                                    <goal>makeAggregateBom</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-gpg-plugin</artifactId>